$ rpki-client -vvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: jA41KuxtEHOPuf6tBWEQvZW3X/ddrrVTL/9IvVS2rh4= Subject key identifier: 1E:42:8D:39:3C:D9:3B:5A:17:5F:38:A1:10:20:1B:93:A7:47:CE:58 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 171D4E8FBE966C24C37FC14E5DA24A4ED74F6707 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:06 +0000 Manifest this update: Tue 12 May 2026 08:30:06 +0000 Manifest next update: Wed 13 May 2026 08:42:06 +0000 Files and hashes: 1: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: NsDS1RTQHT7DN4DTmmdp5M2hVMvXAd3t7Lpdf1CIQPk=) 2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 4: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1d:4e:8f:be:96:6c:24:c3:7f:c1:4e:5d:a2:4a:4e:d7:4f:67:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: May 12 08:30:06 2026 GMT Not After : May 13 08:42:06 2026 GMT Subject: CN=1E428D393CD93B5A175F38A110201B93A747CE58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8f:a9:13:96:63:66:c4:44:03:92:ab:8a:e3: e1:49:b2:4b:6a:3e:21:22:0b:40:ba:25:ef:7e:eb: c7:6e:6c:bf:a0:fc:43:71:70:52:94:51:72:fd:f4: ef:6f:e1:e5:b4:6c:3e:ed:c8:00:6f:64:3a:b4:a7: a0:48:16:1f:cc:9d:cc:2b:47:74:32:43:61:e0:c4: 57:3a:a2:ca:31:31:a3:73:61:09:04:03:7c:79:de: 17:b3:67:db:ab:a4:47:c6:16:58:cf:de:f1:01:a9: df:35:17:1c:1d:76:69:6a:22:c1:94:ff:a2:4a:ea: ae:7e:83:9c:68:8d:74:bb:a8:cf:03:f9:be:18:28: e3:af:a7:d1:88:00:a1:64:d9:ee:d0:4c:8a:ee:dd: 24:5f:20:b3:c9:d3:5b:be:a1:41:ce:2a:29:58:b9: c6:87:1c:50:bb:59:af:79:5a:28:11:10:62:79:4b: 93:f2:4c:d2:cb:87:c5:c5:96:e6:94:01:f0:92:05: 57:52:7a:86:85:09:65:97:82:68:f1:81:25:59:c7: 4c:58:ff:bc:ba:64:71:28:4b:23:0f:a8:82:44:cb: b5:87:78:72:9d:b3:a0:fd:46:bc:26:17:58:25:b0: ea:0a:4d:ce:0a:74:c4:25:0e:e9:35:97:7d:2d:49: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:42:8D:39:3C:D9:3B:5A:17:5F:38:A1:10:20:1B:93:A7:47:CE:58 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2a:35:81:35:28:76:b0:5b:ce:cb:fd:91:6c:c8:da:46:17: 91:a4:be:90:d9:35:d0:c7:3a:36:1e:c2:ae:c3:82:23:f8:03: 51:d1:b5:c3:9b:42:d1:75:16:71:db:42:59:18:0c:99:fa:b2: b5:8c:db:e5:d4:89:06:de:a3:16:b7:85:26:df:7d:82:db:8a: b8:90:5b:43:77:c4:2a:5c:18:50:30:22:57:e8:42:1c:41:23: 24:ce:56:2f:fd:9d:12:a7:d0:84:21:a2:c2:a9:c6:93:d3:8e: 25:63:b0:b3:49:05:83:9b:9e:19:4f:b5:fa:24:11:d7:80:b1: cf:7f:3e:3a:76:e5:a6:d4:ce:5e:ca:98:74:67:f7:e4:f5:9b: a8:48:b0:1f:8f:a0:de:e2:11:64:18:f0:b3:0c:34:4a:93:9c: 84:fa:05:a9:05:6d:d8:52:c8:cb:67:32:05:17:66:90:d4:ff: 45:0f:c2:44:7d:ea:c9:71:18:69:7a:c7:d2:c7:18:ef:c4:ef: 43:3c:a4:81:02:07:df:a9:28:fb:9b:20:8e:5a:e1:ac:ef:14: 72:01:ff:d1:bb:97:67:cb:ce:1a:c8:10:01:df:ec:77:79:40: 63:85:31:4f:b8:10:41:bb:27:63:60:43:b3:ff:00:20:14:d8: 9b:70:25:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFx1Oj76WbCTDf8FOXaJKTtdPZwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA1MTIwODMwMDZaFw0yNjA1MTMwODQyMDZaMDMxMTAvBgNV BAMTKDFFNDI4RDM5M0NEOTNCNUExNzVGMzhBMTEwMjAxQjkzQTc0N0NFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsj6kTlmNmxEQDkquK4+FJsktq PiEiC0C6Je9+68dubL+g/ENxcFKUUXL99O9v4eW0bD7tyABvZDq0p6BIFh/Mncwr R3QyQ2HgxFc6osoxMaNzYQkEA3x53hezZ9urpEfGFljP3vEBqd81FxwddmlqIsGU /6JK6q5+g5xojXS7qM8D+b4YKOOvp9GIAKFk2e7QTIru3SRfILPJ01u+oUHOKilY ucaHHFC7Wa95WigREGJ5S5PyTNLLh8XFluaUAfCSBVdSeoaFCWWXgmjxgSVZx0xY /7y6ZHEoSyMPqIJEy7WHeHKds6D9RrwmF1glsOoKTc4KdMQlDuk1l30tST4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkKNOTzZO1oXXzihECAbk6dHzlgwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAqNYE1KHawW87L/ZFsyNpGF5GkvpDZNdDH OjYewq7DgiP4A1HRtcObQtF1FnHbQlkYDJn6srWM2+XUiQbeoxa3hSbffYLbiriQ W0N3xCpcGFAwIlfoQhxBIyTOVi/9nRKn0IQhosKpxpPTjiVjsLNJBYObnhlPtfok EdeAsc9/Pjp25abUzl7KmHRn9+T1m6hIsB+PoN7iEWQY8LMMNEqTnIT6BakFbdhS yMtnMgUXZpDU/0UPwkR96slxGGl6x9LHGO/E70M8pIECB9+pKPubII5a4azvFHIB /9G7l2fLzhrIEAHf7Hd5QGOFMU+4EEG7J2NgQ7P/ACAU2JtwJWg= -----END CERTIFICATE-----Generated at Tue May 12 22:19:56 2026 by rpki-client