$ rpki-client -vvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: 2o06d+FSE/vqWirVUCkr/yG1tNxRbWlvBMj/LGEPn1s= Subject key identifier: 3B:F4:07:91:99:FB:51:64:66:05:DE:AE:82:4B:34:B8:7B:4F:F6:50 Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 7D7C12C788ACDBE5B00511FAD9C82D419A7188C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:13:33 +0000 Manifest this update: Mon 20 Jul 2026 22:08:33 +0000 Manifest next update: Wed 22 Jul 2026 00:47:33 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) 2: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: zPtpBmyTdYov/61ph8oG8V5hSpqSFBGG8bVVxsNpA1M=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7c:12:c7:88:ac:db:e5:b0:05:11:fa:d9:c8:2d:41:9a:71:88:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Jul 20 22:08:33 2026 GMT Not After : Jul 22 00:47:33 2026 GMT Subject: CN=3BF4079199FB51646605DEAE824B34B87B4FF650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:ef:01:38:4f:14:b1:f9:19:52:72:63:6f: bd:a6:d4:84:10:8e:e4:e2:32:3c:32:75:23:0c:8e: 47:53:29:d1:ba:62:5c:28:a1:93:25:ef:f0:af:d8: 88:c1:e2:2e:9a:69:e0:56:6b:c3:85:3f:7d:2e:cb: c4:fa:98:44:64:5f:5f:34:60:e3:82:fe:c4:4a:fb: 52:60:51:03:83:14:45:78:6d:5b:c9:e5:01:fe:68: 28:a4:d7:5b:c1:c1:c4:8d:a5:9d:8d:2b:6d:0c:43: 56:b2:07:32:fc:ea:16:83:c3:81:d4:f4:f0:ea:4b: 8a:cd:51:d4:50:03:4d:93:7a:1d:5b:0e:3b:fa:7a: 30:44:0e:ac:a5:6e:6c:df:01:df:c1:e9:84:5b:42: 3d:cd:79:80:63:10:2e:f2:7c:33:62:a7:fc:59:a1: b6:4a:46:b9:bd:64:3d:e6:1a:1c:fb:20:86:89:fb: 0c:5b:1e:66:66:4f:6d:d4:b3:ec:6c:ff:13:1c:7a: 7b:6b:d4:eb:a5:72:da:7f:2a:ca:be:5b:8c:f5:d9: cb:58:11:e8:55:50:f0:5d:69:d4:cd:7c:36:5d:85: 8c:11:13:07:0a:83:d7:30:33:57:d1:05:d0:e5:ca: a2:e0:29:ea:47:b9:65:01:73:85:f5:d2:42:7c:d2: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:07:91:99:FB:51:64:66:05:DE:AE:82:4B:34:B8:7B:4F:F6:50 X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bd:99:8b:65:1f:12:a5:21:d1:79:e1:ff:df:23:ff:c7:d6: c0:e6:d5:48:c8:b3:44:e7:3c:12:e0:2d:12:ac:ce:cd:89:9f: d6:69:9e:b9:c9:95:c2:94:89:4f:50:d4:64:3e:f1:7c:b5:10: 7f:12:02:8e:e2:a0:c9:6f:ae:87:a5:18:ed:58:4b:f1:03:b5: ff:15:4f:f5:73:67:68:4c:4b:8d:c7:1b:ad:84:ae:a0:88:fc: 77:b4:cc:bf:ec:2d:3e:a3:ff:90:2a:f2:b1:64:00:62:40:f2: 0f:1f:dc:7c:25:2b:42:7f:e0:cb:16:90:1e:31:5f:68:2c:62: 0c:04:d7:fd:80:2a:fa:7a:98:b7:55:1e:69:25:8a:c4:4a:ae: b6:3d:04:27:f2:46:d7:06:16:a4:84:43:f9:f2:88:d9:65:3c: 8f:24:74:f9:39:07:18:62:8c:0a:80:60:63:13:89:c5:8f:8a: 8f:b5:e6:a5:c4:16:f7:b0:cc:38:6e:4c:5f:ba:24:43:4b:31: f6:2b:cf:20:0f:cb:86:3c:b9:17:cb:7d:aa:ff:ea:1d:24:b1: 5f:e2:ac:b1:7f:d0:93:81:28:06:79:59:95:76:9d:35:47:7b: d3:3d:8d:54:ad:e2:bc:3d:e6:7d:5d:a4:18:8c:f3:4d:48:9f: 0d:59:15:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXwSx4is2+WwBRH62cgtQZpxiMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA3MjAyMjA4MzNaFw0yNjA3MjIwMDQ3MzNaMDMxMTAvBgNV BAMTKDNCRjQwNzkxOTlGQjUxNjQ2NjA1REVBRTgyNEIzNEI4N0I0RkY2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFO8BOE8UsfkZUnJjb72m1IQQ juTiMjwydSMMjkdTKdG6YlwooZMl7/Cv2IjB4i6aaeBWa8OFP30uy8T6mERkX180 YOOC/sRK+1JgUQODFEV4bVvJ5QH+aCik11vBwcSNpZ2NK20MQ1ayBzL86haDw4HU 9PDqS4rNUdRQA02Teh1bDjv6ejBEDqylbmzfAd/B6YRbQj3NeYBjEC7yfDNip/xZ obZKRrm9ZD3mGhz7IIaJ+wxbHmZmT23Us+xs/xMcentr1Oulctp/Ksq+W4z12ctY EehVUPBdadTNfDZdhYwREwcKg9cwM1fRBdDlyqLgKepHuWUBc4X10kJ80sAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/QHkZn7UWRmBd6ugks0uHtP9lAwHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJu9mYtlHxKlIdF54f/fI//H1sDm1UjIs0Tn PBLgLRKszs2Jn9ZpnrnJlcKUiU9Q1GQ+8Xy1EH8SAo7ioMlvroelGO1YS/EDtf8V T/VzZ2hMS43HG62ErqCI/He0zL/sLT6j/5Aq8rFkAGJA8g8f3HwlK0J/4MsWkB4x X2gsYgwE1/2AKvp6mLdVHmklisRKrrY9BCfyRtcGFqSEQ/nyiNllPI8kdPk5Bxhi jAqAYGMTicWPio+15qXEFvewzDhuTF+6JENLMfYrzyAPy4Y8uRfLfar/6h0ksV/i rLF/0JOBKAZ5WZV2nTVHe9M9jVSt4rw95n1dpBiM801Inw1ZFaE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:47 2026 by rpki-client