$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json) Hash identifier: pNiRR4iCuabvjY9hX46oVZeCOe+izZEJTf98EBMlt8c= Subject key identifier: 81:0A:E1:AD:E9:93:D3:72:AF:AA:93:41:0E:17:FC:82:6A:0A:B6:E0 Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Certificate serial: 432AA0782500ABB2ED5F74792995341C0F93A49C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft Manifest number: 20 Signing time: Mon 25 May 2026 20:14:37 +0000 Manifest this update: Mon 25 May 2026 20:09:37 +0000 Manifest next update: Tue 26 May 2026 22:49:37 +0000 Files and hashes: 1: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=) 2: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=) 3: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=) 4: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=) 5: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=) 6: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=) 7: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=) 8: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: Vp1Zk5e7uadev898zbbhAlK0DGsXYU/oP6Ugbg4fbwk=) 9: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=) 10: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=) 11: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=) 12: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=) 13: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=) 14: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=) 15: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=) 16: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=) 17: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 10:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2a:a0:78:25:00:ab:b2:ed:5f:74:79:29:95:34:1c:0f:93:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Validity Not Before: May 25 20:09:37 2026 GMT Not After : May 26 22:49:37 2026 GMT Subject: CN=810AE1ADE993D372AFAA93410E17FC826A0AB6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:df:19:13:08:3a:bc:50:60:55:aa:22:aa:1b: 0d:e6:46:22:ff:88:d9:38:d0:9d:6c:f2:0f:6d:89: c5:ed:c1:a0:ed:0f:0f:ff:d8:44:c3:02:c0:f5:bb: b9:9e:47:ed:72:ce:e8:35:bd:24:ab:79:fc:ec:22: 41:23:e3:b3:ae:9f:50:35:72:10:43:a0:66:b2:09: 4c:9e:d3:ed:e1:88:1e:d0:bf:b7:ad:fd:d5:ef:3a: 7c:97:15:27:15:3f:44:62:f0:aa:ca:13:e1:a8:c8: e6:e7:3e:92:1a:48:d9:3a:fd:a3:d7:19:6a:e6:66: 12:eb:e1:93:7e:33:1f:0c:11:c7:8c:5c:1f:45:21: 1e:c2:50:e4:70:b6:6a:98:c2:bb:e9:54:8d:6b:2b: a7:65:40:b0:12:88:65:ed:e7:c4:24:07:41:3d:2e: 59:b9:55:d7:26:fb:a2:95:cd:55:3c:a0:73:0b:dc: 91:04:dc:42:bc:19:03:b5:67:a0:33:b6:76:d0:b8: 58:bf:7a:ef:d6:d2:43:f0:18:d6:b5:8b:de:87:c5: 3d:59:85:2c:5d:03:90:5d:e8:a5:df:8b:78:85:6a: d3:50:2c:96:b3:22:b6:50:1b:dc:d9:94:e0:d2:61: 18:2a:1d:b1:bf:95:a7:ab:8f:5d:65:55:a8:8e:a3: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:E1:AD:E9:93:D3:72:AF:AA:93:41:0E:17:FC:82:6A:0A:B6:E0 X509v3 Authority Key Identifier: keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a1:dd:d6:97:3b:82:31:0f:92:1a:1f:f1:d8:4c:b1:41:a1: 91:3e:93:6f:1b:51:ba:5b:e8:d3:a4:00:1a:d0:43:e2:b3:7c: 2b:c3:79:66:27:81:1e:92:dd:ec:64:05:87:2f:96:48:d6:aa: 88:ae:5f:39:0f:f8:56:51:4c:03:bb:87:97:2e:10:37:5c:ab: 3c:04:39:ab:75:e8:46:e2:0b:82:ab:d9:90:47:05:f2:8d:4f: 2b:c9:6e:0a:9f:7f:c9:f9:39:92:80:3d:94:aa:30:59:f0:3d: 6a:3a:dd:7f:8b:fd:2c:70:86:a1:af:b7:df:10:7b:50:51:08: 50:e7:8d:d6:9a:ec:90:80:e8:5f:0a:fe:64:d6:82:6e:7d:62: cf:cd:8c:22:ba:25:02:e5:f7:ea:43:9b:c2:e6:4a:29:bb:d0: 5e:cd:18:5e:42:ab:53:b7:c4:dc:39:d6:4f:ac:9f:c2:ff:01: f1:c5:c6:4b:e0:bf:23:58:3c:3a:8e:e4:c8:63:0c:96:b4:58: 33:4a:19:5d:f9:2c:04:94:38:77:88:84:9b:3d:19:fb:d9:46: 1b:4c:71:98:b2:2b:5b:83:cf:8f:97:0d:65:ca:9d:c1:fd:42: a3:2b:22:c3:d9:ec:f5:5d:63:86:e1:4b:e9:46:6f:55:a1:5b: e7:35:96:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyqgeCUAq7LtX3R5KZU0HA+TpJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy RTNCMDc5QzAeFw0yNjA1MjUyMDA5MzdaFw0yNjA1MjYyMjQ5MzdaMDMxMTAvBgNV BAMTKDgxMEFFMUFERTk5M0QzNzJBRkFBOTM0MTBFMTdGQzgyNkEwQUI2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ3xkTCDq8UGBVqiKqGw3mRiL/ iNk40J1s8g9ticXtwaDtDw//2ETDAsD1u7meR+1yzug1vSSrefzsIkEj47Oun1A1 chBDoGayCUye0+3hiB7Qv7et/dXvOnyXFScVP0Ri8KrKE+GoyObnPpIaSNk6/aPX GWrmZhLr4ZN+Mx8MEceMXB9FIR7CUORwtmqYwrvpVI1rK6dlQLASiGXt58QkB0E9 Llm5Vdcm+6KVzVU8oHML3JEE3EK8GQO1Z6AztnbQuFi/eu/W0kPwGNa1i96HxT1Z hSxdA5Bd6KXfi3iFatNQLJazIrZQG9zZlODSYRgqHbG/laerj11lVaiOo7fbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQrhremT03KvqpNBDhf8gmoKtuAwHwYDVR0j BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4 OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyh3daXO4IxD5IaH/HYTLFBoZE+k28bUbpb 6NOkABrQQ+KzfCvDeWYngR6S3exkBYcvlkjWqoiuXzkP+FZRTAO7h5cuEDdcqzwE Oat16EbiC4Kr2ZBHBfKNTyvJbgqff8n5OZKAPZSqMFnwPWo63X+L/SxwhqGvt98Q e1BRCFDnjdaa7JCA6F8K/mTWgm59Ys/NjCK6JQLl9+pDm8LmSim70F7NGF5Cq1O3 xNw51k+sn8L/AfHFxkvgvyNYPDqO5MhjDJa0WDNKGV35LASUOHeIhJs9GfvZRhtM cZiyK1uDz4+XDWXKncH9QqMrIsPZ7PVdY4bhS+lGb1WhW+c1lvo= -----END CERTIFICATE-----Generated at Tue May 26 03:15:39 2026 by rpki-client