$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: EqsJv7/o7DOVGHQkWBg2hzU7KiLT/DSJBuXy4xz3EzU= Subject key identifier: 2D:5B:95:9E:BE:3B:45:6D:41:6F:93:BC:92:4A:6C:D4:DD:C6:5D:CD Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 25CB54848D03376BDA7824EB269275645D6CA5B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:55:29 +0000 Manifest this update: Tue 12 May 2026 15:50:29 +0000 Manifest next update: Wed 13 May 2026 16:45:29 +0000 Files and hashes: 1: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 2: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 3: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 4: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 5: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: q0MRodFcoDW4pCNmjQgg6GbUwNSHne+36XxSZ64U+0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cb:54:84:8d:03:37:6b:da:78:24:eb:26:92:75:64:5d:6c:a5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: May 12 15:50:29 2026 GMT Not After : May 13 16:45:29 2026 GMT Subject: CN=2D5B959EBE3B456D416F93BC924A6CD4DDC65DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:d9:44:f3:9c:5e:6a:19:e8:81:23:2e:f3: e9:95:a0:21:ca:47:4d:c0:e9:d3:0f:77:f1:eb:76: e7:9c:c6:a6:67:58:38:ed:1e:79:36:ac:04:60:52: f6:65:a9:2b:dc:55:a6:e6:00:b3:f0:ab:29:de:ca: 5c:48:e6:c1:a2:ef:93:5e:0e:ed:3c:8e:e9:2a:19: d2:b6:19:34:4a:33:10:81:f1:ec:4b:b0:ad:41:f9: b5:0c:b9:5e:e4:fd:3d:bd:e7:c2:d6:02:04:84:70: 56:34:8b:2a:2a:8a:c9:16:9d:57:56:6a:07:83:a5: 40:14:34:4f:fa:70:2b:58:75:09:7b:c0:24:76:56: 7e:31:2f:98:35:0f:7b:dc:b4:8e:fc:a8:4b:69:28: 90:c7:9c:af:6f:2b:81:05:ef:95:e4:e8:f3:ff:17: 5b:cd:d1:1e:4e:a6:9c:07:d2:c3:a7:c0:5b:6c:00: ee:4c:ba:fa:20:28:16:c4:40:7d:fd:e5:be:31:54: f2:dc:ba:dd:5a:75:21:3b:2e:a6:ba:09:76:7c:94: 2f:76:68:4f:1f:e3:44:bf:11:d2:65:ce:0a:73:01: eb:9d:64:20:e0:a9:06:bc:11:c6:6c:12:44:4f:2c: 90:14:b7:6a:0a:87:24:fc:f1:3c:81:af:af:10:d7: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5B:95:9E:BE:3B:45:6D:41:6F:93:BC:92:4A:6C:D4:DD:C6:5D:CD X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ea:a8:1f:a0:b5:4f:6a:47:9e:da:de:52:85:17:01:4b:24: 74:7f:66:ed:37:1f:67:ed:e4:3b:f4:08:6f:d4:69:41:c9:af: 75:26:13:cc:d9:b0:d9:b6:4d:8d:fb:05:e3:f8:9a:86:12:e9: 47:12:82:04:34:72:f6:ac:58:6d:30:f6:8c:65:22:05:8c:fe: 64:a2:6e:2b:e7:87:c1:69:be:d1:db:71:a1:84:87:82:ce:8a: 0d:ae:00:3b:0a:24:b6:0f:80:89:59:c5:dc:3e:cb:aa:b8:f4: 90:dc:cc:6c:24:41:23:7f:12:34:a7:3f:7f:db:a2:01:84:bc: e1:ad:c6:a9:3f:fb:31:ad:e6:8a:b0:cb:75:07:19:43:db:b8: 5a:df:39:da:df:00:42:ad:ea:07:5b:f6:64:71:07:2f:b3:e1: 2c:aa:c4:a1:75:73:0d:97:45:ad:25:b7:a5:b5:0d:c5:2f:50: 2e:51:38:f1:0a:06:e9:5d:b7:57:fc:44:2b:98:10:3d:80:58: d5:c5:e1:ac:dd:22:30:16:bc:17:bc:6f:e2:7c:b1:aa:62:b2: 88:fa:d9:90:58:38:4c:06:ff:b8:2f:5b:da:e7:76:d9:a5:84: d6:7b:90:59:1d:f6:98:4a:fb:6a:72:99:ac:6b:27:e2:d2:d1: 40:94:fd:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJctUhI0DN2vaeCTrJpJ1ZF1spbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA1MTIxNTUwMjlaFw0yNjA1MTMxNjQ1MjlaMDMxMTAvBgNV BAMTKDJENUI5NTlFQkUzQjQ1NkQ0MTZGOTNCQzkyNEE2Q0Q0RERDNjVEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUtlE85xeahnogSMu8+mVoCHK R03A6dMPd/HrduecxqZnWDjtHnk2rARgUvZlqSvcVabmALPwqyneylxI5sGi75Ne Du08jukqGdK2GTRKMxCB8exLsK1B+bUMuV7k/T2958LWAgSEcFY0iyoqiskWnVdW ageDpUAUNE/6cCtYdQl7wCR2Vn4xL5g1D3vctI78qEtpKJDHnK9vK4EF75Xk6PP/ F1vN0R5OppwH0sOnwFtsAO5MuvogKBbEQH395b4xVPLcut1adSE7Lqa6CXZ8lC92 aE8f40S/EdJlzgpzAeudZCDgqQa8EcZsEkRPLJAUt2oKhyT88TyBr68Q12NJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVuVnr47RW1Bb5O8kkps1N3GXc0wHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbqqB+gtU9qR57a3lKFFwFLJHR/Zu03H2ft 5Dv0CG/UaUHJr3UmE8zZsNm2TY37BeP4moYS6UcSggQ0cvasWG0w9oxlIgWM/mSi bivnh8FpvtHbcaGEh4LOig2uADsKJLYPgIlZxdw+y6q49JDczGwkQSN/EjSnP3/b ogGEvOGtxqk/+zGt5oqwy3UHGUPbuFrfOdrfAEKt6gdb9mRxBy+z4SyqxKF1cw2X Ra0lt6W1DcUvUC5ROPEKBuldt1f8RCuYED2AWNXF4azdIjAWvBe8b+J8sapisoj6 2ZBYOEwG/7gvW9rndtmlhNZ7kFkd9phK+2pymaxrJ+LS0UCU/Qk= -----END CERTIFICATE-----Generated at Wed May 13 02:59:48 2026 by rpki-client