$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json) Hash identifier: LLlhaBrHWs+38f0ux4lgT/pILff/JAV6Q71pNQ+rTlI= Subject key identifier: 3E:9C:BE:DF:A2:D9:E8:AC:15:9D:03:CD:ED:92:7F:44:5A:3D:9D:BC Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Certificate serial: 650E584F2CE79448CBAC5223081ADA5BF0964A09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft Manifest number: BE Signing time: Sun 20 Sep 2026 21:03:01 +0000 Manifest this update: Sun 20 Sep 2026 20:58:01 +0000 Manifest next update: Mon 21 Sep 2026 23:38:01 +0000 Files and hashes: 1: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: 5cFVhnIopotEkRfATUyBfn1EMLjXE4fW1/OblqApYH0=) 2: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=) 3: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=) 4: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=) 5: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=) 6: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=) 7: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=) 8: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=) 9: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=) 10: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=) 11: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=) 12: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=) 13: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=) 14: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=) 15: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=) 16: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=) 17: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0e:58:4f:2c:e7:94:48:cb:ac:52:23:08:1a:da:5b:f0:96:4a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Validity Not Before: Sep 20 20:58:01 2026 GMT Not After : Sep 21 23:38:01 2026 GMT Subject: CN=3E9CBEDFA2D9E8AC159D03CDED927F445A3D9DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:ae:04:9e:2d:d1:51:24:ba:ee:f1:d6:91: 9a:f9:bb:fa:17:ec:bc:2a:0a:87:8c:8c:00:d3:20: ef:6d:a9:54:e2:34:23:ed:1a:2f:9d:40:7d:13:4a: 23:91:89:04:9f:74:b1:e1:31:dc:4a:05:6a:4e:2d: 79:bd:c2:d4:41:eb:c0:96:74:92:20:af:73:cc:ac: fe:2f:b6:6e:21:83:a9:3a:41:7b:36:6a:40:87:14: 23:74:34:97:bd:a5:32:1d:17:bc:87:74:ae:cf:14: 74:08:4f:91:a7:46:0f:7d:6d:d4:5e:98:03:25:60: 91:46:7e:c5:7e:80:49:dc:e8:be:23:1c:b2:c4:b5: 41:49:75:4f:f2:19:c9:b7:63:80:dc:03:ac:94:3d: d5:1f:7b:a8:00:b5:95:14:32:70:f8:8f:33:d2:cf: 1b:93:86:80:56:40:3f:f3:1e:22:96:bf:f6:e2:1c: 11:49:e2:e2:15:92:27:d5:a8:71:54:f9:63:83:60: 8a:86:f8:69:a6:86:37:71:01:b6:5d:18:71:10:90: 36:e3:83:54:47:e7:87:37:4a:72:f0:a2:70:ea:e0: 2d:55:c1:90:95:6d:56:c7:14:53:82:c9:f6:75:4c: d4:6e:8e:3b:7e:83:c9:1b:2f:8d:4a:25:8c:72:e7: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:BE:DF:A2:D9:E8:AC:15:9D:03:CD:ED:92:7F:44:5A:3D:9D:BC X509v3 Authority Key Identifier: keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:39:b0:b3:ca:9d:e6:e4:84:e7:af:c6:62:94:4b:4c:50:50: c5:85:aa:50:16:ae:04:1d:65:4b:ed:04:5d:80:ff:ed:43:44: 7d:5f:d9:d9:71:ec:d5:47:93:55:5c:9d:71:37:50:7d:30:91: 81:1f:86:f4:93:54:c8:27:e4:16:f5:64:00:f8:0b:78:91:fe: b3:44:63:b0:6c:50:50:8c:78:9d:dc:d2:73:c6:f7:f9:0d:86: cb:f1:a1:48:33:94:54:6a:db:0c:fb:ea:99:68:9d:09:0e:97: 27:c3:ff:33:e3:85:64:95:9f:39:2c:7e:7d:dd:6a:17:06:e5: a0:ee:9d:d6:51:67:e0:b2:09:6b:fc:2e:02:de:05:98:27:4c: 73:e6:7d:2c:99:cd:88:13:7e:78:58:60:b9:fe:95:24:c9:fb: e3:f7:d7:d1:ba:a6:4d:63:13:d0:37:05:b6:49:c4:77:58:14: ee:53:66:83:05:34:99:26:86:2f:b8:af:c3:f0:1b:1d:0d:37: fb:8d:07:27:a3:29:f6:0c:d1:ce:f7:2f:e9:4c:46:f5:f1:34: 27:cf:ee:01:04:3c:7b:ad:c2:c7:00:33:d2:43:9a:c1:d0:44: 82:01:92:2d:d6:82:1c:cc:cd:95:95:7f:ac:52:af:97:4b:d2: b8:3c:88:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQ5YTyznlEjLrFIjCBraW/CWSgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy RTNCMDc5QzAeFw0yNjA5MjAyMDU4MDFaFw0yNjA5MjEyMzM4MDFaMDMxMTAvBgNV BAMTKDNFOUNCRURGQTJEOUU4QUMxNTlEMDNDREVEOTI3RjQ0NUEzRDlEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyla4Eni3RUSS67vHWkZr5u/oX 7LwqCoeMjADTIO9tqVTiNCPtGi+dQH0TSiORiQSfdLHhMdxKBWpOLXm9wtRB68CW dJIgr3PMrP4vtm4hg6k6QXs2akCHFCN0NJe9pTIdF7yHdK7PFHQIT5GnRg99bdRe mAMlYJFGfsV+gEnc6L4jHLLEtUFJdU/yGcm3Y4DcA6yUPdUfe6gAtZUUMnD4jzPS zxuThoBWQD/zHiKWv/biHBFJ4uIVkifVqHFU+WODYIqG+GmmhjdxAbZdGHEQkDbj g1RH54c3SnLwonDq4C1VwZCVbVbHFFOCyfZ1TNRujjt+g8kbL41KJYxy56BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpy+36LZ6KwVnQPN7ZJ/RFo9nbwwHwYDVR0j BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4 OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg5sLPKnebkhOevxmKUS0xQUMWFqlAWrgQd ZUvtBF2A/+1DRH1f2dlx7NVHk1VcnXE3UH0wkYEfhvSTVMgn5Bb1ZAD4C3iR/rNE Y7BsUFCMeJ3c0nPG9/kNhsvxoUgzlFRq2wz76plonQkOlyfD/zPjhWSVnzksfn3d ahcG5aDundZRZ+CyCWv8LgLeBZgnTHPmfSyZzYgTfnhYYLn+lSTJ++P319G6pk1j E9A3BbZJxHdYFO5TZoMFNJkmhi+4r8PwGx0NN/uNByejKfYM0c73L+lMRvXxNCfP 7gEEPHutwscAM9JDmsHQRIIBki3WghzMzZWVf6xSr5dL0rg8iLc= -----END CERTIFICATE-----Generated at Mon Sep 21 06:05:39 2026 by rpki-client