$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: zlrgVj3P6AyDA+AL9RS2XZe1j/gLySk8bhSy5axslok= Subject key identifier: 2C:C2:BE:0E:AF:B2:BC:AF:0D:63:EB:D0:FB:A8:20:83:92:62:BD:6B Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 39402E809C6E2BFCC99CAE57C464DF8C3985D5A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: C9 Signing time: Thu 24 Sep 2026 10:23:30 +0000 Manifest this update: Thu 24 Sep 2026 10:18:30 +0000 Manifest next update: Fri 25 Sep 2026 13:27:30 +0000 Files and hashes: 1: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 2: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: gDZ5wKKHIQqX5Rm3LVXLzEWISRT2N0lguMiTX6pYulw=) 3: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 4: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 5: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 6: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 7: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 8: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 9: 3132322e3132382e32322e302f32342d3234203d3e20313530343630.roa (hash: YwYJOrEsiDWcVSn+LtSvLPeO90hqCBR1ZCpXlYX2WzQ=) 10: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:40:2e:80:9c:6e:2b:fc:c9:9c:ae:57:c4:64:df:8c:39:85:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Sep 24 10:18:30 2026 GMT Not After : Sep 25 13:27:30 2026 GMT Subject: CN=2CC2BE0EAFB2BCAF0D63EBD0FBA820839262BD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:26:69:4b:19:d6:3a:8b:aa:90:e2:d3:dc: 2d:d4:7f:6a:6f:20:98:47:82:7b:e3:63:42:7a:9a: 35:a2:94:e5:d6:12:b8:34:d4:bd:d2:67:a0:ce:7a: d2:3a:23:2c:eb:1b:d5:d8:0d:ce:b0:a1:41:4a:4a: 57:3d:2a:65:c3:dd:31:1b:03:8b:e3:67:16:cc:fa: a4:a9:45:50:c4:aa:10:28:7c:f6:7c:aa:bc:27:2d: 9c:fa:ce:b1:ad:0a:41:94:e9:fc:ba:83:c3:e6:40: c4:64:16:85:f5:06:48:aa:04:0f:6b:a9:3e:03:87: 4c:3d:9c:b4:6e:7c:04:64:2a:ff:e2:40:ca:b8:80: fa:4f:e7:03:fb:ff:20:9f:31:b4:b3:a7:16:6a:6a: ee:e1:ec:5a:7e:d1:6e:c0:38:f4:a6:52:0b:a1:ca: 00:57:a7:7f:50:fc:b9:b2:8b:2b:42:b7:23:cc:2c: 86:11:7d:9e:69:f5:73:71:77:5e:a6:3c:fb:7c:61: 67:64:ec:24:fb:1f:d2:de:b4:27:d9:4c:3d:fb:c4: d0:38:3d:98:8d:89:be:bc:fe:e7:f2:a1:2a:c2:02: 00:55:de:9c:72:3f:3d:46:ab:2a:30:6f:78:21:46: 65:82:5a:b9:e2:49:99:86:c3:a3:db:a6:51:c6:b0: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:BE:0E:AF:B2:BC:AF:0D:63:EB:D0:FB:A8:20:83:92:62:BD:6B X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:0a:0a:2f:18:fb:95:40:2f:7c:0c:98:e7:6e:5c:0c:60:20: 0b:fa:02:9a:7b:3f:b0:71:a8:b4:6a:a7:03:90:2a:91:f9:74: 8d:40:e5:02:9c:84:af:c2:52:50:9d:e9:c0:af:7e:4f:81:b4: 33:0b:c6:20:9e:6e:a3:f7:6b:08:b3:b2:36:09:e3:7e:72:d8: 8d:2c:59:32:84:7b:a7:0d:70:f1:10:3c:ae:e8:dd:10:94:e5: 9d:55:01:6d:25:bb:c5:cc:34:0b:06:6d:b6:1a:d0:c1:bd:c2: 6c:aa:3a:40:f0:b8:ed:a5:ee:77:c9:aa:fd:6b:68:f7:37:cc: 03:ed:2f:93:ba:75:d9:15:d4:b0:f9:09:eb:b2:fb:3f:21:44: 17:a4:b8:78:0d:17:16:d0:39:55:39:e8:f2:d3:3e:5d:45:bf: e5:cc:99:ca:d3:df:12:c9:ed:53:c2:d2:59:cf:da:9c:0e:a9: db:e0:3a:4e:0b:c6:cf:18:84:75:f5:55:37:39:81:c7:c3:f6: a7:3f:60:e2:e5:b7:35:88:a9:68:11:5d:94:ab:ae:b2:02:b1: e9:d1:6c:db:ec:68:b2:02:61:59:20:8b:d7:59:fc:12:54:57: e6:18:33:63:60:68:c1:c2:8b:6c:cb:1c:32:45:76:74:94:83: c4:dc:bd:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUAugJxuK/zJnK5XxGTfjDmF1aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA5MjQxMDE4MzBaFw0yNjA5MjUxMzI3MzBaMDMxMTAvBgNV BAMTKDJDQzJCRTBFQUZCMkJDQUYwRDYzRUJEMEZCQTgyMDgzOTI2MkJENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTCZpSxnWOouqkOLT3C3Uf2pv IJhHgnvjY0J6mjWilOXWErg01L3SZ6DOetI6IyzrG9XYDc6woUFKSlc9KmXD3TEb A4vjZxbM+qSpRVDEqhAofPZ8qrwnLZz6zrGtCkGU6fy6g8PmQMRkFoX1BkiqBA9r qT4Dh0w9nLRufARkKv/iQMq4gPpP5wP7/yCfMbSzpxZqau7h7Fp+0W7AOPSmUguh ygBXp39Q/LmyiytCtyPMLIYRfZ5p9XNxd16mPPt8YWdk7CT7H9LetCfZTD37xNA4 PZiNib68/ufyoSrCAgBV3pxyPz1Gqyowb3ghRmWCWrniSZmGw6PbplHGsAWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMK+Dq+yvK8NY+vQ+6ggg5JivWswHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcKCi8Y+5VAL3wMmOduXAxgIAv6App7P7Bx qLRqpwOQKpH5dI1A5QKchK/CUlCd6cCvfk+BtDMLxiCebqP3awizsjYJ435y2I0s WTKEe6cNcPEQPK7o3RCU5Z1VAW0lu8XMNAsGbbYa0MG9wmyqOkDwuO2l7nfJqv1r aPc3zAPtL5O6ddkV1LD5Ceuy+z8hRBekuHgNFxbQOVU56PLTPl1Fv+XMmcrT3xLJ 7VPC0lnP2pwOqdvgOk4Lxs8YhHX1VTc5gcfD9qc/YOLltzWIqWgRXZSrrrICsenR bNvsaLICYVkgi9dZ/BJUV+YYM2NgaMHCi2zLHDJFdnSUg8TcvUY= -----END CERTIFICATE-----Generated at Thu Sep 24 14:34:14 2026 by rpki-client