$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: 86suDH3Cisn/Fd8PaisGakUil1yGDjGKHEVPeMYvZz4= Subject key identifier: 50:2B:24:9D:F7:B2:9A:26:70:08:BA:F0:5F:16:3D:F5:E3:6A:EF:0E Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 218995220F6B83C4E70F5C1A78DE82BD9789B465 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: C6 Signing time: Tue 22 Sep 2026 05:33:20 +0000 Manifest this update: Tue 22 Sep 2026 05:28:20 +0000 Manifest next update: Wed 23 Sep 2026 08:57:20 +0000 Files and hashes: 1: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 2: 3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa (hash: YwYJOrEsiDWcVSn+LtSvLPeO90hqCBR1ZCpXlYX2WzQ=) 3: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 4: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 5: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 6: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: RW5vAp6YdtvwgaYjMpJeK5S6sYWfiPmLQBfgkz2GHcU=) 7: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 8: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 9: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 10: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:89:95:22:0f:6b:83:c4:e7:0f:5c:1a:78:de:82:bd:97:89:b4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Sep 22 05:28:20 2026 GMT Not After : Sep 23 08:57:20 2026 GMT Subject: CN=502B249DF7B29A267008BAF05F163DF5E36AEF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:1f:62:21:8b:1d:2b:14:6b:8a:23:79:b7: e0:53:d0:e8:97:db:ac:27:33:15:dd:1f:cc:24:36: 93:77:0a:4a:cb:66:22:a3:e6:2b:43:56:a6:12:07: de:5e:a4:df:51:5a:5d:54:f2:bb:e3:b9:f6:45:06: d3:c3:0c:87:89:9d:72:4b:99:93:6e:36:09:3b:54: d8:61:a5:d4:48:f5:1c:45:54:20:6c:01:79:c6:cd: 0c:fe:0e:ea:ac:ce:c1:41:a8:33:59:b8:42:08:47: d7:f0:ff:5b:7a:e4:66:af:58:94:b5:8e:85:1f:1d: 50:de:82:79:14:0f:71:3d:d6:9e:95:2f:f1:fa:b1: 37:fe:35:77:8a:af:21:36:49:a0:4a:41:20:b4:5b: 68:3e:39:79:06:5d:13:2f:d4:6e:97:cd:57:e4:1c: fc:3e:20:2a:45:a6:5b:d6:78:4a:36:cb:a5:5a:0f: a3:85:49:8d:f3:15:e9:9f:ff:a6:35:cb:d0:f4:dc: 9e:66:cb:1d:76:2b:7c:b0:46:69:bb:d9:db:a6:76: b0:d5:ad:95:dd:d3:ba:33:b7:c0:7b:dc:7c:56:00: 18:c4:6e:06:e0:f5:37:a3:f5:bd:5c:4d:47:dd:a0: 02:48:11:3e:2e:7b:27:f4:b7:41:ee:5a:48:a3:58: 61:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:24:9D:F7:B2:9A:26:70:08:BA:F0:5F:16:3D:F5:E3:6A:EF:0E X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4b:f1:ec:c4:bc:86:6f:4f:10:b1:6d:b5:ec:80:94:bf:02: 64:a3:27:da:d5:ba:c2:84:ba:b6:2c:c5:58:f1:6a:71:de:fa: ad:a6:9d:18:be:f2:61:44:6d:2d:ea:89:b5:2e:ae:b1:5d:43: 35:13:be:f8:0b:71:7b:94:4a:cd:cf:35:8c:42:25:4a:57:a0: 10:20:4b:2e:27:76:7f:f4:2b:40:a5:56:35:9d:66:8c:23:76: 45:82:91:0f:a6:df:fa:25:ea:06:62:f5:5e:70:59:24:05:dd: bd:29:34:34:0a:ac:c1:2f:e5:14:7c:16:ea:b2:bc:6d:ad:89: e2:dd:1a:bd:79:80:e8:16:f0:38:60:e6:a1:09:63:d9:4d:f7: f2:f6:74:c3:e2:45:53:df:5e:db:f0:2e:32:37:fc:ed:d5:1c: 7e:2b:17:bb:b6:c8:89:90:2e:c8:e8:67:7d:73:d6:f1:d5:ed: c2:7c:b1:de:84:99:d9:b8:13:91:f8:3d:68:a6:d6:b2:c6:8a: 23:ab:1e:55:4f:ad:8e:77:4b:9c:da:28:de:b7:9c:28:7d:04: 02:45:ee:33:5a:1e:3b:4c:d9:11:49:29:35:7f:f4:9b:6d:cc: ba:03:ec:e8:8f:c7:75:49:7d:26:0e:e7:f5:e4:56:21:60:25: f9:63:d1:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYmVIg9rg8TnD1waeN6CvZeJtGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA5MjIwNTI4MjBaFw0yNjA5MjMwODU3MjBaMDMxMTAvBgNV BAMTKDUwMkIyNDlERjdCMjlBMjY3MDA4QkFGMDVGMTYzREY1RTM2QUVGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1R9iIYsdKxRriiN5t+BT0OiX 26wnMxXdH8wkNpN3CkrLZiKj5itDVqYSB95epN9RWl1U8rvjufZFBtPDDIeJnXJL mZNuNgk7VNhhpdRI9RxFVCBsAXnGzQz+DuqszsFBqDNZuEIIR9fw/1t65GavWJS1 joUfHVDegnkUD3E91p6VL/H6sTf+NXeKryE2SaBKQSC0W2g+OXkGXRMv1G6XzVfk HPw+ICpFplvWeEo2y6VaD6OFSY3zFemf/6Y1y9D03J5myx12K3ywRmm72dumdrDV rZXd07ozt8B73HxWABjEbgbg9Tej9b1cTUfdoAJIET4ueyf0t0HuWkijWGE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUCsknfeymiZwCLrwXxY99eNq7w4wHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNL8ezEvIZvTxCxbbXsgJS/AmSjJ9rVusKE urYsxVjxanHe+q2mnRi+8mFEbS3qibUurrFdQzUTvvgLcXuUSs3PNYxCJUpXoBAg Sy4ndn/0K0ClVjWdZowjdkWCkQ+m3/ol6gZi9V5wWSQF3b0pNDQKrMEv5RR8Fuqy vG2tieLdGr15gOgW8Dhg5qEJY9lN9/L2dMPiRVPfXtvwLjI3/O3VHH4rF7u2yImQ LsjoZ31z1vHV7cJ8sd6Emdm4E5H4PWim1rLGiiOrHlVPrY53S5zaKN63nCh9BAJF 7jNaHjtM2RFJKTV/9JttzLoD7OiPx3VJfSYO5/XkViFgJflj0YA= -----END CERTIFICATE-----Generated at Tue Sep 22 16:46:20 2026 by rpki-client