$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: X5ghZiiwaEA3xDnzzk1E0T3Gi7AHFJagxPGWS2qhP04= Subject key identifier: 28:31:8D:4E:07:B9:04:F4:09:8B:F9:FE:BA:74:38:78:F6:10:23:14 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 248300A08D9F2DA5B179BD291E33BEEF7F99D437 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:19:44 +0000 Manifest this update: Tue 02 Jun 2026 16:14:44 +0000 Manifest next update: Wed 03 Jun 2026 16:20:44 +0000 Files and hashes: 1: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: 7rw8Oy0IPRaPo5y9i0MYTWlnhvgwYAe0EKthjg44GSM=) 2: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) 3: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:83:00:a0:8d:9f:2d:a5:b1:79:bd:29:1e:33:be:ef:7f:99:d4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Jun 2 16:14:44 2026 GMT Not After : Jun 3 16:20:44 2026 GMT Subject: CN=28318D4E07B904F4098BF9FEBA743878F6102314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:68:b7:6c:25:9e:63:36:be:7f:66:0d:d7: 9f:40:94:0e:d8:3a:cb:ea:a1:3c:94:0d:82:96:05: fa:6b:59:af:d4:79:2b:fd:49:36:32:3b:21:24:4f: b9:8f:09:ea:93:82:fd:ca:6b:f9:48:37:2f:a5:f7: 0f:83:e6:df:0b:3c:7e:29:8e:82:6a:c1:31:3e:24: 82:fb:e6:5c:dd:44:a9:50:3c:88:ac:4b:7f:aa:17: 93:61:12:39:47:01:7d:51:fe:81:51:db:32:0a:b9: a5:7c:a3:a0:59:a7:af:dd:09:34:46:7f:e9:12:5f: 3e:6c:dd:16:6c:c4:d3:13:f4:f6:0b:ad:da:0a:b9: e7:4e:9c:fd:6b:af:58:45:15:52:fe:ad:70:9a:48: 63:63:30:5e:ad:27:9d:bf:6f:19:71:cf:43:ce:b8: 17:08:71:57:10:22:4c:0b:ac:30:33:d3:e7:df:e4: 74:2c:57:84:4b:7c:15:e5:ce:3b:c2:5d:13:b8:51: 6f:f5:ec:90:86:33:fc:0a:3b:ca:bb:29:a5:4a:86: 2f:44:51:a6:ac:c5:62:70:c4:7c:42:02:c1:50:fc: c6:fd:57:65:07:7f:9e:2e:07:c9:6f:68:60:b4:f8: cf:cc:ca:09:5c:34:cd:be:61:88:19:a4:38:d5:d4: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:31:8D:4E:07:B9:04:F4:09:8B:F9:FE:BA:74:38:78:F6:10:23:14 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3a:35:8d:bc:fe:3f:b4:a9:c7:1f:4e:c2:c5:b7:77:a2:25: 57:cf:81:be:16:6a:d6:e6:80:15:bc:1e:f9:a1:2d:f4:8b:9d: 6b:bb:ce:83:a8:66:86:f2:03:0d:f2:22:f1:42:8f:ec:41:11: 72:1f:91:d1:bb:16:69:cc:97:d8:fe:db:af:5e:be:2f:07:19: 27:5c:fc:e4:b4:5c:17:34:3c:88:b2:d9:83:f4:eb:46:b7:e0: 89:3c:72:e0:8f:54:12:cb:96:8f:ad:e0:63:a4:f5:3f:56:3c: 38:a2:30:94:f5:e7:b7:dc:a0:d9:0a:9c:72:6e:e1:af:6a:6e: 90:60:26:bf:1b:cc:25:e7:23:e3:6a:76:33:8b:b3:25:52:08: f8:6b:bf:f9:5c:ba:23:ea:8d:6d:c8:02:63:50:c8:3f:cf:d0: 8b:af:c9:a0:09:8f:35:2c:ba:cf:55:d2:7e:e1:d9:31:b9:dc: 45:bc:9d:47:e7:5c:ec:fe:0b:a6:d4:7b:b9:94:de:23:66:1c: a2:96:a8:42:1c:b3:66:5a:1e:36:78:c7:d4:d7:12:e2:e1:04: d1:76:81:70:38:a0:74:af:45:39:0b:86:74:fe:17:14:4b:f8: 6b:99:73:1e:67:23:80:6b:34:5a:23:26:1d:e4:15:38:60:c9: d4:5b:20:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIMAoI2fLaWxeb0pHjO+73+Z1DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA2MDIxNjE0NDRaFw0yNjA2MDMxNjIwNDRaMDMxMTAvBgNV BAMTKDI4MzE4RDRFMDdCOTA0RjQwOThCRjlGRUJBNzQzODc4RjYxMDIzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOWi3bCWeYza+f2YN159AlA7Y OsvqoTyUDYKWBfprWa/UeSv9STYyOyEkT7mPCeqTgv3Ka/lINy+l9w+D5t8LPH4p joJqwTE+JIL75lzdRKlQPIisS3+qF5NhEjlHAX1R/oFR2zIKuaV8o6BZp6/dCTRG f+kSXz5s3RZsxNMT9PYLrdoKuedOnP1rr1hFFVL+rXCaSGNjMF6tJ52/bxlxz0PO uBcIcVcQIkwLrDAz0+ff5HQsV4RLfBXlzjvCXRO4UW/17JCGM/wKO8q7KaVKhi9E UaasxWJwxHxCAsFQ/Mb9V2UHf54uB8lvaGC0+M/MyglcNM2+YYgZpDjV1D/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKDGNTge5BPQJi/n+unQ4ePYQIxQwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEM6NY28/j+0qccfTsLFt3eiJVfPgb4Watbm gBW8HvmhLfSLnWu7zoOoZobyAw3yIvFCj+xBEXIfkdG7FmnMl9j+269evi8HGSdc /OS0XBc0PIiy2YP060a34Ik8cuCPVBLLlo+t4GOk9T9WPDiiMJT157fcoNkKnHJu 4a9qbpBgJr8bzCXnI+NqdjOLsyVSCPhrv/lcuiPqjW3IAmNQyD/P0IuvyaAJjzUs us9V0n7h2TG53EW8nUfnXOz+C6bUe7mU3iNmHKKWqEIcs2ZaHjZ4x9TXEuLhBNF2 gXA4oHSvRTkLhnT+FxRL+GuZcx5nI4BrNFojJh3kFThgydRbIMk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:54 2026 by rpki-client