$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: 6R1z1ILAmBjCB4e0VB/rktCZdpJa2euT+TKXN/ri5oM= Subject key identifier: 42:72:77:FE:71:30:11:70:EA:C8:78:68:8E:21:DF:9F:3A:87:F7:4E Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 2134E19C77A749C35CAF7785B098DE260FD8E0C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 04:27:46 +0000 Manifest this update: Sun 02 Aug 2026 04:22:46 +0000 Manifest next update: Mon 03 Aug 2026 05:07:46 +0000 Files and hashes: 1: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 2: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 3: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 4: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) 5: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 6: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 7: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: stc8VMjpJKijYUQXZFFvyKpPPaoRyiFfHJ2DkJYwasA=) 8: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 9: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 10: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 11: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 12: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 13: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 14: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 15: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:e1:9c:77:a7:49:c3:5c:af:77:85:b0:98:de:26:0f:d8:e0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Aug 2 04:22:46 2026 GMT Not After : Aug 3 05:07:46 2026 GMT Subject: CN=427277FE71301170EAC878688E21DF9F3A87F74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:55:c8:0f:5c:30:f7:84:f0:d1:ce:9b:24: 2c:5f:a3:13:3b:bb:a4:00:61:57:56:f7:51:f0:b3: 78:63:5f:5a:e2:4f:a3:c0:28:b8:a7:82:de:d8:2d: 2c:05:cf:e6:32:ac:32:e2:9e:70:d5:db:2a:c7:90: 78:42:61:0c:93:e3:ef:fc:cd:f0:4b:4c:ab:24:b9: ee:a6:8f:9f:f1:b4:e7:36:72:8b:fc:d5:03:b2:9f: c4:3d:86:9c:42:49:c0:34:83:8b:07:41:76:2d:79: 1d:de:33:f4:b9:c6:c7:a6:d9:c5:0a:bd:16:4f:8f: e0:e0:9a:20:82:ac:b0:1d:c5:9d:bd:33:7c:1e:91: 0a:61:50:99:14:52:91:4b:7b:9d:e1:da:24:3f:72: c0:ee:92:35:fe:17:76:22:e2:c8:b5:67:31:1f:68: 0d:05:5c:a9:6d:64:e1:ad:51:49:9a:0f:39:7d:a5: 25:6d:35:a9:d0:24:73:30:5f:c9:ef:69:d7:d4:23: 96:96:94:10:e3:e9:79:12:ce:37:70:73:99:40:fe: 5b:17:04:5c:be:c5:2c:08:34:5a:de:f4:87:f9:09: e4:ea:35:48:87:f2:19:73:10:49:b4:b7:cb:aa:63: a5:76:98:24:33:66:e4:33:1c:82:46:98:99:6e:ba: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:72:77:FE:71:30:11:70:EA:C8:78:68:8E:21:DF:9F:3A:87:F7:4E X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:91:27:f2:17:38:58:d6:89:08:73:ed:0b:5b:e8:4c:53:74: b9:76:f1:c8:f3:29:e2:57:e7:a4:05:85:92:36:80:64:f4:8d: da:95:7c:84:da:83:40:fb:d8:d7:5e:39:6c:98:7f:29:d9:d5: 62:5a:cf:b2:5a:d6:09:93:00:56:71:22:3b:68:a4:d4:7b:91: 91:81:bf:51:ff:22:e5:63:11:24:af:18:7f:5a:59:73:3e:93: 7b:30:95:72:e1:3f:50:bc:02:07:e6:9f:c6:60:8f:8c:46:ab: f6:e9:51:25:89:22:a9:05:41:3f:8c:88:d5:2a:9c:bc:17:ff: 6b:71:cd:84:a3:1f:1f:a3:1a:d8:1f:6c:e4:cf:9f:6c:e4:30: b4:45:05:62:c6:81:30:c5:bc:97:26:0b:39:d2:45:75:74:5f: 82:c6:7b:18:29:97:61:ca:6b:e5:19:6a:2d:ce:cf:0b:25:78: 78:17:cc:89:d1:93:67:af:7d:ff:99:f3:73:1d:d1:1c:07:24: 79:dc:18:9e:a6:94:4c:67:dc:49:8a:51:27:a7:20:1f:92:34: 98:b3:01:e4:93:e9:ba:92:7b:65:56:b1:5f:65:0c:35:16:d7: ab:fe:3d:12:9b:fe:48:f1:18:bf:21:02:2c:8d:8c:5b:80:08: 6e:21:15:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITThnHenScNcr3eFsJjeJg/Y4MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA4MDIwNDIyNDZaFw0yNjA4MDMwNTA3NDZaMDMxMTAvBgNV BAMTKDQyNzI3N0ZFNzEzMDExNzBFQUM4Nzg2ODhFMjFERjlGM0E4N0Y3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSFXID1ww94Tw0c6bJCxfoxM7 u6QAYVdW91Hws3hjX1riT6PAKLingt7YLSwFz+YyrDLinnDV2yrHkHhCYQyT4+/8 zfBLTKskue6mj5/xtOc2cov81QOyn8Q9hpxCScA0g4sHQXYteR3eM/S5xsem2cUK vRZPj+DgmiCCrLAdxZ29M3wekQphUJkUUpFLe53h2iQ/csDukjX+F3Yi4si1ZzEf aA0FXKltZOGtUUmaDzl9pSVtNanQJHMwX8nvadfUI5aWlBDj6XkSzjdwc5lA/lsX BFy+xSwINFre9If5CeTqNUiH8hlzEEm0t8uqY6V2mCQzZuQzHIJGmJluuux3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnJ3/nEwEXDqyHhojiHfnzqH904wHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSRJ/IXOFjWiQhz7Qtb6ExTdLl28cjzKeJX 56QFhZI2gGT0jdqVfITag0D72NdeOWyYfynZ1WJaz7Ja1gmTAFZxIjtopNR7kZGB v1H/IuVjESSvGH9aWXM+k3swlXLhP1C8Agfmn8Zgj4xGq/bpUSWJIqkFQT+MiNUq nLwX/2txzYSjHx+jGtgfbOTPn2zkMLRFBWLGgTDFvJcmCznSRXV0X4LGexgpl2HK a+UZai3OzwsleHgXzInRk2evff+Z83Md0RwHJHncGJ6mlExn3EmKUSenIB+SNJiz AeST6bqSe2VWsV9lDDUW16v+PRKb/kjxGL8hAiyNjFuACG4hFb8= -----END CERTIFICATE-----Generated at Sun Aug 2 13:15:35 2026 by rpki-client