$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft File: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft (raw, json) Hash identifier: Kfg6WvyLN2RNdtDlzIPCQOcqLZMTyHC78Ev/wJeEK74= Subject key identifier: 36:41:A9:E4:CD:8E:88:68:DA:F7:3E:AD:B8:62:C2:F7:0E:16:DD:56 Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Certificate serial: 3FE92C7640AD18C725754AD0BAC3476928553A59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:18:37 +0000 Manifest this update: Thu 23 Jul 2026 15:13:37 +0000 Manifest next update: Fri 24 Jul 2026 16:07:37 +0000 Files and hashes: 1: 3132322e3132382e31362e302f32312d3231203d3e203436303435.roa (hash: QjIsYLAQdXRD6h2SZxXBE1ZfdVE4XjnDSV8HWQWoECg=) 2: 3132322e3132382e31382e302f32342d3234203d3e203436303435.roa (hash: gwwfNJ3TqgMMt80Y8lGgjD5cKLvhjKTSdlvsB5BPRvM=) 3: 3132322e3132382e31372e302f32342d3234203d3e203436303435.roa (hash: f4Rl+nEgaWKSfHvI6SarQnjAj9HfH/JElIfFiaKpdS0=) 4: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (hash: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=) 5: 3132322e3132382e32332e302f32342d3234203d3e203436303435.roa (hash: KEJHq843nvxE3v+1uF2PUpxNf5dPeN2bB+G+EF1vi9s=) 6: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (hash: XU6dF5kwf5bWTJ1/a8IF9/Fb9ws8DLxf9mFKHwzpv/s=) 7: 3132322e3132382e32312e302f32342d3234203d3e20323632393239.roa (hash: jgtxGKm3LP85gwx19iWA4QGiKmWy0ishwiJxJ2igqrE=) 8: 3132322e3132382e31392e302f32342d3234203d3e203436303435.roa (hash: f90muGwEvtJshM8UMxgg/nx9xD7G/jpJOwdYaZZH2XQ=) 9: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (hash: OBUrmS2no0yMHmoVDSN7g30tMnwj1huZn97XU2ZYw1k=) 10: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (hash: 0/QfoiXNfL7+6Rn9uHai+/eg6bnR/TAMxEM4trzBDyY=) 11: 3132322e3132382e32312e302f32342d3234203d3e203531323032.roa (hash: qBUfAntsq3Gd1hTTTeKJeQxEEitXpMPHd1jbETTGZrw=) 12: 3132322e3132382e32312e302f32342d3234203d3e203436303435.roa (hash: gPkV1b2SmorRDQ1yqKufZI+SOzHwtp71j+eQg1Bwiak=) 13: 684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl (hash: +U7+SnMHgj4l9L5TbWufB6JsjgVhf7Pb5PIm8ifeeYA=) 14: 3132322e3132382e31362e302f32342d3234203d3e203531323032.roa (hash: Bv30QUp2YXB4ZkzrwlFua6Ycz6SNktruBYqYMaGWd0g=) 15: 3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (hash: sGqaucoiUMSpvJe6Y7d7aRIvCySU6Gl0kNce7gLs15k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e9:2c:76:40:ad:18:c7:25:75:4a:d0:ba:c3:47:69:28:55:3a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5 Validity Not Before: Jul 23 15:13:37 2026 GMT Not After : Jul 24 16:07:37 2026 GMT Subject: CN=3641A9E4CD8E8868DAF73EADB862C2F70E16DD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bc:52:0d:0a:55:89:50:26:8c:52:0c:33:e5: a1:9d:77:a4:3b:ca:05:94:53:a2:9b:64:b7:e4:cb: ff:73:b6:c5:d3:05:47:50:08:91:89:fd:d7:75:a4: e1:4f:91:02:75:36:2f:3e:98:6a:d2:25:4f:a2:87: 9e:07:ed:cf:54:87:5b:9e:87:42:32:c6:af:91:ce: e7:45:2f:db:9d:e7:90:85:bc:cf:78:b7:10:4b:b0: b6:6e:2d:c8:9c:8b:09:d4:64:cc:4a:0d:71:85:ee: 0c:0f:35:a0:f5:0a:dd:a4:3e:e1:1b:6c:40:22:5c: 51:ac:73:72:f2:ae:fe:14:24:2f:c1:e4:ef:a1:33: 14:8d:99:59:b3:df:b7:1c:15:e9:24:9b:f3:00:de: 87:f9:59:e1:2e:74:19:20:a4:cd:ba:ca:3e:6e:a5: 84:77:63:c7:00:04:7e:88:49:2d:e3:26:64:53:2a: b3:76:03:26:2d:74:a7:57:f9:b4:13:53:8f:45:a7: 11:35:c5:42:6f:98:e6:74:e6:35:d9:36:65:58:41: 14:cd:c0:eb:6b:b8:98:78:c1:16:51:8e:9c:75:77: dd:15:35:5e:e2:5f:36:78:b6:63:52:2d:e6:7a:cf: 12:7c:6f:e2:4d:8a:c3:40:06:ed:84:80:af:94:0f: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:A9:E4:CD:8E:88:68:DA:F7:3E:AD:B8:62:C2:F7:0E:16:DD:56 X509v3 Authority Key Identifier: keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5f:9c:17:5d:3f:d2:6c:9d:26:88:90:5d:cc:ab:75:a7:4e: 65:b2:4d:5b:df:33:9e:c7:81:92:22:26:f3:88:c2:9b:c6:a4: a6:90:45:5a:00:45:ee:52:cb:5b:eb:d2:85:9e:2c:dd:e0:4d: 71:02:82:13:f1:34:6a:23:2c:cc:91:7e:79:86:eb:c0:95:0a: bc:c7:7a:d7:c2:7c:f5:aa:af:cc:98:c7:e1:54:7d:1e:09:ef: 54:9d:ad:91:d0:79:71:87:51:70:7a:6c:36:70:7d:18:76:9b: 38:d3:99:d6:2f:a9:e8:f4:12:33:ee:86:37:08:58:e2:f8:a4: 6f:26:3b:28:cb:08:0f:08:f6:c7:40:03:72:20:b6:ac:1c:64: 39:93:e9:7a:98:c6:91:4d:7e:dc:60:c2:24:fd:e0:c5:dd:9e: 3f:da:b1:8f:49:09:80:1d:98:2d:c3:b0:c5:16:a7:e0:07:b3: 03:71:38:50:a0:01:10:5b:b5:13:35:e8:80:4b:ac:34:f5:3b: fb:aa:91:38:f4:00:fd:2a:7b:27:68:fe:95:87:24:d3:24:f7: 18:a0:1a:64:12:34:5f:15:ee:dd:9b:5b:6c:24:02:24:d3:4d: 61:ff:d8:ae:54:b3:ba:b4:be:79:74:b5:af:31:16:1b:2f:a5: 00:95:4b:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+ksdkCtGMcldUrQusNHaShVOlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG QjJFNkFBNTAeFw0yNjA3MjMxNTEzMzdaFw0yNjA3MjQxNjA3MzdaMDMxMTAvBgNV BAMTKDM2NDFBOUU0Q0Q4RTg4NjhEQUY3M0VBREI4NjJDMkY3MEUxNkRENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpvFINClWJUCaMUgwz5aGdd6Q7 ygWUU6KbZLfky/9ztsXTBUdQCJGJ/dd1pOFPkQJ1Ni8+mGrSJU+ih54H7c9Uh1ue h0Iyxq+RzudFL9ud55CFvM94txBLsLZuLciciwnUZMxKDXGF7gwPNaD1Ct2kPuEb bEAiXFGsc3Lyrv4UJC/B5O+hMxSNmVmz37ccFekkm/MA3of5WeEudBkgpM26yj5u pYR3Y8cABH6ISS3jJmRTKrN2AyYtdKdX+bQTU49FpxE1xUJvmOZ05jXZNmVYQRTN wOtruJh4wRZRjpx1d90VNV7iXzZ4tmNSLeZ6zxJ8b+JNisNABu2EgK+UD2PBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNkGp5M2OiGja9z6tuGLC9w4W3VYwHwYDVR0j BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2 NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2 QUE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg1M2YyMjgtMzdmMi00N2Q5LWI5 ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4 ODJGQjJFNkFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBfnBddP9JsnSaIkF3Mq3WnTmWyTVvfM57H gZIiJvOIwpvGpKaQRVoARe5Sy1vr0oWeLN3gTXECghPxNGojLMyRfnmG68CVCrzH etfCfPWqr8yYx+FUfR4J71SdrZHQeXGHUXB6bDZwfRh2mzjTmdYvqej0EjPuhjcI WOL4pG8mOyjLCA8I9sdAA3IgtqwcZDmT6XqYxpFNftxgwiT94MXdnj/asY9JCYAd mC3DsMUWp+AHswNxOFCgARBbtRM16IBLrDT1O/uqkTj0AP0qeydo/pWHJNMk9xig GmQSNF8V7t2bW2wkAiTTTWH/2K5Us7q0vnl0ta8xFhsvpQCVS5U= -----END CERTIFICATE-----Generated at Thu Jul 23 21:46:00 2026 by rpki-client