$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: nZaxD/3KyD9+EivjbGIbgpNMOKhF30haBrxBpaUENP8= Subject key identifier: 21:96:AD:2A:25:14:C4:1D:29:C5:93:57:DC:BC:CA:5E:A5:27:23:34 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 2D287CCB0D1E90C3B12D2F3D804FC2C5D7651FE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: FC Signing time: Sun 01 Nov 2026 20:28:17 +0000 Manifest this update: Sun 01 Nov 2026 20:23:17 +0000 Manifest next update: Mon 02 Nov 2026 20:56:17 +0000 Files and hashes: 1: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 2: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 3: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 4: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 5: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: mvSvPnEwWJrZG6ASpsgxB9u7SF8NCaX3P0u6pYN17WA=) 6: 3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa (hash: YwYJOrEsiDWcVSn+LtSvLPeO90hqCBR1ZCpXlYX2WzQ=) 7: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 8: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 9: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 10: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:28:7c:cb:0d:1e:90:c3:b1:2d:2f:3d:80:4f:c2:c5:d7:65:1f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Nov 1 20:23:17 2026 GMT Not After : Nov 2 20:56:17 2026 GMT Subject: CN=2196AD2A2514C41D29C59357DCBCCA5EA5272334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:f9:c3:10:2a:94:91:62:8f:f9:81:7f:bc: b8:b8:9b:7e:b1:07:7f:e3:e4:cf:c8:b3:5e:d8:a2: 1c:bb:7c:1f:e2:b7:4a:0a:d3:94:b0:5a:d5:d2:c3: 8e:ef:67:da:ef:e8:2a:0a:67:fe:e6:3c:ab:7d:f0: 7d:f1:ce:c6:7f:d1:ad:10:ea:ff:95:ba:eb:6d:cf: 87:bd:a9:5f:74:28:30:fe:f2:32:34:48:f8:fd:c3: 9b:fc:13:26:3c:8f:fe:66:5f:a0:8d:91:ab:ce:ec: 27:98:f2:3a:c3:96:c0:2f:ed:67:4d:b3:85:4a:41: 90:81:14:4c:3e:a3:94:1d:1e:17:64:96:9a:84:c7: 67:82:c8:4d:cf:95:80:9b:7d:77:aa:92:b5:3d:a7: dc:f4:01:44:8c:48:9a:66:8f:d2:97:47:87:3b:75: d9:77:e4:89:6b:b8:3b:c3:d5:de:82:24:9d:b1:96: 9f:c2:cd:cc:c2:44:8f:8f:2b:14:40:fe:4f:08:2f: 3f:88:99:0b:04:b9:bc:4a:6a:0e:e4:5f:d1:b3:6b: 44:ec:da:94:d4:23:10:31:b9:ff:6f:3c:fd:68:38: 82:e5:84:15:d2:0d:d2:dd:b0:1f:af:99:26:c5:0b: 03:85:53:27:20:c7:8f:d8:eb:a2:96:50:b7:5f:13: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:AD:2A:25:14:C4:1D:29:C5:93:57:DC:BC:CA:5E:A5:27:23:34 X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fe:f0:6a:f5:60:d2:b0:66:5f:72:8a:c1:fd:af:6b:ec:77: 92:d4:2a:0c:d7:57:ee:68:c8:91:09:58:6e:6e:22:53:eb:2c: 3e:68:a7:b9:ec:2d:4c:f3:48:e1:b5:08:4e:a3:9c:0e:57:fc: 9f:85:cc:00:d1:77:f0:97:7e:0c:00:fc:d0:bb:58:96:bc:6d: e4:ee:a5:3d:78:b4:07:35:c7:da:a0:4f:3c:19:ea:28:44:51: 4d:e9:d3:34:50:c5:4f:64:c5:22:c4:53:ca:b7:a7:ef:fc:17: da:cd:04:80:ac:9f:e8:79:d9:28:b7:55:a4:d7:5d:41:54:83: 30:dc:fd:25:bf:46:9d:35:f8:0c:9d:ee:c5:40:aa:f3:44:5b: de:33:18:d7:8c:be:cd:0c:65:bc:be:07:82:07:d5:12:d8:de: f2:03:4c:b1:12:f4:53:50:a8:c7:c0:9a:72:7e:36:86:df:72: d8:e7:79:58:73:8b:6d:b6:f2:da:84:9a:a4:12:ca:c4:a0:b8: dd:3d:ba:f4:f7:93:a0:fc:d0:eb:16:58:16:3c:d1:95:c7:c1: 06:8d:d2:4a:15:21:b8:86:2e:16:42:e0:cb:9b:c5:8e:97:e0: fc:45:28:b6:9b:90:bf:4c:0a:53:5a:0f:cd:ba:09:e3:3b:80: 22:fa:57:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSh8yw0ekMOxLS89gE/CxddlH+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjExMDEyMDIzMTdaFw0yNjExMDIyMDU2MTdaMDMxMTAvBgNV BAMTKDIxOTZBRDJBMjUxNEM0MUQyOUM1OTM1N0RDQkNDQTVFQTUyNzIzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNwfnDECqUkWKP+YF/vLi4m36x B3/j5M/Is17Yohy7fB/it0oK05SwWtXSw47vZ9rv6CoKZ/7mPKt98H3xzsZ/0a0Q 6v+Vuuttz4e9qV90KDD+8jI0SPj9w5v8EyY8j/5mX6CNkavO7CeY8jrDlsAv7WdN s4VKQZCBFEw+o5QdHhdklpqEx2eCyE3PlYCbfXeqkrU9p9z0AUSMSJpmj9KXR4c7 ddl35IlruDvD1d6CJJ2xlp/CzczCRI+PKxRA/k8ILz+ImQsEubxKag7kX9Gza0Ts 2pTUIxAxuf9vPP1oOILlhBXSDdLdsB+vmSbFCwOFUycgx4/Y66KWULdfE38BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZatKiUUxB0pxZNX3LzKXqUnIzQwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz+8Gr1YNKwZl9yisH9r2vsd5LUKgzXV+5o yJEJWG5uIlPrLD5op7nsLUzzSOG1CE6jnA5X/J+FzADRd/CXfgwA/NC7WJa8beTu pT14tAc1x9qgTzwZ6ihEUU3p0zRQxU9kxSLEU8q3p+/8F9rNBICsn+h52Si3VaTX XUFUgzDc/SW/Rp01+Ayd7sVAqvNEW94zGNeMvs0MZby+B4IH1RLY3vIDTLES9FNQ qMfAmnJ+NobfctjneVhzi2228tqEmqQSysSguN09uvT3k6D80OsWWBY80ZXHwQaN 0koVIbiGLhZC4MubxY6X4PxFKLabkL9MClNaD826CeM7gCL6V5Y= -----END CERTIFICATE-----Generated at Mon Nov 2 00:49:05 2026 by rpki-client