$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: KknIxy2cmsLSdqZ6cXfxHYVEWy4Vk2vmYIBimHBZmks= Subject key identifier: 80:CA:A5:18:B7:09:65:1F:B0:4E:71:45:F9:79:CF:AE:A9:35:BA:D3 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 3BAAC8D39B70F72E75F303860C6FF3163BC2F6DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:03:12 +0000 Manifest this update: Wed 02 Sep 2026 23:58:12 +0000 Manifest next update: Fri 04 Sep 2026 00:24:12 +0000 Files and hashes: 1: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) 2: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: Q3E3bfyKuhBOQmZ7lrIl3yZMqbhxPW41a/UmIIWmAQk=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 4: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:aa:c8:d3:9b:70:f7:2e:75:f3:03:86:0c:6f:f3:16:3b:c2:f6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Sep 2 23:58:12 2026 GMT Not After : Sep 4 00:24:12 2026 GMT Subject: CN=80CAA518B709651FB04E7145F979CFAEA935BAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:33:e5:78:54:06:c2:50:b6:11:a6:fc:a4: c5:1c:d5:15:4f:b8:bd:16:3e:10:15:bb:aa:da:0b: 7e:20:db:b4:a9:a6:b0:40:cf:74:aa:0e:0d:d0:1f: ab:14:1e:7d:55:e4:4d:d1:7e:76:44:c4:2d:13:f4: 4b:0f:9d:47:d6:1c:e1:a2:8a:21:22:94:20:a4:79: ec:4b:63:1d:6b:b5:4e:33:7d:40:5c:a7:b0:f9:0e: b3:8e:ee:53:99:1c:ac:13:8b:84:c5:c9:3d:a8:0a: dd:ee:9d:20:20:ac:20:e1:c3:bd:8e:72:78:d0:09: 43:93:b3:e4:40:a6:dd:9b:ad:b8:8a:1f:a1:17:36: 9a:04:c4:ad:96:a8:00:02:5b:20:46:98:49:53:0c: 13:64:46:9b:f1:1d:bf:7a:b9:3c:62:37:40:38:d7: c8:ef:ba:46:e0:8f:62:e6:6a:d2:da:a7:5c:f0:08: 9c:50:13:97:b6:74:c7:54:5b:1e:3b:5d:8e:88:52: 45:05:83:0c:61:77:d1:7f:10:2a:7d:65:e9:03:26: 6e:9f:46:01:b4:fc:9a:e6:b5:16:4b:f2:42:ae:b1: 14:a5:d9:f4:e9:e4:d9:8c:5a:31:62:a8:85:49:e9: 4e:45:69:af:3c:6b:c1:ba:04:1c:00:a5:ad:bc:ce: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CA:A5:18:B7:09:65:1F:B0:4E:71:45:F9:79:CF:AE:A9:35:BA:D3 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:cb:52:92:24:8f:ba:1a:60:28:83:a2:e8:c1:32:1f:9e:52: 85:b5:e5:c7:08:90:b8:ad:3f:85:f4:3a:44:ae:6a:64:80:64: 62:53:1b:56:9e:d1:bc:bd:07:c4:12:42:f2:78:3c:88:65:38: 9a:ab:45:7e:d4:65:1e:36:0a:63:0e:bc:4b:fa:8c:0c:22:b0: 20:6d:d9:2e:d8:58:df:33:95:4a:9f:24:b7:64:f6:44:5f:b8: a9:62:8a:93:85:7a:b5:06:da:b3:23:2b:de:28:b2:8f:89:11: 85:c0:f6:3f:6b:2b:9b:07:31:bb:55:97:a9:6c:8d:52:3f:f0: 7f:07:06:46:7a:44:80:31:a6:95:a0:7f:d6:b6:74:e9:f3:46: 6a:ab:6b:2b:be:8a:fa:cd:c9:8f:e9:f8:95:e3:46:9d:d3:36: 93:b2:21:6f:a1:ad:2e:71:cb:7e:5b:01:0e:8d:76:67:c0:7b: 03:a3:f2:52:50:e8:3e:12:eb:26:da:44:08:b3:ed:ec:28:a0: 6f:ec:61:69:51:11:d2:ba:35:a6:16:80:9e:f3:30:66:b2:3b: 27:27:b4:aa:10:42:c5:ca:2b:0c:ea:34:dd:44:15:71:df:6c: 95:3a:5c:d8:2f:d1:0a:80:72:9f:07:ff:86:8b:71:e3:b2:44: 77:c1:95:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6rI05tw9y518wOGDG/zFjvC9t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA5MDIyMzU4MTJaFw0yNjA5MDQwMDI0MTJaMDMxMTAvBgNV BAMTKDgwQ0FBNTE4QjcwOTY1MUZCMDRFNzE0NUY5NzlDRkFFQTkzNUJBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9TPleFQGwlC2Eab8pMUc1RVP uL0WPhAVu6raC34g27SpprBAz3SqDg3QH6sUHn1V5E3RfnZExC0T9EsPnUfWHOGi iiEilCCkeexLYx1rtU4zfUBcp7D5DrOO7lOZHKwTi4TFyT2oCt3unSAgrCDhw72O cnjQCUOTs+RApt2brbiKH6EXNpoExK2WqAACWyBGmElTDBNkRpvxHb96uTxiN0A4 18jvukbgj2LmatLap1zwCJxQE5e2dMdUWx47XY6IUkUFgwxhd9F/ECp9ZekDJm6f RgG0/JrmtRZL8kKusRSl2fTp5NmMWjFiqIVJ6U5Faa88a8G6BBwApa28zn+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgMqlGLcJZR+wTnFF+XnPrqk1utMwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbLUpIkj7oaYCiDoujBMh+eUoW15ccIkLit P4X0OkSuamSAZGJTG1ae0by9B8QSQvJ4PIhlOJqrRX7UZR42CmMOvEv6jAwisCBt 2S7YWN8zlUqfJLdk9kRfuKliipOFerUG2rMjK94oso+JEYXA9j9rK5sHMbtVl6ls jVI/8H8HBkZ6RIAxppWgf9a2dOnzRmqrayu+ivrNyY/p+JXjRp3TNpOyIW+hrS5x y35bAQ6NdmfAewOj8lJQ6D4S6ybaRAiz7ewooG/sYWlREdK6NaYWgJ7zMGayOycn tKoQQsXKKwzqNN1EFXHfbJU6XNgv0QqAcp8H/4aLceOyRHfBlXM= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:50 2026 by rpki-client