$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft File: B68CA352FD19570302F874C669E957D75A73CB1A.mft (raw, json) Hash identifier: a4tsmZMjSP9IejQwXUp3xxynD/si5iwrobE5lt29vZg= Subject key identifier: 7B:DD:45:95:4F:C2:B7:9D:55:32:F2:98:15:29:9D:6F:A8:48:8D:3F Authority key identifier: B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A Certificate issuer: /CN=B68CA352FD19570302F874C669E957D75A73CB1A Certificate serial: 5DEB6A872C115835A6B8E0F83482F85AA6556234 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:21:24 +0000 Manifest this update: Thu 17 Sep 2026 10:16:24 +0000 Manifest next update: Fri 18 Sep 2026 13:44:24 +0000 Files and hashes: 1: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: PPKzPS1avC1hYARVLoXIKKmtPdbk4f7qBVqCnnsV8sM=) 2: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 5VrmWDNZS7if5g//ZdEtWvioHlEWvzJs1bPHJcalJoE=) 3: B68CA352FD19570302F874C669E957D75A73CB1A.crl (hash: xJ9lqMPwIvYlw4WpZhC0Zwwvzm3bmMwQXpsKkB0RfWs=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: cz1cQtv7tCgDk2XS5KepF7E6Gy4H3IOmqv/4F0jBKKs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:eb:6a:87:2c:11:58:35:a6:b8:e0:f8:34:82:f8:5a:a6:55:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B68CA352FD19570302F874C669E957D75A73CB1A Validity Not Before: Sep 17 10:16:24 2026 GMT Not After : Sep 18 13:44:24 2026 GMT Subject: CN=7BDD45954FC2B79D5532F29815299D6FA8488D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:66:6a:40:d3:99:f3:e1:00:0b:e6:07:29: 1e:d5:9f:68:d8:56:fc:33:f6:ec:05:87:bc:b2:43: 4c:cd:c2:17:37:1f:aa:9a:c5:27:31:b2:77:b9:d5: ed:71:f8:92:a2:82:d5:85:c1:46:1c:a5:4a:b5:b0: c4:e8:e6:63:57:6d:e7:2f:75:55:14:a5:a4:79:a6: fc:06:db:8d:dc:8c:93:e8:dc:9d:e0:cc:3d:cc:11: 8c:54:e0:fc:54:f1:aa:0c:e5:84:e3:57:22:7b:b6: ee:e7:1b:1f:d0:f3:bf:47:fc:27:e8:51:6d:95:e0: 90:b8:8a:ac:85:a6:7f:5f:f6:c2:30:b9:a7:25:f7: a4:3d:19:4e:91:6c:29:62:31:9c:53:e6:cb:4d:53: 60:14:d4:53:8f:04:9a:2a:27:8b:fb:c1:02:e7:dc: 12:db:8e:1b:ed:84:58:bb:06:72:3b:80:f9:c0:e8: 15:14:12:bf:98:92:5a:05:ce:d5:b6:20:33:cc:2f: c3:e9:b7:17:77:8b:36:5c:6b:d6:6f:ed:af:b5:ab: f2:60:3a:28:c1:50:ac:26:16:a8:a0:76:2e:c4:02: 2c:cf:c5:b2:b9:22:fb:a6:f1:84:da:f9:e7:8e:0d: c9:00:6d:56:fb:a5:20:73:55:63:80:f0:0d:bd:a5: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DD:45:95:4F:C2:B7:9D:55:32:F2:98:15:29:9D:6F:A8:48:8D:3F X509v3 Authority Key Identifier: keyid:B6:8C:A3:52:FD:19:57:03:02:F8:74:C6:69:E9:57:D7:5A:73:CB:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68CA352FD19570302F874C669E957D75A73CB1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/B68CA352FD19570302F874C669E957D75A73CB1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a7:f0:4f:23:da:d4:27:46:1b:e7:6b:36:8b:bf:57:e5:a1: 33:8c:61:72:a4:34:b9:02:34:b4:fc:d3:0c:97:d4:9b:d3:62: ea:9e:e3:b1:6e:b5:b2:0a:e2:ba:8a:be:f5:ad:cf:a6:9c:82: 00:1b:a3:a3:45:96:43:2c:ec:57:2a:f0:82:8a:fa:71:92:61: bf:76:a2:c9:9b:d4:79:0a:a3:7d:6d:c1:43:5a:0d:03:23:ba: 55:15:3d:50:c0:aa:06:c6:c0:6a:09:24:06:62:3d:e1:0a:92: 2c:bf:31:93:09:2f:09:e8:64:3a:fe:09:58:2f:20:d5:80:25: 6d:7f:b9:90:40:40:11:a4:5f:cd:5a:71:2a:90:28:98:ee:d8: 08:85:5c:41:a8:c3:53:d3:fb:43:2d:dc:ad:35:05:a5:b4:8e: d9:24:4e:ce:74:95:1e:ad:13:3f:33:29:56:d1:4b:c3:88:e0: 89:a2:12:c8:af:a5:a7:ba:be:ab:4b:2b:84:0b:e3:02:8d:23: 53:5e:0d:b4:22:79:4b:35:a8:e5:69:8c:d0:9a:aa:0d:5b:18: bc:cf:f9:fc:72:ca:fb:94:24:9c:d3:97:06:b1:7e:22:b1:6a: 86:01:cc:6e:c5:8d:01:62:12:75:53:dd:e2:f7:b7:aa:8d:fd: 15:2c:db:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXetqhywRWDWmuOD4NIL4WqZVYjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1 QTczQ0IxQTAeFw0yNjA5MTcxMDE2MjRaFw0yNjA5MTgxMzQ0MjRaMDMxMTAvBgNV BAMTKDdCREQ0NTk1NEZDMkI3OUQ1NTMyRjI5ODE1Mjk5RDZGQTg0ODhEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSU2ZqQNOZ8+EAC+YHKR7Vn2jY Vvwz9uwFh7yyQ0zNwhc3H6qaxScxsne51e1x+JKigtWFwUYcpUq1sMTo5mNXbecv dVUUpaR5pvwG243cjJPo3J3gzD3MEYxU4PxU8aoM5YTjVyJ7tu7nGx/Q879H/Cfo UW2V4JC4iqyFpn9f9sIwuacl96Q9GU6RbCliMZxT5stNU2AU1FOPBJoqJ4v7wQLn 3BLbjhvthFi7BnI7gPnA6BUUEr+YkloFztW2IDPML8Pptxd3izZca9Zv7a+1q/Jg OijBUKwmFqigdi7EAizPxbK5Ivum8YTa+eeODckAbVb7pSBzVWOA8A29pYX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe91FlU/Ct51VMvKYFSmdb6hIjT8wHwYDVR0j BBgwFoAUtoyjUv0ZVwMC+HTGaelX11pzyxowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAwNDIzM2YtYmIyYy00N2Q3LTkwMWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJG RDE5NTcwMzAyRjg3NEM2NjlFOTU3RDc1QTczQ0IxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjhDQTM1MkZEMTk1NzAzMDJGODc0QzY2OUU5NTdENzVBNzND QjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvQjY4Q0EzNTJGRDE5NTcwMzAyRjg3NEM2NjlFOTU3 RDc1QTczQ0IxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKen8E8j2tQnRhvnazaLv1floTOMYXKkNLkC NLT80wyX1JvTYuqe47FutbIK4rqKvvWtz6acggAbo6NFlkMs7Fcq8IKK+nGSYb92 osmb1HkKo31twUNaDQMjulUVPVDAqgbGwGoJJAZiPeEKkiy/MZMJLwnoZDr+CVgv INWAJW1/uZBAQBGkX81acSqQKJju2AiFXEGow1PT+0Mt3K01BaW0jtkkTs50lR6t Ez8zKVbRS8OI4ImiEsivpae6vqtLK4QL4wKNI1NeDbQieUs1qOVpjNCaqg1bGLzP +fxyyvuUJJzTlwaxfiKxaoYBzG7FjQFiEnVT3eL3t6qN/RUs26E= -----END CERTIFICATE-----Generated at Thu Sep 17 13:09:13 2026 by rpki-client