$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft File: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft (raw, json) Hash identifier: pXMM8PA19G3MbBouB10TeiC/BQ70PbcOSE9ULfWxyNQ= Subject key identifier: E6:84:64:76:A5:75:C1:DE:97:3D:AA:F0:4A:9B:88:71:8D:EB:C6:FC Authority key identifier: 68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 Certificate issuer: /CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Certificate serial: 7C28F6BB32B7AD950581ED99C816BCD792B08C30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:31:35 +0000 Manifest this update: Sat 20 Jun 2026 01:26:35 +0000 Manifest next update: Sun 21 Jun 2026 04:23:35 +0000 Files and hashes: 1: 68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl (hash: UoHW0ha08OFn00Lmwo6UsO36vdcbQmeiOI2HOxPbP1s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:28:f6:bb:32:b7:ad:95:05:81:ed:99:c8:16:bc:d7:92:b0:8c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A90AE5AEE35C99D420F12AC0EE4F6003B7D905 Validity Not Before: Jun 20 01:26:35 2026 GMT Not After : Jun 21 04:23:35 2026 GMT Subject: CN=E6846476A575C1DE973DAAF04A9B88718DEBC6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:5e:ca:00:b1:8c:e8:92:2e:7b:94:f2:79: 05:57:12:79:e2:15:3d:5b:43:ac:58:c2:8e:32:81: a0:7d:34:2d:e8:1c:cc:0b:ac:de:6c:3f:7c:78:2f: 93:58:0a:9c:fb:1e:4c:15:c5:2a:d6:7f:fd:23:8b: a2:6c:ab:12:20:14:af:ba:ec:9c:b3:39:63:f2:2b: 09:7c:59:2d:89:70:3e:72:86:83:a9:c7:19:ee:c8: 2a:81:36:78:3a:7d:3b:04:e9:a4:9e:e6:8c:5a:d0: 02:82:ac:85:3f:ab:53:4f:6d:3c:bb:eb:e3:7e:89: cd:3d:25:05:6c:2e:4f:3c:7e:20:b6:47:b9:33:0a: ef:36:eb:31:be:ec:e9:cb:80:19:1c:82:c6:b9:a8: b4:00:a4:c2:4b:8b:ea:1a:ac:5f:e6:3a:3c:63:93: 22:e4:e1:38:59:17:7b:cb:5e:10:0f:64:55:00:e3: fa:3c:43:bd:76:fb:04:19:45:96:1f:b3:97:d2:ba: 33:55:b7:6c:dd:10:9a:e9:f7:84:66:0f:af:f4:f8: b3:45:98:7f:1d:c6:af:a5:b8:4c:fd:79:d3:e0:43: 46:00:35:86:0f:48:95:7d:41:86:9d:59:e7:dd:aa: cf:40:ba:ff:c9:6d:79:ac:c1:fe:d7:8c:e7:45:7f: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:64:76:A5:75:C1:DE:97:3D:AA:F0:4A:9B:88:71:8D:EB:C6:FC X509v3 Authority Key Identifier: keyid:68:A9:0A:E5:AE:E3:5C:99:D4:20:F1:2A:C0:EE:4F:60:03:B7:D9:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/68A90AE5AEE35C99D420F12AC0EE4F6003B7D905.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:2e:c7:bc:5b:16:3f:d4:7b:c5:fa:81:a6:5e:89:58:44:a6: 6b:df:02:ee:af:26:2c:ab:81:8b:0b:a9:5c:f8:f0:84:41:f8: 6a:40:61:f1:2c:f4:bf:ab:e7:e6:ef:33:37:49:a2:eb:a7:54: 57:b3:05:bd:3b:a4:51:6f:c2:6e:46:02:01:89:db:4c:20:89: 4e:b3:f1:68:65:8a:d5:43:e8:5a:44:2d:53:26:6c:d1:67:e3: 10:c3:19:8a:da:43:ac:16:ec:85:2d:64:05:30:19:e5:41:db: 12:69:45:2e:fb:1f:7c:f8:50:86:e2:7f:e2:d4:f8:93:71:ed: 6c:44:5d:0e:d1:53:60:fc:52:f5:88:70:aa:2f:d9:ff:38:cf: b6:76:02:3d:6b:a8:8b:84:9f:26:17:06:19:1d:cc:35:7a:e2: f4:c8:f1:e7:d2:d2:69:43:f0:ca:fc:31:af:3f:64:f2:8a:81: 79:a0:3d:bc:a8:9c:36:7c:9b:c4:47:5c:10:30:c6:92:9e:98: 53:ac:7c:ce:60:90:cf:7a:08:33:34:66:10:4b:90:2f:64:37: 70:a4:c6:2e:85:0c:52:ac:d7:87:a0:6d:20:a3:03:20:02:69: c4:51:35:b2:c6:74:e4:ef:e9:88:13:bc:8c:c6:4d:89:f9:9b: a9:75:cd:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCj2uzK3rZUFge2ZyBa815KwjDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAw M0I3RDkwNTAeFw0yNjA2MjAwMTI2MzVaFw0yNjA2MjEwNDIzMzVaMDMxMTAvBgNV BAMTKEU2ODQ2NDc2QTU3NUMxREU5NzNEQUFGMDRBOUI4ODcxOERFQkM2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWC17KALGM6JIue5TyeQVXEnni FT1bQ6xYwo4ygaB9NC3oHMwLrN5sP3x4L5NYCpz7HkwVxSrWf/0ji6JsqxIgFK+6 7JyzOWPyKwl8WS2JcD5yhoOpxxnuyCqBNng6fTsE6aSe5oxa0AKCrIU/q1NPbTy7 6+N+ic09JQVsLk88fiC2R7kzCu826zG+7OnLgBkcgsa5qLQApMJLi+oarF/mOjxj kyLk4ThZF3vLXhAPZFUA4/o8Q712+wQZRZYfs5fSujNVt2zdEJrp94RmD6/0+LNF mH8dxq+luEz9edPgQ0YANYYPSJV9QYadWefdqs9Auv/JbXmswf7XjOdFf4RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5oRkdqV1wd6XParwSpuIcY3rxvwwHwYDVR0j BBgwFoAUaKkK5a7jXJnUIPEqwO5PYAO32QUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmMxOTg3NGMtYTZiMi00YjBiLTljYzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVB RUUzNUM5OUQ0MjBGMTJBQzBFRTRGNjAwM0I3RDkwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE5MEFFNUFFRTM1Qzk5RDQyMEYxMkFDMEVFNEY2MDAzQjdE OTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvNjhBOTBBRTVBRUUzNUM5OUQ0MjBGMTJBQzBFRTRG NjAwM0I3RDkwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgux7xbFj/Ue8X6gaZeiVhEpmvfAu6vJiyr gYsLqVz48IRB+GpAYfEs9L+r5+bvMzdJouunVFezBb07pFFvwm5GAgGJ20wgiU6z 8WhlitVD6FpELVMmbNFn4xDDGYraQ6wW7IUtZAUwGeVB2xJpRS77H3z4UIbif+LU +JNx7WxEXQ7RU2D8UvWIcKov2f84z7Z2Aj1rqIuEnyYXBhkdzDV64vTI8efS0mlD 8Mr8Ma8/ZPKKgXmgPbyonDZ8m8RHXBAwxpKemFOsfM5gkM96CDM0ZhBLkC9kN3Ck xi6FDFKs14egbSCjAyACacRRNbLGdOTv6YgTvIzGTYn5m6l1zSw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:40 2026 by rpki-client