$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: 0KjdfK9ULKWskEFIFCaUHdyCK9TqXkWrcxxk571Pr0A= Subject key identifier: 3E:3B:33:BA:8A:0D:D4:F9:69:7D:A8:D3:F1:95:92:BF:66:EE:A9:7C Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 30EBCC553FA20F5955BB51425B5E831DCE797F1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:46:23 +0000 Manifest this update: Sun 15 Nov 2026 05:41:23 +0000 Manifest next update: Mon 16 Nov 2026 07:26:23 +0000 Files and hashes: 1: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: m0TDyRvHCYdyNZzMb6Ywio+eDJprFmBnturenHS584c=) 2: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 3: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:eb:cc:55:3f:a2:0f:59:55:bb:51:42:5b:5e:83:1d:ce:79:7f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Nov 15 05:41:23 2026 GMT Not After : Nov 16 07:26:23 2026 GMT Subject: CN=3E3B33BA8A0DD4F9697DA8D3F19592BF66EEA97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:27:fc:b7:a7:29:fe:ec:c9:6e:83:a4:e7: bf:69:23:7f:18:5d:6b:b6:0b:d2:a5:68:7c:5c:ba: f4:cf:23:25:75:0d:81:c6:42:2e:7d:6b:8d:68:9e: 81:43:75:fa:09:32:36:3d:08:bb:7e:0d:3d:0a:c8: b3:a8:f8:e7:f8:cb:6e:a3:26:81:ad:32:64:36:a8: ae:81:59:76:05:1e:9b:3c:1d:51:a3:fc:fc:09:26: 40:36:ee:d2:d1:3b:c0:5a:e2:95:9f:e5:a2:2f:d3: 43:c2:b1:21:cb:e7:a0:73:a1:ae:89:4d:e7:a7:8a: e6:27:8e:64:87:66:12:70:b5:eb:ec:56:3c:f7:5a: 10:65:d1:45:73:8a:88:cb:4e:13:8f:05:1b:0f:2e: 71:86:52:b6:7c:b8:88:1f:42:5c:24:7a:ca:11:8e: 40:be:c9:e1:38:03:fc:84:86:fd:ed:01:bb:5b:74: 69:3b:08:62:3a:93:c9:6b:51:84:93:81:c7:90:3a: 40:51:cf:2e:0e:1c:3c:28:a0:99:d4:a4:cd:c7:3a: db:79:2a:f4:26:05:3a:f9:e3:58:7a:be:5f:45:4a: d3:c5:57:be:6a:bc:63:44:d4:b3:78:fb:48:29:c3: cf:55:e3:db:28:b6:14:79:8a:51:47:f8:9b:08:a6: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:33:BA:8A:0D:D4:F9:69:7D:A8:D3:F1:95:92:BF:66:EE:A9:7C X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:c1:08:73:5b:a5:4a:cc:dc:25:38:cb:12:90:4a:8d:27: 16:af:29:0f:fc:70:82:2c:b8:a7:3b:e0:e1:ab:3d:a7:6e:1a: ab:74:6c:0b:53:ba:34:59:ba:d2:4a:57:5b:5f:df:90:1a:ba: f1:03:09:b3:3c:92:29:e7:ce:52:9d:5b:51:45:33:eb:d3:b7: b9:ef:e1:34:96:59:4a:7d:97:07:18:49:fb:31:24:09:95:ec: d3:8d:16:39:3c:a8:20:96:a2:54:29:97:b5:3b:45:71:28:4c: 60:28:1e:e3:bf:3b:b7:ff:ec:c4:90:46:9b:51:60:a6:a8:e9: 7c:3b:3e:05:ab:f0:3a:11:31:14:19:c2:7f:b7:8f:28:0e:32: d1:93:fa:14:7f:c3:79:86:da:9a:c8:99:31:5d:af:ce:da:6e: 6b:e1:cc:da:a1:b9:33:5c:3b:3f:3c:88:9b:9a:7e:f8:41:69: 1b:9a:51:63:4a:28:5c:0d:a3:1d:74:0f:03:b5:d0:18:c8:99: 65:f0:ae:9f:7d:b1:d2:bd:ea:f1:e3:82:e0:61:92:b9:c8:6b: 1d:1b:44:3a:e9:e2:9a:37:c8:c0:72:ed:21:d1:0c:1d:10:06: 21:b7:44:67:70:c6:97:1b:2f:ec:d9:16:91:91:a3:b5:96:d4: ec:92:ff:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOvMVT+iD1lVu1FCW16DHc55fxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjExMTUwNTQxMjNaFw0yNjExMTYwNzI2MjNaMDMxMTAvBgNV BAMTKDNFM0IzM0JBOEEwREQ0Rjk2OTdEQThEM0YxOTU5MkJGNjZFRUE5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nCf8t6cp/uzJboOk579pI38Y XWu2C9KlaHxcuvTPIyV1DYHGQi59a41onoFDdfoJMjY9CLt+DT0KyLOo+Of4y26j JoGtMmQ2qK6BWXYFHps8HVGj/PwJJkA27tLRO8Ba4pWf5aIv00PCsSHL56Bzoa6J TeeniuYnjmSHZhJwtevsVjz3WhBl0UVziojLThOPBRsPLnGGUrZ8uIgfQlwkesoR jkC+yeE4A/yEhv3tAbtbdGk7CGI6k8lrUYSTgceQOkBRzy4OHDwooJnUpM3HOtt5 KvQmBTr541h6vl9FStPFV75qvGNE1LN4+0gpw89V49sothR5ilFH+JsIpm9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPjszuooN1PlpfajT8ZWSv2buqXwwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpEwQhzW6VKzNwlOMsSkEqNJxavKQ/8cIIs uKc74OGrPaduGqt0bAtTujRZutJKV1tf35AauvEDCbM8kinnzlKdW1FFM+vTt7nv 4TSWWUp9lwcYSfsxJAmV7NONFjk8qCCWolQpl7U7RXEoTGAoHuO/O7f/7MSQRptR YKao6Xw7PgWr8DoRMRQZwn+3jygOMtGT+hR/w3mG2prImTFdr87abmvhzNqhuTNc Oz88iJuafvhBaRuaUWNKKFwNox10DwO10BjImWXwrp99sdK96vHjguBhkrnIax0b RDrp4po3yMBy7SHRDB0QBiG3RGdwxpcbL+zZFpGRo7WW1OyS/18= -----END CERTIFICATE-----Generated at Sun Nov 15 11:57:06 2026 by rpki-client