$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft File: 67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json) Hash identifier: YxGKY8l0CXkoWqyNcQ2ySHG1dEqvB8UKZWWQ7yyAwms= Subject key identifier: FF:83:BA:F4:4A:43:AA:0E:2D:DB:A4:D1:43:76:E0:64:DD:43:B2:4C Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 0734778704627FA8AC26284667365C78757E9D2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:41:26 +0000 Manifest this update: Thu 23 Jul 2026 21:36:26 +0000 Manifest next update: Sat 25 Jul 2026 00:39:26 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=) 2: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=) 3: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: so6YN69gtJhIoWtieDmstN9aKNBmu+WVRHBKcPI1R8M=) 4: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=) 5: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=) 6: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=) 8: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=) 9: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=) 10: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:34:77:87:04:62:7f:a8:ac:26:28:46:67:36:5c:78:75:7e:9d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: Jul 23 21:36:26 2026 GMT Not After : Jul 25 00:39:26 2026 GMT Subject: CN=FF83BAF44A43AA0E2DDBA4D14376E064DD43B24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:4e:5c:ae:28:63:80:a5:64:29:2d:f6:60: db:7e:8f:e1:bc:ab:aa:71:ac:da:b0:17:99:a0:d4: 61:25:a8:2b:29:62:da:05:57:b6:a0:51:a8:74:4e: f1:0c:d4:36:2f:05:d6:9b:75:f9:89:c6:f9:0c:57: 99:d3:b3:81:fd:b6:4e:dc:20:18:bc:2e:db:44:34: 89:8f:66:53:40:99:ea:ec:5b:6a:38:cb:d3:cb:b2: 35:70:74:63:f1:48:2a:48:89:47:31:61:d6:74:c8: e8:55:7a:04:e5:e2:6c:91:aa:aa:ff:d4:bc:b1:78: de:36:46:f4:e4:ee:4a:73:4e:d7:1e:e1:ca:a7:e5: 71:1f:e6:80:98:9e:d1:12:c1:98:6c:fa:23:c3:ee: ec:1b:0d:ec:d0:7a:00:81:67:d5:bb:76:67:66:4a: 3f:3d:b7:39:81:ff:37:e7:94:37:05:0c:c4:cc:da: e6:25:45:32:1b:65:04:52:a0:4c:e7:8b:dc:8d:85: e2:ac:6a:fd:f6:de:12:93:cd:fa:8f:cc:98:9d:c3: 29:a2:ed:be:6a:e4:e0:92:2b:d6:df:8b:5b:ee:52: 41:43:36:63:95:17:a2:a4:be:5c:4e:f4:03:59:81: ff:62:3d:a7:2b:6d:cd:21:fa:20:0d:ae:e7:b3:be: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:BA:F4:4A:43:AA:0E:2D:DB:A4:D1:43:76:E0:64:DD:43:B2:4C X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:db:53:e4:cf:63:2c:74:32:8b:cb:64:d6:c2:8c:d0:eb:b6: 8a:9d:6c:33:a8:26:f9:62:2e:3c:12:61:0b:9d:8e:1c:cc:56: b0:ae:0f:a2:69:6b:db:9f:24:1b:8e:19:ec:f5:6d:ed:75:e9: 1c:e5:2e:72:11:8a:06:01:1d:10:d4:ab:5d:62:0e:ed:b7:63: ab:d0:df:9c:3a:a0:cb:cf:6a:a9:10:12:fd:10:ab:5c:93:40: a6:9e:45:9d:87:07:61:31:32:9d:46:00:51:74:2e:a2:8a:16: 73:33:b5:bd:c6:a2:43:11:47:b6:04:f1:85:f7:67:db:00:ca: 20:25:ac:a7:65:f4:0d:ec:f5:d1:71:21:a5:d3:84:63:80:99: d3:1c:95:6e:e7:77:ea:c6:58:eb:21:0c:a3:68:92:ca:fa:e5: 76:71:e7:d0:0e:ee:81:9c:77:7e:e0:c3:90:1f:4b:3a:fc:71: f3:f6:11:bd:5c:cc:87:35:09:aa:4b:bd:98:d0:11:d0:c8:ce: 91:76:a5:92:3b:a9:cf:48:40:ec:93:c8:c9:0e:97:0d:d1:5e: 41:d5:3d:7b:61:57:c5:2e:e7:cc:3e:65:c4:54:a4:93:9f:6f: 60:71:40:03:3b:2b:3c:e9:c0:e2:c8:f6:dc:3b:58:49:8b:ff: d5:32:9b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzR3hwRif6isJihGZzZceHV+nSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA3MjMyMTM2MjZaFw0yNjA3MjUwMDM5MjZaMDMxMTAvBgNV BAMTKEZGODNCQUY0NEE0M0FBMEUyRERCQTREMTQzNzZFMDY0REQ0M0IyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88U5crihjgKVkKS32YNt+j+G8 q6pxrNqwF5mg1GElqCspYtoFV7agUah0TvEM1DYvBdabdfmJxvkMV5nTs4H9tk7c IBi8LttENImPZlNAmersW2o4y9PLsjVwdGPxSCpIiUcxYdZ0yOhVegTl4myRqqr/ 1LyxeN42RvTk7kpzTtce4cqn5XEf5oCYntESwZhs+iPD7uwbDezQegCBZ9W7dmdm Sj89tzmB/zfnlDcFDMTM2uYlRTIbZQRSoEzni9yNheKsav323hKTzfqPzJidwymi 7b5q5OCSK9bfi1vuUkFDNmOVF6KkvlxO9ANZgf9iPacrbc0h+iANruezvidrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4O69EpDqg4t26TRQ3bgZN1DskwwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvbU+TPYyx0MovLZNbCjNDrtoqdbDOoJvli LjwSYQudjhzMVrCuD6Jpa9ufJBuOGez1be116RzlLnIRigYBHRDUq11iDu23Y6vQ 35w6oMvPaqkQEv0Qq1yTQKaeRZ2HB2ExMp1GAFF0LqKKFnMztb3GokMRR7YE8YX3 Z9sAyiAlrKdl9A3s9dFxIaXThGOAmdMclW7nd+rGWOshDKNoksr65XZx59AO7oGc d37gw5AfSzr8cfP2Eb1czIc1CapLvZjQEdDIzpF2pZI7qc9IQOyTyMkOlw3RXkHV PXthV8Uu58w+ZcRUpJOfb2BxQAM7KzzpwOLI9tw7WEmL/9Uymxc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:42 2026 by rpki-client