$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft (raw, json) Hash identifier: sxuXDKowF+gBKTHGDHy6y0iIGfFR7iCvrCv+nV+rzZI= Subject key identifier: BC:27:0A:F6:93:F2:14:B3:89:6D:ED:52:9E:06:B8:41:49:53:26:BE Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE Certificate issuer: /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Certificate serial: 240501A4FF6662DE9E2CD7DD93B955ABAC55ECE6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft Manifest number: EA Signing time: Mon 26 Oct 2026 17:57:51 +0000 Manifest this update: Mon 26 Oct 2026 17:52:51 +0000 Manifest next update: Tue 27 Oct 2026 20:46:51 +0000 Files and hashes: 1: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=) 2: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=) 3: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl (hash: cyuzV2eHoPkx9YJzeyS9Pw1BDkJ30JVpWIdCmSbUz6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:05:01:a4:ff:66:62:de:9e:2c:d7:dd:93:b9:55:ab:ac:55:ec:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Validity Not Before: Oct 26 17:52:51 2026 GMT Not After : Oct 27 20:46:51 2026 GMT Subject: CN=BC270AF693F214B3896DED529E06B841495326BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:69:f1:5c:01:a9:7c:f6:dd:7a:f4:00:2a: 7a:21:a2:59:38:09:9d:22:5c:50:7b:3b:29:47:14: 3a:26:c0:40:91:3c:74:66:a2:37:8d:97:d3:79:e9: 41:ac:77:a8:ca:f6:87:59:c7:5b:cd:77:59:b4:1e: 13:3d:b0:e8:64:0a:fc:85:e2:d2:db:60:37:1e:9a: 8f:f2:c8:77:45:ce:4b:7e:48:ce:9c:07:6a:e0:b4: 24:f2:38:60:f7:8d:1b:fc:14:9c:70:e3:62:fa:1b: 12:10:36:e5:3c:b6:49:36:2d:a2:04:73:90:b3:57: d8:9c:e7:9a:aa:ae:9f:af:0e:73:4c:3d:22:4a:5d: d5:ad:b9:cc:57:ea:af:a7:33:91:0a:d0:f3:45:5e: 27:07:7d:72:9a:fd:ea:69:38:36:89:3b:d7:86:05: 2d:cb:05:9f:99:53:c0:83:c9:5c:96:aa:78:49:c2: ff:c7:2a:f3:45:3e:52:c8:05:36:85:f3:cd:b2:30: 3d:62:65:ef:7d:20:5d:b4:9b:db:b9:97:db:d2:08: e6:2b:ca:93:b1:49:53:0c:0c:51:92:cd:32:0b:6f: 81:3e:df:b9:2d:02:d1:86:ea:5e:09:dd:0e:a4:52: 53:45:49:b4:cf:1f:03:77:c5:d2:f8:81:f4:47:c3: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:27:0A:F6:93:F2:14:B3:89:6D:ED:52:9E:06:B8:41:49:53:26:BE X509v3 Authority Key Identifier: keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:71:3b:ac:f8:e4:8f:c7:2a:e0:2a:1e:c6:a5:24:84:d9:6f: 47:37:d3:2b:e0:d5:08:38:55:49:09:dd:4f:36:2f:e8:43:42: 8e:2e:f4:34:25:c9:be:f2:87:37:62:9d:75:34:0d:53:16:24: cd:2c:6f:d2:fc:a5:fa:08:b3:66:05:27:fc:fc:87:5e:42:7b: f3:17:91:3c:11:b8:4b:d4:ea:73:a9:74:38:75:ba:17:06:41: c1:b6:48:83:a6:4c:da:65:52:2c:a5:03:e3:af:ec:c9:44:a4: 5c:d4:8b:80:81:91:47:9d:21:53:45:ae:2c:fd:84:7e:71:90: f3:2c:31:09:5f:ee:86:bd:64:c9:13:c1:f8:ec:75:2e:78:51: bd:72:cb:3f:97:8e:d8:2d:33:6e:ea:1c:63:2d:87:31:ea:1f: 40:52:c9:b4:1b:69:6d:20:61:65:8a:b9:9c:78:26:53:a6:e5: 47:9a:c7:df:d0:c1:a7:9a:89:64:c6:46:2a:44:b4:2e:51:8f: f8:4b:e3:2b:76:3e:69:7c:78:1f:a0:2d:d4:fa:a0:c5:70:bb: 2c:a3:ec:d6:41:f0:da:a0:8d:07:56:d7:a3:a2:78:af:0c:2d: ae:9c:f0:49:2f:b3:cd:b4:a0:29:eb:79:19:ad:69:10:9d:cc: 60:f5:83:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAUBpP9mYt6eLNfdk7lVq6xV7OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVFN0Ix MzI1QTlERTAeFw0yNjEwMjYxNzUyNTFaFw0yNjEwMjcyMDQ2NTFaMDMxMTAvBgNV BAMTKEJDMjcwQUY2OTNGMjE0QjM4OTZERUQ1MjlFMDZCODQxNDk1MzI2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYmnxXAGpfPbdevQAKnoholk4 CZ0iXFB7OylHFDomwECRPHRmojeNl9N56UGsd6jK9odZx1vNd1m0HhM9sOhkCvyF 4tLbYDcemo/yyHdFzkt+SM6cB2rgtCTyOGD3jRv8FJxw42L6GxIQNuU8tkk2LaIE c5CzV9ic55qqrp+vDnNMPSJKXdWtucxX6q+nM5EK0PNFXicHfXKa/eppODaJO9eG BS3LBZ+ZU8CDyVyWqnhJwv/HKvNFPlLIBTaF882yMD1iZe99IF20m9u5l9vSCOYr ypOxSVMMDFGSzTILb4E+37ktAtGG6l4J3Q6kUlNFSbTPHwN3xdL4gfRHw5zlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvCcK9pPyFLOJbe1Snga4QUlTJr4wHwYDVR0j BBgwFoAUaPAH1xAjKkmb62jj479eexMlqd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzgxOWNkZGYtNmRkOS00ZDljLWI1MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcx MDIzMkE0OTlCRUI2OEUzRTNCRjVFN0IxMzI1QTlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEYwMDdENzEwMjMyQTQ5OUJFQjY4RTNFM0JGNUU3QjEzMjVB OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVF N0IxMzI1QTlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARxO6z45I/HKuAqHsalJITZb0c30yvg1Qg4 VUkJ3U82L+hDQo4u9DQlyb7yhzdinXU0DVMWJM0sb9L8pfoIs2YFJ/z8h15Ce/MX kTwRuEvU6nOpdDh1uhcGQcG2SIOmTNplUiylA+Ov7MlEpFzUi4CBkUedIVNFriz9 hH5xkPMsMQlf7oa9ZMkTwfjsdS54Ub1yyz+XjtgtM27qHGMthzHqH0BSybQbaW0g YWWKuZx4JlOm5Ueax9/QwaeaiWTGRipEtC5Rj/hL4yt2Pml8eB+gLdT6oMVwuyyj 7NZB8NqgjQdW16OieK8MLa6c8Ekvs820oCnreRmtaRCdzGD1g8w= -----END CERTIFICATE-----Generated at Tue Oct 27 12:12:09 2026 by rpki-client