$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: 0wb0E6BUhZZSNl7Ae+E6CPibSnX/nIJkAPDkVACP0O0= Subject key identifier: 4D:BF:44:F0:16:6A:6F:EF:09:5E:5D:39:12:C4:6C:99:42:5D:1C:2B Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 43FB911FAEAC0A4252F2ECD9697D842F05BECBF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: BC Signing time: Mon 21 Sep 2026 01:13:00 +0000 Manifest this update: Mon 21 Sep 2026 01:08:00 +0000 Manifest next update: Tue 22 Sep 2026 02:11:00 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: RK3EbtW8Bu+A9DsjuZEKxRWKHadfmbXfpt+uGrmarnA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fb:91:1f:ae:ac:0a:42:52:f2:ec:d9:69:7d:84:2f:05:be:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: Sep 21 01:08:00 2026 GMT Not After : Sep 22 02:11:00 2026 GMT Subject: CN=4DBF44F0166A6FEF095E5D3912C46C99425D1C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:7b:82:04:d2:c1:89:5d:40:c9:3f:43:c0: 05:03:b3:ad:bc:19:57:da:7b:97:2e:97:49:73:ad: 84:f0:85:13:4a:94:d5:84:e9:58:84:a1:f2:39:c3: 77:df:6b:a5:8f:2d:eb:39:36:fd:47:54:a6:f5:9f: 94:92:0b:6f:6c:7b:6e:3c:6f:b8:35:ea:df:69:70: ef:18:13:b8:4a:a7:d5:f0:c5:f3:a9:95:70:09:fd: ca:5a:ed:82:49:35:2e:7a:99:94:ba:fe:0c:06:4c: 59:d1:44:34:18:9c:36:20:90:7e:5d:87:5d:29:e4: 14:61:dc:9e:9d:72:aa:cb:c6:6c:36:ec:50:cf:67: d4:49:be:b7:58:7d:cd:2e:42:9e:5a:3a:00:04:f6: 58:82:8b:ad:f2:2a:6d:fc:f1:4b:77:d6:e8:a4:06: e9:41:2a:9a:ed:ed:8c:3d:e4:09:5c:2e:c4:ba:f6: 69:26:02:1c:c0:73:ef:09:67:7d:5f:50:60:a6:4f: ff:48:4c:a7:8d:b1:d5:35:23:b3:a1:e6:d3:97:22: 3c:9f:f4:db:dc:f5:63:fd:99:63:85:f4:4f:e5:81: 0b:d2:23:1c:01:2e:3b:be:00:eb:2c:2f:72:52:44: 32:ae:92:76:2f:f9:fc:01:6d:e7:bc:13:a3:ee:d7: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BF:44:F0:16:6A:6F:EF:09:5E:5D:39:12:C4:6C:99:42:5D:1C:2B X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:39:6c:7a:32:56:62:58:e0:c4:7e:33:a5:c4:9b:88:2a:3b: 71:90:df:68:0d:fd:b1:37:7f:10:71:e8:ad:f9:9e:e5:6d:86: 82:79:d8:a8:c5:58:c8:82:ea:cd:a8:48:18:42:60:ce:06:94: 0e:47:0f:fd:d1:47:ed:2e:c4:d8:81:cd:c6:47:66:99:fc:55: ad:a5:54:bb:49:2a:f1:89:ad:dd:c0:38:c4:21:0a:03:72:a7: 14:7b:c8:67:4e:c6:86:3f:c4:ce:2b:8c:bc:29:c9:62:c3:a6: c5:9d:b1:d4:b1:4a:b0:ad:91:bd:7b:78:7e:d5:59:65:2d:c5: 0d:e7:6a:c4:08:70:84:28:f6:b1:33:81:ba:52:a6:a2:74:57: 14:e1:a5:bd:61:c8:a6:fc:93:38:f4:11:9f:62:72:69:c6:31: 08:f8:8e:2a:f5:50:82:28:b0:ec:d8:8b:f8:09:d7:ef:89:1e: 69:78:02:e2:39:67:8c:2b:b2:54:da:b1:d9:7f:36:f0:3d:9b: 41:41:35:81:1b:40:85:79:17:0f:5a:29:4a:52:b2:df:c6:6c: 8d:70:94:69:5e:0e:44:5e:91:7e:d7:a2:bb:8b:37:25:de:d1: 65:95:bc:1b:23:06:c1:bb:2e:dc:90:09:c3:f4:0a:56:7e:15: 3b:e7:e7:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/uRH66sCkJS8uzZaX2ELwW+y/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA5MjEwMTA4MDBaFw0yNjA5MjIwMjExMDBaMDMxMTAvBgNV BAMTKDREQkY0NEYwMTY2QTZGRUYwOTVFNUQzOTEyQzQ2Qzk5NDI1RDFDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAXuCBNLBiV1AyT9DwAUDs628 GVfae5cul0lzrYTwhRNKlNWE6ViEofI5w3ffa6WPLes5Nv1HVKb1n5SSC29se248 b7g16t9pcO8YE7hKp9XwxfOplXAJ/cpa7YJJNS56mZS6/gwGTFnRRDQYnDYgkH5d h10p5BRh3J6dcqrLxmw27FDPZ9RJvrdYfc0uQp5aOgAE9liCi63yKm388Ut31uik BulBKprt7Yw95AlcLsS69mkmAhzAc+8JZ31fUGCmT/9ITKeNsdU1I7Oh5tOXIjyf 9Nvc9WP9mWOF9E/lgQvSIxwBLju+AOssL3JSRDKuknYv+fwBbee8E6Pu1+vHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTb9E8BZqb+8JXl05EsRsmUJdHCswHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ5bHoyVmJY4MR+M6XEm4gqO3GQ32gN/bE3 fxBx6K35nuVthoJ52KjFWMiC6s2oSBhCYM4GlA5HD/3RR+0uxNiBzcZHZpn8Va2l VLtJKvGJrd3AOMQhCgNypxR7yGdOxoY/xM4rjLwpyWLDpsWdsdSxSrCtkb17eH7V WWUtxQ3nasQIcIQo9rEzgbpSpqJ0VxThpb1hyKb8kzj0EZ9icmnGMQj4jir1UIIo sOzYi/gJ1++JHml4AuI5Z4wrslTasdl/NvA9m0FBNYEbQIV5Fw9aKUpSst/GbI1w lGleDkRekX7XoruLNyXe0WWVvBsjBsG7LtyQCcP0ClZ+FTvn54c= -----END CERTIFICATE-----Generated at Mon Sep 21 17:50:48 2026 by rpki-client