$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft File: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft (raw, json) Hash identifier: rKcnqCPPbeFzpBIckqy8Xl5OOUIO/eanEC5VuKNxDnI= Subject key identifier: 5F:C2:76:AE:84:FE:FF:BF:91:9D:B1:0B:BE:12:DA:4B:A6:90:F8:92 Authority key identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F Certificate issuer: /CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Certificate serial: 5FEDBE18807055D4003F4EE71A0501952037CDED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft Manifest number: 1B Signing time: Sat 18 Apr 2026 23:02:08 +0000 Manifest this update: Sat 18 Apr 2026 22:57:08 +0000 Manifest next update: Wed 22 Apr 2026 05:42:08 +0000 Files and hashes: 1: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl (hash: HIdFGKGeVdGAqX/8vrEwv+ivQcCi6JL/CzK7+hOFVHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ed:be:18:80:70:55:d4:00:3f:4e:e7:1a:05:01:95:20:37:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Validity Not Before: Apr 18 22:57:08 2026 GMT Not After : Apr 22 05:42:08 2026 GMT Subject: CN=5FC276AE84FEFFBF919DB10BBE12DA4BA690F892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:11:15:bd:83:5a:d8:d4:c1:22:1a:b0:4c: 01:99:e2:d5:19:20:37:bc:27:e3:da:67:27:3f:d2: f4:df:8d:3d:1a:f6:39:5d:e6:27:28:d6:66:3d:e5: 31:95:34:93:7f:dd:44:e6:5e:24:b9:56:f8:e6:d1: fd:35:c4:57:55:a1:a8:a4:88:08:68:58:a4:63:74: 18:6e:8a:1d:d4:71:80:73:e4:09:5d:69:0a:86:71: 81:7e:75:90:a7:f6:60:34:b2:76:84:a8:a2:d7:86: 4e:c4:01:b4:52:5e:ed:ae:1e:1b:bd:40:9b:8d:10: 33:52:97:1c:80:49:93:30:59:7c:fd:d5:68:4d:9d: eb:11:31:67:a3:07:94:ab:71:eb:d0:dc:3a:8e:28: 2d:93:6a:9a:7f:76:61:a6:8b:53:21:2f:ad:be:8d: 78:7d:16:f6:3d:58:52:2b:eb:b4:a8:85:35:19:a7: fa:eb:01:06:0d:0b:be:d5:c1:a4:d9:a1:4b:50:14: 4e:eb:6b:fe:9a:e7:95:16:cd:a0:bc:29:7f:a5:7a: cd:dc:db:61:95:a2:a4:82:73:85:cd:f3:b8:ee:d5: 6f:81:c9:f3:b9:f2:eb:a5:ab:86:1c:af:62:de:c5: c8:03:e5:e4:37:07:37:2c:54:9c:34:fc:52:75:24: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C2:76:AE:84:FE:FF:BF:91:9D:B1:0B:BE:12:DA:4B:A6:90:F8:92 X509v3 Authority Key Identifier: keyid:67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:54:45:fa:14:10:cd:ef:f1:30:64:91:b5:22:3f:7c:14:06: dc:15:bc:89:b8:e8:58:ac:8b:76:b3:c8:73:f0:94:50:60:06: cd:cd:9f:d5:6b:9a:21:2d:72:0b:aa:5a:0b:76:ac:ca:50:e2: 35:a0:60:6d:b9:dd:d1:5b:28:ac:3a:ea:c9:9d:70:77:6d:4b: 83:c6:a4:9e:98:09:d9:da:f9:7a:a4:31:22:13:4d:bb:14:4d: 9b:2a:6f:12:9d:46:11:49:af:6a:40:f1:f8:68:93:69:19:f9: df:fc:f2:88:3e:91:d8:a8:ae:f5:11:e7:e6:a8:b1:11:52:b4: d7:b9:78:da:47:92:06:da:34:72:c0:9b:e7:a3:0f:e0:df:56: f2:b8:dc:3e:72:86:5e:5e:3c:e1:4f:2b:86:b2:8f:d4:9e:4b: 66:2a:bf:8d:81:e9:2e:13:0a:01:0d:e1:96:ff:82:27:72:ba: f5:ea:54:0e:8e:3d:32:ac:b6:5a:66:12:9e:b7:c9:d4:ad:34: d6:bf:43:05:09:40:8f:f8:dc:13:d8:c4:92:4f:e3:37:03:01: ea:3a:8b:d3:95:3b:10:7c:67:20:65:52:d5:a3:3d:26:97:46: a7:63:78:97:ef:d6:f8:20:93:c7:d6:fd:7c:c3:12:ca:4d:75: b0:9b:93:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+2+GIBwVdQAP07nGgUBlSA3ze0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIw N0JBRDgyRjAeFw0yNjA0MTgyMjU3MDhaFw0yNjA0MjIwNTQyMDhaMDMxMTAvBgNV BAMTKDVGQzI3NkFFODRGRUZGQkY5MTlEQjEwQkJFMTJEQTRCQTY5MEY4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeXhEVvYNa2NTBIhqwTAGZ4tUZ IDe8J+PaZyc/0vTfjT0a9jld5ico1mY95TGVNJN/3UTmXiS5Vvjm0f01xFdVoaik iAhoWKRjdBhuih3UcYBz5AldaQqGcYF+dZCn9mA0snaEqKLXhk7EAbRSXu2uHhu9 QJuNEDNSlxyASZMwWXz91WhNnesRMWejB5SrcevQ3DqOKC2Tapp/dmGmi1MhL62+ jXh9FvY9WFIr67SohTUZp/rrAQYNC77VwaTZoUtQFE7ra/6a55UWzaC8KX+les3c 22GVoqSCc4XN87ju1W+ByfO58uulq4Ycr2LexcgD5eQ3BzcsVJw0/FJ1JHpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX8J2roT+/7+RnbELvhLaS6aQ+JIwHwYDVR0j BBgwFoAUZ9vm1vJG1/yRHWLmisLZgge62C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMC82N0RCRTZENkYy NDZEN0ZDOTExRDYyRTY4QUMyRDk4MjA3QkFEODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIwN0JB RDgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5 ODIwN0JBRDgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpURfoUEM3v8TBkkbUiP3wUBtwVvIm46Fis i3azyHPwlFBgBs3Nn9VrmiEtcguqWgt2rMpQ4jWgYG253dFbKKw66smdcHdtS4PG pJ6YCdna+XqkMSITTbsUTZsqbxKdRhFJr2pA8fhok2kZ+d/88og+kdiorvUR5+ao sRFStNe5eNpHkgbaNHLAm+ejD+DfVvK43D5yhl5ePOFPK4ayj9SeS2Yqv42B6S4T CgEN4Zb/gidyuvXqVA6OPTKstlpmEp63ydStNNa/QwUJQI/43BPYxJJP4zcDAeo6 i9OVOxB8ZyBlUtWjPSaXRqdjeJfv1vggk8fW/XzDEspNdbCbk94= -----END CERTIFICATE-----Generated at Sun Apr 19 14:13:31 2026 by rpki-client