$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: IhNy50utXwCEmYmzVbFtdpfYCbPsiICGri9NRge/jMM= Subject key identifier: 8A:13:CA:17:03:4C:ED:49:38:D1:A0:A4:A2:C0:C8:B8:04:D0:61:91 Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 1B196A9867D571772EED14AE104AC2D9FC677293 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:38:21 +0000 Manifest this update: Mon 20 Jul 2026 13:33:21 +0000 Manifest next update: Tue 21 Jul 2026 14:13:21 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) 2: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: SWQL8QwE9AA3ah2OgWV5Q/hdmhrwZ0nJOTh3idZQujQ=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:19:6a:98:67:d5:71:77:2e:ed:14:ae:10:4a:c2:d9:fc:67:72:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Jul 20 13:33:21 2026 GMT Not After : Jul 21 14:13:21 2026 GMT Subject: CN=8A13CA17034CED4938D1A0A4A2C0C8B804D06191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:2c:e5:94:45:3f:b3:4d:f4:49:2f:e2:b9: 9d:5f:20:1e:1b:f6:d9:bf:cd:ea:61:35:47:24:72: b6:8a:ac:4c:e8:a6:4c:8c:62:03:c8:25:a4:2e:a0: 22:26:c2:22:ff:9b:ec:00:31:c3:e9:38:bc:35:ea: 79:49:76:2c:b5:9b:6c:c2:7f:4c:ad:fe:54:f6:4d: 5e:8d:70:63:7e:ad:be:2f:3c:6c:3f:30:fc:58:e1: 92:c2:2c:e6:23:8a:a4:65:e9:49:bf:bf:82:19:f7: a3:e4:57:9a:e0:29:4f:61:be:ce:1c:3d:1a:b8:43: 1f:69:08:1e:47:5a:6b:7c:d0:cd:a2:85:f8:2e:94: c8:11:4a:13:33:4a:17:5b:d0:06:c5:eb:91:d8:0d: b5:39:ca:5f:d8:d4:ec:3a:b4:fe:b1:2d:dd:58:21: 09:40:68:16:f2:44:ea:d0:36:57:39:2c:1d:10:7e: 5b:fe:18:cc:47:72:bc:ef:fe:af:64:66:27:7d:e6: c6:41:a9:f6:cd:f4:8e:78:a8:f2:ea:6c:aa:a7:9a: 9d:78:63:a9:e1:77:5f:6c:80:1e:ba:9d:1d:68:68: 3e:7a:94:0b:3e:6e:4a:4d:e5:30:2f:da:3d:6e:2c: 7c:f1:6b:41:63:54:2d:08:a4:89:45:58:ee:73:6d: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:CA:17:03:4C:ED:49:38:D1:A0:A4:A2:C0:C8:B8:04:D0:61:91 X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b6:94:e6:50:4b:61:09:e6:bb:6d:e1:90:b7:ff:79:1a:c0: ef:f4:0b:97:75:5a:97:65:1a:43:e9:68:48:3c:47:4c:2b:88: ef:77:12:87:26:be:d9:30:82:62:c4:3c:9a:40:57:ed:6d:05: f2:ee:5c:a6:cb:cd:0d:e3:18:16:5c:36:1d:fd:e7:9e:35:75: ab:af:64:a1:f4:6a:8c:84:4b:01:ff:31:c9:b5:21:30:7e:80: fb:bc:c5:7b:6e:ca:aa:36:b5:c7:4f:68:66:80:a4:93:1d:c5: e5:4b:c3:89:3f:54:1b:59:23:08:00:e3:24:50:8a:de:b0:65: b2:5a:4c:56:a2:6d:37:13:98:9b:94:97:b6:ac:dd:87:e4:9b: e3:a1:82:17:d1:38:53:f5:60:93:b3:31:43:e5:9b:5c:7e:78: 52:23:3c:ea:a1:8c:32:a0:a3:bc:67:d7:d9:5e:4b:9a:ce:0b: b5:5b:8c:8c:fe:00:0b:3f:87:da:f3:b9:a3:56:e0:29:3b:ee: 5c:b2:2e:6b:1d:b5:8d:25:8b:e5:16:48:ee:04:3e:08:0f:f0: 86:b5:96:7b:cc:3e:65:de:b1:3e:ce:b8:c8:f5:ba:8e:b6:fd: af:9b:52:8a:d2:2d:71:35:4e:1a:5b:f6:e8:df:29:0d:8c:3b: 82:c7:f8:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxlqmGfVcXcu7RSuEErC2fxncpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA3MjAxMzMzMjFaFw0yNjA3MjExNDEzMjFaMDMxMTAvBgNV BAMTKDhBMTNDQTE3MDM0Q0VENDkzOEQxQTBBNEEyQzBDOEI4MDREMDYxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtizllEU/s030SS/iuZ1fIB4b 9tm/zephNUckcraKrEzopkyMYgPIJaQuoCImwiL/m+wAMcPpOLw16nlJdiy1m2zC f0yt/lT2TV6NcGN+rb4vPGw/MPxY4ZLCLOYjiqRl6Um/v4IZ96PkV5rgKU9hvs4c PRq4Qx9pCB5HWmt80M2ihfgulMgRShMzShdb0AbF65HYDbU5yl/Y1Ow6tP6xLd1Y IQlAaBbyROrQNlc5LB0Qflv+GMxHcrzv/q9kZid95sZBqfbN9I54qPLqbKqnmp14 Y6nhd19sgB66nR1oaD56lAs+bkpN5TAv2j1uLHzxa0FjVC0IpIlFWO5zbWdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihPKFwNM7Uk40aCkosDIuATQYZEwHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm2lOZQS2EJ5rtt4ZC3/3kawO/0C5d1Wpdl GkPpaEg8R0wriO93EocmvtkwgmLEPJpAV+1tBfLuXKbLzQ3jGBZcNh395541dauv ZKH0aoyESwH/Mcm1ITB+gPu8xXtuyqo2tcdPaGaApJMdxeVLw4k/VBtZIwgA4yRQ it6wZbJaTFaibTcTmJuUl7as3Yfkm+OhghfROFP1YJOzMUPlm1x+eFIjPOqhjDKg o7xn19leS5rOC7VbjIz+AAs/h9rzuaNW4Ck77lyyLmsdtY0li+UWSO4EPggP8Ia1 lnvMPmXesT7OuMj1uo62/a+bUorSLXE1Thpb9ujfKQ2MO4LH+Ng= -----END CERTIFICATE-----Generated at Tue Jul 21 07:03:27 2026 by rpki-client