$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft File: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft (raw, json) Hash identifier: PqL6n8Tn1I+9MLVMQDnXRDRwVtFHXiFWb9ft+ynKjhU= Subject key identifier: 82:51:A3:AE:F5:38:1D:28:AA:E1:E3:99:2D:11:11:A2:80:45:77:7D Authority key identifier: 76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 Certificate issuer: /CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Certificate serial: 554123AF934F33E278601CF02C45D348F2E308AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 07:43:02 +0000 Manifest this update: Thu 17 Sep 2026 07:38:02 +0000 Manifest next update: Fri 18 Sep 2026 10:03:02 +0000 Files and hashes: 1: 7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl (hash: wkze3TlaFqO76HEAlJVIszs5TcgS+kU4Xq+NsBXu/ts=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:41:23:af:93:4f:33:e2:78:60:1c:f0:2c:45:d3:48:f2:e3:08:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678F0FD2458E3AA0E5D099E28C0594A8D8552D2 Validity Not Before: Sep 17 07:38:02 2026 GMT Not After : Sep 18 10:03:02 2026 GMT Subject: CN=8251A3AEF5381D28AAE1E3992D1111A28045777D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:37:a2:36:0f:ae:3a:5c:71:28:94:7e:69: be:00:38:48:0d:0e:95:6e:47:ac:69:13:45:0d:8f: e3:7e:97:24:d2:1a:42:63:00:7c:05:a1:58:e7:57: 04:2f:6e:50:27:8a:92:f3:1c:46:e5:6e:2e:a7:23: b5:68:a7:a6:a0:47:98:6e:55:96:7a:f3:14:40:ce: 00:3e:b0:fb:05:6d:0d:87:34:56:3a:89:fa:1b:c3: c9:d6:fe:99:55:33:44:ee:63:49:22:92:80:2e:c6: b3:4d:0d:1e:8a:54:51:5e:69:d7:17:1d:9b:02:9f: c4:77:3c:8f:0c:95:25:b7:d3:7a:d5:27:43:a2:cd: 8c:ea:cc:10:9f:10:2a:83:ef:8c:3b:42:30:66:da: 59:4a:30:f2:8e:a9:22:51:c5:43:41:3e:92:b6:d7: 47:b0:30:45:4c:69:7c:a8:22:d1:38:13:32:26:df: c7:50:c6:94:75:80:c6:69:92:b1:74:f7:36:f7:ba: ef:6e:10:96:12:de:33:78:ea:99:83:72:88:db:50: fa:17:3a:cd:ac:cb:e8:a8:64:41:f3:fd:6d:1e:ca: 37:7e:f2:01:25:26:b4:ad:68:e7:3c:23:56:94:6c: 06:d8:0c:e2:81:e6:ea:29:9e:f8:d5:bc:ed:4d:5a: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:A3:AE:F5:38:1D:28:AA:E1:E3:99:2D:11:11:A2:80:45:77:7D X509v3 Authority Key Identifier: keyid:76:78:F0:FD:24:58:E3:AA:0E:5D:09:9E:28:C0:59:4A:8D:85:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/7678F0FD2458E3AA0E5D099E28C0594A8D8552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:af:ac:43:f5:2b:30:31:49:53:48:25:06:5f:2b:df:d7:99: fa:0a:18:49:18:38:e1:e7:63:fa:36:63:0f:c2:44:36:9b:1d: 67:ff:2f:da:d7:d6:df:cb:9f:f7:f2:57:53:23:50:36:2d:e7: 9f:22:5f:0b:c7:cb:33:47:f2:4d:a1:9f:76:e6:ff:18:4f:88: 57:c9:b4:13:e9:c2:3c:fa:a8:c5:e3:9e:bf:bc:fa:de:fd:4e: 19:b1:51:b1:67:e4:d5:64:8f:62:1f:96:91:97:21:cb:97:9d: 54:82:1e:dc:33:34:39:e4:6d:30:60:06:ba:d8:30:6c:31:56: e5:24:05:43:e0:b0:dd:ac:30:0b:ac:d2:b6:d1:15:4c:2b:b3: 5c:b5:aa:86:60:a1:6a:39:a2:3b:1e:b3:eb:eb:f7:7e:1a:31: 24:c7:1b:5e:a1:e2:35:7f:7b:12:0f:34:2f:5a:48:28:ff:d3: 10:c8:b2:04:a0:5b:b7:2f:cf:df:8f:03:bd:1c:3b:b3:d3:4c: 5d:12:a9:c9:d9:db:7a:2e:61:f3:14:36:59:a7:da:8e:5c:84: a3:e9:bd:64:73:65:5e:5d:db:45:77:d6:76:a1:92:64:28:58: 54:91:27:8b:4a:d7:dd:4b:c1:e4:4f:54:12:7b:4d:ab:e2:57: 7f:4a:5a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUEjr5NPM+J4YBzwLEXTSPLjCK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4 RDg1NTJEMjAeFw0yNjA5MTcwNzM4MDJaFw0yNjA5MTgxMDAzMDJaMDMxMTAvBgNV BAMTKDgyNTFBM0FFRjUzODFEMjhBQUUxRTM5OTJEMTExMUEyODA0NTc3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gzeiNg+uOlxxKJR+ab4AOEgN DpVuR6xpE0UNj+N+lyTSGkJjAHwFoVjnVwQvblAnipLzHEblbi6nI7Vop6agR5hu VZZ68xRAzgA+sPsFbQ2HNFY6ifobw8nW/plVM0TuY0kikoAuxrNNDR6KVFFeadcX HZsCn8R3PI8MlSW303rVJ0OizYzqzBCfECqD74w7QjBm2llKMPKOqSJRxUNBPpK2 10ewMEVMaXyoItE4EzIm38dQxpR1gMZpkrF09zb3uu9uEJYS3jN46pmDcojbUPoX Os2sy+ioZEHz/W0eyjd+8gElJrStaOc8I1aUbAbYDOKB5uopnvjVvO1NWv+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUglGjrvU4HSiq4eOZLRERooBFd30wHwYDVR0j BBgwFoAUdnjw/SRY46oOXQmeKMBZSo2FUtIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjI4NjI2ZTAtMjlmZS00ZTg2LTg0ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQy NDU4RTNBQTBFNUQwOTlFMjhDMDU5NEE4RDg1NTJEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Njc4RjBGRDI0NThFM0FBMEU1RDA5OUUyOEMwNTk0QThEODU1 MkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvNzY3OEYwRkQyNDU4RTNBQTBFNUQwOTlFMjhDMDU5 NEE4RDg1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEevrEP1KzAxSVNIJQZfK9/XmfoKGEkYOOHn Y/o2Yw/CRDabHWf/L9rX1t/Ln/fyV1MjUDYt558iXwvHyzNH8k2hn3bm/xhPiFfJ tBPpwjz6qMXjnr+8+t79ThmxUbFn5NVkj2IflpGXIcuXnVSCHtwzNDnkbTBgBrrY MGwxVuUkBUPgsN2sMAus0rbRFUwrs1y1qoZgoWo5ojses+vr934aMSTHG16h4jV/ exIPNC9aSCj/0xDIsgSgW7cvz9+PA70cO7PTTF0SqcnZ23ouYfMUNlmn2o5chKPp vWRzZV5d20V31nahkmQoWFSRJ4tK191LweRPVBJ7TaviV39KWpk= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:52 2026 by rpki-client