$ rpki-client -vvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: KYotR4DXXCE+uMVnOg/RpbuX2yiXFz9C0VyqVfGIB0k= Subject key identifier: C8:5A:28:9A:6E:98:D0:51:57:07:2B:6A:15:A0:65:6F:CE:8B:21:58 Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 13879656E4D778554803E171AD7918540A7CAF44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 06:09:54 +0000 Manifest this update: Sun 02 Aug 2026 06:04:54 +0000 Manifest next update: Mon 03 Aug 2026 06:12:54 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: mv0Ol5KfbjUBEUhJutZhVb/fKln+lLLdUxddSOMtpmY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:87:96:56:e4:d7:78:55:48:03:e1:71:ad:79:18:54:0a:7c:af:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Aug 2 06:04:54 2026 GMT Not After : Aug 3 06:12:54 2026 GMT Subject: CN=C85A289A6E98D05157072B6A15A0656FCE8B2158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:0f:29:83:fa:51:5d:90:cc:36:8b:90:e3: f3:d8:bf:6f:ef:0c:56:d7:84:2d:4b:b7:6b:98:fa: c2:76:24:59:9d:85:de:e4:98:ca:83:46:eb:f7:4c: aa:a6:bb:69:06:ab:2c:5c:d7:4d:06:e2:d2:6b:cd: f7:40:da:59:54:9f:0c:2b:ed:a4:90:c6:97:f8:5e: c7:41:33:a7:de:e0:10:e9:6a:fa:95:6d:e4:f3:b6: 6d:ab:96:f4:7b:5b:23:c0:f0:b4:03:74:de:9e:09: ac:da:26:2f:8a:f0:7d:ed:70:a5:d4:9a:f5:91:1c: da:d9:58:66:34:1f:91:1c:60:3f:be:e6:48:9b:f8: a3:c4:ec:e8:ea:d0:da:89:34:b1:61:56:75:b4:5a: 72:ac:ea:9c:93:e8:88:eb:fe:eb:29:e1:e1:4a:d7: f4:cb:50:68:89:d1:aa:54:f7:17:8b:00:4d:4f:d4: d5:91:67:73:80:b1:6b:ba:b7:69:43:3b:9c:f0:87: 64:05:9b:8d:aa:ce:c2:2b:81:81:2c:5b:26:6c:94: 7a:33:68:e4:19:5e:8d:08:7e:f7:1f:c0:6b:e5:59: 0a:98:67:1a:ab:d0:26:c1:46:9b:a6:af:21:05:62: 87:fe:ab:58:2b:79:45:8c:b3:a5:94:ea:5a:ef:5f: a8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5A:28:9A:6E:98:D0:51:57:07:2B:6A:15:A0:65:6F:CE:8B:21:58 X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bc:c0:34:37:e3:18:64:3a:85:86:85:02:57:be:5b:fc:cc: 95:c6:8d:7b:a1:cd:98:d5:97:06:c4:1e:56:18:75:ad:10:ae: ba:0d:34:04:a2:af:ca:89:c5:37:96:09:ee:1b:dd:af:eb:4c: 0c:ae:2c:d5:e3:07:ea:9d:e6:56:a6:ca:a4:3a:39:1e:b2:2c: de:a9:f5:0c:53:1d:7e:2c:6a:e3:55:ff:0f:61:90:d9:fd:99: 66:96:b3:e6:ae:ae:0a:21:fa:9e:4e:2c:fd:d3:13:98:f5:43: 3c:6b:84:df:0e:7b:e7:a6:4e:8e:47:7d:32:ae:0c:79:d7:4e: f6:2c:7f:ae:dc:a6:49:40:e6:b7:9e:f1:b9:b6:60:a6:ff:8a: 20:41:d4:93:eb:17:a2:c1:1f:c3:7e:c8:95:bb:58:68:c7:ac: 5c:ac:73:bc:f5:e9:92:7f:38:75:7a:da:e3:50:e1:73:9a:ad: be:97:2d:8c:33:ed:bc:ee:94:f8:00:05:51:9a:6a:c8:bc:73: 34:2b:95:64:3b:d5:58:31:11:ec:3a:6e:8b:58:0c:3e:5d:a8: 6c:d6:89:d1:4c:e4:1a:49:5f:6a:1e:ee:0d:5f:36:53:63:b6: 32:87:9e:51:8d:0b:50:39:7b:7e:ff:d6:a8:86:67:e7:7b:17: 12:43:fe:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4eWVuTXeFVIA+FxrXkYVAp8r0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA4MDIwNjA0NTRaFw0yNjA4MDMwNjEyNTRaMDMxMTAvBgNV BAMTKEM4NUEyODlBNkU5OEQwNTE1NzA3MkI2QTE1QTA2NTZGQ0U4QjIxNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclQ8pg/pRXZDMNouQ4/PYv2/v DFbXhC1Lt2uY+sJ2JFmdhd7kmMqDRuv3TKqmu2kGqyxc100G4tJrzfdA2llUnwwr 7aSQxpf4XsdBM6fe4BDpavqVbeTztm2rlvR7WyPA8LQDdN6eCazaJi+K8H3tcKXU mvWRHNrZWGY0H5EcYD++5kib+KPE7Ojq0NqJNLFhVnW0WnKs6pyT6Ijr/usp4eFK 1/TLUGiJ0apU9xeLAE1P1NWRZ3OAsWu6t2lDO5zwh2QFm42qzsIrgYEsWyZslHoz aOQZXo0IfvcfwGvlWQqYZxqr0CbBRpumryEFYof+q1greUWMs6WU6lrvX6gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFoomm6Y0FFXBytqFaBlb86LIVgwHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu8wDQ34xhkOoWGhQJXvlv8zJXGjXuhzZjV lwbEHlYYda0QrroNNASir8qJxTeWCe4b3a/rTAyuLNXjB+qd5lamyqQ6OR6yLN6p 9QxTHX4sauNV/w9hkNn9mWaWs+aurgoh+p5OLP3TE5j1QzxrhN8Oe+emTo5HfTKu DHnXTvYsf67cpklA5ree8bm2YKb/iiBB1JPrF6LBH8N+yJW7WGjHrFysc7z16ZJ/ OHV62uNQ4XOarb6XLYwz7bzulPgABVGaasi8czQrlWQ71VgxEew6botYDD5dqGzW idFM5BpJX2oe7g1fNlNjtjKHnlGNC1A5e37/1qiGZ+d7FxJD/n8= -----END CERTIFICATE-----Generated at Sun Aug 2 20:32:37 2026 by rpki-client