$ rpki-client -vvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: xeonBVNGTdKZKCKUqjXj3rIlDX/2Nm+i7FBlt3sfEHk= Subject key identifier: 65:F4:68:88:C8:6A:23:84:10:89:53:6F:3F:02:77:2A:C0:2B:F0:11 Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 46F249EA26B4FBAF7A608695A2338E27F615F0EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 16:01:46 +0000 Manifest this update: Sun 02 Aug 2026 15:56:46 +0000 Manifest next update: Mon 03 Aug 2026 18:52:46 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) 3: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: yPF6BBAYnXJ3Y0Q3yhWS6lBUTfR42mV4bIc7OGQjXeQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f2:49:ea:26:b4:fb:af:7a:60:86:95:a2:33:8e:27:f6:15:f0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Aug 2 15:56:46 2026 GMT Not After : Aug 3 18:52:46 2026 GMT Subject: CN=65F46888C86A23841089536F3F02772AC02BF011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:b8:c0:f9:62:00:c9:47:28:9c:63:aa:bb: 71:f7:81:c6:b4:62:dd:c7:ac:c7:5e:68:e3:3b:84: 0e:bf:71:40:88:9b:f1:1b:32:b8:c5:f7:38:ad:73: 0b:b8:1c:9a:1e:51:75:79:0b:df:4c:d9:9b:d3:56: 3c:0c:76:b1:d3:ce:96:79:be:bb:f2:de:47:d0:dd: 3b:68:70:98:4a:66:04:39:ac:f0:e5:01:e9:ec:ae: 29:f5:3b:fe:d0:c1:0c:62:ba:0a:cf:0c:e0:f7:d4: 72:3e:02:ee:59:aa:cf:2d:99:0c:ec:1f:28:e4:aa: 90:9f:79:cd:1a:84:69:5a:1b:a6:bd:27:7e:77:0b: 20:7b:d0:10:2f:38:9f:b7:32:22:dd:6c:89:e4:dd: 42:05:20:23:53:13:c7:9d:64:33:81:0a:3e:d1:c8: 93:28:d5:5c:46:30:27:31:b4:5d:15:8f:d7:43:47: 54:fd:f2:9c:98:bb:79:79:ab:84:39:fe:75:eb:e8: 4f:75:4a:5b:6e:08:1f:fb:45:0a:19:73:10:ef:fd: 5b:f7:60:af:43:85:da:d6:fa:c1:93:40:1b:8d:c9: ce:60:a1:3e:a8:5e:2d:ca:8c:ec:3f:ff:aa:01:cd: 67:28:b6:33:29:d3:62:f7:54:f6:5f:92:46:97:0a: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F4:68:88:C8:6A:23:84:10:89:53:6F:3F:02:77:2A:C0:2B:F0:11 X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a1:fd:b7:29:be:e5:36:90:c5:12:26:f8:b9:f6:b7:8a:f6: 57:49:6d:5b:ff:9e:cb:bc:88:fa:6c:45:63:37:4a:8e:a5:78: b8:17:1a:78:bb:01:8e:d5:27:af:c8:54:aa:3f:79:21:fe:be: f3:97:a2:a5:10:2f:4f:3f:4c:75:0b:c9:d7:eb:08:95:2c:f1: 7d:b0:d9:b0:99:c2:f9:1c:8f:1b:aa:76:f7:3f:50:9a:b4:39: a0:f4:a5:2a:2b:bd:f7:f9:fc:65:5a:86:53:d8:4c:b4:64:07: e3:22:64:a0:cc:a5:dd:89:78:65:02:35:4f:45:04:15:8d:34: 9b:0a:f0:3a:cb:ab:90:23:ce:6c:48:34:ec:5f:89:b2:a6:7b: a6:7b:ca:76:2a:3d:f2:01:ed:57:e7:cb:b9:f7:c2:ab:37:be: 69:85:f6:8f:bb:30:38:b6:2c:64:e1:a1:a2:98:20:8e:eb:e8: e2:ac:8b:f6:cd:1b:c6:2a:57:8f:bb:82:9e:3f:23:61:97:00: c6:f3:07:02:d7:2d:a0:4e:55:7f:71:23:86:48:5c:b5:11:2e: 8a:f9:34:a6:92:e4:32:f8:6d:af:a2:be:98:e4:ac:26:cb:3b: 88:00:db:c7:3b:7c:94:b2:53:14:67:9f:d3:d4:b4:54:71:ba: bb:a0:b2:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvJJ6ia0+696YIaVojOOJ/YV8OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA4MDIxNTU2NDZaFw0yNjA4MDMxODUyNDZaMDMxMTAvBgNV BAMTKDY1RjQ2ODg4Qzg2QTIzODQxMDg5NTM2RjNGMDI3NzJBQzAyQkYwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5f7jA+WIAyUconGOqu3H3gca0 Yt3HrMdeaOM7hA6/cUCIm/EbMrjF9zitcwu4HJoeUXV5C99M2ZvTVjwMdrHTzpZ5 vrvy3kfQ3TtocJhKZgQ5rPDlAensrin1O/7QwQxiugrPDOD31HI+Au5Zqs8tmQzs HyjkqpCfec0ahGlaG6a9J353CyB70BAvOJ+3MiLdbInk3UIFICNTE8edZDOBCj7R yJMo1VxGMCcxtF0Vj9dDR1T98pyYu3l5q4Q5/nXr6E91SltuCB/7RQoZcxDv/Vv3 YK9DhdrW+sGTQBuNyc5goT6oXi3KjOw//6oBzWcotjMp02L3VPZfkkaXCm2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfRoiMhqI4QQiVNvPwJ3KsAr8BEwHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSh/bcpvuU2kMUSJvi59reK9ldJbVv/nsu8 iPpsRWM3So6leLgXGni7AY7VJ6/IVKo/eSH+vvOXoqUQL08/THULydfrCJUs8X2w 2bCZwvkcjxuqdvc/UJq0OaD0pSorvff5/GVahlPYTLRkB+MiZKDMpd2JeGUCNU9F BBWNNJsK8DrLq5AjzmxINOxfibKme6Z7ynYqPfIB7Vfny7n3wqs3vmmF9o+7MDi2 LGThoaKYII7r6OKsi/bNG8YqV4+7gp4/I2GXAMbzBwLXLaBOVX9xI4ZIXLURLor5 NKaS5DL4ba+ivpjkrCbLO4gA28c7fJSyUxRnn9PUtFRxurugsoc= -----END CERTIFICATE-----Generated at Sun Aug 2 23:05:11 2026 by rpki-client