$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft File: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft (raw, json) Hash identifier: evc7vFYvnUsBITsWoa+sVg72u1+o6/PS79EwkcLCucc= Subject key identifier: 7F:BA:1E:9D:76:DE:7B:41:EE:4C:09:C6:97:8D:DA:51:59:E2:40:BB Authority key identifier: 68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF Certificate issuer: /CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Certificate serial: 39F0B9BFBD0B550715597152757B881A392929FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:22:36 +0000 Manifest this update: Thu 17 Sep 2026 07:17:36 +0000 Manifest next update: Fri 18 Sep 2026 07:55:36 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: yL9CLlILHqLbQJKBIi0ABV5wanAH6ejKvh6ick9wGpY=) 2: 68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl (hash: uwoKoCWao+IqydBrvwltxYaiyVH6PRP6C5gwe6v2tg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f0:b9:bf:bd:0b:55:07:15:59:71:52:75:7b:88:1a:39:29:29:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF Validity Not Before: Sep 17 07:17:36 2026 GMT Not After : Sep 18 07:55:36 2026 GMT Subject: CN=7FBA1E9D76DE7B41EE4C09C6978DDA5159E240BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:1a:3b:87:ca:90:8d:c8:fe:07:26:6a:d4: bc:d9:55:02:cb:28:cb:fb:35:41:4e:59:b4:aa:8f: 5c:45:f1:16:db:f6:5f:43:7e:0d:dd:b8:30:e6:f7: 7f:44:36:55:02:ce:a2:b8:36:96:e0:b6:a2:aa:4e: 8f:7b:49:74:33:5e:12:43:9f:d9:17:4f:65:f6:cb: 0d:5b:67:0d:13:51:9a:b9:99:14:30:55:53:88:76: 16:c6:ab:f5:6b:72:92:13:8e:f3:42:4a:0f:35:ed: 53:28:6f:0b:49:30:91:3d:5e:d9:46:93:de:54:66: 0e:66:88:58:e1:7a:05:c2:89:89:4b:a2:94:db:e6: a5:c8:eb:3b:15:22:86:2e:3b:9e:32:8b:2b:3f:9d: 42:15:47:52:06:48:5e:ac:af:2d:a7:52:19:69:0d: ef:83:25:e8:77:37:99:b3:5f:52:a6:57:03:4f:fb: 0d:ef:f6:d4:f3:3f:c5:c1:aa:51:07:61:1c:dc:7a: 60:78:c5:86:d5:40:76:b2:68:02:49:33:2b:a3:bc: 6c:f5:91:ac:c9:fd:a4:aa:e7:27:ac:4e:d7:43:92: 73:5b:af:69:f7:48:96:28:8b:fc:63:56:1a:fc:2e: ac:ee:d2:0f:9d:5d:5f:cf:de:9c:88:de:dd:60:1c: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:1E:9D:76:DE:7B:41:EE:4C:09:C6:97:8D:DA:51:59:E2:40:BB X509v3 Authority Key Identifier: keyid:68:B5:03:53:22:FF:DB:9C:8D:6E:EC:10:B5:D2:F1:A7:7D:FF:70:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/68B5035322FFDB9C8D6EEC10B5D2F1A77DFF70CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:eb:35:f1:e3:36:89:67:d0:a3:7e:1c:92:6b:01:ac:19: 70:50:00:31:45:32:cd:29:fa:ae:59:d9:a9:b8:2c:26:d7:11: 25:60:1c:a9:79:32:93:fe:6c:4f:a1:ed:b7:cb:19:fa:c7:b8: 20:d5:08:32:ed:58:cd:01:99:c8:ea:10:7c:ed:c7:d3:72:a6: d5:87:09:86:cd:fa:71:f1:53:53:56:d8:47:51:ab:b3:92:b8: b2:59:bc:3b:b7:90:6e:ea:91:94:f7:bb:99:67:1b:88:3f:d8: db:e1:ea:e1:6e:cf:a1:7d:74:7a:57:92:36:f0:3b:f8:b6:14: fb:39:de:9b:07:be:38:12:5e:2a:dd:3f:8c:7c:78:65:11:75: e4:43:1a:96:d8:f3:e1:8b:8c:15:62:83:23:50:02:68:3f:0c: 24:e0:2e:4a:a4:46:19:9f:97:9e:83:97:e2:e0:93:21:c4:68: 63:87:e8:b7:e5:4a:10:c0:af:fb:3e:33:53:27:62:62:51:65: 47:df:e8:33:8a:3f:b0:83:82:48:89:77:30:0e:ab:c8:32:46: e4:57:df:47:44:2b:c7:ae:3d:d2:89:f5:61:3c:77:89:09:46: 67:e3:0e:ea:48:13:37:04:0e:fe:2e:32:ca:83:3c:e3:9d:51: 2c:34:c3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOfC5v70LVQcVWXFSdXuIGjkpKfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYxQTc3 REZGNzBDRjAeFw0yNjA5MTcwNzE3MzZaFw0yNjA5MTgwNzU1MzZaMDMxMTAvBgNV BAMTKDdGQkExRTlENzZERTdCNDFFRTRDMDlDNjk3OEREQTUxNTlFMjQwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoho7h8qQjcj+ByZq1LzZVQLL KMv7NUFOWbSqj1xF8Rbb9l9Dfg3duDDm939ENlUCzqK4NpbgtqKqTo97SXQzXhJD n9kXT2X2yw1bZw0TUZq5mRQwVVOIdhbGq/VrcpITjvNCSg817VMobwtJMJE9XtlG k95UZg5miFjhegXCiYlLopTb5qXI6zsVIoYuO54yiys/nUIVR1IGSF6sry2nUhlp De+DJeh3N5mzX1KmVwNP+w3v9tTzP8XBqlEHYRzcemB4xYbVQHayaAJJMyujvGz1 kazJ/aSq5yesTtdDknNbr2n3SJYoi/xjVhr8Lqzu0g+dXV/P3pyI3t1gHAVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7oenXbee0HuTAnGl43aUVniQLswHwYDVR0j BBgwFoAUaLUDUyL/25yNbuwQtdLxp33/cM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmQzYTJmZGYtYmNiYS00NzU3LWIzNjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMy MkZGREI5QzhENkVFQzEwQjVEMkYxQTc3REZGNzBDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82OEI1MDM1MzIyRkZEQjlDOEQ2RUVDMTBCNUQyRjFBNzdERkY3 MENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNjhCNTAzNTMyMkZGREI5QzhENkVFQzEwQjVEMkYx QTc3REZGNzBDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8s6zXx4zaJZ9CjfhySawGsGXBQADFFMs0p +q5Z2am4LCbXESVgHKl5MpP+bE+h7bfLGfrHuCDVCDLtWM0BmcjqEHztx9NyptWH CYbN+nHxU1NW2EdRq7OSuLJZvDu3kG7qkZT3u5lnG4g/2Nvh6uFuz6F9dHpXkjbw O/i2FPs53psHvjgSXirdP4x8eGURdeRDGpbY8+GLjBVigyNQAmg/DCTgLkqkRhmf l56Dl+LgkyHEaGOH6LflShDAr/s+M1MnYmJRZUff6DOKP7CDgkiJdzAOq8gyRuRX 30dEK8euPdKJ9WE8d4kJRmfjDupIEzcEDv4uMsqDPOOdUSw0w4M= -----END CERTIFICATE-----Generated at Thu Sep 17 11:26:15 2026 by rpki-client