$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: 3eJw/mmmngIbOzo5vStW5HZU+4TwVcVuOnWg5Lqlk1s= Subject key identifier: F2:35:71:C9:BC:42:29:2C:BD:37:43:A0:F1:C8:5B:44:DB:9E:05:51 Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 3A4046EF695DE5A94B3ACD49ACFD03C534190737 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 11:44:15 +0000 Manifest this update: Sat 14 Nov 2026 11:39:15 +0000 Manifest next update: Sun 15 Nov 2026 13:49:15 +0000 Files and hashes: 1: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: EBGZXgr1J9+iDEdRhM8vNzMm/LUtziW42AqviUAjf3E=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:40:46:ef:69:5d:e5:a9:4b:3a:cd:49:ac:fd:03:c5:34:19:07:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Nov 14 11:39:15 2026 GMT Not After : Nov 15 13:49:15 2026 GMT Subject: CN=F23571C9BC42292CBD3743A0F1C85B44DB9E0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:06:9c:6d:bb:42:ef:ec:8f:0f:3d:c0:4e: 2c:6a:cf:0e:27:d3:38:dd:d5:a4:0c:2f:2a:58:91: 6b:3c:79:89:5b:0b:1a:e1:43:ba:41:f2:1f:66:b9: 13:c5:43:fd:c4:c3:2c:ed:5a:57:b7:2c:b4:6c:32: 41:8b:79:8a:04:a2:0c:d1:25:a9:89:b2:eb:7f:d1: 66:60:d0:aa:ea:f2:bf:ac:8b:f9:57:93:6b:3b:89: b3:f8:54:5b:c1:be:25:91:2b:7b:bf:ce:b7:b9:25: 0c:56:2c:d7:8f:aa:e7:c8:22:0a:85:6c:d8:55:74: c8:62:1b:8d:b6:4b:43:2a:5d:64:f6:f3:73:45:c2: 67:77:f0:ab:dc:70:cd:76:f7:31:16:74:d5:a4:60: 55:b0:55:86:cd:8e:4a:ab:74:d4:fd:4b:a8:6c:c5: 7f:36:a3:b7:0f:e2:60:9d:83:37:c9:bf:94:d1:24: 71:1a:d5:70:76:d1:fb:ad:1e:c4:31:4b:18:b0:49: 75:f3:f8:cc:52:0a:7b:e0:7d:60:44:14:fb:96:7f: ac:c2:65:6b:6a:8d:83:b7:1c:eb:77:9f:01:4e:ad: 98:5d:17:17:2c:49:37:80:aa:37:71:59:fc:17:ac: 9b:c3:b7:3d:7a:bc:52:bf:f1:1c:88:ec:f7:ee:f6: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:71:C9:BC:42:29:2C:BD:37:43:A0:F1:C8:5B:44:DB:9E:05:51 X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a8:95:8d:30:b1:d9:7d:59:a3:17:b3:7c:ab:0b:97:47:29: 64:96:37:78:df:c0:06:f7:0a:0b:89:1b:5c:f7:19:1f:48:24: 6b:64:67:ec:b8:e8:f8:fb:51:73:14:17:90:1f:01:02:29:d8: 0d:d2:d6:eb:3a:4d:07:77:00:63:64:37:bd:7a:2b:1d:b2:88: 32:c4:96:8b:ac:8b:9d:bc:ad:9c:1b:22:72:7a:66:39:6f:4d: 20:15:46:e4:4a:18:b6:92:d9:fe:93:9c:9f:ac:e7:cd:60:e9: a3:f0:af:eb:78:69:31:2d:78:ba:cb:0a:38:33:2e:af:bd:ec: 05:81:a2:28:61:37:86:02:a9:75:8c:cb:ce:e9:75:a0:78:28: 02:e1:a3:6c:a1:80:8c:52:f6:44:26:23:66:79:a4:c6:c2:d0: 05:bf:21:e0:31:db:03:ae:2d:e6:be:e3:60:e7:0e:e2:3b:db: fc:e3:48:9c:0d:73:1c:52:c1:94:59:9a:f1:de:01:59:11:37: 2c:26:0b:34:26:9a:5a:b2:33:be:0e:dd:24:b9:29:d2:da:a1: 32:8c:35:6d:f9:23:48:63:75:7f:3c:64:2f:b2:6a:c9:57:dc: e5:00:a8:68:c6:12:9c:95:0c:ae:32:77:99:2d:e3:c0:8b:d3: 8d:1e:bf:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkBG72ld5alLOs1JrP0DxTQZBzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjExMTQxMTM5MTVaFw0yNjExMTUxMzQ5MTVaMDMxMTAvBgNV BAMTKEYyMzU3MUM5QkM0MjI5MkNCRDM3NDNBMEYxQzg1QjQ0REI5RTA1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgwacbbtC7+yPDz3ATixqzw4n 0zjd1aQMLypYkWs8eYlbCxrhQ7pB8h9muRPFQ/3EwyztWle3LLRsMkGLeYoEogzR JamJsut/0WZg0Krq8r+si/lXk2s7ibP4VFvBviWRK3u/zre5JQxWLNePqufIIgqF bNhVdMhiG422S0MqXWT283NFwmd38KvccM129zEWdNWkYFWwVYbNjkqrdNT9S6hs xX82o7cP4mCdgzfJv5TRJHEa1XB20futHsQxSxiwSXXz+MxSCnvgfWBEFPuWf6zC ZWtqjYO3HOt3nwFOrZhdFxcsSTeAqjdxWfwXrJvDtz16vFK/8RyI7Pfu9rNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jVxybxCKSy9N0Og8chbRNueBVEwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGolY0wsdl9WaMXs3yrC5dHKWSWN3jfwAb3 CguJG1z3GR9IJGtkZ+y46Pj7UXMUF5AfAQIp2A3S1us6TQd3AGNkN716Kx2yiDLE lousi528rZwbInJ6ZjlvTSAVRuRKGLaS2f6TnJ+s581g6aPwr+t4aTEteLrLCjgz Lq+97AWBoihhN4YCqXWMy87pdaB4KALho2yhgIxS9kQmI2Z5pMbC0AW/IeAx2wOu Lea+42DnDuI72/zjSJwNcxxSwZRZmvHeAVkRNywmCzQmmlqyM74O3SS5KdLaoTKM NW35I0hjdX88ZC+yaslX3OUAqGjGEpyVDK4yd5kt48CL040ev4Y= -----END CERTIFICATE-----Generated at Sat Nov 14 22:46:01 2026 by rpki-client