$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: i2D2wZd1C47/hdjFSwzmL7NiK5ccSmZVa0CaQzTBntE= Subject key identifier: 6A:7D:EE:6C:9B:FD:A2:98:8C:62:4D:EC:42:F4:BD:4C:8B:10:A4:8C Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 45833C51D886F9DD16003D115CFCA3BADD82F227 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 03:46:48 +0000 Manifest this update: Sun 20 Sep 2026 03:41:48 +0000 Manifest next update: Mon 21 Sep 2026 03:53:48 +0000 Files and hashes: 1: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: IJwbOrDayx+1bRzyYDZiT5nD/ohewPg2V5yzHeNrw3g=) 2: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 3: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 4: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 5: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 6: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 7: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 8: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 9: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 10: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 11: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 12: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 13: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 14: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 15: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:83:3c:51:d8:86:f9:dd:16:00:3d:11:5c:fc:a3:ba:dd:82:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Sep 20 03:41:48 2026 GMT Not After : Sep 21 03:53:48 2026 GMT Subject: CN=6A7DEE6C9BFDA2988C624DEC42F4BD4C8B10A48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:82:0d:64:f8:47:b5:ba:b9:16:e0:25:e2: b8:81:e0:97:d5:13:fb:13:dd:bc:41:17:e7:6d:4a: 21:20:f7:3c:62:a7:15:37:46:5e:61:36:59:3a:fd: 60:11:4a:df:62:e0:bc:84:da:21:30:89:a8:3a:78: 46:22:fd:2b:8c:e0:81:ba:d0:dd:f3:16:f6:6b:4f: 8a:c9:b5:b4:ce:a6:c7:fb:7b:01:ba:44:55:4d:42: 8a:2f:3b:64:e3:5c:f9:cd:b2:2f:c9:02:fc:02:02: 60:7d:da:ab:7c:6f:36:a6:91:d2:0a:a5:be:af:bf: 0c:cb:b4:18:a0:29:3e:50:bb:65:c7:96:3a:44:bf: 36:c8:7e:2e:6e:b4:0b:2c:ff:ac:74:e0:25:52:ef: 82:bc:f6:e3:73:e0:65:25:9a:3d:da:39:87:03:a7: 04:2d:4c:54:50:18:c3:9c:ff:a3:5e:40:5f:c7:1f: 22:6c:e7:5c:56:3e:8c:05:99:3f:ce:7a:d0:bd:f1: 42:48:13:eb:47:87:a3:02:19:45:73:3d:5c:94:1f: 84:91:ee:d5:63:f7:01:78:22:c4:58:49:89:a3:a7: 54:45:f2:92:34:cb:a8:ee:79:b9:d2:27:34:f5:d9: ea:9e:f0:3d:a9:a8:f4:2c:74:e1:4d:c4:bf:c7:dd: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7D:EE:6C:9B:FD:A2:98:8C:62:4D:EC:42:F4:BD:4C:8B:10:A4:8C X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1f:95:5c:13:df:ff:b7:a8:42:a5:f2:bf:a3:6a:93:fc:14: c8:d3:5b:7b:39:2a:b1:94:5c:9e:27:18:47:1d:a5:dd:b5:be: ee:96:7c:c2:21:3c:22:fe:69:0c:af:d9:8b:6f:8b:49:47:e9: 4e:a6:10:24:a0:19:d9:29:62:c0:db:c6:c9:b7:8e:f3:76:26: 8a:f1:f0:0a:2f:e7:eb:7c:c4:b8:d3:2a:b1:53:7f:94:35:d4: c1:81:1c:3f:8f:bf:55:f3:d7:99:94:04:35:4b:ad:d8:32:c6: bd:be:10:dd:21:3b:fb:5a:74:a9:57:3b:d1:a5:3a:f4:5a:b5: f1:32:11:3a:72:4b:37:d0:46:eb:92:95:28:e5:4a:bc:6e:47: f2:32:9f:20:42:4a:f6:3c:07:bd:d0:a5:61:b2:56:bb:6a:df: 82:5e:a1:63:6f:24:01:4d:4f:5d:26:d1:a3:fb:78:5c:c6:59: 90:30:55:06:41:c0:fd:b2:23:54:48:33:b5:17:81:1a:1d:aa: 14:54:d6:f6:c0:32:fb:b6:10:7e:a5:3f:63:62:a5:8b:8f:f3: eb:09:de:c3:a0:70:5d:86:db:fe:0e:fa:09:7b:f0:d3:85:b3: 17:8b:1e:9c:0a:72:2d:07:23:fe:d6:e1:99:ac:b6:9a:ab:ee: d2:b1:90:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYM8UdiG+d0WAD0RXPyjut2C8icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA5MjAwMzQxNDhaFw0yNjA5MjEwMzUzNDhaMDMxMTAvBgNV BAMTKDZBN0RFRTZDOUJGREEyOTg4QzYyNERFQzQyRjRCRDRDOEIxMEE0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4IINZPhHtbq5FuAl4riB4JfV E/sT3bxBF+dtSiEg9zxipxU3Rl5hNlk6/WARSt9i4LyE2iEwiag6eEYi/SuM4IG6 0N3zFvZrT4rJtbTOpsf7ewG6RFVNQoovO2TjXPnNsi/JAvwCAmB92qt8bzamkdIK pb6vvwzLtBigKT5Qu2XHljpEvzbIfi5utAss/6x04CVS74K89uNz4GUlmj3aOYcD pwQtTFRQGMOc/6NeQF/HHyJs51xWPowFmT/OetC98UJIE+tHh6MCGUVzPVyUH4SR 7tVj9wF4IsRYSYmjp1RF8pI0y6juebnSJzT12eqe8D2pqPQsdOFNxL/H3cSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUan3ubJv9opiMYk3sQvS9TIsQpIwwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUflVwT3/+3qEKl8r+japP8FMjTW3s5KrGU XJ4nGEcdpd21vu6WfMIhPCL+aQyv2Ytvi0lH6U6mECSgGdkpYsDbxsm3jvN2Jorx 8Aov5+t8xLjTKrFTf5Q11MGBHD+Pv1Xz15mUBDVLrdgyxr2+EN0hO/tadKlXO9Gl OvRatfEyETpySzfQRuuSlSjlSrxuR/IynyBCSvY8B73QpWGyVrtq34JeoWNvJAFN T10m0aP7eFzGWZAwVQZBwP2yI1RIM7UXgRodqhRU1vbAMvu2EH6lP2NipYuP8+sJ 3sOgcF2G2/4O+gl78NOFsxeLHpwKci0HI/7W4Zmstpqr7tKxkAo= -----END CERTIFICATE-----Generated at Sun Sep 20 19:12:51 2026 by rpki-client