$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: X6hViF4Y5hGV7uS9W0kNrE1sN2MhZ06H75Jag0SC2NI= Subject key identifier: DB:6F:48:15:65:50:8F:A2:0A:AB:9A:CF:76:8A:65:78:32:17:61:D9 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 1CBD7321FB175CA9E7A0D8619F0A6177ACD4DC75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:03:02 +0000 Manifest this update: Sun 20 Sep 2026 16:58:02 +0000 Manifest next update: Mon 21 Sep 2026 19:21:02 +0000 Files and hashes: 1: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 2: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: Tl8pZs7wB0dWDaueIsWPb5lS2DJm6inVBuCe9dV0Dsk=) 3: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:73:21:fb:17:5c:a9:e7:a0:d8:61:9f:0a:61:77:ac:d4:dc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Sep 20 16:58:02 2026 GMT Not After : Sep 21 19:21:02 2026 GMT Subject: CN=DB6F481565508FA20AAB9ACF768A6578321761D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:dd:2e:c3:88:dd:5d:4d:bd:5c:ce:01:e6: 81:2d:05:e4:9f:ee:78:59:96:da:03:90:d6:00:95: 62:f7:c2:36:16:17:b4:21:aa:92:02:64:92:1d:fb: f2:2f:a1:e9:77:f3:17:58:1e:f8:78:a6:94:2a:b3: f0:da:ba:80:43:7a:9f:90:14:3f:83:9a:18:13:5b: 93:b5:94:12:b9:07:67:da:e9:41:c6:c9:2a:ca:d3: 5f:f2:22:26:a3:35:0d:b3:10:e4:c7:c5:1f:db:4c: 80:b0:fb:fd:66:88:e5:38:22:84:5b:f7:55:01:21: bd:54:6f:f2:9f:02:1c:cf:b8:5d:bb:2d:3a:a5:c7: 84:87:b1:54:70:63:c6:da:c3:5a:67:ac:99:e9:d9: d4:5f:18:15:f7:12:fc:df:ed:1a:f5:14:4a:bf:44: 07:ee:12:91:af:7b:67:0f:e2:5c:1c:cf:38:b1:2b: 4c:f8:88:ca:a1:af:26:3d:b4:27:e2:96:04:02:66: 2a:c0:3a:7d:cb:fc:0f:14:bd:88:df:b4:47:75:ff: 79:af:65:64:1f:7f:5d:98:34:50:b4:67:e1:b9:fb: 41:cb:d6:8a:2c:9d:d1:3c:32:82:84:df:7e:88:1b: 89:d0:4d:00:44:db:f5:a2:01:c6:2f:b7:13:4d:b3: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6F:48:15:65:50:8F:A2:0A:AB:9A:CF:76:8A:65:78:32:17:61:D9 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:07:be:59:90:11:f9:3e:08:d7:6d:92:a8:1b:b5:88:f8:17: f1:a2:23:53:de:df:a6:9e:bd:cb:af:ad:1e:10:cc:57:96:ae: a0:a2:95:1d:19:01:b5:f1:e7:f8:fe:e9:44:09:5e:61:a3:3b: 7f:8f:f6:c9:dc:88:8a:2e:81:1a:1f:c4:a3:77:c7:a3:b8:6f: 97:f6:1c:1f:58:cc:00:86:40:43:2b:10:36:e7:62:b7:50:f6: 18:c6:91:78:c0:6d:c3:aa:ce:75:b8:8b:3d:76:e4:3e:fb:e5: a8:8a:41:07:ae:a1:6e:e4:36:01:e1:de:78:3e:7d:98:ef:26: f5:1f:57:c9:2c:f6:93:25:da:33:17:f6:f2:bf:93:ba:61:90: f6:fc:2d:4c:a3:92:aa:46:ee:cb:45:35:a8:7a:2d:b2:cf:ba: 59:71:5f:f9:c5:16:92:d4:87:28:2c:ec:0e:68:de:d7:1b:9e: 54:2c:45:2b:66:a7:37:79:a7:af:88:d4:2f:ad:80:c5:33:a3: d8:5e:2b:7d:4b:f9:1e:19:9d:16:48:1f:11:64:7a:d0:fe:d9: 6b:d1:07:8a:50:fb:25:17:b8:6e:70:3d:20:d2:18:7b:3c:cc: 06:28:02:e3:12:71:fb:a3:6d:4f:18:81:91:59:2a:1f:07:d5: 1f:13:54:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHL1zIfsXXKnnoNhhnwphd6zU3HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA5MjAxNjU4MDJaFw0yNjA5MjExOTIxMDJaMDMxMTAvBgNV BAMTKERCNkY0ODE1NjU1MDhGQTIwQUFCOUFDRjc2OEE2NTc4MzIxNzYxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8t0uw4jdXU29XM4B5oEtBeSf 7nhZltoDkNYAlWL3wjYWF7QhqpICZJId+/Ivoel38xdYHvh4ppQqs/DauoBDep+Q FD+DmhgTW5O1lBK5B2fa6UHGySrK01/yIiajNQ2zEOTHxR/bTICw+/1miOU4IoRb 91UBIb1Ub/KfAhzPuF27LTqlx4SHsVRwY8baw1pnrJnp2dRfGBX3Evzf7Rr1FEq/ RAfuEpGve2cP4lwczzixK0z4iMqhryY9tCfilgQCZirAOn3L/A8UvYjftEd1/3mv ZWQff12YNFC0Z+G5+0HL1oosndE8MoKE336IG4nQTQBE2/WiAcYvtxNNsxZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU229IFWVQj6IKq5rPdopleDIXYdkwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYHvlmQEfk+CNdtkqgbtYj4F/GiI1Pe36ae vcuvrR4QzFeWrqCilR0ZAbXx5/j+6UQJXmGjO3+P9snciIougRofxKN3x6O4b5f2 HB9YzACGQEMrEDbnYrdQ9hjGkXjAbcOqznW4iz125D775aiKQQeuoW7kNgHh3ng+ fZjvJvUfV8ks9pMl2jMX9vK/k7phkPb8LUyjkqpG7stFNah6LbLPullxX/nFFpLU hygs7A5o3tcbnlQsRStmpzd5p6+I1C+tgMUzo9heK31L+R4ZnRZIHxFketD+2WvR B4pQ+yUXuG5wPSDSGHs8zAYoAuMScfujbU8YgZFZKh8H1R8TVKs= -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:10 2026 by rpki-client