$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft File: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft (raw, json) Hash identifier: x61+1vAKw6ClvG5SvnAhCelrcY04c843lmYHcMAAo2Q= Subject key identifier: FC:9A:13:36:3B:AD:22:FC:FB:D6:59:84:86:ED:B1:B1:41:50:52:FB Authority key identifier: 68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 Certificate issuer: /CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Certificate serial: 0CF90F77E3E9F292649FFFDB2788D0F87F1D2C5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft Manifest number: EA Signing time: Sat 24 Oct 2026 13:56:26 +0000 Manifest this update: Sat 24 Oct 2026 13:51:26 +0000 Manifest next update: Sun 25 Oct 2026 17:10:26 +0000 Files and hashes: 1: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: aBcK0NarT0nImTnt9nV5uNk7IL6hRk/eBBV0YB7Rf0U=) 2: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: GQgQVMDtxFDkqPjuHN/9ksx5BAe6A6G9N08FMHk3oZk=) 3: 68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl (hash: sMdL9wUjskf86kjQTX6GwSzwQUG4qszejAzh7OAA40M=) 4: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: /CDimDlLGoFwieJxhxPKJxVZVpw8NVAKdG9UUGzsEz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:0f:77:e3:e9:f2:92:64:9f:ff:db:27:88:d0:f8:7f:1d:2c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68227ACB60D3E9E10C6B9A57D383139A1008BCF0 Validity Not Before: Oct 24 13:51:26 2026 GMT Not After : Oct 25 17:10:26 2026 GMT Subject: CN=FC9A13363BAD22FCFBD6598486EDB1B1415052FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:77:b6:12:e3:58:63:d9:4e:b2:79:7d:07: 2b:1c:34:03:b7:8c:cc:21:67:24:4a:23:1f:63:5a: 93:14:ff:8b:ab:35:cf:94:4b:4a:c5:b9:c0:29:3b: a2:99:6a:93:bb:7b:b0:a8:2d:67:e7:c2:07:08:ad: d3:0d:96:ff:7b:28:ab:94:ec:1c:cc:f3:a2:c2:0e: 4a:e3:b1:11:ff:23:3c:ae:88:80:0b:f4:1b:87:04: 23:72:90:8f:46:1b:4a:5a:32:2c:8c:10:ef:39:02: aa:d9:a2:76:cb:cc:cd:7f:5c:b1:9b:ad:e7:de:43: 6d:06:13:27:ff:7c:d9:09:09:7a:fe:24:8b:b5:70: 40:ef:51:82:c8:a4:1c:63:9b:cc:6b:17:db:ee:53: f2:83:c2:97:8e:b4:10:92:98:e3:10:ab:c8:32:12: 06:03:e4:00:2b:a9:35:2a:8b:6f:ba:f5:c2:9e:a5: fe:2e:cf:de:86:b8:f7:55:23:b3:1c:3d:b6:ba:60: 13:cd:5a:60:87:8c:af:ee:dc:ec:22:a5:46:bd:b1: 82:5e:f3:41:f2:31:54:55:1a:92:8c:c1:42:7c:71: 50:b9:45:15:3c:10:97:da:82:e8:27:60:ee:a9:c0: c6:03:a1:62:73:2a:44:a8:63:cb:d0:4b:b7:0d:e6: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:13:36:3B:AD:22:FC:FB:D6:59:84:86:ED:B1:B1:41:50:52:FB X509v3 Authority Key Identifier: keyid:68:22:7A:CB:60:D3:E9:E1:0C:6B:9A:57:D3:83:13:9A:10:08:BC:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/68227ACB60D3E9E10C6B9A57D383139A1008BCF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ed:46:d5:f1:f7:ec:21:ca:5d:ac:b7:58:8b:27:35:43:0d: 8e:26:51:ad:2c:a8:f9:ab:70:f0:f0:bb:a2:60:a7:21:c4:9e: 9d:3a:c2:6e:bb:86:c3:ac:af:35:6e:56:84:e7:6b:d4:b5:3e: 94:8f:c1:f5:54:18:05:10:ae:42:37:05:05:37:1b:d8:50:36: 33:1e:c4:f5:0c:ac:79:60:8a:a4:a3:93:01:e8:33:eb:29:5b: f9:22:95:74:a2:65:10:bf:bd:82:6f:14:93:f6:0a:7f:82:f3: 49:92:88:75:10:15:a4:db:1c:d9:07:2a:68:ad:63:ff:9c:40: e3:a6:b2:3e:72:49:9c:3e:85:bb:54:a8:b7:20:e0:af:76:3d: 51:80:fb:ba:f0:0f:2e:99:f8:23:5a:d2:9e:b1:96:2c:c6:54: 02:2d:a5:91:a2:29:9b:a8:c8:fe:8f:4c:cd:48:76:fc:f5:45: 91:f6:6a:21:4c:be:66:d9:6f:5d:c6:e1:77:d4:fd:2a:ba:a3: aa:f9:db:60:3b:95:60:22:ad:00:30:3a:b1:c6:68:67:bb:d8: fd:2a:a6:11:09:9f:45:73:9f:79:63:16:71:96:fa:f2:cf:16: 16:30:e8:ea:16:b5:d9:75:dc:ce:c3:11:6f:83:ee:46:74:44: ad:5e:cb:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPkPd+Pp8pJkn//bJ4jQ+H8dLFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUEx MDA4QkNGMDAeFw0yNjEwMjQxMzUxMjZaFw0yNjEwMjUxNzEwMjZaMDMxMTAvBgNV BAMTKEZDOUExMzM2M0JBRDIyRkNGQkQ2NTk4NDg2RURCMUIxNDE1MDUyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCN3e2EuNYY9lOsnl9ByscNAO3 jMwhZyRKIx9jWpMU/4urNc+US0rFucApO6KZapO7e7CoLWfnwgcIrdMNlv97KKuU 7BzM86LCDkrjsRH/IzyuiIAL9BuHBCNykI9GG0paMiyMEO85AqrZonbLzM1/XLGb refeQ20GEyf/fNkJCXr+JIu1cEDvUYLIpBxjm8xrF9vuU/KDwpeOtBCSmOMQq8gy EgYD5AArqTUqi2+69cKepf4uz96GuPdVI7McPba6YBPNWmCHjK/u3OwipUa9sYJe 80HyMVRVGpKMwUJ8cVC5RRU8EJfagugnYO6pwMYDoWJzKkSoY8vQS7cN5hW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JoTNjutIvz71lmEhu2xsUFQUvswHwYDVR0j BBgwFoAUaCJ6y2DT6eEMa5pX04MTmhAIvPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZWNkNzQtNDQyNC00ZDQwLTk2YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2 MEQzRTlFMTBDNkI5QTU3RDM4MzEzOUExMDA4QkNGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODIyN0FDQjYwRDNFOUUxMEM2QjlBNTdEMzgzMTM5QTEwMDhC Q0YwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjgyMjdBQ0I2MEQzRTlFMTBDNkI5QTU3RDM4MzEz OUExMDA4QkNGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPtRtXx9+whyl2st1iLJzVDDY4mUa0sqPmr cPDwu6JgpyHEnp06wm67hsOsrzVuVoTna9S1PpSPwfVUGAUQrkI3BQU3G9hQNjMe xPUMrHlgiqSjkwHoM+spW/kilXSiZRC/vYJvFJP2Cn+C80mSiHUQFaTbHNkHKmit Y/+cQOOmsj5ySZw+hbtUqLcg4K92PVGA+7rwDy6Z+CNa0p6xlizGVAItpZGiKZuo yP6PTM1Idvz1RZH2aiFMvmbZb13G4XfU/Sq6o6r522A7lWAirQAwOrHGaGe72P0q phEJn0Vzn3ljFnGW+vLPFhYw6OoWtdl13M7DEW+D7kZ0RK1ey3w= -----END CERTIFICATE-----Generated at Sat Oct 24 20:53:34 2026 by rpki-client