$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: xLwryAC23yGRLg30IEAuY+4nTUAjhkZPsmVpGb+3QEM= Subject key identifier: B4:65:E7:33:77:FE:57:9F:8E:58:4C:0C:BA:D7:92:6C:2B:E9:9A:07 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 772BFDB2F5E3D475B4400CB0F55BB6CDA6DC1C9A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:24:58 +0000 Manifest this update: Thu 23 Jul 2026 20:19:58 +0000 Manifest next update: Sat 25 Jul 2026 00:06:58 +0000 Files and hashes: 1: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 2: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: zYeow95szfqdXkP/mrQfgyT1AxHd/RXwiKIXAQmqjbI=) 3: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 5: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2b:fd:b2:f5:e3:d4:75:b4:40:0c:b0:f5:5b:b6:cd:a6:dc:1c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Jul 23 20:19:58 2026 GMT Not After : Jul 25 00:06:58 2026 GMT Subject: CN=B465E73377FE579F8E584C0CBAD7926C2BE99A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:02:e8:ce:5b:da:71:93:88:25:4e:d9:51: fd:58:17:4e:2e:0c:0c:99:bc:e2:ea:5c:b2:9a:9d: 8c:e0:85:b3:b8:2d:0a:dd:ef:3c:31:2e:12:f8:49: 35:07:94:a8:a1:c2:a0:22:40:f0:58:95:ae:7f:2b: 4d:10:bd:89:71:8f:31:bc:3a:97:95:82:d4:0a:e1: bd:0d:fc:76:0f:cb:fb:01:ca:52:fd:59:60:24:e6: d6:99:d3:43:6a:32:94:7f:af:f5:ff:cc:e9:ee:78: e3:f8:ae:04:86:a6:b2:6f:c5:e7:bd:f8:bd:d7:7c: 64:e2:91:34:40:19:ac:45:94:28:f4:25:b2:00:9a: a2:66:b2:78:b0:c5:8a:85:2a:64:6b:cd:41:df:8d: ed:9b:3c:14:33:4b:78:c0:b7:3a:53:79:65:7b:a1: e5:12:32:95:90:df:09:5e:18:9a:c1:52:eb:fd:89: 2c:f5:82:6a:77:27:b7:66:9e:21:13:4c:ab:c2:23: 34:12:d5:25:86:fb:35:76:0e:bb:63:c8:1d:85:7b: f6:10:72:3c:53:be:4b:fc:9f:25:05:1d:54:d7:f9: cf:08:22:83:22:e6:c7:16:6b:8e:3c:97:a5:a2:c0: c9:1c:eb:4d:e2:e7:00:04:20:55:be:f1:fb:33:9f: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:E7:33:77:FE:57:9F:8E:58:4C:0C:BA:D7:92:6C:2B:E9:9A:07 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bf:c7:b8:27:4a:ef:b9:fe:cf:87:b7:fd:dd:f7:5e:01:c7: 40:42:9f:ad:81:7b:cf:29:12:8c:36:a8:b9:f1:24:24:6c:8f: 76:6c:50:50:8b:9a:6c:dc:61:b2:1d:6e:10:8a:23:97:ca:0c: 80:41:6d:d6:54:60:79:9d:a9:6e:f0:5c:0a:ee:89:74:3c:77: f3:15:10:e5:f7:c3:cc:31:6c:6d:c4:4b:d0:12:ed:19:10:2f: 26:81:a7:c7:e2:f0:11:89:6f:d7:00:34:81:ad:de:0d:12:d6: 54:97:2e:75:17:2b:bb:bf:27:9e:c1:ca:71:6f:3b:37:41:ce: cb:f6:1f:84:92:28:96:40:d1:0e:43:b6:b2:97:5f:c9:64:10: 05:88:9d:3e:72:9c:4c:63:4b:35:1a:1f:c4:23:2b:f9:33:72: f6:b5:bd:bc:e7:55:cc:81:06:a9:4d:9c:33:9b:76:ab:69:60: 0f:29:75:1b:b0:a2:9b:e4:35:59:0e:c5:d3:02:df:4e:32:8f: 02:6d:5e:25:b3:40:8c:3c:0b:dc:1b:ff:76:6b:7a:47:70:a4: af:f2:1a:26:87:61:f3:6a:64:cb:4d:1d:d3:9a:4e:0d:ac:5e: 9d:22:a6:20:e1:1b:52:7f:6f:c3:8d:92:a7:69:35:54:4b:b5: b7:4b:54:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyv9svXj1HW0QAyw9Vu2zabcHJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA3MjMyMDE5NThaFw0yNjA3MjUwMDA2NThaMDMxMTAvBgNV BAMTKEI0NjVFNzMzNzdGRTU3OUY4RTU4NEMwQ0JBRDc5MjZDMkJFOTlBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWegLozlvacZOIJU7ZUf1YF04u DAyZvOLqXLKanYzghbO4LQrd7zwxLhL4STUHlKihwqAiQPBYla5/K00QvYlxjzG8 OpeVgtQK4b0N/HYPy/sBylL9WWAk5taZ00NqMpR/r/X/zOnueOP4rgSGprJvxee9 +L3XfGTikTRAGaxFlCj0JbIAmqJmsniwxYqFKmRrzUHfje2bPBQzS3jAtzpTeWV7 oeUSMpWQ3wleGJrBUuv9iSz1gmp3J7dmniETTKvCIzQS1SWG+zV2DrtjyB2Fe/YQ cjxTvkv8nyUFHVTX+c8IIoMi5scWa448l6WiwMkc603i5wAEIFW+8fsznzEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGXnM3f+V5+OWEwMuteSbCvpmgcwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6/x7gnSu+5/s+Ht/3d914Bx0BCn62Be88p Eow2qLnxJCRsj3ZsUFCLmmzcYbIdbhCKI5fKDIBBbdZUYHmdqW7wXAruiXQ8d/MV EOX3w8wxbG3ES9AS7RkQLyaBp8fi8BGJb9cANIGt3g0S1lSXLnUXK7u/J57BynFv OzdBzsv2H4SSKJZA0Q5DtrKXX8lkEAWInT5ynExjSzUaH8QjK/kzcva1vbznVcyB BqlNnDObdqtpYA8pdRuwopvkNVkOxdMC304yjwJtXiWzQIw8C9wb/3ZrekdwpK/y GiaHYfNqZMtNHdOaTg2sXp0ipiDhG1J/b8ONkqdpNVRLtbdLVCM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:43 2026 by rpki-client