$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: rXt5O3C2+z8bgqxk36P/TgdmHF8XaQU8YaptKL1jn+k= Subject key identifier: 92:FA:72:A8:E9:12:67:D3:52:80:37:BF:F7:3A:9B:D0:E0:30:6C:EA Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 259E4DF7AE42B7B6DC5A6F8FCA1388BABB8715A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: 14 Signing time: Sat 16 May 2026 14:47:34 +0000 Manifest this update: Sat 16 May 2026 14:42:34 +0000 Manifest next update: Sun 17 May 2026 17:13:34 +0000 Files and hashes: 1: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 3: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 4: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: YpCahCmrN8mvvB5+6FgIGDAoF8UFWNSIJESh3xCF+Sw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 17:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9e:4d:f7:ae:42:b7:b6:dc:5a:6f:8f:ca:13:88:ba:bb:87:15:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: May 16 14:42:34 2026 GMT Not After : May 17 17:13:34 2026 GMT Subject: CN=92FA72A8E91267D3528037BFF73A9BD0E0306CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:45:6e:09:af:b1:fe:31:e2:f2:37:68:ad: 47:9b:e6:a0:ef:84:c6:96:fa:1d:9f:f7:31:e3:7e: 9c:0f:c5:cf:e1:bf:3c:f7:22:6b:32:e0:74:7f:8a: 0c:e6:6b:46:42:37:e4:d9:c8:9e:a9:cd:bb:e3:d2: 55:dc:bb:72:2d:73:27:cc:63:44:35:94:ae:35:08: 6b:b5:e2:3a:70:ac:13:a1:2b:93:db:99:95:fe:f7: 4a:bb:d7:8c:2b:3d:7e:89:63:f7:70:6b:eb:9c:80: 0f:74:0d:4e:63:bf:b9:32:a8:a5:9e:11:bd:6f:a5: 44:0d:75:ff:09:26:bd:4f:da:ac:15:41:3a:e9:3b: a3:8f:7e:1d:17:fa:64:67:3c:6a:0b:dd:74:f3:4d: 29:7c:cf:5a:52:5a:48:36:3c:29:5b:02:0b:03:5b: 76:7a:56:4b:c3:97:eb:9b:61:53:c3:ab:60:16:db: c5:da:03:1e:0e:6c:45:a5:ea:55:d1:ab:e4:65:5f: 3c:c0:20:87:bc:6f:d2:54:96:97:4b:d3:9b:7e:fc: cf:31:4e:95:f6:7a:54:7a:02:f0:b1:19:e2:2e:f2: db:76:9d:74:86:14:8c:4e:07:35:3b:87:a3:89:62: e7:74:8d:76:9e:c1:2e:a1:95:43:fc:b5:df:6f:ae: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FA:72:A8:E9:12:67:D3:52:80:37:BF:F7:3A:9B:D0:E0:30:6C:EA X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bc:fa:10:48:d4:18:2b:13:7a:75:91:76:80:46:1b:c9:b6: 0b:c4:4a:fb:d3:46:60:9e:a7:01:f6:7b:39:23:1c:78:12:14: 2a:4b:aa:02:42:01:ab:af:85:eb:ea:b5:eb:86:b7:4a:ff:68: 17:ab:dc:8e:cd:66:43:5f:19:7f:0d:2d:fe:5e:2f:46:19:c8: f2:c3:ff:8c:b8:88:26:70:f1:03:2c:94:29:7f:ae:7a:30:ce: 5d:44:8b:40:47:51:a3:ce:7b:65:f3:57:71:0e:08:a4:82:95: 37:d1:60:6a:e8:62:f3:0c:57:eb:92:c5:c7:a1:89:2d:80:6e: d8:0c:5c:90:8e:e6:16:80:18:71:1a:3f:f2:13:55:29:97:8b: 49:c9:24:4e:84:af:69:9b:34:37:a6:00:f6:10:ce:b3:6d:15: 77:c4:15:00:13:18:67:e0:c2:0e:28:0a:1d:25:3a:1d:f3:dc: 97:08:de:e5:b9:10:72:f0:bd:98:a1:7d:df:6c:5c:20:ad:36: 29:f0:32:d5:cb:b7:d5:ea:8a:e4:13:03:b2:03:0c:86:ac:13: 84:e1:dc:da:b2:0a:24:f9:14:cb:d8:a2:23:61:c2:6f:0a:7b: 1e:20:8c:f3:21:38:cc:47:85:22:be:f8:52:d2:33:44:0b:c8: 37:18:7f:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZ5N965Ct7bcWm+PyhOIuruHFakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjA1MTYxNDQyMzRaFw0yNjA1MTcxNzEzMzRaMDMxMTAvBgNV BAMTKDkyRkE3MkE4RTkxMjY3RDM1MjgwMzdCRkY3M0E5QkQwRTAzMDZDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2t0VuCa+x/jHi8jdorUeb5qDv hMaW+h2f9zHjfpwPxc/hvzz3Imsy4HR/igzma0ZCN+TZyJ6pzbvj0lXcu3ItcyfM Y0Q1lK41CGu14jpwrBOhK5PbmZX+90q714wrPX6JY/dwa+ucgA90DU5jv7kyqKWe Eb1vpUQNdf8JJr1P2qwVQTrpO6OPfh0X+mRnPGoL3XTzTSl8z1pSWkg2PClbAgsD W3Z6VkvDl+ubYVPDq2AW28XaAx4ObEWl6lXRq+RlXzzAIIe8b9JUlpdL05t+/M8x TpX2elR6AvCxGeIu8tt2nXSGFIxOBzU7h6OJYud0jXaewS6hlUP8td9vrlcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvpyqOkSZ9NSgDe/9zqb0OAwbOowHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq8+hBI1BgrE3p1kXaARhvJtgvESvvTRmCe pwH2ezkjHHgSFCpLqgJCAauvhevqteuGt0r/aBer3I7NZkNfGX8NLf5eL0YZyPLD /4y4iCZw8QMslCl/rnowzl1Ei0BHUaPOe2XzV3EOCKSClTfRYGroYvMMV+uSxceh iS2AbtgMXJCO5haAGHEaP/ITVSmXi0nJJE6Er2mbNDemAPYQzrNtFXfEFQATGGfg wg4oCh0lOh3z3JcI3uW5EHLwvZihfd9sXCCtNinwMtXLt9XqiuQTA7IDDIasE4Th 3NqyCiT5FMvYoiNhwm8Kex4gjPMhOMxHhSK++FLSM0QLyDcYf4A= -----END CERTIFICATE-----Generated at Sun May 17 03:14:45 2026 by rpki-client