$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft File: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft (raw, json) Hash identifier: s/aTlOuA5INq6pEWby3dHvz6sAYFw77lxLqkrkSZemA= Subject key identifier: 95:8B:ED:44:15:1F:AB:4D:B8:34:C1:DC:60:1A:1E:19:75:14:3D:F0 Authority key identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F Certificate issuer: /CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Certificate serial: 51362DBE2DBC6D7E3DDADE64A717FB394C6EEA9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft Manifest number: 06 Signing time: Sun 01 Mar 2026 14:52:07 +0000 Manifest this update: Sun 01 Mar 2026 14:47:07 +0000 Manifest next update: Wed 04 Mar 2026 21:42:07 +0000 Files and hashes: 1: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl (hash: ZWCc+72C4Jds6LCXLTs+iQkOlZg2u20RNd4+oFDJGSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:36:2d:be:2d:bc:6d:7e:3d:da:de:64:a7:17:fb:39:4c:6e:ea:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Validity Not Before: Mar 1 14:47:07 2026 GMT Not After : Mar 4 21:42:07 2026 GMT Subject: CN=958BED44151FAB4DB834C1DC601A1E1975143DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:9d:55:d9:0e:e1:0f:4c:9c:e8:b8:cf:12: 29:fc:47:73:7b:60:55:78:5d:bb:f0:70:a2:4b:67: 3e:05:2a:e6:96:be:a3:d1:f5:ab:bd:f5:be:2c:6c: 22:d3:5e:43:a1:45:10:49:26:7a:8b:9e:ad:97:40: ec:c9:e0:6d:e3:a3:4a:19:86:f3:26:bf:7f:09:ee: f7:5f:42:b7:fb:c3:5a:f7:f1:b4:d1:8d:1b:10:87: 50:4a:bd:24:9e:0f:69:2b:c7:47:fd:c6:fb:0e:61: 39:2a:c6:1e:80:f3:ae:6f:b6:7f:8f:91:3a:5b:14: e1:ec:f7:43:50:34:24:9a:60:40:83:1b:bb:d2:cd: 4a:1f:1a:00:13:a1:4e:bf:af:7e:18:09:2e:37:79: b3:e6:87:48:37:ca:31:ef:6f:69:2e:d5:40:11:11: e3:39:61:e6:39:d6:1d:5a:a9:fa:71:c0:75:37:1f: 8c:ba:2f:78:c9:a4:80:7a:c1:3a:1f:7f:ca:4a:ff: 40:d3:23:3a:a6:f6:14:ed:53:47:35:98:52:67:04: 28:07:59:ff:39:46:85:b1:d3:81:e6:f1:fb:24:a9: 0d:64:66:73:22:bc:7f:0c:78:bf:4e:58:24:97:2a: d4:f9:f7:3f:b2:a8:4e:3a:81:21:f2:9b:a1:a1:98: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8B:ED:44:15:1F:AB:4D:B8:34:C1:DC:60:1A:1E:19:75:14:3D:F0 X509v3 Authority Key Identifier: keyid:67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e9:e1:c3:97:ce:68:23:53:f0:1c:35:e2:50:48:72:45:cf: 4c:69:13:3b:b5:b7:13:ba:88:c1:09:12:17:c8:1e:d2:cc:c1: 28:eb:1f:79:c4:6c:1d:f0:0b:e2:07:c9:80:8b:3e:85:10:21: 0c:ac:90:f2:30:5a:f5:81:6f:95:a1:6f:0e:08:c8:26:8b:17: 5e:2b:88:b0:ef:d7:b9:14:56:1f:62:00:f8:17:ca:41:02:aa: 1c:74:3a:77:78:2c:78:a9:01:40:6a:b2:70:4e:86:c4:be:a7: 3b:20:ea:11:b7:2a:8e:86:44:e9:34:9d:ef:19:f9:f9:be:7e: 85:d1:1b:fc:e8:0d:11:ff:1f:6a:9e:61:c2:d1:f8:12:56:f6: ab:0a:e9:44:0f:94:4a:06:99:6d:9d:65:90:47:9f:7b:39:64: b1:a8:66:bb:42:29:4f:40:bd:39:a1:c4:08:a3:1f:e2:5f:8b: 1e:33:9f:c6:ec:ab:27:9e:e9:68:4e:06:ac:e6:0c:10:57:57: 0f:79:3d:19:b4:9a:e8:58:73:2d:e1:5a:c1:15:cf:70:b4:3b: 52:42:6e:29:7c:17:93:d9:10:00:2b:ec:ba:53:16:d1:d7:9e: 18:d4:be:0c:7e:f5:88:a0:e7:46:78:8d:d8:5e:cc:d6:d4:37: c1:11:9b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTYtvi28bX492t5kpxf7OUxu6powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIw N0JBRDgyRjAeFw0yNjAzMDExNDQ3MDdaFw0yNjAzMDQyMTQyMDdaMDMxMTAvBgNV BAMTKDk1OEJFRDQ0MTUxRkFCNERCODM0QzFEQzYwMUExRTE5NzUxNDNERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZAJ1V2Q7hD0yc6LjPEin8R3N7 YFV4XbvwcKJLZz4FKuaWvqPR9au99b4sbCLTXkOhRRBJJnqLnq2XQOzJ4G3jo0oZ hvMmv38J7vdfQrf7w1r38bTRjRsQh1BKvSSeD2krx0f9xvsOYTkqxh6A865vtn+P kTpbFOHs90NQNCSaYECDG7vSzUofGgAToU6/r34YCS43ebPmh0g3yjHvb2ku1UAR EeM5YeY51h1aqfpxwHU3H4y6L3jJpIB6wToff8pK/0DTIzqm9hTtU0c1mFJnBCgH Wf85RoWx04Hm8fskqQ1kZnMivH8MeL9OWCSXKtT59z+yqE46gSHym6GhmL/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlYvtRBUfq024NMHcYBoeGXUUPfAwHwYDVR0j BBgwFoAUZ9vm1vJG1/yRHWLmisLZgge62C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMC82N0RCRTZENkYy NDZEN0ZDOTExRDYyRTY4QUMyRDk4MjA3QkFEODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIwN0JB RDgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5 ODIwN0JBRDgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPp4cOXzmgjU/AcNeJQSHJFz0xpEzu1txO6 iMEJEhfIHtLMwSjrH3nEbB3wC+IHyYCLPoUQIQyskPIwWvWBb5Whbw4IyCaLF14r iLDv17kUVh9iAPgXykECqhx0Ond4LHipAUBqsnBOhsS+pzsg6hG3Ko6GROk0ne8Z +fm+foXRG/zoDRH/H2qeYcLR+BJW9qsK6UQPlEoGmW2dZZBHn3s5ZLGoZrtCKU9A vTmhxAijH+Jfix4zn8bsqyee6WhOBqzmDBBXVw95PRm0muhYcy3hWsEVz3C0O1JC bil8F5PZEAAr7LpTFtHXnhjUvgx+9Yig50Z4jdhezNbUN8ERmwU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:12:30 2026 by rpki-client