$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: JpEOAo4BGgAbe3FKRBBSEFlbUf09TxcBY4KAPGyzHno= Subject key identifier: 13:07:F1:F1:33:39:9F:1C:20:9D:44:F1:AF:66:03:F5:FE:EA:DE:9B Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 57FD87E711577E5A42CAC8CD31552D06886FCD20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 06:29:19 +0000 Manifest this update: Mon 15 Jun 2026 06:24:19 +0000 Manifest next update: Tue 16 Jun 2026 09:09:19 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: gzSjT1pNzE+OyYXbnzMS1Sg4rvwx+np3RHucMvOmYbQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 09:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fd:87:e7:11:57:7e:5a:42:ca:c8:cd:31:55:2d:06:88:6f:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Jun 15 06:24:19 2026 GMT Not After : Jun 16 09:09:19 2026 GMT Subject: CN=1307F1F133399F1C209D44F1AF6603F5FEEADE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:73:6d:51:d4:c2:80:c8:50:bb:82:50:79: 81:86:33:ee:c9:a7:77:71:fc:e2:32:b5:50:07:25: 45:03:d3:9b:63:5c:30:4f:90:86:a8:25:9d:17:31: d7:72:83:a8:60:47:a4:b2:94:97:4c:3c:65:40:7d: 32:44:91:f2:d4:9d:8a:f2:27:34:bb:eb:0f:2d:09: f1:bc:4a:5d:b7:d6:e7:48:3a:3c:26:23:94:ac:56: ec:16:ae:60:da:64:60:fe:7e:b9:be:6c:49:84:dc: d5:f3:68:34:e0:33:18:43:ed:53:ec:c4:59:e4:14: 7a:76:87:d4:7d:79:fe:4a:ce:21:06:5f:bb:8d:a6: c2:16:5d:a9:b8:63:ee:7e:8b:a6:a1:5c:73:99:20: ee:ce:e7:90:5f:75:fa:8a:db:c4:19:84:55:91:7d: 75:45:8b:51:9d:54:57:49:e8:3c:00:67:61:b8:9a: 47:da:8b:7b:fb:15:35:7c:f7:a2:94:11:f5:2e:56: ad:54:96:36:23:7d:a5:21:df:c0:ba:2d:b7:b4:4a: d0:11:3b:51:99:49:85:90:54:0f:09:f8:46:aa:13: 26:97:cc:0e:07:3b:59:d8:af:8d:ca:38:35:a9:03: 0c:8f:ff:58:90:a7:b3:b5:14:bc:8e:41:5e:96:75: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:F1:F1:33:39:9F:1C:20:9D:44:F1:AF:66:03:F5:FE:EA:DE:9B X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f6:07:17:bd:fa:5e:6b:5f:7d:3d:76:6c:0d:bc:16:9f:fe: af:0e:e1:07:50:af:bf:3c:3d:47:0a:44:45:4b:14:ee:0f:35: e8:8d:46:22:36:3b:0b:90:ba:72:6a:19:b5:04:3b:22:e3:8d: 9a:c3:3d:bd:e2:10:a8:df:2e:3b:09:3b:67:cc:c0:53:d5:3c: aa:73:43:85:e5:f7:01:69:e2:b1:0c:25:6e:2f:f4:fe:d1:e2: 8f:31:f7:45:f0:cc:0f:a6:2a:b6:75:c3:c6:a5:9f:56:80:4b: a1:04:64:dd:6c:59:f9:9f:b8:6c:65:32:0c:14:fc:cd:37:5f: a1:09:c1:4c:a4:42:a6:ef:ac:00:8c:2a:a1:67:ae:5f:99:05: b9:3c:26:63:fe:7c:f8:80:78:fc:fb:d1:44:7d:9f:d9:fa:9f: cc:0a:85:ce:ed:18:b3:4d:65:a5:ec:02:02:0f:80:40:bf:46: 7b:79:49:f2:92:a2:6d:ac:d6:c1:f2:92:29:ea:cb:95:cb:0e: 8f:5f:c2:aa:2a:de:05:55:f2:c1:a8:3d:cd:0f:78:d1:c4:bc: 77:8d:1b:a5:9c:a5:c5:dc:d3:95:1a:70:df:ba:88:5d:95:8e: 30:43:aa:26:eb:a0:c9:98:49:9e:de:33:92:75:00:13:58:42: cf:ea:22:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/2H5xFXflpCysjNMVUtBohvzSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA2MTUwNjI0MTlaFw0yNjA2MTYwOTA5MTlaMDMxMTAvBgNV BAMTKDEzMDdGMUYxMzMzOTlGMUMyMDlENDRGMUFGNjYwM0Y1RkVFQURFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q3NtUdTCgMhQu4JQeYGGM+7J p3dx/OIytVAHJUUD05tjXDBPkIaoJZ0XMddyg6hgR6SylJdMPGVAfTJEkfLUnYry JzS76w8tCfG8Sl231udIOjwmI5SsVuwWrmDaZGD+frm+bEmE3NXzaDTgMxhD7VPs xFnkFHp2h9R9ef5KziEGX7uNpsIWXam4Y+5+i6ahXHOZIO7O55BfdfqK28QZhFWR fXVFi1GdVFdJ6DwAZ2G4mkfai3v7FTV896KUEfUuVq1UljYjfaUh38C6Lbe0StAR O1GZSYWQVA8J+EaqEyaXzA4HO1nYr43KODWpAwyP/1iQp7O1FLyOQV6WdXajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEwfx8TM5nxwgnUTxr2YD9f7q3pswHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz2Bxe9+l5rX309dmwNvBaf/q8O4QdQr788 PUcKREVLFO4PNeiNRiI2OwuQunJqGbUEOyLjjZrDPb3iEKjfLjsJO2fMwFPVPKpz Q4Xl9wFp4rEMJW4v9P7R4o8x90XwzA+mKrZ1w8aln1aAS6EEZN1sWfmfuGxlMgwU /M03X6EJwUykQqbvrACMKqFnrl+ZBbk8JmP+fPiAePz70UR9n9n6n8wKhc7tGLNN ZaXsAgIPgEC/Rnt5SfKSom2s1sHykinqy5XLDo9fwqoq3gVV8sGoPc0PeNHEvHeN G6WcpcXc05UacN+6iF2VjjBDqibroMmYSZ7eM5J1ABNYQs/qIoE= -----END CERTIFICATE-----Generated at Mon Jun 15 20:05:13 2026 by rpki-client