$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: rM22zMm7aH1+JXdve2IlRhuJwx2q6iaBlaIGIsVlGDM= Subject key identifier: 3D:0C:BA:CD:5F:E6:BC:EB:82:81:DF:67:30:8F:E0:61:CF:33:F6:B7 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 69C780D7A0B3F639B565FB7B896D9B39FDFA515B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: 39 Signing time: Fri 12 Jun 2026 23:08:21 +0000 Manifest this update: Fri 12 Jun 2026 23:03:21 +0000 Manifest next update: Sun 14 Jun 2026 00:50:21 +0000 Files and hashes: 1: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 2: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) 3: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 4: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 5: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: 9kMrnWX4ceTeMZSTdvFZmy6m15MNBKKgYVefkDLtcQ8=) 6: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 7: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 8: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 9: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 10: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 11: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 12: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 13: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 14: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 15: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c7:80:d7:a0:b3:f6:39:b5:65:fb:7b:89:6d:9b:39:fd:fa:51:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Jun 12 23:03:21 2026 GMT Not After : Jun 14 00:50:21 2026 GMT Subject: CN=3D0CBACD5FE6BCEB8281DF67308FE061CF33F6B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:ec:66:e3:1b:62:7b:bd:8c:2b:ff:39:ad: 75:b1:23:5b:03:83:03:90:b5:de:f5:70:34:01:7b: 51:3c:51:17:a2:8e:93:df:d7:55:67:5e:bf:1a:e7: 33:5e:2e:a0:4f:6d:42:97:6d:32:fe:21:5c:04:d7: ce:1c:e3:a2:12:b9:07:f6:df:7f:61:97:ee:19:84: 52:69:cc:57:b9:5c:40:57:85:c0:01:cc:75:01:1e: a3:c7:14:74:9e:d2:71:1b:aa:db:12:31:92:a6:4d: dd:63:b2:2f:6f:c0:43:b7:30:74:d5:3a:cb:46:ca: 66:00:e9:20:16:c1:e0:d7:32:aa:01:b8:eb:f3:0b: ce:6c:eb:82:a4:58:54:62:79:08:d2:34:bd:88:55: ad:c7:08:3b:1b:93:e7:71:a2:0c:a6:03:77:72:27: 63:22:46:0a:f1:a6:31:28:f8:94:be:f4:65:c0:33: c8:bc:75:77:5c:9e:3b:79:57:98:a2:01:b5:db:03: f4:3a:f4:2f:25:a1:d9:a3:1f:07:ac:52:14:4a:cc: b5:ae:03:1e:7c:75:d0:aa:5b:73:b8:60:c7:04:71: 55:65:60:1e:d2:b7:a5:ab:ce:8f:d3:eb:4f:3a:ca: 90:0f:04:b1:27:e6:87:2a:13:ea:c7:f2:e8:09:f8: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:BA:CD:5F:E6:BC:EB:82:81:DF:67:30:8F:E0:61:CF:33:F6:B7 X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:57:18:1a:5f:67:9f:6e:77:e0:c9:78:5a:ff:61:8a:a7:b9: 53:85:fe:ad:b5:a0:50:51:5d:48:c6:27:e4:57:a2:a8:87:7e: 02:b3:c5:bb:51:a0:f3:47:69:e7:10:15:f4:1f:11:98:e9:95: 49:52:89:ce:88:89:4e:92:99:fc:69:82:67:33:f4:0a:28:73: 3c:41:ae:81:9e:28:7a:a1:9c:7d:7c:18:94:55:66:6f:49:2b: 4b:f0:b7:86:fb:d9:cc:0f:86:36:d9:1d:f6:d5:8f:e7:8b:1a: 62:b4:6c:9c:fb:4f:8d:3b:31:47:48:2a:a9:54:b3:d8:4d:55: c5:1f:14:c4:6f:77:7e:b8:42:ed:17:92:15:2e:a6:ec:20:7c: 53:34:3b:85:2d:cc:1d:be:73:1b:ef:45:b3:33:09:31:62:7c: 59:6a:c8:d5:bf:3c:cd:03:fe:4f:cd:c8:d4:55:95:29:44:3d: 68:38:1c:42:eb:f5:34:8c:af:49:22:d8:6b:e3:9f:7c:ff:4e: f5:fd:a8:c9:f7:43:bb:41:20:a0:75:19:cc:e4:a6:d1:dc:76: 9b:16:33:ed:4c:26:1b:db:f4:fb:04:e1:98:cb:b6:e2:c1:70: 3a:ec:75:cd:a1:98:d9:64:b2:19:8b:ca:8a:0a:28:8d:44:95: a5:fd:cc:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaceA16Cz9jm1Zft7iW2bOf36UVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA2MTIyMzAzMjFaFw0yNjA2MTQwMDUwMjFaMDMxMTAvBgNV BAMTKDNEMENCQUNENUZFNkJDRUI4MjgxREY2NzMwOEZFMDYxQ0YzM0Y2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpc+xm4xtie72MK/85rXWxI1sD gwOQtd71cDQBe1E8UReijpPf11VnXr8a5zNeLqBPbUKXbTL+IVwE184c46ISuQf2 339hl+4ZhFJpzFe5XEBXhcABzHUBHqPHFHSe0nEbqtsSMZKmTd1jsi9vwEO3MHTV OstGymYA6SAWweDXMqoBuOvzC85s64KkWFRieQjSNL2IVa3HCDsbk+dxogymA3dy J2MiRgrxpjEo+JS+9GXAM8i8dXdcnjt5V5iiAbXbA/Q69C8lodmjHwesUhRKzLWu Ax58ddCqW3O4YMcEcVVlYB7St6Wrzo/T6086ypAPBLEn5ocqE+rH8ugJ+PifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQy6zV/mvOuCgd9nMI/gYc8z9rcwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtXGBpfZ59ud+DJeFr/YYqnuVOF/q21oFBR XUjGJ+RXoqiHfgKzxbtRoPNHaecQFfQfEZjplUlSic6IiU6Smfxpgmcz9AooczxB roGeKHqhnH18GJRVZm9JK0vwt4b72cwPhjbZHfbVj+eLGmK0bJz7T407MUdIKqlU s9hNVcUfFMRvd364Qu0XkhUupuwgfFM0O4UtzB2+cxvvRbMzCTFifFlqyNW/PM0D /k/NyNRVlSlEPWg4HELr9TSMr0ki2Gvjn3z/TvX9qMn3Q7tBIKB1GczkptHcdpsW M+1MJhvb9PsE4ZjLtuLBcDrsdc2hmNlkshmLyooKKI1ElaX9zMQ= -----END CERTIFICATE-----Generated at Sat Jun 13 09:56:33 2026 by rpki-client