$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: lE/LR67DCCRyD5BUEsrtgOVU9yHhzE4FwZxdgV3sswI= Subject key identifier: FB:5A:B2:34:C3:B0:DF:CA:BE:E0:65:92:18:57:61:73:35:57:2A:C5 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 7CBAE1BC16F56A09056FB44AF0FA32F9AAE5A22E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 06:28:52 +0000 Manifest this update: Tue 21 Jul 2026 06:23:52 +0000 Manifest next update: Wed 22 Jul 2026 09:21:52 +0000 Files and hashes: 1: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 2: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: k5E7u8iROv/xVZZomgcnTjxouYuFGSDG2eJBBFc/tZw=) 3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ba:e1:bc:16:f5:6a:09:05:6f:b4:4a:f0:fa:32:f9:aa:e5:a2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Jul 21 06:23:52 2026 GMT Not After : Jul 22 09:21:52 2026 GMT Subject: CN=FB5AB234C3B0DFCABEE065921857617335572AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:e3:1e:a1:bf:19:1d:d6:a0:7b:93:7a:05: 18:12:37:3c:2a:fc:0a:c2:62:76:66:c1:4a:05:10: 4a:78:02:ba:31:e6:de:e1:82:7c:b8:2c:02:02:94: db:51:9b:99:6f:9d:20:61:ed:91:02:2a:54:2f:d0: 81:48:54:c8:97:21:17:5f:be:09:bb:1d:d9:31:2e: f6:00:57:a2:b6:e3:4a:29:7c:58:87:95:30:2d:e4: 29:32:95:cc:38:f3:82:52:ce:d3:0e:72:46:ce:d0: 9d:cd:c8:06:b8:8a:d4:5c:4a:21:f3:bc:da:01:b2: 21:8f:7b:64:53:86:50:4b:a8:66:da:de:58:c6:39: 6d:91:b5:1e:0f:1b:90:4b:67:36:6b:eb:98:44:9c: d9:fc:75:30:59:84:1d:b6:44:7f:c7:91:83:2e:fa: 58:b9:ee:d7:9b:00:c6:93:47:6d:64:3f:40:22:4f: 5f:4d:63:97:38:c0:9d:44:d9:b9:64:f0:cf:8e:d9: 60:de:b2:5f:a8:c1:88:72:67:2c:0a:8c:d6:26:c8: 56:ca:f3:56:97:d6:e0:06:97:59:89:f9:55:1f:20: ee:4c:1b:cc:c5:b0:eb:06:c2:c2:d2:51:cc:74:7c: 7f:cd:4f:a4:7f:9e:db:f9:75:87:dc:01:7f:ef:53: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5A:B2:34:C3:B0:DF:CA:BE:E0:65:92:18:57:61:73:35:57:2A:C5 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:19:51:f6:40:b8:46:e1:a3:d9:ea:f6:37:87:2b:7e:ed:0b: 22:d3:b9:ac:ae:37:4e:27:4f:0b:72:69:a5:d9:9d:03:4f:31: 3e:aa:22:77:b2:f5:33:3d:3c:64:c8:c8:1b:c7:d7:70:d8:99: 22:57:2f:cf:4f:f0:fb:9d:88:1a:6b:50:f1:f0:55:fd:c3:64: f8:c0:c2:2e:e4:07:dd:1d:73:99:0e:68:79:82:d6:77:35:e9: 87:34:50:73:5c:18:2b:71:d4:64:d4:3d:e0:7c:7b:3e:81:fc: 08:62:97:35:ad:2f:0e:d1:10:34:67:02:3b:45:fe:6f:13:25: cc:20:ba:32:46:87:4d:06:b3:a5:ce:4b:ea:68:ed:ab:9a:52: 39:c6:d2:16:19:86:fc:d2:a9:20:90:f1:f9:e7:79:ae:bb:9d: f3:c1:e6:5c:05:50:77:de:44:b4:ea:e9:af:4f:3f:81:48:6c: f7:b5:77:d7:48:b1:d8:74:33:94:85:d9:7d:b1:86:06:d1:bb: 91:4c:77:f9:21:e9:54:7b:2c:71:7e:d6:08:f6:c5:fc:60:44: 95:29:ff:e4:31:28:87:5d:0d:6b:de:86:ae:3b:a4:84:3d:7a: 84:7f:7e:70:b8:e3:4b:76:9f:35:55:48:4a:56:37:e8:27:cf: f3:91:4d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLrhvBb1agkFb7RK8Poy+arloi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA3MjEwNjIzNTJaFw0yNjA3MjIwOTIxNTJaMDMxMTAvBgNV BAMTKEZCNUFCMjM0QzNCMERGQ0FCRUUwNjU5MjE4NTc2MTczMzU1NzJBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4veMeob8ZHdage5N6BRgSNzwq /ArCYnZmwUoFEEp4Arox5t7hgny4LAIClNtRm5lvnSBh7ZECKlQv0IFIVMiXIRdf vgm7HdkxLvYAV6K240opfFiHlTAt5Ckylcw484JSztMOckbO0J3NyAa4itRcSiHz vNoBsiGPe2RThlBLqGba3ljGOW2RtR4PG5BLZzZr65hEnNn8dTBZhB22RH/HkYMu +li57tebAMaTR21kP0AiT19NY5c4wJ1E2blk8M+O2WDesl+owYhyZywKjNYmyFbK 81aX1uAGl1mJ+VUfIO5MG8zFsOsGwsLSUcx0fH/NT6R/ntv5dYfcAX/vU8xbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1qyNMOw38q+4GWSGFdhczVXKsUwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEZUfZAuEbho9nq9jeHK37tCyLTuayuN04n TwtyaaXZnQNPMT6qIney9TM9PGTIyBvH13DYmSJXL89P8PudiBprUPHwVf3DZPjA wi7kB90dc5kOaHmC1nc16Yc0UHNcGCtx1GTUPeB8ez6B/AhilzWtLw7REDRnAjtF /m8TJcwgujJGh00Gs6XOS+po7auaUjnG0hYZhvzSqSCQ8fnnea67nfPB5lwFUHfe RLTq6a9PP4FIbPe1d9dIsdh0M5SF2X2xhgbRu5FMd/kh6VR7LHF+1gj2xfxgRJUp /+QxKIddDWvehq47pIQ9eoR/fnC440t2nzVVSEpWN+gnz/ORTQk= -----END CERTIFICATE-----Generated at Tue Jul 21 08:40:56 2026 by rpki-client