$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft (raw, json) Hash identifier: chuk1NfiLkkQxncRs2T6KRkXfGvQvBbUEUu+Ta+6qp8= Subject key identifier: 46:AD:24:C8:CE:C8:8F:2A:2A:A8:C1:3E:B9:CA:E9:F0:9D:D5:ED:3E Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE Certificate issuer: /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Certificate serial: 3EC57A40153135204EF2C2EDFEE456BD7A98FDB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft Manifest number: 9A Signing time: Wed 26 Aug 2026 09:07:31 +0000 Manifest this update: Wed 26 Aug 2026 09:02:31 +0000 Manifest next update: Thu 27 Aug 2026 12:23:31 +0000 Files and hashes: 1: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl (hash: NAlNB35LcQWvYw0zbbqyti7xXaPHQBgjDXEzF59vLn4=) 2: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=) 3: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c5:7a:40:15:31:35:20:4e:f2:c2:ed:fe:e4:56:bd:7a:98:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE Validity Not Before: Aug 26 09:02:31 2026 GMT Not After : Aug 27 12:23:31 2026 GMT Subject: CN=46AD24C8CEC88F2A2AA8C13EB9CAE9F09DD5ED3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:91:5b:97:53:c7:01:1d:fd:bb:af:3a:71: 20:a6:7e:29:d7:c7:04:ca:ad:db:a0:2c:98:d9:13: 92:4e:05:a7:c3:0e:58:eb:df:b1:af:27:7e:3d:c2: 5e:f7:98:7e:a5:d8:8a:36:0e:f0:12:a6:f9:3a:e3: f5:f2:65:6b:91:56:6c:9b:58:fb:a1:61:b6:0a:04: 48:3a:0d:e8:02:89:ee:14:36:bc:a4:6a:cb:3e:03: b1:73:cf:ed:ff:b2:91:ed:4f:1d:54:d0:70:97:a2: 4c:6d:7d:4d:a6:c4:18:42:22:1b:aa:c2:4b:db:ff: 1f:57:31:77:3c:dc:fe:19:10:8d:ea:f2:66:13:2d: 8f:82:c8:89:5c:9b:cf:54:9c:9a:2b:97:fc:c0:76: 98:a7:07:11:f9:de:26:1b:a4:55:17:0b:f3:28:03: 6f:7e:96:cf:30:e5:d6:ac:e3:cc:1a:87:bf:09:0b: b4:79:ed:3b:d6:ad:45:5b:ad:28:94:4a:3c:a2:5d: e7:50:12:4e:e7:ec:c9:c3:d9:47:19:20:e1:39:35: 70:99:55:3b:64:48:a8:bf:97:73:4a:f7:4d:c4:57: dd:c4:e1:a2:72:b8:1b:63:44:ce:eb:04:ee:b7:f2: b7:a3:6c:62:50:c7:26:20:e1:e7:88:06:4e:78:9b: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AD:24:C8:CE:C8:8F:2A:2A:A8:C1:3E:B9:CA:E9:F0:9D:D5:ED:3E X509v3 Authority Key Identifier: keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2e:06:6b:d3:6e:5c:e2:95:68:fe:f0:e4:82:dc:2c:76:f4: eb:2c:89:9a:38:1d:e0:1f:a9:56:b5:c8:8d:dd:ca:7b:be:fe: 9e:ea:dc:4e:de:ed:58:de:37:45:b0:4d:58:01:1b:aa:47:1b: 81:27:02:b1:5c:8a:ff:f5:a3:3a:ae:28:ff:7e:3d:3f:8a:a7: d5:60:a1:c3:6e:80:8c:85:da:62:3b:3d:6e:8d:5b:0e:eb:0f: 47:68:1e:fc:51:4f:ff:43:1a:f8:3f:1b:4d:ac:8d:51:70:bd: 10:44:f7:b7:af:81:90:21:38:ba:2d:15:92:43:ef:4b:b5:e5: b5:60:30:a1:8e:04:63:b7:54:86:28:9c:31:95:bb:d3:f7:56: 55:8b:33:3c:4d:9c:de:49:5c:08:ca:1d:d1:0a:21:13:3f:19: fa:38:37:e2:06:98:ae:cb:83:50:31:d0:02:ae:14:c2:f6:53: 5d:57:04:f0:90:80:a2:01:f9:0e:0d:c4:fb:b2:e2:8d:ba:d0: ff:69:8a:be:b8:a9:90:9b:6b:48:be:a5:7d:71:cd:3d:8c:bd: f3:86:ba:e0:c8:b7:b9:5d:94:50:2b:90:ab:8c:6a:44:03:cc: bb:12:31:46:dd:aa:b4:dc:70:18:a4:c5:6c:b4:67:2f:7c:b3: 35:78:5d:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsV6QBUxNSBO8sLt/uRWvXqY/bAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVFN0Ix MzI1QTlERTAeFw0yNjA4MjYwOTAyMzFaFw0yNjA4MjcxMjIzMzFaMDMxMTAvBgNV BAMTKDQ2QUQyNEM4Q0VDODhGMkEyQUE4QzEzRUI5Q0FFOUYwOURENUVEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVZFbl1PHAR39u686cSCmfinX xwTKrdugLJjZE5JOBafDDljr37GvJ349wl73mH6l2Io2DvASpvk64/XyZWuRVmyb WPuhYbYKBEg6DegCie4UNrykass+A7Fzz+3/spHtTx1U0HCXokxtfU2mxBhCIhuq wkvb/x9XMXc83P4ZEI3q8mYTLY+CyIlcm89UnJorl/zAdpinBxH53iYbpFUXC/Mo A29+ls8w5das48wah78JC7R57TvWrUVbrSiUSjyiXedQEk7n7MnD2UcZIOE5NXCZ VTtkSKi/l3NK903EV93E4aJyuBtjRM7rBO638rejbGJQxyYg4eeIBk54m1r7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURq0kyM7IjyoqqME+ucrp8J3V7T4wHwYDVR0j BBgwFoAUaPAH1xAjKkmb62jj479eexMlqd4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzgxOWNkZGYtNmRkOS00ZDljLWI1MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcx MDIzMkE0OTlCRUI2OEUzRTNCRjVFN0IxMzI1QTlERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEYwMDdENzEwMjMyQTQ5OUJFQjY4RTNFM0JGNUU3QjEzMjVB OURFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvNjhGMDA3RDcxMDIzMkE0OTlCRUI2OEUzRTNCRjVF N0IxMzI1QTlERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwuBmvTblzilWj+8OSC3Cx29OssiZo4HeAf qVa1yI3dynu+/p7q3E7e7VjeN0WwTVgBG6pHG4EnArFciv/1ozquKP9+PT+Kp9Vg ocNugIyF2mI7PW6NWw7rD0doHvxRT/9DGvg/G02sjVFwvRBE97evgZAhOLotFZJD 70u15bVgMKGOBGO3VIYonDGVu9P3VlWLMzxNnN5JXAjKHdEKIRM/Gfo4N+IGmK7L g1Ax0AKuFML2U11XBPCQgKIB+Q4NxPuy4o260P9pir64qZCba0i+pX1xzT2MvfOG uuDIt7ldlFArkKuMakQDzLsSMUbdqrTccBikxWy0Zy98szV4XVo= -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:06 2026 by rpki-client