$ rpki-client -vvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft File: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft (raw, json) Hash identifier: Di1klh49a+QdhPuyKh0T3f6qrOa0w8PnvQZUB8tszz8= Subject key identifier: E6:F2:3C:47:8D:9D:CF:69:A7:99:71:67:97:44:C3:7B:E9:2B:52:85 Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 Certificate issuer: /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Certificate serial: 1955F8A71976EA98C8FE17698D6D123E767C4BEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:42:18 +0000 Manifest this update: Fri 19 Jun 2026 17:37:18 +0000 Manifest next update: Sat 20 Jun 2026 20:53:18 +0000 Files and hashes: 1: 678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl (hash: C5AqC1ybKD/iIiTTsAz7tn6NGNj6tlFZpx2/SRcJqPY=) 2: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=) 3: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: geUkmWOBdBD6UmoAAt66qEQS/LMUuwT/GvSkrgWo58s=) 4: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: HmMWaqxZeJVKcLUeiKwOrIOt1xAtBLuHHQ9Uw6FwLAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:f8:a7:19:76:ea:98:c8:fe:17:69:8d:6d:12:3e:76:7c:4b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78 Validity Not Before: Jun 19 17:37:18 2026 GMT Not After : Jun 20 20:53:18 2026 GMT Subject: CN=E6F23C478D9DCF69A79971679744C37BE92B5285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:ec:7d:9b:02:aa:03:ae:89:71:84:19:68: 89:8f:ee:b6:53:2e:9c:0e:c7:8a:1c:4e:b1:a5:60: 5d:3d:67:b2:77:15:75:a0:93:b3:ba:56:2b:2a:8b: ef:20:98:54:6e:3d:8b:a7:2b:df:6e:bc:f8:09:07: be:8a:66:93:c0:3a:2e:d7:0b:8c:ea:1b:4d:a4:92: a6:6d:02:e9:74:c2:b2:b2:a5:3c:1c:14:77:9a:27: 3b:b6:f1:41:80:80:39:d1:0a:a1:d6:62:80:15:94: 6a:aa:8e:ad:0a:a9:0b:e5:eb:05:03:1d:fc:6a:1c: 06:25:a9:91:a7:ad:f8:c5:55:f5:f4:a6:2e:cc:d0: 95:27:54:c5:b9:33:c2:53:58:2a:7e:10:00:a5:92: ba:07:cf:74:c5:d2:5a:e5:2f:49:82:68:90:ae:77: 63:ee:9a:26:b6:2b:45:bf:9e:77:f7:b2:79:d4:74: 1d:f2:b5:55:19:86:2f:e5:82:10:90:41:3f:8d:1b: 4e:cb:2b:4c:58:df:e3:34:ed:c5:3d:8f:46:e6:6b: c9:ce:f8:a1:2c:66:34:07:c1:d1:85:f3:99:68:28: d6:e4:73:a0:22:d8:6a:ca:ac:49:d9:48:92:45:5a: b1:88:44:1a:e7:3e:f3:a3:33:6e:a8:65:77:b1:26: d7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:3C:47:8D:9D:CF:69:A7:99:71:67:97:44:C3:7B:E9:2B:52:85 X509v3 Authority Key Identifier: keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7c:b7:b9:5d:95:55:1d:5a:f9:8f:9d:56:f4:1b:3d:f4:54: 71:ac:be:2f:41:69:7f:c3:53:57:47:2e:3d:c4:89:99:04:7f: ab:fe:33:8b:0b:c8:09:16:e7:ed:c7:8b:aa:91:0e:79:3f:3c: 6b:31:ea:10:24:da:02:c1:98:21:8c:99:35:2c:c8:96:f3:40: 98:8f:0c:e0:bf:82:44:0c:15:b5:8f:a3:e5:9e:74:9c:0e:70: dc:00:93:4b:90:8e:d5:90:5c:48:03:2a:55:37:f5:68:19:70: 63:f5:a9:97:71:bc:59:39:0c:8e:93:1a:c7:40:3a:4a:67:95: 8c:d4:19:9a:11:93:fb:9c:18:f8:e8:ab:04:0d:61:cb:8b:eb: 54:f0:61:10:34:0e:a0:7f:8e:60:c7:0d:1a:0c:cc:6c:28:8e: d0:7d:1b:5f:19:63:25:c3:fa:95:8b:ff:c8:4a:c8:f4:fb:2f: 12:7a:fe:b2:50:38:82:c6:58:37:fa:ea:fc:57:95:b1:e9:ca: 0e:4d:9b:7d:dd:52:7c:b6:2a:f2:d0:e0:df:05:11:f7:73:45: d9:34:9f:dd:8b:17:9d:44:3c:d5:ec:63:e8:1e:a7:3a:71:83: 75:52:65:ae:d1:37:d3:f5:d6:cd:11:34:fa:6c:97:68:79:35: 3b:9f:c2:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVX4pxl26pjI/hdpjW0SPnZ8S+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4 MUUxMUY3ODAeFw0yNjA2MTkxNzM3MThaFw0yNjA2MjAyMDUzMThaMDMxMTAvBgNV BAMTKEU2RjIzQzQ3OEQ5RENGNjlBNzk5NzE2Nzk3NDRDMzdCRTkyQjUyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoA+x9mwKqA66JcYQZaImP7rZT LpwOx4ocTrGlYF09Z7J3FXWgk7O6Visqi+8gmFRuPYunK99uvPgJB76KZpPAOi7X C4zqG02kkqZtAul0wrKypTwcFHeaJzu28UGAgDnRCqHWYoAVlGqqjq0KqQvl6wUD HfxqHAYlqZGnrfjFVfX0pi7M0JUnVMW5M8JTWCp+EAClkroHz3TF0lrlL0mCaJCu d2Pumia2K0W/nnf3snnUdB3ytVUZhi/lghCQQT+NG07LK0xY3+M07cU9j0bma8nO +KEsZjQHwdGF85loKNbkc6Ai2GrKrEnZSJJFWrGIRBrnPvOjM26oZXexJtfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vI8R42dz2mnmXFnl0TDe+krUoUwHwYDVR0j BBgwFoAUZ43E5c3uOOkvFk4xy88d4oHhH3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI1YzdlMWQtODJlOC00MTAwLWI0MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVD REVFMzhFOTJGMTY0RTMxQ0JDRjFERTI4MUUxMUY3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzhEQzRFNUNERUUzOEU5MkYxNjRFMzFDQkNGMURFMjgxRTEx Rjc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvNjc4REM0RTVDREVFMzhFOTJGMTY0RTMxQ0JDRjFE RTI4MUUxMUY3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZ8t7ldlVUdWvmPnVb0Gz30VHGsvi9BaX/D U1dHLj3EiZkEf6v+M4sLyAkW5+3Hi6qRDnk/PGsx6hAk2gLBmCGMmTUsyJbzQJiP DOC/gkQMFbWPo+WedJwOcNwAk0uQjtWQXEgDKlU39WgZcGP1qZdxvFk5DI6TGsdA OkpnlYzUGZoRk/ucGPjoqwQNYcuL61TwYRA0DqB/jmDHDRoMzGwojtB9G18ZYyXD +pWL/8hKyPT7LxJ6/rJQOILGWDf66vxXlbHpyg5Nm33dUny2KvLQ4N8FEfdzRdk0 n92LF51EPNXsY+gepzpxg3VSZa7RN9P11s0RNPpsl2h5NTufwmE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:06 2026 by rpki-client