$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft File: 68ECB00B63436E13214F12C7732F716D44E5E72D.mft (raw, json) Hash identifier: tA+jq/ar5oMxrG2t+V9EcHwhKlRmIyOZNYLxy0YFqxY= Subject key identifier: D8:F7:AA:83:42:C9:93:BF:23:CF:AE:76:C9:5C:64:1F:B3:32:E8:2F Authority key identifier: 68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D Certificate issuer: /CN=68ECB00B63436E13214F12C7732F716D44E5E72D Certificate serial: 7506CC852E55F60748A6CE042A7CE49E69584A8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:16:12 +0000 Manifest this update: Thu 17 Sep 2026 06:11:12 +0000 Manifest next update: Fri 18 Sep 2026 07:20:12 +0000 Files and hashes: 1: 68ECB00B63436E13214F12C7732F716D44E5E72D.crl (hash: ZP0X7ZQ2Pd0Q5jO1oCKkRvKfkF9VvpB/kwfqwzdUKAE=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: OqiAXacTaTMvrJqwT1wd9NgwR8chI6fLuF/nnIi/ym4=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: rPmnLfRHW0MsBvRLZTu2XZb2TPdVWPSkbs3wCW3iaxE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:06:cc:85:2e:55:f6:07:48:a6:ce:04:2a:7c:e4:9e:69:58:4a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ECB00B63436E13214F12C7732F716D44E5E72D Validity Not Before: Sep 17 06:11:12 2026 GMT Not After : Sep 18 07:20:12 2026 GMT Subject: CN=D8F7AA8342C993BF23CFAE76C95C641FB332E82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:be:bd:48:eb:b9:4f:2a:1f:f9:19:79:17:89: a9:36:c8:3f:87:ea:80:93:66:f2:9f:21:cf:76:f7: dc:ed:6a:12:9b:07:79:4b:0e:3a:6f:aa:8d:bf:55: 34:c5:2a:98:85:b1:16:86:2d:94:8b:ee:c7:b0:18: fa:09:8e:6f:f8:49:b8:56:61:70:5d:ab:2d:99:93: cc:c2:cd:c8:57:22:b2:77:ae:cc:59:82:9d:f2:4c: f5:8f:e8:8b:d1:ed:0d:3a:6c:f1:42:0f:db:e5:5b: 19:f6:23:ad:fa:42:45:31:68:d8:81:91:3a:ce:a2: aa:9f:d9:3c:9b:6b:19:d3:36:64:6a:b2:60:29:8e: 20:c1:5b:c1:6e:6b:74:74:76:ca:26:e3:00:dc:7a: 74:69:d5:5b:e8:06:38:ef:23:ff:ba:81:57:bd:86: 07:f1:c3:cb:78:61:5c:aa:ff:a3:e1:b8:7a:49:d6: 55:db:d4:db:1d:1b:dc:ad:74:4b:e5:52:1e:af:57: 31:d1:1f:20:3d:f5:0f:21:a5:bd:f5:e1:06:5e:0b: af:3e:13:2e:09:74:a5:27:a6:84:c2:4d:28:91:be: ce:09:0c:7b:e3:01:a8:0c:61:4b:9b:76:62:24:23: 98:95:28:ed:ff:f6:23:93:2a:cf:06:26:b2:69:05: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F7:AA:83:42:C9:93:BF:23:CF:AE:76:C9:5C:64:1F:B3:32:E8:2F X509v3 Authority Key Identifier: keyid:68:EC:B0:0B:63:43:6E:13:21:4F:12:C7:73:2F:71:6D:44:E5:E7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68ECB00B63436E13214F12C7732F716D44E5E72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/68ECB00B63436E13214F12C7732F716D44E5E72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4e:a5:f2:ca:bd:03:db:4e:e2:51:4f:dd:0a:bf:e6:19:ce: 99:1b:0b:99:12:90:3d:9e:6d:fe:e4:f3:a2:a2:53:30:ed:8f: 6e:48:b3:e4:4d:e8:35:ce:f5:f4:b1:20:18:a5:e4:94:35:7d: 5d:f4:ab:75:ed:38:87:95:16:a2:f0:74:57:24:bc:0e:0e:86: bb:ab:03:13:1c:52:91:1e:93:1b:d6:ad:64:46:49:e2:90:54: e8:4f:2b:89:dd:42:5f:37:ea:79:84:64:35:fc:3a:cf:7b:3a: 8e:f8:98:6f:26:2a:ba:65:98:d7:38:05:69:a7:89:70:9e:8d: bc:27:aa:41:8f:5b:5b:d3:0b:cc:1a:7c:1e:65:a5:0e:86:51: 9b:96:fd:bc:e3:4a:d7:e1:e6:6a:2e:d0:16:4d:c3:23:e5:a5: e0:b4:1a:9f:3e:36:c5:c6:b6:c5:3e:5b:02:d0:34:3b:f5:01: 51:07:5c:78:e0:f9:7d:a0:28:46:cd:31:0d:66:b2:62:55:32: 88:7b:d8:cd:8c:e4:17:85:2a:f0:be:7c:67:77:1a:0b:0f:97: 05:a5:aa:42:b5:b9:03:7b:c1:47:06:86:d2:e3:52:91:93:1f: 92:94:7a:22:d9:f6:d1:f0:90:ee:9f:4c:03:b3:c4:c9:ae:98: dc:0e:c4:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQbMhS5V9gdIps4EKnzknmlYSoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0 NEU1RTcyRDAeFw0yNjA5MTcwNjExMTJaFw0yNjA5MTgwNzIwMTJaMDMxMTAvBgNV BAMTKEQ4RjdBQTgzNDJDOTkzQkYyM0NGQUU3NkM5NUM2NDFGQjMzMkU4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMvr1I67lPKh/5GXkXiak2yD+H 6oCTZvKfIc9299ztahKbB3lLDjpvqo2/VTTFKpiFsRaGLZSL7sewGPoJjm/4SbhW YXBdqy2Zk8zCzchXIrJ3rsxZgp3yTPWP6IvR7Q06bPFCD9vlWxn2I636QkUxaNiB kTrOoqqf2TybaxnTNmRqsmApjiDBW8Fua3R0dsom4wDcenRp1VvoBjjvI/+6gVe9 hgfxw8t4YVyq/6PhuHpJ1lXb1NsdG9ytdEvlUh6vVzHRHyA99Q8hpb314QZeC68+ Ey4JdKUnpoTCTSiRvs4JDHvjAagMYUubdmIkI5iVKO3/9iOTKs8GJrJpBacFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Peqg0LJk78jz652yVxkH7My6C8wHwYDVR0j BBgwFoAUaOywC2NDbhMhTxLHcy9xbUTl5y0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM5YzU0ODQtMmUzNy00OGY5LThlYmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2 MzQzNkUxMzIxNEYxMkM3NzMyRjcxNkQ0NEU1RTcyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEVDQjAwQjYzNDM2RTEzMjE0RjEyQzc3MzJGNzE2RDQ0RTVF NzJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvNjhFQ0IwMEI2MzQzNkUxMzIxNEYxMkM3NzMyRjcx NkQ0NEU1RTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNOpfLKvQPbTuJRT90Kv+YZzpkbC5kSkD2e bf7k86KiUzDtj25Is+RN6DXO9fSxIBil5JQ1fV30q3XtOIeVFqLwdFckvA4Ohrur AxMcUpEekxvWrWRGSeKQVOhPK4ndQl836nmEZDX8Os97Oo74mG8mKrplmNc4BWmn iXCejbwnqkGPW1vTC8wafB5lpQ6GUZuW/bzjStfh5mou0BZNwyPlpeC0Gp8+NsXG tsU+WwLQNDv1AVEHXHjg+X2gKEbNMQ1msmJVMoh72M2M5BeFKvC+fGd3GgsPlwWl qkK1uQN7wUcGhtLjUpGTH5KUeiLZ9tHwkO6fTAOzxMmumNwOxGU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:09 2026 by rpki-client