$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: N1OXBanc0XSxZdVSnP3cTOI/Zvi3YypofRfOxoCyo7M= Subject key identifier: 5D:87:63:A3:E0:03:A0:55:D2:6C:BF:50:2B:FE:7B:55:CB:23:A0:40 Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 38A136EC00A28075E25D748B70BB7536EA097376 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:51:27 +0000 Manifest this update: Sun 20 Sep 2026 19:46:27 +0000 Manifest next update: Mon 21 Sep 2026 21:46:27 +0000 Files and hashes: 1: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: D+GQykHCtKBS01mYVLdTw7468s6XgQbJHmNYJo14pCo=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a1:36:ec:00:a2:80:75:e2:5d:74:8b:70:bb:75:36:ea:09:73:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Sep 20 19:46:27 2026 GMT Not After : Sep 21 21:46:27 2026 GMT Subject: CN=5D8763A3E003A055D26CBF502BFE7B55CB23A040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:9e:8c:d0:79:a3:b8:a7:59:eb:6e:3f:fe: 39:7f:f0:27:97:9c:0f:e0:e3:6c:a5:ae:6b:fb:b0: ec:34:b2:d7:b5:8a:87:d5:76:be:96:0e:8d:4a:c2: 1e:77:41:82:d2:fd:ba:dd:ba:3e:f8:25:ad:f6:44: bc:4d:ec:75:50:ba:33:67:3f:51:d2:4e:54:2c:7b: dc:da:6a:6a:61:0c:b1:d2:dd:3d:a2:6a:57:cd:af: 1b:7f:74:86:a6:b7:56:fc:34:54:49:67:ad:a0:ea: b6:2e:87:8e:81:15:3e:5e:0d:8f:fa:3e:07:3b:37: 99:4b:af:87:a2:da:0e:31:5b:31:6e:2d:a4:62:58: a7:86:c9:fb:94:19:1c:9d:e1:23:c0:8a:20:c0:db: 85:bc:e7:02:9c:b5:ab:ac:63:bd:51:27:ae:4c:56: d6:f3:79:5b:92:be:12:c4:c4:3c:4c:d5:67:1a:00: b0:be:e3:8f:aa:a5:91:d7:93:b6:f4:8b:0c:c2:12: be:7b:8d:64:60:44:5e:cb:af:f3:32:a3:21:00:0c: 81:2d:38:7d:05:ab:d4:70:73:7d:b6:11:14:e3:2e: 44:c1:69:9e:79:40:77:67:9d:b0:65:16:09:3d:cb: a7:d7:48:65:10:da:82:43:2e:3c:3c:c5:d0:31:11: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:87:63:A3:E0:03:A0:55:D2:6C:BF:50:2B:FE:7B:55:CB:23:A0:40 X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8b:f7:74:2f:dc:c5:1d:bc:c9:d2:42:65:56:c7:00:67:91: 51:5f:ed:0d:5f:67:dc:6b:3f:c1:ca:46:7e:d2:7d:65:20:cc: ef:17:93:f4:a1:b5:33:a3:ff:82:d1:98:03:c2:77:91:c7:de: e6:9c:68:3d:b4:7a:db:35:bd:94:66:9a:3a:b6:f3:9e:19:95: ce:12:7b:79:c0:00:c0:56:bc:6d:fd:c7:07:ff:a8:ae:8b:72: 9f:df:cf:9f:f2:04:bc:1e:06:d6:f1:87:5f:b7:e5:ea:33:3e: 37:98:2b:9d:30:ac:8c:03:ee:c9:fb:4c:15:a9:40:58:39:43: ca:49:01:57:eb:22:91:f7:92:38:b4:ff:c1:a7:6f:b4:3c:87: 70:82:a5:9e:35:58:5d:d9:7b:50:44:60:b2:15:b4:a2:8a:79: 97:7c:dd:97:82:bd:50:c7:e7:2e:36:d7:02:ed:2f:f8:72:65: 06:5d:5d:58:07:71:2e:73:f7:13:74:7d:fa:af:82:c9:1e:55: 09:4c:aa:78:22:62:31:42:37:0c:a4:6a:73:40:52:70:a2:b1: 33:44:26:43:ca:17:7c:57:8d:b5:5b:fb:1e:f4:32:39:30:d8: 75:9a:06:52:78:66:48:38:bb:46:d5:aa:fa:44:7d:8d:0b:5f: c6:6e:ee:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKE27ACigHXiXXSLcLt1NuoJc3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA5MjAxOTQ2MjdaFw0yNjA5MjEyMTQ2MjdaMDMxMTAvBgNV BAMTKDVEODc2M0EzRTAwM0EwNTVEMjZDQkY1MDJCRkU3QjU1Q0IyM0EwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGZ6M0HmjuKdZ624//jl/8CeX nA/g42ylrmv7sOw0ste1iofVdr6WDo1Kwh53QYLS/brduj74Ja32RLxN7HVQujNn P1HSTlQse9zaamphDLHS3T2ialfNrxt/dIamt1b8NFRJZ62g6rYuh46BFT5eDY/6 Pgc7N5lLr4ei2g4xWzFuLaRiWKeGyfuUGRyd4SPAiiDA24W85wKctausY71RJ65M VtbzeVuSvhLExDxM1WcaALC+44+qpZHXk7b0iwzCEr57jWRgRF7Lr/MyoyEADIEt OH0Fq9Rwc322ERTjLkTBaZ55QHdnnbBlFgk9y6fXSGUQ2oJDLjw8xdAxEQotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYdjo+ADoFXSbL9QK/57VcsjoEAwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2L93Qv3MUdvMnSQmVWxwBnkVFf7Q1fZ9xr P8HKRn7SfWUgzO8Xk/ShtTOj/4LRmAPCd5HH3uacaD20ets1vZRmmjq2854Zlc4S e3nAAMBWvG39xwf/qK6Lcp/fz5/yBLweBtbxh1+35eozPjeYK50wrIwD7sn7TBWp QFg5Q8pJAVfrIpH3kji0/8Gnb7Q8h3CCpZ41WF3Ze1BEYLIVtKKKeZd83ZeCvVDH 5y421wLtL/hyZQZdXVgHcS5z9xN0ffqvgskeVQlMqngiYjFCNwykanNAUnCisTNE JkPKF3xXjbVb+x70Mjkw2HWaBlJ4Zkg4u0bVqvpEfY0LX8Zu7iQ= -----END CERTIFICATE-----Generated at Mon Sep 21 03:03:27 2026 by rpki-client