$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: hq9FpFoGjNGp2C2JwckStZnDaX89xWAaJhtIpZ3Gaxc= Subject key identifier: 80:24:09:B8:19:13:25:01:0A:4F:DC:6E:EE:DE:45:28:AF:98:57:2C Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 63A43B20738A8309D8B7707B5D50410F0F4F6C32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: EC Signing time: Fri 17 Apr 2026 04:11:12 +0000 Manifest this update: Fri 17 Apr 2026 04:06:12 +0000 Manifest next update: Mon 20 Apr 2026 04:57:12 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: rplmxeTw8L+Pr0s+ZozPiNZiCu85Zz/mGhYigegO5s0=) 2: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a4:3b:20:73:8a:83:09:d8:b7:70:7b:5d:50:41:0f:0f:4f:6c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Apr 17 04:06:12 2026 GMT Not After : Apr 20 04:57:12 2026 GMT Subject: CN=802409B8191325010A4FDC6EEEDE4528AF98572C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:c7:38:c3:09:8d:d8:15:aa:43:82:ef:06: 68:42:6b:55:1e:4e:33:b5:3f:63:2f:6c:61:3a:e2: 1b:06:78:62:65:2f:3f:0f:df:b7:d3:7e:32:cd:85: fb:fb:51:ed:ce:0d:03:39:07:76:ce:30:36:e5:08: cd:58:16:23:9e:7f:7e:5c:d0:9e:28:10:9e:4b:33: ae:9f:3c:c2:69:f3:1c:b8:3e:2e:08:bf:97:ce:c5: 81:00:af:a9:8c:dd:69:d0:1a:4b:c3:c0:bf:44:96: f6:fe:37:0b:4f:ae:5a:5e:47:ee:3b:83:f9:03:5b: 5b:e9:51:3b:26:7e:17:9b:52:7b:ef:b4:dd:ca:f5: 99:1b:2b:8e:76:df:fa:17:34:6b:df:77:51:5c:09: 32:1b:95:8a:90:66:c7:27:f1:2b:bd:22:14:17:ce: ca:cf:4b:e6:15:2d:ed:a7:28:9e:fc:e0:d4:15:b2: 4a:eb:3b:db:f6:24:cf:83:4f:ef:33:fd:e2:e2:b1: 1a:8d:1d:68:62:a0:aa:37:ea:de:db:5e:ca:78:a0: 49:b1:c8:05:51:c6:77:38:ef:4a:10:21:51:1b:9c: e8:a6:87:30:6f:3a:71:38:70:54:ec:dc:91:79:02: b1:fd:a8:05:e4:bd:c3:f8:3d:3d:6b:b5:4c:8e:db: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:09:B8:19:13:25:01:0A:4F:DC:6E:EE:DE:45:28:AF:98:57:2C X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f6:2b:f7:6a:e6:1b:3f:96:8d:88:c7:28:1d:4a:3a:da:3c: cc:8a:9e:31:f5:5f:dc:de:43:54:ff:cb:bd:76:3c:ca:6e:9c: eb:9e:b4:74:37:f5:03:86:b7:41:60:ee:9b:23:47:95:07:5b: f3:54:26:1d:6f:b2:fa:dc:4e:6a:7b:10:bb:84:7e:3b:64:f5: 91:ff:cb:c6:9a:d5:16:41:9e:66:3f:06:7b:ea:64:5f:b1:b5: 16:34:3f:96:41:ea:2c:0b:7e:3b:7b:6c:45:95:e9:91:f1:8f: b4:cb:74:1d:32:d6:0b:f0:19:23:0e:d7:fa:3d:01:9f:c6:a8: bc:b3:e0:f7:41:57:a7:ff:8a:d0:a6:01:db:39:6f:49:b0:51: 6d:f9:37:13:d9:6e:36:31:08:d8:96:10:d8:c7:c8:77:ed:26: 43:32:3d:e8:b7:89:bb:c2:69:39:90:c1:03:ff:5c:d6:38:c0: 1f:47:c5:08:dc:96:a4:a1:ef:5e:02:83:fa:9e:fe:d9:0b:f4: 42:9b:df:d7:d1:6e:46:4c:cd:c3:63:92:92:b3:09:34:b7:a2: 6d:e5:77:b0:30:c4:57:2e:e9:c6:10:b9:b9:3d:84:9c:98:1f: bc:8c:eb:a8:6f:48:eb:f5:ce:bb:00:44:5d:f3:e7:0f:db:70: b6:42:4d:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6Q7IHOKgwnYt3B7XVBBDw9PbDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNjA0MTcwNDA2MTJaFw0yNjA0MjAwNDU3MTJaMDMxMTAvBgNV BAMTKDgwMjQwOUI4MTkxMzI1MDEwQTRGREM2RUVFREU0NTI4QUY5ODU3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvsc4wwmN2BWqQ4LvBmhCa1Ue TjO1P2MvbGE64hsGeGJlLz8P37fTfjLNhfv7Ue3ODQM5B3bOMDblCM1YFiOef35c 0J4oEJ5LM66fPMJp8xy4Pi4Iv5fOxYEAr6mM3WnQGkvDwL9Elvb+NwtPrlpeR+47 g/kDW1vpUTsmfhebUnvvtN3K9ZkbK4523/oXNGvfd1FcCTIblYqQZscn8Su9IhQX zsrPS+YVLe2nKJ784NQVskrrO9v2JM+DT+8z/eLisRqNHWhioKo36t7bXsp4oEmx yAVRxnc470oQIVEbnOimhzBvOnE4cFTs3JF5ArH9qAXkvcP4PT1rtUyO27hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCQJuBkTJQEKT9xu7t5FKK+YVywwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD2K/dq5hs/lo2IxygdSjraPMyKnjH1X9ze Q1T/y712PMpunOuetHQ39QOGt0Fg7psjR5UHW/NUJh1vsvrcTmp7ELuEfjtk9ZH/ y8aa1RZBnmY/BnvqZF+xtRY0P5ZB6iwLfjt7bEWV6ZHxj7TLdB0y1gvwGSMO1/o9 AZ/GqLyz4PdBV6f/itCmAds5b0mwUW35NxPZbjYxCNiWENjHyHftJkMyPei3ibvC aTmQwQP/XNY4wB9HxQjclqSh714Cg/qe/tkL9EKb39fRbkZMzcNjkpKzCTS3om3l d7AwxFcu6cYQubk9hJyYH7yM66hvSOv1zrsARF3z5w/bcLZCTfQ= -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:17 2026 by rpki-client