$ rpki-client -vvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: 0AEZnDDQ29TG7VeZVlBEIk7Ivxx9DDbX0o6r3+6bueM= Subject key identifier: 54:B0:7B:75:19:CD:84:67:F8:EC:90:DB:26:38:7D:10:73:79:61:34 Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 2049A9853077363514E021655A44B0363F6C8CE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 06:00:07 +0000 Manifest this update: Wed 17 Jun 2026 05:55:07 +0000 Manifest next update: Thu 18 Jun 2026 09:44:07 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: 5mWuMOWFI7HDkR2JDS0buOyUNooVxhJy06vWGV6aXpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:49:a9:85:30:77:36:35:14:e0:21:65:5a:44:b0:36:3f:6c:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: Jun 17 05:55:07 2026 GMT Not After : Jun 18 09:44:07 2026 GMT Subject: CN=54B07B7519CD8467F8EC90DB26387D1073796134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:20:e6:1d:3a:a7:ca:e3:8b:12:74:a2:7d: ea:16:58:3e:56:ef:00:93:d2:10:87:60:2c:0e:57: 90:bc:f0:72:79:0d:33:97:78:97:c1:c9:81:83:9d: b8:ee:09:41:92:fc:bb:7d:2a:a9:07:fb:d8:41:53: 5f:98:70:f4:91:79:3a:68:05:2c:95:e1:9b:c2:ef: 86:50:e8:56:98:5b:6a:7a:93:5b:1a:3f:4f:38:f4: 9f:5d:58:9b:be:a6:e1:d1:d5:3f:20:36:08:88:72: 1a:6d:f2:fc:4b:37:f6:13:b9:19:68:36:df:4e:8d: 91:e9:9e:c4:0e:9b:bb:b2:3b:a9:0b:df:21:a7:da: 75:06:6b:ba:21:5d:a7:48:a0:aa:4a:38:4a:da:30: 85:14:6c:58:84:7d:d2:4e:99:14:c6:30:5e:09:96: 42:cd:e2:92:1a:aa:8a:f7:a5:a5:65:fd:60:45:4d: d8:c2:78:0e:42:95:26:88:33:97:8a:39:0c:70:e1: 02:23:3e:f4:e8:5e:2e:a9:9b:77:df:a1:7c:d5:0d: 5f:99:7b:a1:26:76:1e:37:89:51:91:24:14:24:7f: 4e:ee:c3:cd:17:48:2e:c7:eb:48:74:fc:10:6f:b3: 98:db:79:b1:8f:77:d3:c8:e6:aa:b8:4a:f4:45:e0: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B0:7B:75:19:CD:84:67:F8:EC:90:DB:26:38:7D:10:73:79:61:34 X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4d:a9:d4:93:fc:77:c9:b6:d6:c5:0b:d1:3b:2a:db:8c:21: 81:d8:a0:35:b5:69:5e:2f:bd:11:b0:c8:5e:78:2c:3f:02:07: a6:3c:36:23:3f:6b:83:02:5a:a0:34:04:1c:d0:f9:19:c4:15: 11:bd:47:85:31:42:1d:45:76:83:90:3d:a4:71:4a:5b:c4:91: 53:71:b7:2d:84:47:fd:60:9d:b2:60:96:9c:24:8d:62:d6:b4: 28:2d:53:4d:43:0b:65:f3:6d:bd:12:cb:de:c8:25:2a:d6:0b: 36:fd:ea:9a:54:5a:7e:b0:d3:f1:e4:3e:37:ed:0b:4f:49:51: 86:92:89:9c:0f:b3:42:04:d0:55:20:0d:8e:9a:80:df:65:eb: 6e:98:c7:b9:69:e5:c8:2a:12:ba:28:67:5e:7f:e7:e9:b0:35: f5:98:93:d8:f5:b1:30:72:04:f6:b7:9f:35:78:93:4c:0f:da: 31:4d:2f:6d:62:3b:ae:10:79:e4:9e:4d:9c:2a:27:af:43:8e: 6d:19:f8:2a:c9:bc:7d:bd:f7:ea:0d:7c:08:ea:da:0b:02:f2: 8a:46:6e:cd:38:3d:99:1e:fd:65:41:40:69:cd:e1:38:4f:d0: 92:3a:2d:78:47:08:75:04:26:ed:56:b7:fc:f6:bc:1b:b6:e3: a5:57:a6:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEmphTB3NjUU4CFlWkSwNj9sjOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA2MTcwNTU1MDdaFw0yNjA2MTgwOTQ0MDdaMDMxMTAvBgNV BAMTKDU0QjA3Qjc1MTlDRDg0NjdGOEVDOTBEQjI2Mzg3RDEwNzM3OTYxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9CDmHTqnyuOLEnSifeoWWD5W 7wCT0hCHYCwOV5C88HJ5DTOXeJfByYGDnbjuCUGS/Lt9KqkH+9hBU1+YcPSReTpo BSyV4ZvC74ZQ6FaYW2p6k1saP0849J9dWJu+puHR1T8gNgiIchpt8vxLN/YTuRlo Nt9OjZHpnsQOm7uyO6kL3yGn2nUGa7ohXadIoKpKOEraMIUUbFiEfdJOmRTGMF4J lkLN4pIaqor3paVl/WBFTdjCeA5ClSaIM5eKOQxw4QIjPvToXi6pm3ffoXzVDV+Z e6Emdh43iVGRJBQkf07uw80XSC7H60h0/BBvs5jbebGPd9PI5qq4SvRF4LrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLB7dRnNhGf47JDbJjh9EHN5YTQwHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhNqdST/HfJttbFC9E7KtuMIYHYoDW1aV4v vRGwyF54LD8CB6Y8NiM/a4MCWqA0BBzQ+RnEFRG9R4UxQh1FdoOQPaRxSlvEkVNx ty2ER/1gnbJglpwkjWLWtCgtU01DC2Xzbb0Sy97IJSrWCzb96ppUWn6w0/HkPjft C09JUYaSiZwPs0IE0FUgDY6agN9l626Yx7lp5cgqErooZ15/5+mwNfWYk9j1sTBy BPa3nzV4k0wP2jFNL21iO64QeeSeTZwqJ69Djm0Z+CrJvH299+oNfAjq2gsC8opG bs04PZke/WVBQGnN4ThP0JI6LXhHCHUEJu1Wt/z2vBu246VXpoQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:03 2026 by rpki-client