$ rpki-client -vvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: it2l1/g5LrmvZU6CZZOh8Lpp8sCvz5W3fA21sGRBkEA= Subject key identifier: 4C:CF:92:88:B6:5C:05:7D:1B:1D:30:79:F5:62:4E:E5:BE:AA:D6:A8 Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 18E343FE18B656A84751A316F130DB0F32DC206E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: 0D Signing time: Tue 12 May 2026 03:06:58 +0000 Manifest this update: Tue 12 May 2026 03:01:58 +0000 Manifest next update: Wed 13 May 2026 06:06:58 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: yOr3hZfqtKzhIIer4qdtPoi86rYMwzUowKGLytxOk8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e3:43:fe:18:b6:56:a8:47:51:a3:16:f1:30:db:0f:32:dc:20:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: May 12 03:01:58 2026 GMT Not After : May 13 06:06:58 2026 GMT Subject: CN=4CCF9288B65C057D1B1D3079F5624EE5BEAAD6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:64:30:95:85:92:34:48:3f:31:0b:9a:ca: 7a:49:02:d1:bb:3d:f0:04:ef:ad:8d:84:72:40:2a: f8:98:9e:95:52:7c:07:8d:c2:ee:4c:2e:6b:63:49: ea:19:f2:8b:ac:cf:7a:a1:4c:da:cc:27:da:77:1d: 79:8b:50:f3:16:2d:d4:55:81:26:d0:92:cf:4b:74: c3:d5:1d:e8:58:27:c3:f5:de:9b:9c:0e:60:3b:fd: c0:a9:62:4e:d6:c0:83:e7:1b:7c:ac:bc:46:04:97: f1:8c:bc:26:92:da:f4:7d:87:27:7e:90:22:ab:23: 67:66:ab:d7:0a:46:51:de:76:e3:e2:04:c9:ae:0c: 3f:6d:c2:01:6e:1e:94:80:68:ae:de:c8:26:c3:63: b1:4a:30:81:e8:23:e5:a4:04:39:56:19:29:3a:20: 19:c1:4c:6b:f4:17:d1:3f:76:01:0b:34:f5:7a:b5: 99:6d:f0:cd:3e:fe:a9:29:00:9a:12:90:13:28:2e: f4:8e:30:5e:30:b1:eb:ae:1e:32:84:7b:7a:03:33: 43:1f:2a:dc:35:b5:1d:36:c8:f7:5a:08:ae:47:f4: dd:3d:8f:fe:61:fc:30:14:53:ae:7b:5a:6c:0e:fd: 68:9d:8e:3e:5f:ad:66:f3:87:5a:1e:5a:a4:cd:ce: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CF:92:88:B6:5C:05:7D:1B:1D:30:79:F5:62:4E:E5:BE:AA:D6:A8 X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d3:9e:f0:21:49:3a:83:77:96:8f:f2:2f:33:62:c6:7a:02: 1a:8b:54:6d:48:f7:3f:7d:ac:46:df:82:f6:5d:e3:3b:d1:41: 55:dc:95:57:25:dc:85:2b:03:25:0e:58:c2:bd:03:3b:67:5b: 3d:57:7b:54:fb:41:50:2b:79:3b:ba:06:28:a9:b5:dd:7a:0b: b1:25:71:e9:8d:c6:6a:bf:a8:f6:7a:99:c5:1f:e9:0a:1d:db: 07:ff:75:7c:4a:48:19:68:e0:6e:c6:1d:f2:67:a1:3e:56:e3: ef:95:b6:7b:2c:19:b2:ea:fa:5f:0f:08:84:65:34:56:12:d9: 2f:dc:e7:14:a5:63:3e:b5:ec:72:ef:15:ee:6f:09:a3:21:0e: c7:d4:96:4c:98:51:c6:ef:bb:e1:18:d9:fc:f3:e9:bc:cd:9b: 95:6b:1b:1a:56:e2:e3:0e:24:c0:5c:ac:78:08:46:e3:e1:26: a8:40:22:46:8f:c2:c9:82:59:3d:5e:54:66:dd:74:7f:8a:30: a1:37:c5:3e:3a:ea:c0:90:4c:4c:31:d2:a1:1f:dd:2e:c6:f9: 5d:5f:2f:5a:4f:bf:d8:43:67:7f:2b:20:46:d4:57:8e:b5:ad: 35:fb:25:db:d9:e9:aa:3b:85:6a:36:d9:ed:32:35:1b:22:38: 65:ba:bd:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOND/hi2VqhHUaMW8TDbDzLcIG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA1MTIwMzAxNThaFw0yNjA1MTMwNjA2NThaMDMxMTAvBgNV BAMTKDRDQ0Y5Mjg4QjY1QzA1N0QxQjFEMzA3OUY1NjI0RUU1QkVBQUQ2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbWQwlYWSNEg/MQuaynpJAtG7 PfAE762NhHJAKviYnpVSfAeNwu5MLmtjSeoZ8ousz3qhTNrMJ9p3HXmLUPMWLdRV gSbQks9LdMPVHehYJ8P13pucDmA7/cCpYk7WwIPnG3ysvEYEl/GMvCaS2vR9hyd+ kCKrI2dmq9cKRlHeduPiBMmuDD9twgFuHpSAaK7eyCbDY7FKMIHoI+WkBDlWGSk6 IBnBTGv0F9E/dgELNPV6tZlt8M0+/qkpAJoSkBMoLvSOMF4wseuuHjKEe3oDM0Mf Ktw1tR02yPdaCK5H9N09j/5h/DAUU657WmwO/Widjj5frWbzh1oeWqTNzhLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTM+SiLZcBX0bHTB59WJO5b6q1qgwHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfTnvAhSTqDd5aP8i8zYsZ6AhqLVG1I9z99 rEbfgvZd4zvRQVXclVcl3IUrAyUOWMK9AztnWz1Xe1T7QVAreTu6Biiptd16C7El cemNxmq/qPZ6mcUf6Qod2wf/dXxKSBlo4G7GHfJnoT5W4++VtnssGbLq+l8PCIRl NFYS2S/c5xSlYz617HLvFe5vCaMhDsfUlkyYUcbvu+EY2fzz6bzNm5VrGxpW4uMO JMBcrHgIRuPhJqhAIkaPwsmCWT1eVGbddH+KMKE3xT466sCQTEwx0qEf3S7G+V1f L1pPv9hDZ38rIEbUV461rTX7JdvZ6ao7hWo22e0yNRsiOGW6vYc= -----END CERTIFICATE-----Generated at Tue May 12 22:12:58 2026 by rpki-client