$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: /WOk7XR1qWxCfJ19W/XtRoOYz2T4bemyRes3P8Dwfuw= Subject key identifier: 3B:CC:50:E8:85:CB:85:32:55:D0:1E:57:A9:00:A0:F0:9A:1D:74:AB Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 02CC27576536A62F91D23394B73C131A83CB78BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:21:01 +0000 Manifest this update: Thu 24 Sep 2026 16:16:01 +0000 Manifest next update: Fri 25 Sep 2026 18:47:01 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: XQkC4xj8RwmRehk1BDgSKcHzEyYH4V+W5QW6ub26Qjw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cc:27:57:65:36:a6:2f:91:d2:33:94:b7:3c:13:1a:83:cb:78:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Sep 24 16:16:01 2026 GMT Not After : Sep 25 18:47:01 2026 GMT Subject: CN=3BCC50E885CB853255D01E57A900A0F09A1D74AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:52:bf:e0:ab:07:b5:dc:b7:df:14:25:b2: 83:ca:70:34:64:3d:24:57:05:b8:01:56:a1:11:3d: c9:02:e4:65:76:b1:20:1f:6e:32:1d:a2:e3:42:82: 65:b2:f6:46:ae:24:3b:b4:bc:45:b5:ff:68:ed:4f: 77:28:30:6b:fa:13:21:eb:f8:ae:67:6f:39:54:4d: 4e:4d:3e:0c:bb:48:04:29:97:d5:7c:56:db:5e:4b: 92:14:01:f7:3b:62:26:24:0c:5b:d5:0b:40:df:6d: 14:33:3a:34:4c:35:dc:27:c2:44:2d:86:d8:aa:74: fc:4f:9e:37:ef:d5:ba:bf:1a:f6:74:4c:45:f4:ff: ba:f6:d5:fe:5d:45:96:a6:e2:8e:35:dc:9d:97:c3: a1:0a:e9:ed:14:bc:bf:9b:5c:d1:c9:1f:ac:98:66: de:9e:98:3b:0f:3b:ce:96:32:a3:e0:76:2e:14:35: 91:ed:a5:db:55:01:20:fa:f4:4d:aa:64:a2:2c:12: 0b:db:a8:a1:b5:de:f6:3b:da:5c:9b:23:73:22:0b: 85:f3:67:b1:aa:b8:61:ca:11:2a:49:95:78:7b:e7: 58:b6:be:dc:45:59:c8:3b:0c:16:0e:77:f5:c5:67: 55:ce:82:78:f9:01:08:41:34:ba:77:6a:f8:cc:f8: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CC:50:E8:85:CB:85:32:55:D0:1E:57:A9:00:A0:F0:9A:1D:74:AB X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:24:b4:23:48:a0:26:b0:e6:54:7a:05:12:77:8c:14:92:d2: 4f:3e:6e:56:59:df:21:7d:e5:7b:19:4c:bd:08:aa:58:c5:1a: b7:dd:be:aa:b5:f3:4b:1b:e8:7c:7a:b1:d0:be:e4:11:dd:51: 9e:ad:da:0c:b3:40:58:e0:1d:cb:24:1a:37:85:fe:a3:21:08: 9d:88:8e:da:90:18:86:a1:50:94:37:ce:3b:6c:2a:d9:7c:02: 4d:3b:ac:7b:ac:af:d3:8a:55:6d:e7:2c:cb:46:18:6d:48:16: 65:4b:fa:1c:f8:1d:b1:49:3a:cc:f6:c5:3b:a5:f0:61:7a:5a: 55:8e:20:25:92:57:cf:7e:d1:04:5e:59:ff:b3:45:a9:be:0c: 8d:81:5d:11:48:f4:c4:68:91:a1:e9:72:5f:2f:ef:a4:73:99: ff:44:7a:54:43:2b:80:61:e1:72:21:f6:07:ef:84:1d:2e:0e: 60:63:9e:52:85:50:b5:cd:d1:e4:5a:7f:7a:c7:6b:f0:18:1c: 9c:17:bd:fb:05:2f:68:ef:23:d8:f2:9e:47:65:73:be:6d:9b: 00:21:5e:cd:d3:18:ab:15:26:44:b3:8d:db:02:e9:17:d1:f7: 64:f1:a4:c4:be:0c:55:95:da:a6:6a:9a:81:3a:55:1f:5d:c6: 2d:1e:87:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAswnV2U2pi+R0jOUtzwTGoPLeLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA5MjQxNjE2MDFaFw0yNjA5MjUxODQ3MDFaMDMxMTAvBgNV BAMTKDNCQ0M1MEU4ODVDQjg1MzI1NUQwMUU1N0E5MDBBMEYwOUExRDc0QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RVK/4KsHtdy33xQlsoPKcDRk PSRXBbgBVqERPckC5GV2sSAfbjIdouNCgmWy9kauJDu0vEW1/2jtT3coMGv6EyHr +K5nbzlUTU5NPgy7SAQpl9V8VtteS5IUAfc7YiYkDFvVC0DfbRQzOjRMNdwnwkQt htiqdPxPnjfv1bq/GvZ0TEX0/7r21f5dRZam4o413J2Xw6EK6e0UvL+bXNHJH6yY Zt6emDsPO86WMqPgdi4UNZHtpdtVASD69E2qZKIsEgvbqKG13vY72lybI3MiC4Xz Z7GquGHKESpJlXh751i2vtxFWcg7DBYOd/XFZ1XOgnj5AQhBNLp3avjM+Cg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8xQ6IXLhTJV0B5XqQCg8JoddKswHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0ktCNIoCaw5lR6BRJ3jBSS0k8+blZZ3yF9 5XsZTL0IqljFGrfdvqq180sb6Hx6sdC+5BHdUZ6t2gyzQFjgHcskGjeF/qMhCJ2I jtqQGIahUJQ3zjtsKtl8Ak07rHusr9OKVW3nLMtGGG1IFmVL+hz4HbFJOsz2xTul 8GF6WlWOICWSV89+0QReWf+zRam+DI2BXRFI9MRokaHpcl8v76Rzmf9EelRDK4Bh 4XIh9gfvhB0uDmBjnlKFULXN0eRaf3rHa/AYHJwXvfsFL2jvI9jynkdlc75tmwAh Xs3TGKsVJkSzjdsC6RfR92TxpMS+DFWV2qZqmoE6VR9dxi0eh9s= -----END CERTIFICATE-----Generated at Fri Sep 25 04:45:25 2026 by rpki-client