$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft File: 67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json) Hash identifier: D6vQ1he4hqNoSIHFI0iPTilwDOCYe7vB+UaaLMPbJeQ= Subject key identifier: 69:EC:DF:DE:10:B5:02:46:01:8E:F8:00:E3:19:81:BC:2F:D5:00:1C Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 3C69952D297A337805EAE3DEF0B76F45694A5DF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 10:09:28 +0000 Manifest this update: Tue 28 Jul 2026 10:04:28 +0000 Manifest next update: Wed 29 Jul 2026 10:37:28 +0000 Files and hashes: 1: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=) 2: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=) 3: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=) 4: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=) 5: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=) 6: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: BtKoY7R1SK982bCqdYMYNcapVsjMVu+wQng8XTcTibg=) 7: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=) 8: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=) 9: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=) 10: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 10:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:69:95:2d:29:7a:33:78:05:ea:e3:de:f0:b7:6f:45:69:4a:5d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: Jul 28 10:04:28 2026 GMT Not After : Jul 29 10:37:28 2026 GMT Subject: CN=69ECDFDE10B50246018EF800E31981BC2FD5001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:ac:a6:a4:24:3f:a9:6e:90:48:44:18:cc: f4:8b:aa:1b:61:e1:70:8c:b9:e6:d6:9f:43:3d:92: 87:54:25:85:75:4c:02:d1:9b:52:e3:08:82:0e:98: 29:ae:cb:07:b7:e1:06:64:44:77:1c:14:c0:71:a2: bd:4b:70:33:8f:2f:13:7f:df:d7:bc:78:47:a6:32: 27:70:3a:18:61:4c:02:dd:bb:9c:20:1c:fe:97:0b: 8a:d3:cf:30:7c:6d:bf:b2:b4:55:2b:1d:75:42:5a: 90:6c:6b:45:e6:bd:e1:ba:77:db:44:5d:c4:be:ad: d7:16:5e:52:d9:ef:ea:1a:d6:a3:ba:16:9e:7f:4f: b7:ac:c6:2a:b2:cc:bf:74:94:61:52:0b:98:05:8b: 25:0b:cb:ea:55:41:b0:40:d8:bc:d8:6d:62:82:4e: 44:59:70:dd:96:80:64:ac:94:4d:e5:80:18:24:71: 3c:36:d5:d7:ca:5f:25:05:4b:43:a2:cf:90:18:af: e0:30:24:5c:28:02:50:fa:bd:23:eb:5a:73:22:35: 90:87:40:2b:36:5f:2a:06:6f:fc:b3:66:a4:2e:ae: 24:ab:d6:f4:0f:7a:74:59:4f:d7:76:15:e9:d2:17: 4b:f4:69:4d:20:db:74:d9:38:94:5c:ed:2d:d1:7c: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:DF:DE:10:B5:02:46:01:8E:F8:00:E3:19:81:BC:2F:D5:00:1C X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:14:3c:d4:e3:c3:62:9d:03:98:19:b6:66:ff:63:23:97:36: 82:23:dd:af:ea:89:80:86:80:da:2b:97:03:81:37:e2:b1:f3: 02:03:e6:47:ca:9c:a1:67:bb:62:44:6a:33:44:04:5b:cc:d2: ba:66:14:19:5e:b1:b5:c7:4d:02:8f:cb:9f:93:ea:36:32:0d: 64:c2:3b:17:74:ca:1f:44:bc:dc:33:04:84:c7:6d:1a:c5:35: 0b:6b:4b:ef:ef:7f:9d:a1:08:7e:e8:ef:fe:3e:08:48:e6:d1: f3:60:b0:5a:aa:56:27:ed:ff:2a:ef:87:78:3a:ce:f1:f1:6a: 88:42:db:82:60:49:0e:33:41:06:b7:27:a5:b8:fd:36:fd:d4: cb:a4:88:3a:aa:64:cd:06:af:8e:e2:a9:ad:f2:d2:94:d2:6e: 16:6f:89:40:9a:c6:0b:df:5d:60:41:4e:22:a8:ac:4b:61:a5: cf:78:9b:80:a7:c6:60:cf:be:f8:af:61:65:c1:03:1b:02:a5: b3:52:3c:74:b5:35:ca:81:55:0d:94:c4:bc:b2:a3:20:7a:e6: d1:f5:e6:b5:ce:24:08:1d:86:36:c8:3b:97:d0:dc:74:e1:71: 01:f6:31:fa:86:41:56:c3:64:5f:66:3b:47:2a:a1:3e:a4:e6: be:61:bd:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGmVLSl6M3gF6uPe8LdvRWlKXfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA3MjgxMDA0MjhaFw0yNjA3MjkxMDM3MjhaMDMxMTAvBgNV BAMTKDY5RUNERkRFMTBCNTAyNDYwMThFRjgwMEUzMTk4MUJDMkZENTAwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGqympCQ/qW6QSEQYzPSLqhth 4XCMuebWn0M9kodUJYV1TALRm1LjCIIOmCmuywe34QZkRHccFMBxor1LcDOPLxN/ 39e8eEemMidwOhhhTALdu5wgHP6XC4rTzzB8bb+ytFUrHXVCWpBsa0XmveG6d9tE XcS+rdcWXlLZ7+oa1qO6Fp5/T7esxiqyzL90lGFSC5gFiyULy+pVQbBA2LzYbWKC TkRZcN2WgGSslE3lgBgkcTw21dfKXyUFS0Oiz5AYr+AwJFwoAlD6vSPrWnMiNZCH QCs2XyoGb/yzZqQuriSr1vQPenRZT9d2FenSF0v0aU0g23TZOJRc7S3RfJbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaezf3hC1AkYBjvgA4xmBvC/VABwwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAUPNTjw2KdA5gZtmb/YyOXNoIj3a/qiYCG gNorlwOBN+Kx8wID5kfKnKFnu2JEajNEBFvM0rpmFBlesbXHTQKPy5+T6jYyDWTC Oxd0yh9EvNwzBITHbRrFNQtrS+/vf52hCH7o7/4+CEjm0fNgsFqqVift/yrvh3g6 zvHxaohC24JgSQ4zQQa3J6W4/Tb91MukiDqqZM0Gr47iqa3y0pTSbhZviUCaxgvf XWBBTiKorEthpc94m4CnxmDPvvivYWXBAxsCpbNSPHS1NcqBVQ2UxLyyoyB65tH1 5rXOJAgdhjbIO5fQ3HThcQH2MfqGQVbDZF9mO0cqoT6k5r5hvRE= -----END CERTIFICATE-----Generated at Wed Jul 29 03:28:57 2026 by rpki-client