$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json) Hash identifier: GRRRlXSeCT+0539iRB9DZT4d+aCEIkXLWeX+AxkCy+4= Subject key identifier: 54:99:19:4F:1B:B9:3A:E7:2F:65:7F:88:2E:1A:18:75:15:6D:78:1F Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Certificate serial: 4D9923968752F564CC7FFE585082FE18B9647819 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 12:57:02 +0000 Manifest this update: Mon 09 Nov 2026 12:52:02 +0000 Manifest next update: Tue 10 Nov 2026 14:13:02 +0000 Files and hashes: 1: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=) 2: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=) 3: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=) 4: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=) 5: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: rSkzY6HB/5kqjT3mOlZTCZZV2cqI1AUOyoEULXlkR5I=) 6: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=) 7: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=) 8: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=) 9: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=) 10: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=) 11: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=) 12: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=) 13: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=) 14: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=) 15: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=) 16: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=) 17: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:99:23:96:87:52:f5:64:cc:7f:fe:58:50:82:fe:18:b9:64:78:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Validity Not Before: Nov 9 12:52:02 2026 GMT Not After : Nov 10 14:13:02 2026 GMT Subject: CN=5499194F1BB93AE72F657F882E1A1875156D781F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:a5:23:54:58:ac:0e:82:e8:2f:1c:07:4d: fa:f8:5b:e6:27:64:f9:9d:ff:b2:95:52:83:24:c2: 2d:73:b8:12:a6:0a:49:e8:6c:00:4d:1a:a9:96:5e: be:26:b1:79:f7:c3:a5:96:34:f2:b2:44:28:af:f1: ab:bb:2e:61:60:71:e0:93:6c:42:8a:b8:89:72:4a: 24:d6:5f:7f:84:31:c8:9a:2c:d6:76:ea:54:1f:2b: 04:32:52:ac:22:36:fc:80:92:13:da:fa:1b:ea:c7: 25:44:c1:77:ff:47:86:7a:d6:e5:9c:cb:95:0b:b9: cd:f3:c5:e2:58:13:77:46:f7:4d:14:88:75:d8:3a: 99:53:57:7c:92:a1:f6:bd:46:08:07:a3:ef:58:8e: fe:9c:02:62:10:7b:dc:5d:92:2f:7e:56:c8:d4:76: 7e:fe:7c:01:a2:ac:12:cf:26:7e:c9:7d:c4:5f:0e: 42:03:62:de:25:98:96:3a:8a:0f:f6:af:85:84:47: 4b:51:27:ec:49:57:df:43:e7:c8:21:25:da:e0:8d: 73:76:e6:a0:25:f0:b0:78:4d:79:f8:ef:f9:6e:1f: 35:40:58:93:c6:48:b5:94:41:b3:4b:3b:96:f0:e2: eb:16:1f:31:87:25:37:b3:7e:4b:91:4f:00:78:4d: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:99:19:4F:1B:B9:3A:E7:2F:65:7F:88:2E:1A:18:75:15:6D:78:1F X509v3 Authority Key Identifier: keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d6:4a:6b:ad:04:64:3b:00:b8:55:bc:f0:4c:f1:91:fc:10: ad:12:1e:9f:dc:a5:5c:51:42:96:d1:4e:3c:ea:b1:eb:50:83: c2:4f:f4:e0:16:e3:e2:dd:91:4f:0d:84:31:85:cc:7b:f0:a6: 75:ef:9e:34:fd:c3:d1:5e:3e:c5:72:e5:b3:2c:5c:3f:c5:cb: 15:8e:2e:d7:a8:ec:14:ef:90:87:54:1e:f5:c4:3c:17:ae:8c: e7:15:8b:c3:03:2c:39:4f:db:40:ac:00:9d:fa:11:85:c9:c6: a3:d2:85:a4:80:e1:fb:d9:f0:b2:99:ff:30:c5:2c:7b:e8:67: 51:5e:90:a3:6b:fc:88:27:e0:74:4f:7c:11:be:09:44:bd:74: ed:4e:97:b0:ae:f1:e2:b3:cc:01:3e:71:80:0b:34:e7:29:f7: 0a:fa:31:05:69:c1:06:b6:b3:76:e3:51:60:a0:8c:c8:ab:b8: 66:be:be:40:39:83:0f:ae:ca:42:76:ff:2b:24:f2:ec:8c:e9: 02:17:34:3b:51:3c:4e:bd:47:1f:3f:58:e3:dd:5c:3b:c2:d6: 6d:2b:d5:b9:e1:23:40:73:7b:3d:f8:f1:ac:38:79:df:32:45: 48:a1:12:e1:5f:cc:6d:f2:19:27:5b:6c:25:50:b9:21:ee:f2: 55:36:1d:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZkjlodS9WTMf/5YUIL+GLlkeBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy RTNCMDc5QzAeFw0yNjExMDkxMjUyMDJaFw0yNjExMTAxNDEzMDJaMDMxMTAvBgNV BAMTKDU0OTkxOTRGMUJCOTNBRTcyRjY1N0Y4ODJFMUExODc1MTU2RDc4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F6UjVFisDoLoLxwHTfr4W+Yn ZPmd/7KVUoMkwi1zuBKmCknobABNGqmWXr4msXn3w6WWNPKyRCiv8au7LmFgceCT bEKKuIlySiTWX3+EMciaLNZ26lQfKwQyUqwiNvyAkhPa+hvqxyVEwXf/R4Z61uWc y5ULuc3zxeJYE3dG900UiHXYOplTV3ySofa9RggHo+9Yjv6cAmIQe9xdki9+VsjU dn7+fAGirBLPJn7JfcRfDkIDYt4lmJY6ig/2r4WER0tRJ+xJV99D58ghJdrgjXN2 5qAl8LB4TXn47/luHzVAWJPGSLWUQbNLO5bw4usWHzGHJTezfkuRTwB4TdrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJkZTxu5OucvZX+ILhoYdRVteB8wHwYDVR0j BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4 OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/WSmutBGQ7ALhVvPBM8ZH8EK0SHp/cpVxR QpbRTjzqsetQg8JP9OAW4+LdkU8NhDGFzHvwpnXvnjT9w9FePsVy5bMsXD/FyxWO Lteo7BTvkIdUHvXEPBeujOcVi8MDLDlP20CsAJ36EYXJxqPShaSA4fvZ8LKZ/zDF LHvoZ1FekKNr/Ign4HRPfBG+CUS9dO1Ol7Cu8eKzzAE+cYALNOcp9wr6MQVpwQa2 s3bjUWCgjMiruGa+vkA5gw+uykJ2/ysk8uyM6QIXNDtRPE69Rx8/WOPdXDvC1m0r 1bnhI0Bzez348aw4ed8yRUihEuFfzG3yGSdbbCVQuSHu8lU2He8= -----END CERTIFICATE-----Generated at Tue Nov 10 02:29:33 2026 by rpki-client