$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: 2LDh7LDHjJpv/Nz96VXPyS0DqNvZZC/AgBSrs5toNmM= Subject key identifier: 84:C5:51:79:10:69:17:A4:EA:F1:90:36:F2:C9:A9:4E:93:1D:B2:50 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 7842EA335077E55013ECBD2B5754AFA5902EA849 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 17:53:50 +0000 Manifest this update: Tue 28 Jul 2026 17:48:50 +0000 Manifest next update: Wed 29 Jul 2026 21:10:50 +0000 Files and hashes: 1: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 2: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 3: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 4: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 5: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 6: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 7: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 8: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 9: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 10: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 11: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 12: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: qZ2i+KsmZheLAMHI87XlprC8Tk3HJiK3e3yPWE171tg=) 13: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 14: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 15: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:42:ea:33:50:77:e5:50:13:ec:bd:2b:57:54:af:a5:90:2e:a8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Jul 28 17:48:50 2026 GMT Not After : Jul 29 21:10:50 2026 GMT Subject: CN=84C55179106917A4EAF19036F2C9A94E931DB250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:db:bd:f7:1d:07:01:07:12:23:af:1c:46: 4d:a9:7b:b5:e4:7b:11:9d:40:14:b3:e1:4b:df:89: 0b:4c:4d:0d:f4:ae:02:fd:27:1c:0a:b3:58:a6:54: 02:9c:ae:b3:fe:e8:9e:04:28:7a:b5:14:86:bb:58: 64:cc:d1:a8:25:e1:e9:e0:53:22:ba:b1:83:78:3d: 24:c5:b7:90:12:32:e6:62:a5:32:e8:16:db:8e:94: 4e:71:37:d7:81:f6:47:13:7b:16:62:5b:78:08:43: 16:a3:09:28:77:a2:9b:1d:77:e1:c7:2a:3a:4f:1b: 77:19:28:ee:c7:e1:ff:82:74:bf:07:1e:67:72:33: 95:6e:db:8e:74:b9:c1:76:1c:f8:c6:28:94:1e:00: 0e:8f:af:05:e4:52:e5:3b:35:59:7b:5c:37:7a:b7: f8:c7:ea:c0:5b:6a:13:b7:21:ca:24:5a:9e:0e:bf: 63:4b:1c:bd:e5:4f:be:cf:74:09:66:26:78:91:b4: fe:db:41:aa:ff:2e:ad:aa:94:99:f1:fe:e7:1e:60: 1c:43:9f:0c:81:f7:74:3e:71:11:27:0f:5e:96:5a: ca:f0:c5:18:ac:90:c6:58:85:18:58:95:72:3e:7a: 22:d9:9c:b8:78:ae:73:35:ae:b1:49:f8:a1:05:9a: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C5:51:79:10:69:17:A4:EA:F1:90:36:F2:C9:A9:4E:93:1D:B2:50 X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:13:f0:90:7d:e8:d0:63:d1:94:7e:48:3c:4b:fe:db:c0:9b: cf:8d:b9:ce:c6:05:0f:01:94:46:56:58:47:10:48:22:cd:03: 70:4c:45:fb:ec:91:2b:9e:af:f9:69:aa:1f:80:cb:c4:e7:f0: 21:94:46:00:a1:b8:b7:95:ce:aa:87:0b:ea:0e:56:66:45:77: 64:1e:33:39:6a:47:98:5f:af:aa:a2:55:b6:8b:34:9f:71:df: 2b:ca:ea:75:2a:cd:1b:15:ed:17:8d:13:25:f9:e6:e3:ac:85: 9f:28:67:f8:c4:ff:2c:8c:22:e7:1d:31:86:bd:2b:13:8b:02: 22:69:46:cf:ef:82:8d:e3:dd:ea:8a:6f:18:6a:07:67:f7:d7: 30:71:b2:86:c5:40:cf:cf:65:fb:08:fa:e2:bb:fc:90:b8:e1: b7:15:8f:da:27:06:b2:04:3c:e2:77:7d:26:87:e5:0c:db:c3: 4d:78:a5:02:48:77:8c:b9:42:75:52:9c:bd:a2:26:41:da:68: 18:24:35:0d:8b:99:b4:8d:82:5f:f6:b8:05:98:74:75:e1:07: d4:65:62:23:2f:66:cc:29:fe:7a:69:95:e0:33:73:09:29:e6: 9e:bc:0f:a5:db:a2:de:06:bf:9c:05:b7:38:6d:9a:65:0b:f7: e2:18:5b:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeELqM1B35VAT7L0rV1SvpZAuqEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA3MjgxNzQ4NTBaFw0yNjA3MjkyMTEwNTBaMDMxMTAvBgNV BAMTKDg0QzU1MTc5MTA2OTE3QTRFQUYxOTAzNkYyQzlBOTRFOTMxREIyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnNu99x0HAQcSI68cRk2pe7Xk exGdQBSz4UvfiQtMTQ30rgL9JxwKs1imVAKcrrP+6J4EKHq1FIa7WGTM0agl4eng UyK6sYN4PSTFt5ASMuZipTLoFtuOlE5xN9eB9kcTexZiW3gIQxajCSh3opsdd+HH KjpPG3cZKO7H4f+CdL8HHmdyM5Vu2450ucF2HPjGKJQeAA6PrwXkUuU7NVl7XDd6 t/jH6sBbahO3IcokWp4Ov2NLHL3lT77PdAlmJniRtP7bQar/Lq2qlJnx/uceYBxD nwyB93Q+cREnD16WWsrwxRiskMZYhRhYlXI+eiLZnLh4rnM1rrFJ+KEFmmLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMVReRBpF6Tq8ZA28smpTpMdslAwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcT8JB96NBj0ZR+SDxL/tvAm8+Nuc7GBQ8B lEZWWEcQSCLNA3BMRfvskSuer/lpqh+Ay8Tn8CGURgChuLeVzqqHC+oOVmZFd2Qe MzlqR5hfr6qiVbaLNJ9x3yvK6nUqzRsV7ReNEyX55uOshZ8oZ/jE/yyMIucdMYa9 KxOLAiJpRs/vgo3j3eqKbxhqB2f31zBxsobFQM/PZfsI+uK7/JC44bcVj9onBrIE POJ3fSaH5Qzbw014pQJId4y5QnVSnL2iJkHaaBgkNQ2LmbSNgl/2uAWYdHXhB9Rl YiMvZswp/nppleAzcwkp5p68D6Xbot4Gv5wFtzhtmmUL9+IYW2I= -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:13 2026 by rpki-client