$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: NHnSWt9IUBKXC73NPHkpWxAv1UGlJlRIq9htBojhuvI= Subject key identifier: A1:64:A4:C0:3E:7C:CA:D9:AE:1F:72:2F:EC:C5:FA:7E:1F:92:A8:B7 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 7711DFBF9E25AE900E4D03422FDA20BD2B010F64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:13:47 +0000 Manifest this update: Wed 23 Sep 2026 14:08:47 +0000 Manifest next update: Thu 24 Sep 2026 14:21:47 +0000 Files and hashes: 1: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 2: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) 3: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: +soC1eiBeMRZJEjdOXBbfQ5I/8oQ3DCZnLh/522Aa6Q=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:11:df:bf:9e:25:ae:90:0e:4d:03:42:2f:da:20:bd:2b:01:0f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Sep 23 14:08:47 2026 GMT Not After : Sep 24 14:21:47 2026 GMT Subject: CN=A164A4C03E7CCAD9AE1F722FECC5FA7E1F92A8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:e3:ff:5f:84:b7:9a:16:a0:87:81:d7:bf: e5:31:a2:01:39:8d:b8:f5:5a:b6:e0:bf:a7:29:45: c5:ab:93:f5:be:d7:d1:2f:81:28:91:7f:62:c2:ca: 27:8f:97:56:af:3e:e8:b5:a1:2b:79:30:f1:45:37: fb:b3:2b:84:96:e2:c0:8e:65:28:92:09:1c:db:25: f1:33:9a:09:c3:bd:30:f9:4b:52:aa:ba:dc:b3:61: 09:65:d7:4a:d9:27:93:1b:db:76:87:9b:6f:0c:5a: b1:de:f1:b1:9b:45:60:cb:56:09:c8:f9:0c:a6:6b: ad:e3:a6:0d:d8:61:a7:ee:90:db:14:e5:cf:93:e7: 62:92:03:d3:df:29:b9:6b:85:54:31:b6:1c:e9:4f: d4:03:0e:06:5f:90:c7:5a:8d:88:5d:29:13:05:fe: b7:76:1a:8f:69:f8:d6:c6:48:2e:62:95:c6:61:93: 1e:2d:46:0b:9e:34:4a:55:36:cd:80:d2:51:bb:cd: bb:fc:33:14:fe:1e:2b:b4:a3:4e:c9:3f:c2:17:fe: d8:73:9d:c7:c3:13:df:07:7e:ab:03:36:35:03:59: 43:64:f6:14:ce:9a:19:cb:86:f2:49:c9:2e:bd:39: e5:a6:3b:ff:cb:75:c9:c8:14:4c:4b:85:87:d7:59: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:A4:C0:3E:7C:CA:D9:AE:1F:72:2F:EC:C5:FA:7E:1F:92:A8:B7 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:68:37:ef:a7:44:e8:17:02:fb:33:99:a6:24:ac:30:49:b0: 1a:6d:19:b9:b3:9c:b2:67:79:46:1d:bd:5d:c0:92:d5:19:a2: d2:90:f5:c1:be:16:a6:b2:c7:6f:4b:b9:5b:57:ab:11:eb:9a: e6:a3:63:12:bf:62:9f:af:1b:02:64:58:a9:c5:50:8a:6b:b0: a3:5f:6a:6e:c9:88:dc:ea:c5:90:80:db:f2:68:b4:41:44:a8: 38:7b:45:81:5b:e9:a8:af:97:2e:57:4e:b8:83:3e:5d:ff:e7: 26:6c:34:c4:73:94:cf:94:98:9b:f7:87:08:5b:8e:de:fb:db: aa:46:2b:46:e5:f1:dc:73:41:ab:cc:90:75:e4:08:90:23:ce: b2:0a:f9:88:7f:06:e2:bf:07:5d:1d:ab:c4:20:19:9d:88:fe: f7:9f:f0:80:15:be:32:c1:2c:33:f5:66:ee:2f:1d:a2:fa:1d: 30:ed:df:8c:08:54:e2:4f:df:9c:6e:92:c6:93:cf:b5:ff:f5: cc:17:14:8a:40:91:db:d1:48:56:48:a5:fd:b8:d7:f6:8c:e0: 3a:ce:6d:54:3b:75:8e:25:28:9d:84:d0:4a:79:f5:de:b2:9a: a3:8b:72:5f:de:d3:c7:06:84:7b:90:0a:14:ec:06:8d:ee:84: dc:6e:aa:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxHfv54lrpAOTQNCL9ogvSsBD2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA5MjMxNDA4NDdaFw0yNjA5MjQxNDIxNDdaMDMxMTAvBgNV BAMTKEExNjRBNEMwM0U3Q0NBRDlBRTFGNzIyRkVDQzVGQTdFMUY5MkE4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XOP/X4S3mhagh4HXv+UxogE5 jbj1Wrbgv6cpRcWrk/W+19EvgSiRf2LCyiePl1avPui1oSt5MPFFN/uzK4SW4sCO ZSiSCRzbJfEzmgnDvTD5S1KqutyzYQll10rZJ5Mb23aHm28MWrHe8bGbRWDLVgnI +Qyma63jpg3YYafukNsU5c+T52KSA9PfKblrhVQxthzpT9QDDgZfkMdajYhdKRMF /rd2Go9p+NbGSC5ilcZhkx4tRgueNEpVNs2A0lG7zbv8MxT+Hiu0o07JP8IX/thz ncfDE98HfqsDNjUDWUNk9hTOmhnLhvJJyS69OeWmO//LdcnIFExLhYfXWXpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoWSkwD58ytmuH3Iv7MX6fh+SqLcwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFoN++nROgXAvszmaYkrDBJsBptGbmznLJn eUYdvV3AktUZotKQ9cG+Fqayx29LuVtXqxHrmuajYxK/Yp+vGwJkWKnFUIprsKNf am7JiNzqxZCA2/JotEFEqDh7RYFb6aivly5XTriDPl3/5yZsNMRzlM+UmJv3hwhb jt7726pGK0bl8dxzQavMkHXkCJAjzrIK+Yh/BuK/B10dq8QgGZ2I/vef8IAVvjLB LDP1Zu4vHaL6HTDt34wIVOJP35xuksaTz7X/9cwXFIpAkdvRSFZIpf241/aM4DrO bVQ7dY4lKJ2E0Ep59d6ymqOLcl/e08cGhHuQChTsBo3uhNxuqvY= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:54 2026 by rpki-client