$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json) Hash identifier: sZUj1iP01tMkZsOqtvvyBeMZBINlHf+Lyc5F21pY5Ls= Subject key identifier: A7:39:0B:C4:E7:74:06:AB:BB:A7:5A:16:A5:B1:96:E6:58:59:FD:A4 Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Certificate serial: 68319861382ED024E8CF4E2EC6F13034FBF0566C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 04:11:14 +0000 Manifest this update: Wed 23 Sep 2026 04:06:14 +0000 Manifest next update: Thu 24 Sep 2026 07:39:14 +0000 Files and hashes: 1: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=) 2: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=) 3: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: LexDzc7vY2qr5myWkNm36YcvOAOQkbQpFODTprFYTBs=) 4: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=) 5: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=) 6: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=) 7: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=) 8: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=) 9: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=) 10: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=) 11: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=) 12: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=) 13: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=) 14: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=) 15: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=) 16: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=) 17: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:31:98:61:38:2e:d0:24:e8:cf:4e:2e:c6:f1:30:34:fb:f0:56:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C Validity Not Before: Sep 23 04:06:14 2026 GMT Not After : Sep 24 07:39:14 2026 GMT Subject: CN=A7390BC4E77406ABBBA75A16A5B196E65859FDA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:ee:a7:e9:f7:33:3b:42:38:ed:32:ae:7f: d3:66:aa:61:6f:cf:30:df:40:db:5c:53:aa:30:4e: 48:f2:3a:5f:64:7b:2b:95:36:20:b0:ca:ef:b6:12: b4:06:fe:cf:a4:8d:3e:77:be:7f:54:3a:a0:f9:87: b9:38:d6:93:b9:e6:98:43:e9:ed:e4:67:a0:dc:2b: df:b0:89:ae:56:cb:72:fa:83:54:5a:e6:88:4c:60: d9:58:66:7c:d2:1e:13:93:5c:76:5f:82:4b:58:44: cb:28:c4:31:d0:a7:fb:9c:c9:52:df:d5:23:d7:4a: 57:65:2b:01:c2:9a:92:9e:51:95:7d:6a:94:e7:08: 0b:df:e6:1c:2d:f5:53:b2:48:6e:87:7e:1c:f4:20: f7:25:ac:6b:4b:5d:c6:fa:c0:6c:97:71:e4:a7:c5: 93:26:cb:70:64:c0:5e:82:6c:b9:ee:e9:eb:42:cf: 5c:46:98:f5:d6:d5:28:46:85:d1:5d:bf:79:9e:4f: ec:0c:eb:af:5c:ff:cc:21:19:bc:1a:21:37:97:ae: c1:e0:77:09:50:fc:71:fc:d0:45:41:b1:97:5d:7f: cf:69:ab:a5:d3:c9:2e:37:00:7b:e3:e4:ee:f4:d3: b3:db:4b:67:ce:89:e7:7d:f8:6a:0e:be:e4:e9:58: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:39:0B:C4:E7:74:06:AB:BB:A7:5A:16:A5:B1:96:E6:58:59:FD:A4 X509v3 Authority Key Identifier: keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5b:52:97:b5:b1:92:47:ab:28:bc:b6:f2:ca:00:f7:6a:c6: 33:6a:22:25:f2:05:29:a0:4e:e5:d1:a9:19:fd:3a:8b:a6:ac: 8f:6d:db:02:58:f3:05:4a:9f:e8:7e:34:42:7f:3c:71:2d:41: b5:72:59:73:1c:07:78:d9:f0:2c:4f:91:39:39:cc:eb:76:b5: 6e:27:7b:51:0b:04:16:c8:c9:33:79:68:d7:27:3e:bf:11:2f: e6:d7:48:63:0c:fd:54:a5:5e:9b:90:74:23:ee:bf:e5:6b:8e: 10:10:e0:40:31:ba:53:92:53:f4:c1:f3:f8:8f:9c:9b:c5:82: 92:93:aa:9a:0b:e3:e4:18:55:8d:c1:a6:eb:13:80:8f:36:d1: 66:55:a8:67:97:ac:e8:b2:29:39:ac:01:fe:16:e9:80:01:dc: b2:a4:cf:5c:b3:6e:3d:f0:85:03:8c:fd:1b:d3:72:35:b9:27: 82:09:a5:ff:6c:7e:07:e7:13:4b:51:84:54:0c:78:1a:61:c7: dc:65:72:22:9f:33:1f:67:97:86:ab:ec:6c:18:50:37:5e:3c: 1e:98:8b:6f:bf:59:e8:9a:06:9e:53:ed:8b:7d:49:da:bd:47: f3:3e:e2:e7:17:73:be:2c:ff:21:dd:11:0d:b1:3a:fa:c7:66: f2:b0:08:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDGYYTgu0CToz04uxvEwNPvwVmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy RTNCMDc5QzAeFw0yNjA5MjMwNDA2MTRaFw0yNjA5MjQwNzM5MTRaMDMxMTAvBgNV BAMTKEE3MzkwQkM0RTc3NDA2QUJCQkE3NUExNkE1QjE5NkU2NTg1OUZEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7e6n6fczO0I47TKuf9NmqmFv zzDfQNtcU6owTkjyOl9keyuVNiCwyu+2ErQG/s+kjT53vn9UOqD5h7k41pO55phD 6e3kZ6DcK9+wia5Wy3L6g1Ra5ohMYNlYZnzSHhOTXHZfgktYRMsoxDHQp/ucyVLf 1SPXSldlKwHCmpKeUZV9apTnCAvf5hwt9VOySG6Hfhz0IPclrGtLXcb6wGyXceSn xZMmy3BkwF6CbLnu6etCz1xGmPXW1ShGhdFdv3meT+wM669c/8whGbwaITeXrsHg dwlQ/HH80EVBsZddf89pq6XTyS43AHvj5O7007PbS2fOied9+GoOvuTpWFvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzkLxOd0Bqu7p1oWpbGW5lhZ/aQwHwYDVR0j BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4 OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw NzlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmNGViY2QtMjljZi00ZWVjLWE5 MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVB NUYyRTNCMDc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxbUpe1sZJHqyi8tvLKAPdqxjNqIiXyBSmg TuXRqRn9OoumrI9t2wJY8wVKn+h+NEJ/PHEtQbVyWXMcB3jZ8CxPkTk5zOt2tW4n e1ELBBbIyTN5aNcnPr8RL+bXSGMM/VSlXpuQdCPuv+VrjhAQ4EAxulOSU/TB8/iP nJvFgpKTqpoL4+QYVY3BpusTgI820WZVqGeXrOiyKTmsAf4W6YAB3LKkz1yzbj3w hQOM/RvTcjW5J4IJpf9sfgfnE0tRhFQMeBphx9xlciKfMx9nl4ar7GwYUDdePB6Y i2+/WeiaBp5T7Yt9Sdq9R/M+4ucXc74s/yHdEQ2xOvrHZvKwCIk= -----END CERTIFICATE-----Generated at Wed Sep 23 23:04:24 2026 by rpki-client