$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft File: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft (raw, json) Hash identifier: lTHm1KJEsPElIMjngQkMV1x6u5yB1WcjaZDzz76Wu88= Subject key identifier: AB:1A:AE:D3:50:01:E6:EF:F3:58:AC:B4:F1:28:D4:C7:E0:B3:C5:D0 Authority key identifier: 68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 Certificate issuer: /CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Certificate serial: 65B115AC915F7CF2F2A6FB939A3BED1395EACC57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:05:04 +0000 Manifest this update: Wed 16 Sep 2026 21:00:04 +0000 Manifest next update: Thu 17 Sep 2026 21:54:04 +0000 Files and hashes: 1: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: Gadh6mfTzxhcQcO3hchTOHrPBLDM8NpuBwUUrXS+WEE=) 2: 68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl (hash: KNZC5/ZCdMxkifst83tH0cZy3yvve7yj4g5RXRcb5MU=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 7S4S4G9FGD28Sv926fG87e0exOc068CcSp9OM3k7SEc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b1:15:ac:91:5f:7c:f2:f2:a6:fb:93:9a:3b:ed:13:95:ea:cc:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5 Validity Not Before: Sep 16 21:00:04 2026 GMT Not After : Sep 17 21:54:04 2026 GMT Subject: CN=AB1AAED35001E6EFF358ACB4F128D4C7E0B3C5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:da:c5:f8:59:37:e5:fc:ef:f5:47:4c:a3: 80:d8:ee:c5:57:d6:ae:2e:89:17:06:92:8d:ac:05: fd:b2:7a:c1:7b:6a:80:57:f7:65:ca:20:a1:c1:1a: cc:36:8a:9c:8b:57:b6:14:b3:48:aa:e9:6d:18:4b: ca:9d:df:98:c0:a6:45:cd:4f:de:66:80:41:34:81: a3:e9:55:2a:0b:5d:64:4d:40:1f:42:ba:69:7e:ba: 6f:15:bd:ce:52:e3:0a:c3:77:b1:f1:68:24:6c:05: 3b:35:36:00:66:43:1d:4e:78:bf:01:82:88:86:2d: 41:97:0a:b8:0c:4c:63:be:e3:91:56:45:c2:d0:85: 92:f7:89:ce:12:cf:94:d9:bf:4e:ca:ba:44:f2:46: 7f:d1:3f:51:1c:01:27:68:0c:51:f1:e7:11:3d:04: 56:2c:24:fb:b2:5d:f5:23:55:e6:52:7b:e7:9b:ec: 82:86:60:9a:d7:56:30:07:78:d5:b3:6a:16:c1:27: 26:55:63:4a:ad:b3:12:82:8b:d5:15:19:47:ab:c9: 9b:b6:19:0e:bf:9a:92:35:ff:fa:2b:b4:94:cc:6e: e4:cd:d3:e0:64:d0:b6:6f:87:61:18:76:e7:8d:3f: 9d:d4:d0:bf:6b:86:e3:77:49:de:7f:11:4e:d5:35: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:AE:D3:50:01:E6:EF:F3:58:AC:B4:F1:28:D4:C7:E0:B3:C5:D0 X509v3 Authority Key Identifier: keyid:68:E0:DF:4F:AC:7E:62:02:41:D6:C4:5E:95:99:CB:21:00:C2:A7:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/68E0DF4FAC7E620241D6C45E9599CB2100C2A7B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:9a:90:75:59:48:ba:b2:1b:de:e9:d7:9d:d7:93:74:3b: e3:39:41:81:56:7c:de:4e:7d:1f:8d:c8:29:40:ea:23:3e:51: c5:99:eb:bc:e6:fe:4a:64:93:5f:97:13:1f:cc:9e:51:6e:8c: d4:3c:1f:45:99:62:1a:78:c8:c9:24:6c:ef:4b:dd:83:f8:fe: c8:49:47:68:ed:99:f9:63:4e:d0:f1:01:9e:80:f7:bd:6f:c6: dd:bf:8c:8f:1a:f3:f8:79:22:7e:b5:72:e7:a4:e4:ef:73:ad: 01:39:0f:34:5c:77:96:c9:15:31:1f:3c:56:19:82:87:f7:eb: af:bd:4f:37:c0:32:85:0c:27:a7:a6:2e:66:4f:0e:64:98:52: 60:76:1e:83:b1:cb:9a:a5:13:9e:8a:0f:2a:c4:ac:07:d8:c5: 22:2f:ae:03:96:1a:06:d5:54:41:51:5c:73:f0:39:c5:25:c1: b2:93:34:a9:dd:6c:3c:42:61:f4:fe:b3:51:91:31:56:65:33: 6f:ca:2a:a2:59:af:7d:17:07:35:21:a7:7c:6b:7f:87:6d:d3: c5:03:d5:19:24:24:02:e1:ee:ad:90:63:f7:fc:42:5f:ae:93: 43:04:f4:f5:25:1d:93:6f:70:db:62:5e:39:95:cf:2c:69:03: 44:53:5b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbEVrJFffPLypvuTmjvtE5XqzFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEw MEMyQTdCNTAeFw0yNjA5MTYyMTAwMDRaFw0yNjA5MTcyMTU0MDRaMDMxMTAvBgNV BAMTKEFCMUFBRUQzNTAwMUU2RUZGMzU4QUNCNEYxMjhENEM3RTBCM0M1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SNrF+Fk35fzv9UdMo4DY7sVX 1q4uiRcGko2sBf2yesF7aoBX92XKIKHBGsw2ipyLV7YUs0iq6W0YS8qd35jApkXN T95mgEE0gaPpVSoLXWRNQB9Cuml+um8Vvc5S4wrDd7HxaCRsBTs1NgBmQx1OeL8B goiGLUGXCrgMTGO+45FWRcLQhZL3ic4Sz5TZv07KukTyRn/RP1EcASdoDFHx5xE9 BFYsJPuyXfUjVeZSe+eb7IKGYJrXVjAHeNWzahbBJyZVY0qtsxKCi9UVGUeryZu2 GQ6/mpI1//ortJTMbuTN0+Bk0LZvh2EYdueNP53U0L9rhuN3Sd5/EU7VNZ+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxqu01AB5u/zWKy08SjUx+CzxdAwHwYDVR0j BBgwFoAUaODfT6x+YgJB1sRelZnLIQDCp7UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmMwNzJkYjctMDEyNy00NTY0LThkMjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZB QzdFNjIwMjQxRDZDNDVFOTU5OUNCMjEwMEMyQTdCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEUwREY0RkFDN0U2MjAyNDFENkM0NUU5NTk5Q0IyMTAwQzJB N0I1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNjhFMERGNEZBQzdFNjIwMjQxRDZDNDVFOTU5OUNC MjEwMEMyQTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0NmpB1WUi6shve6ded15N0O+M5QYFWfN5O fR+NyClA6iM+UcWZ67zm/kpkk1+XEx/MnlFujNQ8H0WZYhp4yMkkbO9L3YP4/shJ R2jtmfljTtDxAZ6A971vxt2/jI8a8/h5In61cuek5O9zrQE5DzRcd5bJFTEfPFYZ gof366+9TzfAMoUMJ6emLmZPDmSYUmB2HoOxy5qlE56KDyrErAfYxSIvrgOWGgbV VEFRXHPwOcUlwbKTNKndbDxCYfT+s1GRMVZlM2/KKqJZr30XBzUhp3xrf4dt08UD 1RkkJALh7q2QY/f8Ql+uk0ME9PUlHZNvcNtiXjmVzyxpA0RTW2s= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:54 2026 by rpki-client