$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: gSuJ4W+5PPlQlN4ySKK0WdabQRfwwB+sVG0RieUGe1g= Subject key identifier: BE:4B:DF:12:0B:2E:8C:9F:CD:AA:C7:C8:E5:F1:86:99:E0:9F:89:58 Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 30393EACDD62413F735D0B219066B599F408F990 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:04:12 +0000 Manifest this update: Thu 23 Jul 2026 23:59:12 +0000 Manifest next update: Sat 25 Jul 2026 02:16:12 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: Y2aoh0aaUDB+bstZWxgBSnczw/zpmJYBkW0Zl+/2lAU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:3e:ac:dd:62:41:3f:73:5d:0b:21:90:66:b5:99:f4:08:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Jul 23 23:59:12 2026 GMT Not After : Jul 25 02:16:12 2026 GMT Subject: CN=BE4BDF120B2E8C9FCDAAC7C8E5F18699E09F8958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:0d:f8:a9:57:8a:58:ea:86:13:6a:b5:f7: 87:1e:5c:02:44:1a:b5:cb:aa:b4:ff:75:ab:94:07: f7:0d:e8:17:98:52:bf:8e:be:d1:7b:5c:dd:87:8a: f7:7d:02:29:1d:c9:58:0c:26:3f:53:cb:80:60:ca: 53:9d:9f:13:d6:d2:e8:2d:c2:53:50:f4:d0:ff:be: 36:e8:5d:ac:87:4a:8c:03:90:e2:dd:56:fc:0c:fe: 90:94:df:63:1d:71:0d:a8:b5:4f:56:2c:32:86:6b: c6:f1:8a:31:b4:d4:9d:af:d5:de:57:36:a4:07:0e: 86:a3:67:d2:4a:95:1d:83:5c:da:47:0f:71:d5:60: 56:34:ba:a0:37:dd:de:f9:24:21:8b:41:81:37:25: e5:de:15:f0:c7:43:de:74:e3:df:78:90:d0:ec:5b: 79:d5:ec:06:f6:6d:67:d0:71:b8:6d:77:bf:53:f1: 7b:66:a5:3d:d8:48:54:fb:3e:5e:8f:26:b3:77:ea: 22:06:f3:f8:9f:5d:19:52:ed:01:27:67:70:a2:38: ed:28:86:8a:5a:9f:97:74:f8:a7:ea:eb:14:29:6b: da:4d:2d:6a:95:4f:b9:3b:15:af:fb:76:33:e2:18: 7f:87:71:3f:54:e9:1a:dc:3e:57:d6:0b:e5:fc:8e: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4B:DF:12:0B:2E:8C:9F:CD:AA:C7:C8:E5:F1:86:99:E0:9F:89:58 X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d6:ad:1c:a8:34:71:41:e1:f5:a7:26:ac:b2:c7:9c:e5:1f: 75:80:63:9c:fa:25:b2:fe:6e:26:13:62:f9:be:db:c6:51:18: b0:29:75:89:88:a0:ef:6e:ee:a3:7e:3e:ee:3e:36:e2:45:07: 5d:54:9a:9c:e7:8a:8e:1f:41:f2:af:81:80:9b:d6:d1:b7:d8: 39:e2:9a:35:6f:d7:b8:33:35:b8:7d:9a:0c:28:3f:0a:5a:5d: 62:26:3a:b5:6f:16:d6:21:b8:45:d1:19:9d:bb:77:89:16:28: 08:00:65:9e:b2:ee:15:ce:9a:7c:c3:d1:48:59:9f:28:5e:9a: 95:23:9d:85:6b:c4:6a:e1:e9:89:c9:eb:6f:70:8e:d6:a5:cd: cd:73:ec:ea:cb:38:2b:3f:d9:cf:2f:a3:d5:2f:42:70:09:99: ff:fe:c9:ae:ec:34:7f:ed:96:5a:f5:51:db:a3:75:45:a5:a9: 5a:66:65:62:b8:42:c8:ed:fe:a1:b4:9f:e3:6c:17:b9:59:47: 8d:31:06:e7:af:03:d9:a3:c7:e3:73:10:7d:fb:8b:1a:c5:a8: 41:ad:e5:39:d6:99:d1:27:7a:69:a1:e1:6c:33:63:19:05:80: 01:83:75:9d:81:b5:41:b3:3d:9f:26:43:70:c7:2e:98:3a:ef: 61:f8:d8:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDk+rN1iQT9zXQshkGa1mfQI+ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA3MjMyMzU5MTJaFw0yNjA3MjUwMjE2MTJaMDMxMTAvBgNV BAMTKEJFNEJERjEyMEIyRThDOUZDREFBQzdDOEU1RjE4Njk5RTA5Rjg5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vQ34qVeKWOqGE2q194ceXAJE GrXLqrT/dauUB/cN6BeYUr+OvtF7XN2Hivd9AikdyVgMJj9Ty4BgylOdnxPW0ugt wlNQ9ND/vjboXayHSowDkOLdVvwM/pCU32MdcQ2otU9WLDKGa8bxijG01J2v1d5X NqQHDoajZ9JKlR2DXNpHD3HVYFY0uqA33d75JCGLQYE3JeXeFfDHQ9504994kNDs W3nV7Ab2bWfQcbhtd79T8XtmpT3YSFT7Pl6PJrN36iIG8/ifXRlS7QEnZ3CiOO0o hopan5d0+Kfq6xQpa9pNLWqVT7k7Fa/7djPiGH+HcT9U6RrcPlfWC+X8jvfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkvfEgsujJ/NqsfI5fGGmeCfiVgwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzWrRyoNHFB4fWnJqyyx5zlH3WAY5z6JbL+ biYTYvm+28ZRGLApdYmIoO9u7qN+Pu4+NuJFB11Umpznio4fQfKvgYCb1tG32Dni mjVv17gzNbh9mgwoPwpaXWImOrVvFtYhuEXRGZ27d4kWKAgAZZ6y7hXOmnzD0UhZ nyhempUjnYVrxGrh6YnJ629wjtalzc1z7OrLOCs/2c8vo9UvQnAJmf/+ya7sNH/t llr1UdujdUWlqVpmZWK4Qsjt/qG0n+NsF7lZR40xBuevA9mjx+NzEH37ixrFqEGt 5TnWmdEnemmh4WwzYxkFgAGDdZ2BtUGzPZ8mQ3DHLpg672H42Gc= -----END CERTIFICATE-----Generated at Fri Jul 24 16:14:11 2026 by rpki-client