$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft File: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft (raw, json) Hash identifier: riJq0R4eeWbz8Dtr7t26hjK33B79P7p8v5Tjd/+Hc+k= Subject key identifier: 4C:F9:EF:B1:74:A0:7E:0B:B8:BA:C3:A2:3B:47:AF:4D:A4:5B:D7:1B Authority key identifier: 68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 Certificate issuer: /CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Certificate serial: 7B9DFD645EB140B6053DCDAF1C7FE96DF2F65154 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft Manifest number: BA Signing time: Thu 17 Sep 2026 02:36:40 +0000 Manifest this update: Thu 17 Sep 2026 02:31:40 +0000 Manifest next update: Fri 18 Sep 2026 04:08:40 +0000 Files and hashes: 1: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: cwLPRSN2w6mZj3tlDvow1ecrXm+F+7b6N36wRKhpvIw=) 2: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: eNviqEPANiU+R88ED/BdXauQGAcTaPYxgTmStYUAEXw=) 3: 68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl (hash: QSyKnR4yIUD13nUiHDqkRO/6RItuIUXq4i6MmCKO4m4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9d:fd:64:5e:b1:40:b6:05:3d:cd:af:1c:7f:e9:6d:f2:f6:51:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1 Validity Not Before: Sep 17 02:31:40 2026 GMT Not After : Sep 18 04:08:40 2026 GMT Subject: CN=4CF9EFB174A07E0BB8BAC3A23B47AF4DA45BD71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:1a:29:d9:41:32:c8:33:29:26:4e:5b:f2: 28:6c:e5:97:77:10:25:78:f5:26:1c:a5:1d:2f:5c: 8f:f1:1b:17:d5:86:80:2e:43:4b:b2:e0:9f:f2:cc: 87:9b:ae:77:23:51:f8:f8:3c:db:40:6d:8f:3e:ac: 3f:9c:64:53:ff:c4:bc:2c:db:e4:fc:47:22:ef:3f: de:2f:02:50:c5:63:6b:ba:98:86:8c:01:73:70:26: 4b:19:21:51:e0:81:a0:eb:b1:da:09:1b:c3:94:64: 8a:e3:3b:ee:20:11:12:8a:ba:ef:2c:c8:34:ba:7e: dd:fe:4c:4b:6c:11:f1:0e:5c:91:57:cd:e9:25:a8: 88:b3:1c:7b:68:fe:f5:e7:4f:c8:35:7a:f5:41:f9: 1e:b1:cd:8f:ab:5f:74:62:04:30:14:f9:02:dc:b9: c6:ae:68:3b:33:77:a4:31:4c:0b:fa:c2:ed:36:8b: 60:7e:cd:e6:67:6f:3b:e2:ee:b6:94:bb:f7:ff:c5: 36:74:a9:46:26:2c:45:dc:6c:1f:eb:db:ae:3e:63: a6:75:74:72:16:df:8e:94:92:de:ae:b4:f0:9b:ce: d3:fb:6e:ff:4f:c4:bc:86:a5:28:7b:df:b2:1e:39: 88:1f:33:b2:2a:18:a5:08:98:14:2c:c0:fb:a7:33: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:EF:B1:74:A0:7E:0B:B8:BA:C3:A2:3B:47:AF:4D:A4:5B:D7:1B X509v3 Authority Key Identifier: keyid:68:A7:A8:C5:2C:2C:F3:13:78:2F:93:DC:5D:12:CA:F7:FE:C1:AC:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/68A7A8C52C2CF313782F93DC5D12CAF7FEC1ACC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4c:67:c2:54:5e:5c:34:d6:c5:72:d0:a0:ec:2a:dc:63:8f: 28:11:b4:61:14:65:63:29:8d:5a:fd:0b:e3:cd:57:bd:e2:04: 32:58:7f:d5:48:a2:a7:07:3c:e4:fc:e6:f2:6a:b1:ff:8f:e5: 1e:29:0a:ca:07:13:48:17:89:6d:a6:b6:5b:27:a3:31:9d:c0: 5f:49:17:bb:36:8b:bb:e8:ed:93:26:12:e1:25:c5:a0:38:46: d8:02:8d:3b:99:c8:e4:71:43:12:9d:81:85:a6:fc:aa:3c:df: a4:b9:60:30:a9:8a:d5:15:9c:87:b8:89:47:c6:da:f7:57:90: f9:ea:11:a6:f6:65:90:a1:bd:46:4f:fe:88:e0:1c:cc:7d:d8: 34:f6:18:e3:15:74:c6:cf:84:77:7a:08:cb:62:2f:a9:55:e4: e2:ba:92:0d:c9:9f:ef:5d:e0:f4:39:a5:05:69:d0:14:fc:e9: 43:8f:c8:f3:34:7e:54:23:9b:e7:72:89:5b:20:dc:f5:38:bf: 9a:26:d1:12:6c:d0:d5:0b:8c:69:fd:65:34:e5:20:10:a4:81: cd:7a:1d:76:c3:d0:e2:05:75:ee:a1:86:f8:f6:41:fc:7a:eb: 6e:b2:ed:40:4b:17:86:58:21:16:ae:2c:23:ed:f3:ae:d7:28: a7:b9:c8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe539ZF6xQLYFPc2vHH/pbfL2UVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdG RUMxQUNDMTAeFw0yNjA5MTcwMjMxNDBaFw0yNjA5MTgwNDA4NDBaMDMxMTAvBgNV BAMTKDRDRjlFRkIxNzRBMDdFMEJCOEJBQzNBMjNCNDdBRjREQTQ1QkQ3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMARop2UEyyDMpJk5b8ihs5Zd3 ECV49SYcpR0vXI/xGxfVhoAuQ0uy4J/yzIebrncjUfj4PNtAbY8+rD+cZFP/xLws 2+T8RyLvP94vAlDFY2u6mIaMAXNwJksZIVHggaDrsdoJG8OUZIrjO+4gERKKuu8s yDS6ft3+TEtsEfEOXJFXzeklqIizHHto/vXnT8g1evVB+R6xzY+rX3RiBDAU+QLc ucauaDszd6QxTAv6wu02i2B+zeZnbzvi7raUu/f/xTZ0qUYmLEXcbB/r264+Y6Z1 dHIW346Ukt6utPCbztP7bv9PxLyGpSh737IeOYgfM7IqGKUImBQswPunM2UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPnvsXSgfgu4usOiO0evTaRb1xswHwYDVR0j BBgwFoAUaKeoxSws8xN4L5PcXRLK9/7BrMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFmN2MyNWItNDEwYi00ODJhLTk0MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUy QzJDRjMxMzc4MkY5M0RDNUQxMkNBRjdGRUMxQUNDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82OEE3QThDNTJDMkNGMzEzNzgyRjkzREM1RDEyQ0FGN0ZFQzFB Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvNjhBN0E4QzUyQzJDRjMxMzc4MkY5M0RDNUQxMkNB RjdGRUMxQUNDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpMZ8JUXlw01sVy0KDsKtxjjygRtGEUZWMp jVr9C+PNV73iBDJYf9VIoqcHPOT85vJqsf+P5R4pCsoHE0gXiW2mtlsnozGdwF9J F7s2i7vo7ZMmEuElxaA4RtgCjTuZyORxQxKdgYWm/Ko836S5YDCpitUVnIe4iUfG 2vdXkPnqEab2ZZChvUZP/ojgHMx92DT2GOMVdMbPhHd6CMtiL6lV5OK6kg3Jn+9d 4PQ5pQVp0BT86UOPyPM0flQjm+dyiVsg3PU4v5om0RJs0NULjGn9ZTTlIBCkgc16 HXbD0OIFde6hhvj2Qfx6626y7UBLF4ZYIRauLCPt867XKKe5yC4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:14 2026 by rpki-client