$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: R00+t/QfPEXVLu+k3y3CzQWYHqbbq7dngXFCgr8Xkrs= Subject key identifier: 4B:AA:E3:84:E4:C1:F5:8C:31:B9:79:42:B3:3E:B0:28:1A:BA:08:BB Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 166ED9C41FE3BB4BC01C4B6F1E4F09AD5E5EA8AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 16:08:11 +0000 Manifest this update: Mon 02 Nov 2026 16:03:11 +0000 Manifest next update: Tue 03 Nov 2026 17:28:11 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: kMu8Z3M6w5zTkpq+plDrSMGlNEpPx6BjPpMApC2yRCY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:d9:c4:1f:e3:bb:4b:c0:1c:4b:6f:1e:4f:09:ad:5e:5e:a8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Nov 2 16:03:11 2026 GMT Not After : Nov 3 17:28:11 2026 GMT Subject: CN=4BAAE384E4C1F58C31B97942B33EB0281ABA08BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:20:80:f8:3e:ca:e7:03:89:1c:61:39:6f: 2e:05:c9:8d:c0:a7:4d:41:c7:44:40:5b:31:7f:de: 41:9d:54:7f:1e:61:27:ba:66:23:cb:65:15:64:e5: 4e:bc:54:c2:e7:47:bd:f1:6e:f2:68:2e:f2:98:87: 60:e1:2a:1a:fb:d2:a9:20:7d:ea:b2:02:ca:c0:08: 85:60:0d:01:d9:2f:e1:90:49:bd:3b:67:94:63:f3: 3b:cf:54:e5:60:e6:92:d6:6e:b6:11:df:b2:4a:88: 62:90:67:68:a1:dd:19:42:62:b6:dd:5a:99:a6:55: 6c:e3:ad:87:0c:16:18:4d:71:d2:8f:e7:c6:1b:03: b7:9d:d2:00:bd:f1:e8:b4:31:2c:26:35:f8:5a:21: f0:4c:b1:89:8b:05:8d:7a:5f:2e:77:71:b8:d4:d4: 9b:2c:7b:9c:bb:0c:23:7f:9b:34:74:74:1e:83:bc: fa:d8:72:af:64:fe:7c:ce:19:b8:50:a8:c5:4f:50: 0b:b9:40:a7:f4:26:1c:f7:38:86:5d:49:b5:ea:c5: 5d:a7:97:6a:f2:3e:20:5b:a1:ec:68:4e:2b:8b:16: db:62:6c:28:91:d7:4f:2a:2a:28:18:9a:ee:cc:99: c0:2c:87:e2:59:01:52:0f:cf:f8:e4:1a:68:cc:cf: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:E3:84:E4:C1:F5:8C:31:B9:79:42:B3:3E:B0:28:1A:BA:08:BB X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ea:dd:85:54:29:69:a3:4d:59:67:a9:d1:b3:ed:ad:b2:24: 15:83:97:61:a8:79:1b:b7:16:9d:2a:1c:63:cb:8f:bb:80:32: 20:10:e6:0f:0e:91:e5:65:d5:09:93:d1:f3:1a:d4:19:a1:33: d9:f0:e6:fe:f2:95:d7:e7:ea:7f:f0:2b:cc:26:58:d9:60:2a: 7d:25:e3:e5:ea:d8:a2:c3:85:31:eb:7f:cb:b6:81:f0:36:65: 5b:7f:37:85:bd:13:c9:e5:4a:d0:3b:1e:4e:b7:76:de:05:3f: 70:51:d0:95:dd:f6:e9:aa:74:0b:34:d3:1d:07:c8:58:84:0b: 31:cd:ec:c2:2c:c3:e1:d2:49:e4:35:b7:bd:37:da:42:1a:71: ee:3a:0f:7c:bf:77:9b:53:b2:1b:d7:0f:7a:06:fa:94:27:b6: b4:fe:af:35:f0:fd:d7:d4:dc:98:7f:15:cf:69:a4:c2:4a:40: 5b:2c:9f:d6:ff:18:20:36:96:71:9f:8d:5d:f9:cc:56:e1:94: 58:e7:0a:be:2d:fd:8f:61:a3:c1:14:b2:03:d0:89:9e:41:d9: c5:14:97:bb:60:ec:65:07:b0:56:3b:ba:88:38:9b:a3:ef:ba: ac:09:66:fe:46:66:2c:56:a7:a2:ae:c4:5e:76:04:24:19:ef: e5:52:26:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFm7ZxB/ju0vAHEtvHk8JrV5eqK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjExMDIxNjAzMTFaFw0yNjExMDMxNzI4MTFaMDMxMTAvBgNV BAMTKDRCQUFFMzg0RTRDMUY1OEMzMUI5Nzk0MkIzM0VCMDI4MUFCQTA4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdCCA+D7K5wOJHGE5by4FyY3A p01Bx0RAWzF/3kGdVH8eYSe6ZiPLZRVk5U68VMLnR73xbvJoLvKYh2DhKhr70qkg feqyAsrACIVgDQHZL+GQSb07Z5Rj8zvPVOVg5pLWbrYR37JKiGKQZ2ih3RlCYrbd WpmmVWzjrYcMFhhNcdKP58YbA7ed0gC98ei0MSwmNfhaIfBMsYmLBY16Xy53cbjU 1Jsse5y7DCN/mzR0dB6DvPrYcq9k/nzOGbhQqMVPUAu5QKf0Jhz3OIZdSbXqxV2n l2ryPiBboexoTiuLFttibCiR108qKigYmu7MmcAsh+JZAVIPz/jkGmjMz87/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6rjhOTB9YwxuXlCsz6wKBq6CLswHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDq3YVUKWmjTVlnqdGz7a2yJBWDl2GoeRu3 Fp0qHGPLj7uAMiAQ5g8OkeVl1QmT0fMa1BmhM9nw5v7yldfn6n/wK8wmWNlgKn0l 4+Xq2KLDhTHrf8u2gfA2ZVt/N4W9E8nlStA7Hk63dt4FP3BR0JXd9umqdAs00x0H yFiECzHN7MIsw+HSSeQ1t7032kIace46D3y/d5tTshvXD3oG+pQntrT+rzXw/dfU 3Jh/Fc9ppMJKQFssn9b/GCA2lnGfjV35zFbhlFjnCr4t/Y9ho8EUsgPQiZ5B2cUU l7tg7GUHsFY7uog4m6PvuqwJZv5GZixWp6KuxF52BCQZ7+VSJnk= -----END CERTIFICATE-----Generated at Mon Nov 2 22:10:56 2026 by rpki-client