$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: oRiyAAJGY+Kf73EMcfuY5sTu6MwBVldzv/KeXPCFxMI= Subject key identifier: DB:2D:41:10:AB:B9:20:E2:1D:16:D9:69:E3:E8:3B:B7:78:6B:20:A7 Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 614760CA6CD10A3A2EBBB94F2AA816EC468F8E8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 16:52:54 +0000 Manifest this update: Thu 03 Sep 2026 16:47:54 +0000 Manifest next update: Fri 04 Sep 2026 17:23:54 +0000 Files and hashes: 1: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: BNbzZCBVJ5FsGcfloR54m7TpviBP1GZhXmbKxkixNnk=) 2: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:47:60:ca:6c:d1:0a:3a:2e:bb:b9:4f:2a:a8:16:ec:46:8f:8e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Sep 3 16:47:54 2026 GMT Not After : Sep 4 17:23:54 2026 GMT Subject: CN=DB2D4110ABB920E21D16D969E3E83BB7786B20A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:1d:f1:7a:96:b0:72:f2:90:9e:b3:a4:e2: f4:a9:41:8d:d7:59:b6:3e:b1:6c:cf:8c:6e:e4:73: 5d:25:c0:ae:86:3b:09:ee:ab:35:fe:56:a2:d2:77: d8:30:23:d4:fd:34:1c:a1:31:a6:e1:96:e5:7d:78: 04:06:9e:85:22:81:3e:5e:aa:0e:ab:34:1b:c6:d7: 2c:79:ad:cd:44:eb:0c:e0:64:07:e8:46:a6:92:03: a2:67:74:21:6c:12:df:7e:5e:39:8b:b5:fe:7b:b4: cc:a9:c2:89:24:b0:9f:5f:20:5b:8b:90:f5:f9:40: fe:d9:45:df:8a:a2:d1:48:79:5c:64:3e:c7:7f:e0: 0e:0e:37:1b:ed:f0:32:89:49:7a:a3:41:72:6b:d3: e8:15:5c:d2:45:e3:10:db:f1:76:68:70:28:e1:65: df:61:57:0b:d2:2a:86:39:39:20:42:1f:53:52:37: 4e:e3:82:78:19:43:44:e3:f8:12:14:75:e0:84:cf: 31:6f:98:ab:9f:e7:81:f4:46:aa:2c:28:70:61:67: e3:a8:a2:f7:f4:22:d0:e7:0d:a2:6c:cc:3c:d2:c8: 82:24:4a:7e:f2:09:8e:8c:c7:11:84:91:98:ea:8a: 5e:b7:db:8a:d7:e5:30:89:a7:e7:34:d5:e3:da:9f: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2D:41:10:AB:B9:20:E2:1D:16:D9:69:E3:E8:3B:B7:78:6B:20:A7 X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:12:90:78:12:15:64:24:ab:63:cc:b1:b6:78:e1:91:07:d2: 5a:e6:50:55:b7:0f:19:7b:e9:d4:7c:dd:76:09:88:83:46:82: a2:dd:49:1f:b6:a8:4c:f1:6e:7f:ce:dc:ed:ab:c0:4d:d0:f0: e2:66:00:a0:d8:70:15:26:64:ed:bf:85:6d:70:b9:6a:0b:9d: 0e:9e:02:27:e6:bb:d2:ac:f7:33:82:b0:18:4e:c4:69:86:59: 7d:4c:41:16:b3:54:c4:24:8a:02:f4:9a:1b:13:e2:27:24:25: 8d:2d:15:55:ae:b0:2f:ca:f7:9c:2e:a4:62:88:d8:72:b1:cf: f4:64:4f:3b:c4:f4:f3:ed:d7:8f:97:20:d1:95:a6:d0:28:23: af:81:86:c4:72:f5:a8:11:bc:00:bf:6b:3e:9a:a2:ea:f8:95: d6:6a:32:72:3d:51:03:a5:8d:9d:d1:99:85:b6:8c:4e:81:5d: bd:8f:68:49:71:18:c2:d1:91:a4:21:8d:10:95:8b:54:c7:e3: 05:4c:3e:8f:d7:9c:f9:ea:15:5f:d0:35:0c:21:a2:46:c8:05: f3:40:2c:cb:49:aa:fe:81:7e:41:13:3d:0a:e0:41:e7:1b:c9: 3c:53:55:a7:e1:fd:3b:14:4b:5f:1d:74:15:1a:e4:ee:04:af: 53:02:2e:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUdgymzRCjouu7lPKqgW7EaPjoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA5MDMxNjQ3NTRaFw0yNjA5MDQxNzIzNTRaMDMxMTAvBgNV BAMTKERCMkQ0MTEwQUJCOTIwRTIxRDE2RDk2OUUzRTgzQkI3Nzg2QjIwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzh3xepawcvKQnrOk4vSpQY3X WbY+sWzPjG7kc10lwK6GOwnuqzX+VqLSd9gwI9T9NByhMabhluV9eAQGnoUigT5e qg6rNBvG1yx5rc1E6wzgZAfoRqaSA6JndCFsEt9+XjmLtf57tMypwokksJ9fIFuL kPX5QP7ZRd+KotFIeVxkPsd/4A4ONxvt8DKJSXqjQXJr0+gVXNJF4xDb8XZocCjh Zd9hVwvSKoY5OSBCH1NSN07jgngZQ0Tj+BIUdeCEzzFvmKuf54H0RqosKHBhZ+Oo ovf0ItDnDaJszDzSyIIkSn7yCY6MxxGEkZjqil6324rX5TCJp+c01ePan/ltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2y1BEKu5IOIdFtlp4+g7t3hrIKcwHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8SkHgSFWQkq2PMsbZ44ZEH0lrmUFW3Dxl7 6dR83XYJiINGgqLdSR+2qEzxbn/O3O2rwE3Q8OJmAKDYcBUmZO2/hW1wuWoLnQ6e Aifmu9Ks9zOCsBhOxGmGWX1MQRazVMQkigL0mhsT4ickJY0tFVWusC/K95wupGKI 2HKxz/RkTzvE9PPt14+XINGVptAoI6+BhsRy9agRvAC/az6aour4ldZqMnI9UQOl jZ3RmYW2jE6BXb2PaElxGMLRkaQhjRCVi1TH4wVMPo/XnPnqFV/QNQwhokbIBfNA LMtJqv6BfkETPQrgQecbyTxTVafh/TsUS18ddBUa5O4Er1MCLhY= -----END CERTIFICATE-----Generated at Thu Sep 3 20:08:31 2026 by rpki-client