$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: kkBNzU6YEDbD4jQWS9VzB4cHQVbXg5smxp34JHBnYmw= Subject key identifier: 3F:42:40:87:84:40:90:6C:8A:D1:E9:87:7E:71:17:11:56:B6:81:FC Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 092082411E6AF3C106833F34DD547C223F816650 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:29 +0000 Manifest this update: Tue 12 May 2026 17:32:29 +0000 Manifest next update: Wed 13 May 2026 19:53:29 +0000 Files and hashes: 1: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 2: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 3: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 4: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 5: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 6: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 7: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: N60dGbQyXIylhf3NWF3DNOTgYDWfqUqoQSDT60Lh6fc=) 8: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) 9: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 10: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 11: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 12: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 13: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 14: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 15: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:20:82:41:1e:6a:f3:c1:06:83:3f:34:dd:54:7c:22:3f:81:66:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: May 12 17:32:29 2026 GMT Not After : May 13 19:53:29 2026 GMT Subject: CN=3F4240878440906C8AD1E9877E71171156B681FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:94:b2:21:51:eb:15:7b:7d:a8:bb:91:b7:1a: 2b:22:ac:d5:72:d2:9c:3e:29:20:2f:09:19:8a:57: 59:d0:92:b2:b1:ea:58:5e:d5:0d:6f:53:f1:f5:47: a9:7e:ea:4a:1c:a4:73:18:f4:1a:30:f7:f8:8b:17: b7:ed:84:c1:94:44:d2:93:f1:db:54:1d:61:1f:02: 0a:93:5f:09:0b:5c:96:77:e7:9c:08:5e:40:fe:d6: 68:a3:52:56:ef:b2:83:d0:51:f2:c5:b8:bf:f4:d3: ae:f7:5f:cc:a6:97:e1:13:de:d9:f1:c1:17:27:1a: 10:e5:82:f7:bc:71:65:35:7e:b4:69:20:58:ed:5d: b0:6e:c9:df:e2:c4:0a:d1:aa:fd:d7:55:b8:d9:d7: 88:a9:d6:43:13:40:4a:5d:d7:ea:49:43:a6:de:d7: c6:75:39:9f:94:34:75:9f:2e:b5:a7:56:0d:ad:0b: 63:5d:39:0d:f2:98:aa:f1:0f:49:eb:be:4b:53:cb: cc:7b:8b:9d:88:49:5f:b3:5c:6c:be:0d:4b:05:de: 76:f6:79:fd:b5:05:f2:26:44:d0:ce:ab:bc:d7:d3: 27:7e:02:e0:f0:6f:41:49:c6:c0:36:39:47:d8:c3: 6e:09:e7:e2:e6:b3:47:7e:3f:55:80:c3:c6:96:25: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:42:40:87:84:40:90:6C:8A:D1:E9:87:7E:71:17:11:56:B6:81:FC X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:e7:37:e9:ad:3f:7c:a4:52:a3:34:ee:63:f7:38:bf:ba: f6:90:d4:f3:92:64:2f:ec:4a:41:3d:b6:29:14:bd:fd:0b:00: fa:0c:f4:b3:05:aa:3a:38:40:00:49:81:a3:0d:a1:9a:a8:a6: 65:88:89:ae:bc:68:6d:97:b6:e7:c2:22:a7:97:da:15:27:83: 3e:c6:b9:c3:8a:85:b3:a6:2d:b8:40:3b:61:23:dd:ef:f6:9b: de:ac:d8:e7:7d:2e:30:c4:78:53:de:a2:24:f8:d9:6d:a3:d3: 61:4e:ea:f3:af:f4:bb:fb:f0:f1:3a:40:d4:a2:75:73:af:55: e1:07:8f:76:f3:ed:2a:e3:1a:25:ec:15:d5:93:41:32:63:17: e0:7a:20:49:78:37:3d:00:bd:6c:f8:19:92:c0:1d:c4:40:c7: fb:f7:6a:e4:a3:d5:2e:41:6c:18:42:ba:23:e3:66:9c:97:3b: 6e:2f:53:e7:a3:ad:1e:25:ea:75:ab:4e:ce:d3:7e:dc:55:0d: 01:99:f8:8d:4b:e7:d7:ad:69:78:a8:77:be:4b:cc:a8:f3:d0: 93:58:22:15:51:b6:3a:7a:49:96:82:58:61:ad:5f:ad:08:e9: 0f:9a:33:b1:7f:d8:2e:df:39:45:a8:83:60:3c:82:c0:b9:e7: 09:22:4d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSCCQR5q88EGgz803VR8Ij+BZlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA1MTIxNzMyMjlaFw0yNjA1MTMxOTUzMjlaMDMxMTAvBgNV BAMTKDNGNDI0MDg3ODQ0MDkwNkM4QUQxRTk4NzdFNzExNzExNTZCNjgxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNlLIhUesVe32ou5G3GisirNVy 0pw+KSAvCRmKV1nQkrKx6lhe1Q1vU/H1R6l+6kocpHMY9Bow9/iLF7fthMGURNKT 8dtUHWEfAgqTXwkLXJZ355wIXkD+1mijUlbvsoPQUfLFuL/00673X8yml+ET3tnx wRcnGhDlgve8cWU1frRpIFjtXbBuyd/ixArRqv3XVbjZ14ip1kMTQEpd1+pJQ6be 18Z1OZ+UNHWfLrWnVg2tC2NdOQ3ymKrxD0nrvktTy8x7i52ISV+zXGy+DUsF3nb2 ef21BfImRNDOq7zX0yd+AuDwb0FJxsA2OUfYw24J5+Lms0d+P1WAw8aWJW0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0JAh4RAkGyK0emHfnEXEVa2gfwwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFo5zfprT98pFKjNO5j9zi/uvaQ1POSZC/s SkE9tikUvf0LAPoM9LMFqjo4QABJgaMNoZqopmWIia68aG2XtufCIqeX2hUngz7G ucOKhbOmLbhAO2Ej3e/2m96s2Od9LjDEeFPeoiT42W2j02FO6vOv9Lv78PE6QNSi dXOvVeEHj3bz7SrjGiXsFdWTQTJjF+B6IEl4Nz0AvWz4GZLAHcRAx/v3auSj1S5B bBhCuiPjZpyXO24vU+ejrR4l6nWrTs7TftxVDQGZ+I1L59etaXiod75LzKjz0JNY IhVRtjp6SZaCWGGtX60I6Q+aM7F/2C7fOUWog2A8gsC55wkiTTw= -----END CERTIFICATE-----Generated at Wed May 13 05:14:42 2026 by rpki-client