$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft File: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft (raw, json) Hash identifier: MwCRV4UpFETIX5K9JzqZNjXQwA6ohMzXqc+lUYLvdDw= Subject key identifier: 21:84:06:CB:2D:A6:D8:5D:4A:56:76:2C:85:ED:2E:14:F2:F5:5A:95 Authority key identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F Certificate issuer: /CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Certificate serial: 13B12C87B3FA21CE5D0E3546B79FA422C5394A00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft Manifest number: 10 Signing time: Tue 24 Mar 2026 13:02:08 +0000 Manifest this update: Tue 24 Mar 2026 12:57:08 +0000 Manifest next update: Fri 27 Mar 2026 21:37:08 +0000 Files and hashes: 1: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl (hash: GfASfRYWTcRinznJ8llSbbLDnQjqu7fG61e1o8WZtoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:2c:87:b3:fa:21:ce:5d:0e:35:46:b7:9f:a4:22:c5:39:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Validity Not Before: Mar 24 12:57:08 2026 GMT Not After : Mar 27 21:37:08 2026 GMT Subject: CN=218406CB2DA6D85D4A56762C85ED2E14F2F55A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:ea:8e:a1:6c:b2:dd:df:7e:ce:29:77:9d: 53:29:71:cb:68:97:db:cd:d0:15:cc:86:48:8d:f4: a0:6c:0e:2f:32:a8:12:73:01:eb:6b:a5:02:cb:fb: 2b:64:00:9e:fa:43:4c:7c:68:3c:d5:13:50:e0:a7: b6:de:35:4d:7a:af:2e:05:d5:48:8a:87:ef:78:a5: 4f:be:a9:1b:12:d1:01:d3:3c:12:ba:25:15:dc:85: fa:b1:b0:d5:9c:63:1d:88:02:be:2c:13:28:cf:8d: 4a:54:ba:e2:18:63:0a:5d:e6:14:bf:1d:b7:a1:f2: 29:02:de:91:e8:59:d2:40:d5:3e:81:26:ed:bb:2b: 62:2a:56:93:e4:7a:0b:c1:85:3c:e7:30:6b:cc:9e: c5:38:0e:09:f7:ac:b9:f3:39:25:8c:b3:69:f6:f7: 92:dc:ba:72:de:4f:22:45:fb:cc:a5:4d:27:04:38: 2b:fc:53:8d:c6:d7:66:3f:a9:73:fb:bf:d8:b5:c5: 16:84:a0:2b:6f:9c:cb:94:ee:2b:f8:56:0c:78:b7: 95:bd:b1:85:02:be:10:35:00:8c:19:32:cb:81:76: 99:26:11:e7:98:88:ea:e8:51:a9:8f:ef:fa:fd:e2: f7:79:33:f0:b7:b6:48:20:28:d1:57:11:2f:f0:82: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:06:CB:2D:A6:D8:5D:4A:56:76:2C:85:ED:2E:14:F2:F5:5A:95 X509v3 Authority Key Identifier: keyid:67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ab:26:b5:de:c6:e0:e4:4c:fa:aa:24:08:8c:b9:1f:e5:3f: 72:01:1e:c5:a5:0c:0c:48:de:b8:51:07:90:9d:89:f1:a4:8f: b4:5e:97:d1:cf:56:48:fb:a0:cd:a3:a1:e0:f4:95:e2:1a:a4: 9c:74:c0:01:0f:ea:d7:d3:4b:83:c2:94:60:31:cb:40:e8:ce: ac:a5:a3:dc:58:5d:db:17:8c:a6:90:38:56:1d:81:8a:b0:eb: d4:a9:14:1d:95:51:a3:05:b9:e3:21:ca:38:30:15:a7:e8:2d: 63:52:f1:63:21:4b:fd:06:20:f1:5a:c1:c6:5b:ba:96:21:f2: d5:8e:75:88:11:44:56:4e:42:9a:bc:d5:0a:64:27:35:1b:64: c7:6f:96:f9:66:af:e3:37:51:0e:e3:ad:f9:68:a3:71:26:06: 07:02:ce:23:99:76:76:20:e4:1c:a2:61:e5:ba:c1:32:ec:50: a2:0b:ed:2c:7f:f2:68:65:73:0b:42:71:6e:2e:93:60:b0:96: da:5c:51:d6:49:10:01:c1:10:c8:32:ab:59:a5:1f:4f:99:b9: 81:8c:42:b2:dd:56:cf:f7:11:a1:7f:eb:89:a0:55:34:39:fb: ac:1b:d1:af:c0:19:b9:be:d2:43:41:97:42:af:6e:94:ec:fb: 66:e0:3c:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7Esh7P6Ic5dDjVGt5+kIsU5SgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIw N0JBRDgyRjAeFw0yNjAzMjQxMjU3MDhaFw0yNjAzMjcyMTM3MDhaMDMxMTAvBgNV BAMTKDIxODQwNkNCMkRBNkQ4NUQ0QTU2NzYyQzg1RUQyRTE0RjJGNTVBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl+qOoWyy3d9+zil3nVMpccto l9vN0BXMhkiN9KBsDi8yqBJzAetrpQLL+ytkAJ76Q0x8aDzVE1Dgp7beNU16ry4F 1UiKh+94pU++qRsS0QHTPBK6JRXchfqxsNWcYx2IAr4sEyjPjUpUuuIYYwpd5hS/ Hbeh8ikC3pHoWdJA1T6BJu27K2IqVpPkegvBhTznMGvMnsU4Dgn3rLnzOSWMs2n2 95LcunLeTyJF+8ylTScEOCv8U43G12Y/qXP7v9i1xRaEoCtvnMuU7iv4Vgx4t5W9 sYUCvhA1AIwZMsuBdpkmEeeYiOroUamP7/r94vd5M/C3tkggKNFXES/wgm9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYQGyy2m2F1KVnYshe0uFPL1WpUwHwYDVR0j BBgwFoAUZ9vm1vJG1/yRHWLmisLZgge62C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMC82N0RCRTZENkYy NDZEN0ZDOTExRDYyRTY4QUMyRDk4MjA3QkFEODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIwN0JB RDgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5 ODIwN0JBRDgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmrJrXexuDkTPqqJAiMuR/lP3IBHsWlDAxI 3rhRB5CdifGkj7Rel9HPVkj7oM2joeD0leIapJx0wAEP6tfTS4PClGAxy0Dozqyl o9xYXdsXjKaQOFYdgYqw69SpFB2VUaMFueMhyjgwFafoLWNS8WMhS/0GIPFawcZb upYh8tWOdYgRRFZOQpq81QpkJzUbZMdvlvlmr+M3UQ7jrfloo3EmBgcCziOZdnYg 5ByiYeW6wTLsUKIL7Sx/8mhlcwtCcW4uk2CwltpcUdZJEAHBEMgyq1mlH0+ZuYGM QrLdVs/3EaF/64mgVTQ5+6wb0a/AGbm+0kNBl0KvbpTs+2bgPH0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:33:52 2026 by rpki-client