$ rpki-client -vvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: xEyNEqnZniHjs35jhGeCDVbGVFHndNPwAiIU0cLpslI= Subject key identifier: F4:AC:11:DD:4F:A7:03:6E:86:09:A0:BF:DC:F0:4C:11:E9:8F:6B:7E Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 01554226886B3DB7F9A96CC93FBF69D09B6DD4A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:04:53 +0000 Manifest this update: Thu 23 Jul 2026 11:59:53 +0000 Manifest next update: Fri 24 Jul 2026 13:38:53 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: v9SZfBZBN1nehgmUAA4VPn0imZ89bz56t1Etxr+lclQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:55:42:26:88:6b:3d:b7:f9:a9:6c:c9:3f:bf:69:d0:9b:6d:d4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: Jul 23 11:59:53 2026 GMT Not After : Jul 24 13:38:53 2026 GMT Subject: CN=F4AC11DD4FA7036E8609A0BFDCF04C11E98F6B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:4d:c5:ee:b7:cb:99:50:72:41:20:50:2a: d5:ea:ae:ba:19:8b:7c:8c:5f:ca:e9:e5:0f:90:1f: 86:68:d8:99:06:dc:bd:8b:98:a8:46:9b:3e:1b:63: be:55:f4:46:77:d3:9a:75:2a:43:16:1b:c0:2d:93: 7f:ba:c8:48:d1:c0:d6:21:51:e4:55:33:bb:97:1d: e3:48:2f:10:3f:97:d8:73:47:1b:36:11:a6:64:a3: 37:b1:dd:89:0c:7e:88:59:90:56:03:b0:6c:c4:0a: 76:11:2c:a3:c6:e1:3a:4a:d8:79:17:a2:d0:63:97: bf:7e:47:ac:9a:dd:0b:b8:6c:cc:0c:29:27:d5:e1: bb:f3:5f:07:69:c7:85:9e:2a:75:40:0d:d9:02:f2: e6:be:5c:ef:26:cd:2b:87:48:7f:4b:b6:e8:fe:ff: 4c:1a:bb:50:0a:98:53:47:c7:97:93:17:56:fc:24: 55:a4:a0:3c:ca:20:16:da:3e:b6:20:70:5e:3f:30: 1f:6c:7d:1b:b1:39:14:03:a2:a9:f1:51:d0:c6:77: af:10:17:23:da:03:5b:fa:a3:f4:04:ca:c5:e0:e6: 16:58:1b:2e:dd:a6:8c:0e:f2:50:b5:09:f3:f5:21: 11:97:8e:cd:e9:ab:85:36:f6:85:83:ea:9b:7d:7b: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:11:DD:4F:A7:03:6E:86:09:A0:BF:DC:F0:4C:11:E9:8F:6B:7E X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4e:74:45:1a:e8:87:85:1f:9b:7f:bd:ed:8a:b9:23:58:fe: 6c:00:82:9e:b6:99:df:ba:7f:22:ab:be:84:fa:b0:f0:30:59: 16:1d:c6:c1:26:68:22:c4:9d:5b:0a:47:fb:83:09:35:db:43: c5:4e:ac:2e:4b:ad:79:60:c4:1b:dd:b1:68:99:81:ad:97:ef: a7:6b:ec:1f:2c:89:af:90:75:3e:51:09:ca:c1:3d:05:2b:3c: 81:54:74:32:79:11:aa:9d:2d:ae:af:94:65:c4:e6:ae:0e:61: b3:fc:c8:2b:8b:bb:5b:36:7b:65:41:46:b9:2e:b3:93:61:bb: 65:ea:55:9f:95:99:6c:53:4b:97:c9:e2:45:3e:8a:cb:82:a3: 36:a2:b6:a8:a1:46:43:b9:95:1f:68:bd:62:d8:f9:29:1a:56: 91:79:4f:86:7c:0a:f7:c7:b9:a9:85:f2:eb:e2:49:72:c0:70: 6a:16:24:c6:85:63:60:68:41:cc:29:d7:a7:f3:a7:a2:9c:7e: 01:03:12:65:c6:12:0c:09:ee:bf:d4:ec:4e:b1:3c:59:d0:2c: 25:43:18:1e:af:09:bf:3d:b4:55:7f:88:23:4f:c8:15:a6:d6: 78:8e:50:b0:ab:e7:a0:ac:6f:5e:91:0c:de:24:4a:b0:08:83: 14:d2:f5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVVCJohrPbf5qWzJP79p0Jtt1KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA3MjMxMTU5NTNaFw0yNjA3MjQxMzM4NTNaMDMxMTAvBgNV BAMTKEY0QUMxMURENEZBNzAzNkU4NjA5QTBCRkRDRjA0QzExRTk4RjZCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpp03F7rfLmVByQSBQKtXqrroZ i3yMX8rp5Q+QH4Zo2JkG3L2LmKhGmz4bY75V9EZ305p1KkMWG8Atk3+6yEjRwNYh UeRVM7uXHeNILxA/l9hzRxs2EaZkozex3YkMfohZkFYDsGzECnYRLKPG4TpK2HkX otBjl79+R6ya3Qu4bMwMKSfV4bvzXwdpx4WeKnVADdkC8ua+XO8mzSuHSH9Ltuj+ /0wau1AKmFNHx5eTF1b8JFWkoDzKIBbaPrYgcF4/MB9sfRuxORQDoqnxUdDGd68Q FyPaA1v6o/QEysXg5hZYGy7dpowO8lC1CfP1IRGXjs3pq4U29oWD6pt9ez85AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9KwR3U+nA26GCaC/3PBMEemPa34wHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpOdEUa6IeFH5t/ve2KuSNY/mwAgp62md+6 fyKrvoT6sPAwWRYdxsEmaCLEnVsKR/uDCTXbQ8VOrC5LrXlgxBvdsWiZga2X76dr 7B8sia+QdT5RCcrBPQUrPIFUdDJ5EaqdLa6vlGXE5q4OYbP8yCuLu1s2e2VBRrku s5Nhu2XqVZ+VmWxTS5fJ4kU+isuCozaitqihRkO5lR9ovWLY+SkaVpF5T4Z8CvfH uamF8uviSXLAcGoWJMaFY2BoQcwp16fzp6KcfgEDEmXGEgwJ7r/U7E6xPFnQLCVD GB6vCb89tFV/iCNPyBWm1niOULCr56Csb16RDN4kSrAIgxTS9Zk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:20 2026 by rpki-client