$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft File: 67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json) Hash identifier: 6QX04ZY/v8O7Wm7VrWGWTsF1U2GWxboxsS5p1QESreM= Subject key identifier: 5E:EC:8A:09:D7:D0:CB:A6:0E:50:44:67:58:98:FF:F5:C3:82:32:67 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 5E7C75D0D9DAA5A60AC1167834122A28FDD14494 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 16:37:03 +0000 Manifest this update: Mon 21 Sep 2026 16:32:03 +0000 Manifest next update: Tue 22 Sep 2026 17:37:03 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=) 2: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=) 3: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=) 4: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=) 5: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=) 6: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: MO6zSeKd+Gl767byxbrYuXVXVulLXxeSopZckyVPVm4=) 7: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=) 8: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=) 9: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=) 10: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7c:75:d0:d9:da:a5:a6:0a:c1:16:78:34:12:2a:28:fd:d1:44:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: Sep 21 16:32:03 2026 GMT Not After : Sep 22 17:37:03 2026 GMT Subject: CN=5EEC8A09D7D0CBA60E5044675898FFF5C3823267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:e2:6d:4a:f8:73:f8:0d:12:3e:06:e9:b7: 02:ee:1c:32:7a:33:20:25:35:f8:09:89:9c:c5:c0: b5:86:30:38:9a:c6:69:c2:03:9a:78:7b:ae:20:79: 7d:83:17:a7:ec:f4:04:66:72:93:b2:3d:1d:49:d9: f1:e5:c4:07:59:3b:ec:50:97:2c:cc:11:4a:6d:14: cf:57:9c:df:9d:2a:ec:92:5c:57:41:c8:f7:2d:1a: 94:fa:ff:60:1c:07:c5:7d:9b:28:37:9d:0a:21:e7: 3c:53:f3:70:e1:7c:eb:4d:6e:3f:bb:22:bf:9f:d3: 01:d3:b6:11:6e:3a:c0:ff:fe:9c:ca:23:9d:96:4e: f8:aa:1b:ce:ee:27:5d:97:4c:99:83:2e:b1:cc:03: 83:fa:20:a1:72:1c:eb:2b:77:9d:31:80:30:cf:dd: bf:40:6c:07:c7:cb:f1:96:7b:e5:98:ab:5d:04:36: bb:80:00:fb:3b:f6:da:6a:d7:4a:20:ba:21:6e:f2: 43:8a:4e:3f:19:97:9a:ed:7c:70:33:f0:55:f0:c0: 11:59:5b:3e:e6:69:57:14:3b:1d:21:62:7a:20:23: 45:31:a0:20:88:9e:dc:c0:20:6b:65:b6:9c:37:4f: f8:7e:af:cb:0f:2c:42:06:9a:d5:ea:aa:9f:f9:75: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EC:8A:09:D7:D0:CB:A6:0E:50:44:67:58:98:FF:F5:C3:82:32:67 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b8:c5:dc:68:e3:03:ab:80:a7:a2:89:d5:65:8c:de:41:06: ae:38:0a:b5:5b:b0:b2:51:a3:42:d1:d4:57:53:2e:76:c9:27: c2:46:44:96:4c:91:1c:7c:4f:ae:54:98:03:16:c9:58:e5:f2: be:bc:17:6e:07:a8:0a:8b:15:f4:0f:cf:f4:f6:f0:f0:c6:b0: 5e:d4:d0:d0:31:fe:a4:65:42:46:7e:31:47:d6:d9:4d:83:96: 05:1b:56:6c:84:06:f5:38:61:d5:0b:32:71:ed:56:1a:24:ff: 8f:14:f9:c2:f7:42:cb:12:5c:1b:4f:83:8b:eb:c9:a2:8d:f6: 15:aa:16:2c:48:57:b3:40:1d:32:45:c7:24:45:73:ef:70:7f: 6e:af:93:43:fa:32:74:d6:2b:e3:95:45:45:dc:fe:34:d5:ae: 13:01:ad:ac:cb:d4:3c:23:55:86:9d:74:ec:a4:97:74:6b:5e: 79:bc:ff:c2:c8:ce:f1:d7:72:96:3a:de:f0:a4:67:a6:dc:a6: bd:e2:af:71:d2:92:00:16:ee:db:45:76:f3:9b:56:78:53:0c: ff:ca:7a:f4:30:3d:d4:5b:48:cb:9d:fc:c5:c7:b4:fa:33:ae: be:af:1d:86:ba:c7:ec:6d:bc:d3:03:bc:f4:c2:95:df:d8:65: 98:37:24:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnx10NnapaYKwRZ4NBIqKP3RRJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA5MjExNjMyMDNaFw0yNjA5MjIxNzM3MDNaMDMxMTAvBgNV BAMTKDVFRUM4QTA5RDdEMENCQTYwRTUwNDQ2NzU4OThGRkY1QzM4MjMyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7eJtSvhz+A0SPgbptwLuHDJ6 MyAlNfgJiZzFwLWGMDiaxmnCA5p4e64geX2DF6fs9ARmcpOyPR1J2fHlxAdZO+xQ lyzMEUptFM9XnN+dKuySXFdByPctGpT6/2AcB8V9myg3nQoh5zxT83DhfOtNbj+7 Ir+f0wHTthFuOsD//pzKI52WTviqG87uJ12XTJmDLrHMA4P6IKFyHOsrd50xgDDP 3b9AbAfHy/GWe+WYq10ENruAAPs79tpq10oguiFu8kOKTj8Zl5rtfHAz8FXwwBFZ Wz7maVcUOx0hYnogI0UxoCCIntzAIGtltpw3T/h+r8sPLEIGmtXqqp/5dfZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXuyKCdfQy6YOUERnWJj/9cOCMmcwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO4xdxo4wOrgKeiidVljN5BBq44CrVbsLJR o0LR1FdTLnbJJ8JGRJZMkRx8T65UmAMWyVjl8r68F24HqAqLFfQPz/T28PDGsF7U 0NAx/qRlQkZ+MUfW2U2DlgUbVmyEBvU4YdULMnHtVhok/48U+cL3QssSXBtPg4vr yaKN9hWqFixIV7NAHTJFxyRFc+9wf26vk0P6MnTWK+OVRUXc/jTVrhMBrazL1Dwj VYaddOykl3RrXnm8/8LIzvHXcpY63vCkZ6bcpr3ir3HSkgAW7ttFdvObVnhTDP/K evQwPdRbSMud/MXHtPozrr6vHYa6x+xtvNMDvPTCld/YZZg3JIc= -----END CERTIFICATE-----Generated at Tue Sep 22 01:29:46 2026 by rpki-client