$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json) Hash identifier: unnqFWREXwpjcIj0cV0F7AXpYAMnoFTSnrV9pkKN+C0= Subject key identifier: F7:EF:21:DE:79:1D:87:6B:CE:42:12:70:C1:92:F1:6C:35:75:D5:40 Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Certificate serial: 6EB7B48043AEB4FA8EBB32D9D2770C75047FFA75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:44:27 +0000 Manifest this update: Thu 17 Sep 2026 00:39:27 +0000 Manifest next update: Fri 18 Sep 2026 03:06:27 +0000 Files and hashes: 1: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=) 2: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=) 3: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=) 4: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=) 5: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=) 6: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=) 7: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=) 8: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=) 9: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: 72CKGFBzO1mZ0Is3G1ASmrsV8rGJcpF8R+7X6w2mHjM=) 10: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=) 11: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=) 12: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=) 13: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=) 14: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=) 15: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=) 16: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=) 17: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b7:b4:80:43:ae:b4:fa:8e:bb:32:d9:d2:77:0c:75:04:7f:fa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Validity Not Before: Sep 17 00:39:27 2026 GMT Not After : Sep 18 03:06:27 2026 GMT Subject: CN=F7EF21DE791D876BCE421270C192F16C3575D540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:95:ea:b9:7c:8a:ba:2e:e4:2e:5e:94:ab: c6:ff:a7:5d:a4:95:68:5b:d4:c2:52:79:b0:c4:01: 24:83:fa:d5:16:7f:d4:16:4a:56:e7:c4:ec:ce:3e: 46:47:a9:78:51:09:e2:a8:97:c4:cd:71:7d:9f:ec: 9c:e5:d2:9d:40:39:2e:65:94:94:5b:10:77:21:c6: f2:44:01:87:5d:1b:ed:27:ec:80:2f:94:b5:fe:32: 68:ed:29:03:00:c9:b0:40:a4:18:de:a1:d6:db:7a: ce:a1:5b:8c:c9:fc:94:4a:4b:12:8e:ef:d1:fb:3e: df:20:65:d5:a0:09:fa:3d:47:fb:3f:75:f5:a3:45: 3c:ed:28:6c:12:50:42:a3:58:e6:4f:ac:e9:36:c0: fe:a5:4e:1b:cc:c1:c3:85:9f:78:6d:2a:6f:44:47: 27:35:bc:70:9e:a4:13:73:b8:14:90:85:e7:2a:9d: a1:76:95:f0:2d:73:7e:4e:a7:80:4b:e5:cc:65:27: 0e:3b:ee:af:98:25:80:dd:d4:eb:a0:a0:63:71:ae: e4:f8:69:4f:ad:0d:08:fa:7d:48:81:f9:26:02:05: c4:0a:61:9a:4f:6d:3a:78:b0:e0:bb:35:da:84:65: a2:09:ac:4e:d2:ec:24:2b:07:c6:a7:7a:d7:45:ed: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:21:DE:79:1D:87:6B:CE:42:12:70:C1:92:F1:6C:35:75:D5:40 X509v3 Authority Key Identifier: keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d7:f9:3c:ec:85:ad:85:c7:db:c0:c8:bf:a9:a6:97:a8:e5: 34:56:69:df:7e:88:89:4a:80:39:07:34:5a:14:4b:ca:e7:97: 05:31:df:b9:d3:ae:4d:bf:15:47:0b:e5:3c:df:c3:72:ef:e9: fe:23:34:f7:18:c6:0d:86:03:55:18:c9:56:d9:c5:34:bc:8d: 36:48:0b:29:12:e6:b0:58:da:f8:41:5a:52:26:01:4e:86:22: 75:15:c8:f6:d1:29:b8:ec:46:ab:84:d6:74:9a:18:70:4f:ba: 95:0e:0d:c2:e8:ab:7b:4a:c6:08:b8:e4:cf:84:7e:60:2f:31: ad:34:7d:ee:10:25:1f:d1:d5:4d:c1:0d:50:dc:bd:64:c6:be: ed:a2:e0:fe:51:d4:62:9b:75:21:d7:92:ed:ca:d9:63:e8:f5: 1f:0f:f5:8a:84:96:d5:61:da:ee:54:38:27:f9:c3:a3:73:7e: fe:4a:16:d0:ca:7c:80:f2:30:5f:39:29:88:08:45:99:e1:cc: cf:15:b7:ec:44:19:27:17:ed:fe:ee:11:30:6a:6d:ec:cf:54: eb:2f:88:67:f6:e4:75:db:92:ae:06:6e:6a:95:2e:61:61:47: 4a:57:d5:bf:57:da:0d:4f:40:4d:0f:e8:72:89:61:e3:4b:15: 7a:b2:af:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbre0gEOutPqOuzLZ0ncMdQR/+nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy RTNCMDc5QzAeFw0yNjA5MTcwMDM5MjdaFw0yNjA5MTgwMzA2MjdaMDMxMTAvBgNV BAMTKEY3RUYyMURFNzkxRDg3NkJDRTQyMTI3MEMxOTJGMTZDMzU3NUQ1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMI5XquXyKui7kLl6Uq8b/p12k lWhb1MJSebDEASSD+tUWf9QWSlbnxOzOPkZHqXhRCeKol8TNcX2f7Jzl0p1AOS5l lJRbEHchxvJEAYddG+0n7IAvlLX+MmjtKQMAybBApBjeodbbes6hW4zJ/JRKSxKO 79H7Pt8gZdWgCfo9R/s/dfWjRTztKGwSUEKjWOZPrOk2wP6lThvMwcOFn3htKm9E Ryc1vHCepBNzuBSQhecqnaF2lfAtc35Op4BL5cxlJw477q+YJYDd1OugoGNxruT4 aU+tDQj6fUiB+SYCBcQKYZpPbTp4sOC7NdqEZaIJrE7S7CQrB8anetdF7RWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+8h3nkdh2vOQhJwwZLxbDV11UAwHwYDVR0j BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4 OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDX+Tzsha2Fx9vAyL+pppeo5TRWad9+iIlK gDkHNFoUS8rnlwUx37nTrk2/FUcL5Tzfw3Lv6f4jNPcYxg2GA1UYyVbZxTS8jTZI CykS5rBY2vhBWlImAU6GInUVyPbRKbjsRquE1nSaGHBPupUODcLoq3tKxgi45M+E fmAvMa00fe4QJR/R1U3BDVDcvWTGvu2i4P5R1GKbdSHXku3K2WPo9R8P9YqEltVh 2u5UOCf5w6Nzfv5KFtDKfIDyMF85KYgIRZnhzM8Vt+xEGScX7f7uETBqbezPVOsv iGf25HXbkq4GbmqVLmFhR0pX1b9X2g1PQE0P6HKJYeNLFXqyrwc= -----END CERTIFICATE-----Generated at Thu Sep 17 09:14:43 2026 by rpki-client