$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: 0Evu6aBiK5yZUYXpu2ktD140nT12raFCILATbIgVHlM= Subject key identifier: 9E:21:43:FA:DD:67:0A:7C:0F:58:95:18:D1:C2:F6:A2:21:7F:EA:0A Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 135A39E094C39755F47A4935367C35AF51167C3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:05 +0000 Manifest this update: Tue 12 May 2026 17:58:05 +0000 Manifest next update: Wed 13 May 2026 20:49:05 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: Vx1ytldr3eQbLm2HLlKNNa+pYvqlZlz2qUjYIrM1bM8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5a:39:e0:94:c3:97:55:f4:7a:49:35:36:7c:35:af:51:16:7c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: May 12 17:58:05 2026 GMT Not After : May 13 20:49:05 2026 GMT Subject: CN=9E2143FADD670A7C0F589518D1C2F6A2217FEA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:17:55:5e:3b:4a:08:3f:2a:31:e4:8f:65: 73:6b:5f:f4:12:a0:4e:12:b5:5c:4a:3d:04:2f:b8: ab:51:5e:13:2c:78:0e:17:86:15:ef:af:84:36:ad: 2c:6f:46:57:16:6d:c9:6b:ea:40:67:f0:cf:67:46: ea:60:8f:a8:cb:ad:ae:80:e5:00:9f:2a:18:04:da: 77:29:71:64:36:0e:75:e3:87:e9:16:d4:75:37:c6: 14:fb:53:84:84:db:79:24:78:99:e0:c1:34:00:fa: cc:15:62:21:ea:dc:93:d1:ff:ba:b2:6e:0a:57:34: 10:87:fd:43:d0:c7:f7:ab:73:a5:41:2e:b8:c5:8b: c3:bf:43:95:25:87:b1:b6:16:97:99:0f:91:3f:35: 3b:6d:9e:d7:61:44:e1:63:a7:64:14:e9:9f:1e:b3: 7e:2a:27:3e:73:f7:24:bc:43:e7:e4:96:58:f6:e2: 08:34:54:b6:25:c8:e0:b2:13:d3:ca:f4:d7:fe:97: 54:79:a6:56:ed:fd:2f:90:01:f5:83:09:e1:da:59: 61:4b:d0:d8:88:8d:fb:7f:a0:39:b0:8c:c5:ac:db: 5c:1a:5a:59:f0:73:43:cd:7f:26:bd:d8:94:e2:98: 19:2e:51:c1:ce:1d:e0:b4:66:c0:1c:17:f8:00:df: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:43:FA:DD:67:0A:7C:0F:58:95:18:D1:C2:F6:A2:21:7F:EA:0A X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:9c:28:24:43:9c:60:6a:52:ce:12:ca:7b:9f:38:4d:9a: 50:bd:28:63:a0:69:f0:b7:30:3e:3d:e3:32:41:e7:48:b7:5c: b6:75:70:4b:b2:79:55:58:ad:02:1c:db:16:b5:82:e3:d3:9f: c0:4e:a3:4b:aa:74:4f:16:ef:1b:3a:4a:14:71:19:b9:6e:35: 99:91:6e:c7:bc:e3:7e:47:ba:23:0d:f6:44:24:09:7f:69:d2: 7e:5f:c5:9e:d8:35:71:13:10:a0:45:dd:a2:ae:a1:38:e2:ed: 30:64:34:af:0c:65:3b:52:c4:50:d1:3e:55:0a:22:54:25:c5: 65:8a:7f:97:d4:4b:6f:fc:e4:9b:c6:da:78:b3:8a:af:f3:18: b4:f4:c8:98:a8:2a:02:0e:a2:57:7f:83:ea:24:f6:37:4a:41: c6:f2:06:51:c2:10:1c:02:31:37:4b:53:22:25:29:c0:ff:27: 4f:93:b8:dd:27:f6:f2:96:8c:c0:35:eb:4b:36:5d:6c:16:0d: 91:d9:57:a4:4e:16:bb:2d:f9:cc:ff:2c:9c:bd:4a:fc:0e:1d: de:8b:fc:06:4c:22:59:cd:44:17:1c:7c:ed:45:05:c3:ee:df: 09:96:f7:ce:68:3f:40:32:64:34:2c:fa:4c:72:a1:71:6f:db: 9f:9f:1c:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1o54JTDl1X0ekk1Nnw1r1EWfD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA1MTIxNzU4MDVaFw0yNjA1MTMyMDQ5MDVaMDMxMTAvBgNV BAMTKDlFMjE0M0ZBREQ2NzBBN0MwRjU4OTUxOEQxQzJGNkEyMjE3RkVBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBRdVXjtKCD8qMeSPZXNrX/QS oE4StVxKPQQvuKtRXhMseA4XhhXvr4Q2rSxvRlcWbclr6kBn8M9nRupgj6jLra6A 5QCfKhgE2ncpcWQ2DnXjh+kW1HU3xhT7U4SE23kkeJngwTQA+swVYiHq3JPR/7qy bgpXNBCH/UPQx/erc6VBLrjFi8O/Q5Ulh7G2FpeZD5E/NTttntdhROFjp2QU6Z8e s34qJz5z9yS8Q+fkllj24gg0VLYlyOCyE9PK9Nf+l1R5plbt/S+QAfWDCeHaWWFL 0NiIjft/oDmwjMWs21waWlnwc0PNfya92JTimBkuUcHOHeC0ZsAcF/gA32mpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUniFD+t1nCnwPWJUY0cL2oiF/6gowHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf5nCgkQ5xgalLOEsp7nzhNmlC9KGOgafC3 MD494zJB50i3XLZ1cEuyeVVYrQIc2xa1guPTn8BOo0uqdE8W7xs6ShRxGbluNZmR bse8435HuiMN9kQkCX9p0n5fxZ7YNXETEKBF3aKuoTji7TBkNK8MZTtSxFDRPlUK IlQlxWWKf5fUS2/85JvG2niziq/zGLT0yJioKgIOold/g+ok9jdKQcbyBlHCEBwC MTdLUyIlKcD/J0+TuN0n9vKWjMA160s2XWwWDZHZV6ROFrst+cz/LJy9SvwOHd6L /AZMIlnNRBccfO1FBcPu3wmW985oP0AyZDQs+kxyoXFv25+fHN4= -----END CERTIFICATE-----Generated at Tue May 12 23:20:41 2026 by rpki-client