$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: GGRqYg8pEzbkBuX6dwT0rqfhc4OsmTz/iS6F5VYKbYw= Subject key identifier: 2A:7C:8C:53:91:04:7B:95:42:98:AC:CD:23:12:DE:94:0C:3B:64:25 Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 40B89A39BAB974DDC9DDB70694F17CE55F3E5269 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 22:39:01 +0000 Manifest this update: Wed 23 Sep 2026 22:34:01 +0000 Manifest next update: Thu 24 Sep 2026 22:57:01 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: ZVh/GkgcbAPte4cIDZpYMe8VxCrFGuDl+1attuVoUJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b8:9a:39:ba:b9:74:dd:c9:dd:b7:06:94:f1:7c:e5:5f:3e:52:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: Sep 23 22:34:01 2026 GMT Not After : Sep 24 22:57:01 2026 GMT Subject: CN=2A7C8C5391047B954298ACCD2312DE940C3B6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:2f:82:39:18:7d:c9:57:5b:65:95:b4:be: 2b:85:b4:2b:b1:db:36:e9:9e:7d:c1:08:6c:33:fa: df:81:90:80:08:95:f5:2c:81:71:83:07:4f:52:4e: 33:a7:6b:89:0c:ae:6f:43:78:58:cd:ec:5f:85:15: 97:6f:18:a5:89:0b:f2:2f:38:a1:1b:61:ae:c4:07: a7:2f:2b:84:1f:23:4f:9e:35:19:c7:e0:bc:37:92: 75:be:08:d7:87:b6:61:b6:26:fe:5c:7e:73:94:e5: c8:48:c4:67:75:ce:e6:d7:29:7a:40:97:b1:ec:54: f5:2a:ed:63:9d:78:8c:6e:bd:a0:1e:0b:86:8a:53: 35:83:3f:c0:78:08:94:c8:3a:cd:34:7a:17:7c:cf: 48:31:5a:9e:62:c8:7e:ad:c5:98:0e:4d:58:13:b0: b3:a1:e9:76:30:16:c6:94:75:51:e4:14:73:9d:03: c9:24:e3:48:85:b2:62:69:f9:5c:07:29:70:a7:f3: c7:18:5d:f8:65:71:0f:10:6d:ee:42:82:d4:9a:13: e2:b3:35:bd:c1:09:c2:26:24:25:4c:19:cf:40:be: f9:f2:d1:95:9e:a3:ee:d1:d4:7f:c3:0e:0d:ac:22: 08:a6:a9:d2:6e:2a:3e:ee:92:c9:8f:ed:7e:0e:dd: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7C:8C:53:91:04:7B:95:42:98:AC:CD:23:12:DE:94:0C:3B:64:25 X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9e:7f:9a:2f:6d:7c:65:96:61:cf:f9:b5:17:12:43:49:b8: c7:cc:2d:50:62:5e:93:7b:b3:47:10:e1:a9:b2:95:1b:83:1d: 95:29:99:9e:58:e8:59:d3:23:5a:3c:56:ab:ba:da:e9:ef:21: e2:78:86:ae:8d:fa:58:de:40:37:a8:df:09:f8:86:35:0a:71: 17:3b:ad:6a:28:3d:c5:4f:51:3f:70:8b:47:f7:ea:d2:a2:86: 80:06:ba:86:a4:93:a5:2f:ab:60:1f:62:07:a5:e5:8f:94:be: 1c:f8:8b:55:61:0b:8d:14:a7:ee:89:9e:f6:ac:1a:76:5f:f8: 72:39:f8:0f:c5:1f:da:62:91:c6:d6:95:d9:43:a9:d8:f7:bd: 69:75:9c:f5:3c:12:95:ea:db:40:cd:83:2f:0c:2f:eb:25:dd: e5:58:e9:dc:18:24:89:66:0b:e1:4b:86:07:c9:65:c4:e1:43: d6:1b:0d:2d:86:fc:ec:7e:48:ec:42:48:0b:ca:5b:a8:7d:21: 1b:1b:7a:c5:4f:94:9b:a4:34:72:38:18:a5:71:d3:25:90:48: ac:82:b5:75:87:f7:3a:06:2d:d2:69:75:7b:cd:2b:f1:59:51: 1e:d2:bc:ef:c2:70:e7:6e:6e:5c:f2:78:12:60:f5:4f:03:b3: a6:1a:50:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLiaObq5dN3J3bcGlPF85V8+UmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA5MjMyMjM0MDFaFw0yNjA5MjQyMjU3MDFaMDMxMTAvBgNV BAMTKDJBN0M4QzUzOTEwNDdCOTU0Mjk4QUNDRDIzMTJERTk0MEMzQjY0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshC+CORh9yVdbZZW0viuFtCux 2zbpnn3BCGwz+t+BkIAIlfUsgXGDB09STjOna4kMrm9DeFjN7F+FFZdvGKWJC/Iv OKEbYa7EB6cvK4QfI0+eNRnH4Lw3knW+CNeHtmG2Jv5cfnOU5chIxGd1zubXKXpA l7HsVPUq7WOdeIxuvaAeC4aKUzWDP8B4CJTIOs00ehd8z0gxWp5iyH6txZgOTVgT sLOh6XYwFsaUdVHkFHOdA8kk40iFsmJp+VwHKXCn88cYXfhlcQ8Qbe5CgtSaE+Kz Nb3BCcImJCVMGc9Avvny0ZWeo+7R1H/DDg2sIgimqdJuKj7uksmP7X4O3T3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnyMU5EEe5VCmKzNIxLelAw7ZCUwHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuef5ovbXxllmHP+bUXEkNJuMfMLVBiXpN7 s0cQ4amylRuDHZUpmZ5Y6FnTI1o8Vqu62unvIeJ4hq6N+ljeQDeo3wn4hjUKcRc7 rWooPcVPUT9wi0f36tKihoAGuoakk6Uvq2AfYgel5Y+Uvhz4i1VhC40Up+6Jnvas GnZf+HI5+A/FH9pikcbWldlDqdj3vWl1nPU8EpXq20DNgy8ML+sl3eVY6dwYJIlm C+FLhgfJZcThQ9YbDS2G/Ox+SOxCSAvKW6h9IRsbesVPlJukNHI4GKVx0yWQSKyC tXWH9zoGLdJpdXvNK/FZUR7SvO/CcOdublzyeBJg9U8Ds6YaUP0= -----END CERTIFICATE-----Generated at Thu Sep 24 08:35:50 2026 by rpki-client