$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: drHuPq21i3wHNl6YQVOMbnEDKMuvkywLshS3Useti+M= Subject key identifier: 14:57:23:5C:44:88:40:05:01:BD:B6:C0:88:51:8F:1D:E3:42:4B:DA Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 745F76A20B864B5EBBEADC646176C6BA578F9862 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 11:07:56 +0000 Manifest this update: Wed 16 Sep 2026 11:02:56 +0000 Manifest next update: Thu 17 Sep 2026 14:31:56 +0000 Files and hashes: 1: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 2: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 3: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 4: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 5: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 6: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 7: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: x1nGgEfEl4G1SS82WT3iouGVyxg+FNRFht84X9ydTG4=) 8: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 9: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 10: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 11: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 12: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 13: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) 14: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 15: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5f:76:a2:0b:86:4b:5e:bb:ea:dc:64:61:76:c6:ba:57:8f:98:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Sep 16 11:02:56 2026 GMT Not After : Sep 17 14:31:56 2026 GMT Subject: CN=1457235C4488400501BDB6C088518F1DE3424BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:1c:05:37:da:f9:f8:8c:57:2c:03:59:a9: 4b:e6:8a:bf:5b:ed:2b:ed:6a:f4:40:20:7d:66:f1: e4:b6:0c:ae:55:e3:8a:26:de:17:82:b6:b3:d7:a5: bb:92:bb:d7:a7:0b:75:3f:4f:9b:84:28:43:fd:2b: c9:27:5c:ae:ab:78:37:ba:20:fc:0f:61:ec:fe:94: d8:90:5d:cd:fa:d8:ff:b4:35:aa:25:d4:25:6b:ce: 31:cb:03:0a:a1:8e:ce:f3:90:9c:c6:6f:fa:ea:df: 0d:ac:c1:fc:e1:e8:67:16:2f:91:09:60:25:53:e7: 79:3c:18:a6:61:a6:12:07:f4:56:2d:5d:6e:1d:85: c7:a1:2a:c6:bb:8f:13:54:83:d2:bb:a1:ec:1c:1e: 99:1e:e7:c7:aa:ea:46:c5:4d:97:f8:8a:b4:cb:c8: 56:af:bc:a4:5c:50:9f:39:95:f2:e0:eb:40:fa:b8: 40:d8:18:67:f2:3d:7c:7a:f6:f0:15:1c:af:74:96: 5f:98:83:a9:47:ef:11:55:b6:1d:89:7d:00:d9:24: 0b:a4:bc:05:14:31:87:da:8c:25:4c:7b:c7:f1:de: 61:c8:58:75:3c:c5:3a:24:6e:d4:a5:aa:b8:6f:64: 10:64:80:54:62:48:b3:95:59:ca:e0:ca:27:60:a7: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:57:23:5C:44:88:40:05:01:BD:B6:C0:88:51:8F:1D:E3:42:4B:DA X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:c8:44:a4:3f:4a:51:8c:c4:7a:bd:ec:e6:f0:fe:56:56: 83:4f:2a:73:f2:63:64:1b:12:14:06:62:61:50:19:12:8d:44: 84:b9:b1:a5:86:5e:62:07:47:2a:65:0c:32:f2:92:e8:22:f9: bd:2d:3c:b5:9c:1d:d6:da:a0:d7:b1:ad:6f:1a:7d:2a:cc:06: 8e:7b:62:12:48:1f:f0:41:cb:68:b1:c5:2c:33:59:22:fb:ff: c1:a1:26:c7:d8:ab:3c:19:ea:0b:ff:dd:81:32:7c:01:43:3d: b9:1d:fb:bc:d3:61:33:2c:87:10:5f:a5:a4:67:34:c3:4d:54: 58:f8:e7:9e:fd:fd:70:bf:4a:b2:c4:66:32:27:da:d3:6f:ef: 46:cb:5b:30:b7:44:33:18:6d:9d:98:75:0c:63:cb:46:6e:8a: 4d:bd:ac:69:f6:d3:c1:0f:26:e1:0e:3f:08:8f:3d:df:e0:93: 84:10:e1:4a:88:48:36:08:9d:2c:b5:b7:39:7b:b2:79:bb:95: e2:96:54:65:06:a7:9f:86:46:3c:b6:be:c8:e1:45:63:5f:71: 39:20:91:c9:48:29:11:85:b9:be:5b:cb:08:f1:04:0d:c2:3a: 30:7e:e8:37:76:e5:64:14:28:2a:2e:10:95:9c:2a:6a:58:46: 01:46:12:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdF92oguGS1676txkYXbGulePmGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA5MTYxMTAyNTZaFw0yNjA5MTcxNDMxNTZaMDMxMTAvBgNV BAMTKDE0NTcyMzVDNDQ4ODQwMDUwMUJEQjZDMDg4NTE4RjFERTM0MjRCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPthwFN9r5+IxXLANZqUvmir9b 7SvtavRAIH1m8eS2DK5V44om3heCtrPXpbuSu9enC3U/T5uEKEP9K8knXK6reDe6 IPwPYez+lNiQXc362P+0Naol1CVrzjHLAwqhjs7zkJzGb/rq3w2swfzh6GcWL5EJ YCVT53k8GKZhphIH9FYtXW4dhcehKsa7jxNUg9K7oewcHpke58eq6kbFTZf4irTL yFavvKRcUJ85lfLg60D6uEDYGGfyPXx69vAVHK90ll+Yg6lH7xFVth2JfQDZJAuk vAUUMYfajCVMe8fx3mHIWHU8xTokbtSlqrhvZBBkgFRiSLOVWcrgyidgp5EpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFFcjXESIQAUBvbbAiFGPHeNCS9owHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlVyESkP0pRjMR6vezm8P5WVoNPKnPyY2Qb EhQGYmFQGRKNRIS5saWGXmIHRyplDDLykugi+b0tPLWcHdbaoNexrW8afSrMBo57 YhJIH/BBy2ixxSwzWSL7/8GhJsfYqzwZ6gv/3YEyfAFDPbkd+7zTYTMshxBfpaRn NMNNVFj45579/XC/SrLEZjIn2tNv70bLWzC3RDMYbZ2YdQxjy0Zuik29rGn208EP JuEOPwiPPd/gk4QQ4UqISDYInSy1tzl7snm7leKWVGUGp5+GRjy2vsjhRWNfcTkg kclIKRGFub5bywjxBA3COjB+6Dd25WQUKCouEJWcKmpYRgFGEt8= -----END CERTIFICATE-----Generated at Thu Sep 17 03:43:04 2026 by rpki-client