$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: I5OrL8GWuQIZqYhZ8oWTQsY6RFRd0IksJyFW+nlzi2E= Subject key identifier: 72:11:95:D0:25:9F:7C:F7:6A:DD:02:C1:3C:48:3A:0E:76:44:0D:5C Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 7B4536DA93C5F75024DE1965FCD80F51E6EAB246 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: BE Signing time: Sun 20 Sep 2026 23:51:21 +0000 Manifest this update: Sun 20 Sep 2026 23:46:21 +0000 Manifest next update: Tue 22 Sep 2026 00:45:21 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: /3vekFkKcuI4nwFfJ89hOeiofkEe47ZqfpkBSnDVBUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:45:36:da:93:c5:f7:50:24:de:19:65:fc:d8:0f:51:e6:ea:b2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Sep 20 23:46:21 2026 GMT Not After : Sep 22 00:45:21 2026 GMT Subject: CN=721195D0259F7CF76ADD02C13C483A0E76440D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:39:60:f4:e2:e9:18:d5:a4:de:73:61:27: e8:fe:95:18:53:9e:f7:f8:65:65:dd:0c:28:7c:2e: 44:7c:fe:e6:59:da:84:a0:73:a0:7b:5d:cc:67:ca: 67:9b:4d:f3:2e:d3:8d:b5:79:8c:2c:f7:87:19:23: 79:8b:ab:4c:e2:d5:05:e5:a9:0f:5a:5f:a7:dc:1d: 78:63:7e:a1:90:6f:fc:e9:43:21:db:26:c9:f0:1a: 97:cb:b8:6d:c6:a0:4e:d6:5c:61:e3:94:3e:6f:37: 06:97:3b:f0:1b:03:01:99:75:09:a7:e2:a8:25:3f: 9e:36:c4:a6:35:42:42:ea:75:f5:5e:97:29:4e:41: e1:d5:52:84:90:23:9a:78:07:0c:4a:0f:3e:e7:5d: b2:8b:fb:0e:f6:f4:a8:44:69:13:ca:22:70:01:d2: cd:a9:6e:5b:63:3d:cd:d8:58:0f:56:59:a9:c0:89: 4a:28:a9:ae:71:2f:8b:ff:f9:88:45:c5:22:09:83: 22:2e:3b:35:3c:af:fe:39:e9:5f:c0:fa:08:e9:02: 5e:3b:50:c1:08:3b:4c:92:7c:1f:e0:87:f2:1c:72: d5:a3:bf:60:52:9f:eb:80:a9:4c:56:d1:6f:73:54: 20:d7:8f:21:31:dc:73:c2:39:e6:f9:35:a8:21:dd: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:11:95:D0:25:9F:7C:F7:6A:DD:02:C1:3C:48:3A:0E:76:44:0D:5C X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c5:65:78:28:c4:96:46:99:73:93:88:7e:94:4c:27:4f:1a: b1:fc:38:4d:29:b9:af:14:63:e0:e3:8d:07:66:07:62:d1:bf: 1f:7f:0c:be:36:d4:50:97:24:db:0f:25:3b:f1:f1:d8:59:d5: da:0c:b6:92:f1:dd:a0:41:d9:9d:80:b3:65:18:30:1b:26:52: e8:cd:a1:78:5e:89:49:0e:e3:97:f6:c3:47:04:a1:43:ce:57: 6b:51:9d:ff:b4:20:e4:55:a4:39:f1:bd:23:d3:10:d0:b6:50: b7:5a:4b:34:cb:0e:55:4e:cc:28:09:07:f1:f5:3a:80:6d:50: 65:37:08:6e:bb:fd:a3:57:88:6c:bc:fc:6f:f6:19:77:7b:75: e0:82:f1:b2:50:05:b5:0f:f9:6e:82:8f:0c:ab:13:90:b6:94: 88:37:0d:bf:9a:ae:c8:ea:0e:56:48:c2:d7:eb:da:60:fa:ac: 25:2c:7b:43:59:51:52:91:18:b4:03:33:1b:d4:ed:36:71:4b: eb:8a:dc:0b:f9:b5:01:8a:68:11:66:2b:5f:53:64:9a:24:29: 07:65:b9:e6:15:b8:3b:fe:91:b2:93:e1:6e:f3:0f:d1:3e:0c: dc:c5:05:5a:f8:ff:17:3d:ab:87:b3:a6:0b:59:d2:b6:29:79: ca:77:46:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0U22pPF91Ak3hll/NgPUebqskYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA5MjAyMzQ2MjFaFw0yNjA5MjIwMDQ1MjFaMDMxMTAvBgNV BAMTKDcyMTE5NUQwMjU5RjdDRjc2QUREMDJDMTNDNDgzQTBFNzY0NDBENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYTlg9OLpGNWk3nNhJ+j+lRhT nvf4ZWXdDCh8LkR8/uZZ2oSgc6B7XcxnymebTfMu0421eYws94cZI3mLq0zi1QXl qQ9aX6fcHXhjfqGQb/zpQyHbJsnwGpfLuG3GoE7WXGHjlD5vNwaXO/AbAwGZdQmn 4qglP542xKY1QkLqdfVelylOQeHVUoSQI5p4BwxKDz7nXbKL+w729KhEaRPKInAB 0s2pbltjPc3YWA9WWanAiUooqa5xL4v/+YhFxSIJgyIuOzU8r/456V/A+gjpAl47 UMEIO0ySfB/gh/IcctWjv2BSn+uAqUxW0W9zVCDXjyEx3HPCOeb5Nagh3c+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchGV0CWffPdq3QLBPEg6DnZEDVwwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHFZXgoxJZGmXOTiH6UTCdPGrH8OE0pua8U Y+DjjQdmB2LRvx9/DL421FCXJNsPJTvx8dhZ1doMtpLx3aBB2Z2As2UYMBsmUujN oXheiUkO45f2w0cEoUPOV2tRnf+0IORVpDnxvSPTENC2ULdaSzTLDlVOzCgJB/H1 OoBtUGU3CG67/aNXiGy8/G/2GXd7deCC8bJQBbUP+W6CjwyrE5C2lIg3Db+arsjq DlZIwtfr2mD6rCUse0NZUVKRGLQDMxvU7TZxS+uK3Av5tQGKaBFmK19TZJokKQdl ueYVuDv+kbKT4W7zD9E+DNzFBVr4/xc9q4ezpgtZ0rYpecp3Rl4= -----END CERTIFICATE-----Generated at Mon Sep 21 13:45:08 2026 by rpki-client