$ rpki-client -vvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: p8JVETWFOE7r7hVQR5D2EkkUIJkp3OcfeIXkIhTC1LM= Subject key identifier: E8:BC:E4:70:E0:4D:F9:45:E8:12:62:67:0B:77:43:43:C9:4A:BC:75 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 49E6611A6434864D10962C23B02E1C46F95BE8CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:55:37 +0000 Manifest this update: Thu 23 Jul 2026 20:50:37 +0000 Manifest next update: Fri 24 Jul 2026 21:48:37 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) 2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 4: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: krN91OpoucEqr88Lg2l0w2m+0V2ZHFtbJo3LD6/E1Ww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e6:61:1a:64:34:86:4d:10:96:2c:23:b0:2e:1c:46:f9:5b:e8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Jul 23 20:50:37 2026 GMT Not After : Jul 24 21:48:37 2026 GMT Subject: CN=E8BCE470E04DF945E81262670B774343C94ABC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:67:42:57:70:72:19:85:ff:b3:ba:d7:46:cd: 2f:cf:54:80:57:40:7f:49:cf:9c:b6:70:70:3c:b9: 56:1b:ea:9e:f7:ae:ba:44:29:1e:98:4f:42:dd:9b: 3a:27:6a:0a:24:f4:15:28:77:c7:74:ba:22:db:4f: 62:d4:c6:fc:45:1a:02:06:1a:fc:e9:ec:fa:11:8a: 41:f0:ea:4a:73:7e:f4:e6:3c:8e:1e:2d:fa:fc:63: c4:6e:3d:59:22:05:81:26:b3:19:2d:a8:ef:0d:7e: a7:76:5c:87:fc:8c:c2:45:a5:fc:a9:b0:68:d5:52: 5f:1a:aa:ff:52:92:be:93:ba:5a:d7:c4:38:69:f0: 6a:ad:eb:42:f9:81:9a:e6:bd:7d:54:24:18:db:ec: f3:e9:35:0e:d9:5d:42:b0:73:d5:dc:e2:f4:83:bb: 37:23:dd:4e:26:78:64:81:9a:8d:6e:17:4a:be:a5: 66:c7:52:d4:a0:e2:8d:1c:5f:b2:5a:53:e6:7d:2f: e1:32:5d:20:e1:ee:34:0d:bd:f3:cf:eb:47:32:0a: 8a:6c:3d:4f:2d:ec:af:c4:f3:6c:f9:ed:13:6c:53: d0:d8:ec:66:fa:74:e5:de:1f:a4:c3:20:da:5e:8c: 40:96:c9:6d:1e:37:70:3a:10:54:d9:e2:7d:d0:1c: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BC:E4:70:E0:4D:F9:45:E8:12:62:67:0B:77:43:43:C9:4A:BC:75 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9c:4a:01:66:1f:13:48:c0:ad:48:27:43:13:f1:27:cb:e4: 7d:cb:00:91:2e:60:b9:13:79:b0:8c:b5:6f:72:21:28:78:13: a2:0d:7a:df:8e:f7:c0:e0:c9:cd:bd:10:66:1d:e2:54:98:1d: dc:3e:8d:d7:8f:ee:ce:51:34:85:ec:c9:7f:45:8b:64:9c:c4: 6a:6d:74:9e:ff:05:82:0c:f9:5f:67:f8:2d:00:bd:fd:59:18: 12:92:dd:50:55:79:81:2a:6f:c4:98:f1:df:69:a5:f6:36:d9: 3d:3d:d6:be:57:2f:3d:0a:26:12:bb:b0:db:39:e4:cc:5f:8a: d3:b6:17:42:f8:f6:e3:a4:da:8a:86:84:7d:e4:f7:35:e6:ab: 97:61:51:50:d7:22:f3:e5:73:b5:05:62:5b:68:e4:5b:ae:77: a3:c8:ca:6b:2b:2c:bd:9f:c8:d5:37:d5:f0:f8:d9:3c:e7:86: bb:41:08:52:b1:e9:09:89:00:87:90:98:40:93:53:6a:fc:b7: c6:84:4d:8a:d3:ce:80:74:07:e0:d8:da:cf:d1:82:6b:a6:d1: 98:4a:97:c0:23:f0:6e:5b:98:d8:34:e6:2c:12:89:14:1d:f7: 34:e7:bb:b4:29:a7:51:19:69:8b:4e:62:97:72:e9:e3:52:0c: fd:11:86:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeZhGmQ0hk0QliwjsC4cRvlb6M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA3MjMyMDUwMzdaFw0yNjA3MjQyMTQ4MzdaMDMxMTAvBgNV BAMTKEU4QkNFNDcwRTA0REY5NDVFODEyNjI2NzBCNzc0MzQzQzk0QUJDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Z0JXcHIZhf+zutdGzS/PVIBX QH9Jz5y2cHA8uVYb6p73rrpEKR6YT0Ldmzonagok9BUod8d0uiLbT2LUxvxFGgIG Gvzp7PoRikHw6kpzfvTmPI4eLfr8Y8RuPVkiBYEmsxktqO8Nfqd2XIf8jMJFpfyp sGjVUl8aqv9Skr6TulrXxDhp8Gqt60L5gZrmvX1UJBjb7PPpNQ7ZXUKwc9Xc4vSD uzcj3U4meGSBmo1uF0q+pWbHUtSg4o0cX7JaU+Z9L+EyXSDh7jQNvfPP60cyCops PU8t7K/E82z57RNsU9DY7Gb6dOXeH6TDINpejECWyW0eN3A6EFTZ4n3QHALFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6LzkcOBN+UXoEmJnC3dDQ8lKvHUwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALycSgFmHxNIwK1IJ0MT8SfL5H3LAJEuYLkT ebCMtW9yISh4E6INet+O98Dgyc29EGYd4lSYHdw+jdeP7s5RNIXsyX9Fi2ScxGpt dJ7/BYIM+V9n+C0Avf1ZGBKS3VBVeYEqb8SY8d9ppfY22T091r5XLz0KJhK7sNs5 5MxfitO2F0L49uOk2oqGhH3k9zXmq5dhUVDXIvPlc7UFYlto5Fuud6PIymsrLL2f yNU31fD42TznhrtBCFKx6QmJAIeQmECTU2r8t8aETYrTzoB0B+DY2s/Rgmum0ZhK l8Aj8G5bmNg05iwSiRQd9zTnu7Qpp1EZaYtOYpdy6eNSDP0RhjU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:31 2026 by rpki-client