$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: ND2dyt4L8Okmo5LrV3sZX+8ZlyRdl7Jncl+LnB77i1A= Subject key identifier: EE:6E:F1:2D:D2:FC:78:A3:54:1E:AE:C3:A9:6F:9F:B8:C4:19:3A:04 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 16F18D31779C804645D5F01BE47D08E6BD12A369 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:23:47 +0000 Manifest this update: Wed 23 Sep 2026 18:18:47 +0000 Manifest next update: Thu 24 Sep 2026 20:41:47 +0000 Files and hashes: 1: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: mMLQsxaR5CKH1SX97Tnkp+hqtigmaRJ/KLXee2qsO0g=) 2: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 3: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 4: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 5: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f1:8d:31:77:9c:80:46:45:d5:f0:1b:e4:7d:08:e6:bd:12:a3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Sep 23 18:18:47 2026 GMT Not After : Sep 24 20:41:47 2026 GMT Subject: CN=EE6EF12DD2FC78A3541EAEC3A96F9FB8C4193A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:f4:7a:62:7f:2b:87:01:6e:2c:8f:13:5f: f6:01:b4:01:61:a6:55:70:b4:5c:30:b9:ad:ce:e8: 58:3c:68:36:ad:9a:a1:0b:42:26:9c:32:b8:f6:5a: 67:1d:f6:a6:08:6e:dc:00:3c:37:25:b8:9a:6f:5d: a6:5e:0d:52:9d:da:8d:88:e3:d1:81:ab:2d:c8:ab: fc:a7:7f:f9:10:07:30:73:f2:27:da:4a:06:77:20: 33:d8:64:8e:9d:b3:20:38:61:e3:b6:8b:16:56:28: 3b:dc:ee:45:7e:9f:48:67:dd:e3:d6:5c:04:3f:48: d5:01:bf:0a:29:2c:8c:b6:44:2e:d0:00:f1:db:ee: b3:f7:32:11:83:34:e1:bb:c1:dd:72:0f:6a:13:89: c8:a5:35:c0:ab:25:c4:19:cd:7d:5d:7d:9f:4c:68: 87:ed:32:99:78:0a:22:e9:3c:78:9a:0a:9f:cf:f1: dc:1d:ab:eb:41:5b:57:1c:36:9c:84:2b:69:0b:63: fb:18:2d:f5:0c:96:c6:d8:51:fe:2a:7c:c2:b0:5a: 04:be:e8:ed:38:b8:18:5d:4d:f1:e6:3e:15:40:b1: 66:a7:47:bb:16:5c:ff:ab:c4:a1:c0:88:f4:64:e9: 8d:8f:a8:9f:08:4b:2d:51:53:33:26:93:63:b7:35: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:F1:2D:D2:FC:78:A3:54:1E:AE:C3:A9:6F:9F:B8:C4:19:3A:04 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f3:29:1e:8a:aa:d5:f2:68:25:2e:8d:2a:c8:4d:1f:f5:0e: 09:dc:3a:c6:3c:f0:81:46:3a:1b:fa:07:fc:54:94:51:e4:7b: ba:45:9c:3e:39:af:7a:43:1b:38:c9:f0:cd:3a:f8:d6:be:a7: 38:78:e8:0f:04:7c:89:c3:84:9a:6e:5b:fd:fc:15:6c:c5:e7: 0b:94:5d:c9:cc:0f:78:e4:04:72:d8:d8:92:00:77:0d:08:28: 0e:77:47:4c:80:f7:90:14:59:a0:d7:12:1a:41:4f:85:c3:cb: 69:7e:5e:7f:2f:6e:08:60:a5:2c:5b:af:27:85:ee:b4:a6:ad: 5b:8d:c1:a7:62:f2:8f:97:27:af:30:77:ec:d6:eb:15:70:f7: 56:9e:cf:ff:c2:4c:73:26:95:e0:c7:9b:45:07:ca:01:e7:ca: 63:83:51:ae:fb:fd:24:fd:89:8d:75:c0:5c:fd:cd:5a:b8:5a: 2f:7e:d7:96:4c:44:b7:0c:cf:76:c0:56:ac:67:41:d1:5a:35: 04:82:b1:22:c3:dc:af:fe:c5:e7:22:f7:a4:45:b3:2f:7f:a0: b2:9f:b6:e1:77:d0:14:0d:47:45:34:15:8e:2b:01:42:12:98: d8:86:7e:55:41:2a:3d:c1:37:ba:31:79:a4:5c:a2:d4:9f:44: e2:71:05:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvGNMXecgEZF1fAb5H0I5r0So2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA5MjMxODE4NDdaFw0yNjA5MjQyMDQxNDdaMDMxMTAvBgNV BAMTKEVFNkVGMTJERDJGQzc4QTM1NDFFQUVDM0E5NkY5RkI4QzQxOTNBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTfR6Yn8rhwFuLI8TX/YBtAFh plVwtFwwua3O6Fg8aDatmqELQiacMrj2Wmcd9qYIbtwAPDcluJpvXaZeDVKd2o2I 49GBqy3Iq/ynf/kQBzBz8ifaSgZ3IDPYZI6dsyA4YeO2ixZWKDvc7kV+n0hn3ePW XAQ/SNUBvwopLIy2RC7QAPHb7rP3MhGDNOG7wd1yD2oTicilNcCrJcQZzX1dfZ9M aIftMpl4CiLpPHiaCp/P8dwdq+tBW1ccNpyEK2kLY/sYLfUMlsbYUf4qfMKwWgS+ 6O04uBhdTfHmPhVAsWanR7sWXP+rxKHAiPRk6Y2PqJ8ISy1RUzMmk2O3NYcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7m7xLdL8eKNUHq7DqW+fuMQZOgQwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvzKR6KqtXyaCUujSrITR/1DgncOsY88IFG Ohv6B/xUlFHke7pFnD45r3pDGzjJ8M06+Na+pzh46A8EfInDhJpuW/38FWzF5wuU XcnMD3jkBHLY2JIAdw0IKA53R0yA95AUWaDXEhpBT4XDy2l+Xn8vbghgpSxbryeF 7rSmrVuNwadi8o+XJ68wd+zW6xVw91aez//CTHMmleDHm0UHygHnymODUa77/ST9 iY11wFz9zVq4Wi9+15ZMRLcMz3bAVqxnQdFaNQSCsSLD3K/+xeci96RFsy9/oLKf tuF30BQNR0U0FY4rAUISmNiGflVBKj3BN7oxeaRcotSfROJxBVg= -----END CERTIFICATE-----Generated at Thu Sep 24 12:26:59 2026 by rpki-client