$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: WwZqPJMUoBhn42Cl5FAJjUacD9Ipj2bWu9BZ3NTKX/M= Subject key identifier: 09:7F:DB:C0:D1:17:A0:F5:A5:B0:31:FA:A2:29:A9:9A:CC:35:42:BE Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 7BFE3FDC063F343EB438F5588EE9D0526886FB39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: BF Signing time: Tue 22 Sep 2026 09:43:37 +0000 Manifest this update: Tue 22 Sep 2026 09:38:37 +0000 Manifest next update: Wed 23 Sep 2026 10:08:37 +0000 Files and hashes: 1: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 2: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 3: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: S0abd1JA/Wp1mNDkyCjZRKIkgULYf2xdks7EsAInoS0=) 4: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 5: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 10:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fe:3f:dc:06:3f:34:3e:b4:38:f5:58:8e:e9:d0:52:68:86:fb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Sep 22 09:38:37 2026 GMT Not After : Sep 23 10:08:37 2026 GMT Subject: CN=097FDBC0D117A0F5A5B031FAA229A99ACC3542BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:b1:ee:b8:03:be:c4:52:c6:0d:51:fc:26: 7e:77:b8:50:ba:58:dd:34:71:75:42:1a:c7:1d:4e: 4d:8b:0d:6f:b9:00:af:d4:b7:76:55:ef:70:1b:ad: c2:15:f2:d2:89:9e:96:08:f9:28:00:07:d2:24:23: ce:28:3c:3c:de:66:bf:c2:81:6b:34:b9:12:87:c5: b4:74:1f:71:50:28:e9:8c:ca:8e:d8:db:c6:d9:40: e7:ea:05:47:3d:8a:cc:3f:af:b7:51:de:aa:71:32: 57:2f:5d:eb:c6:48:d7:44:05:93:79:01:26:7d:63: 94:b2:ee:ba:7e:24:e2:43:59:e5:7f:10:eb:3a:f1: bc:ea:72:57:7b:8c:f5:31:29:fd:d3:ce:b7:ab:33: 88:ed:b3:27:be:b4:6f:2e:75:4d:74:6a:fd:c0:bf: c1:fa:4a:3f:31:39:cd:32:f1:90:6d:94:67:22:16: 15:8d:64:51:0e:f6:b8:f1:99:0d:1b:4d:e5:5b:06: da:23:ba:20:f0:0d:e0:c2:ce:90:fd:f5:e6:a2:ed: f2:17:23:5a:7f:bd:29:d3:93:ad:ca:08:3b:49:82: 0d:c7:c2:02:fe:d5:75:40:37:07:17:4d:5c:34:1b: bc:67:c0:5c:5b:ef:5f:b6:e0:a5:46:61:3e:37:87: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7F:DB:C0:D1:17:A0:F5:A5:B0:31:FA:A2:29:A9:9A:CC:35:42:BE X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:eb:79:24:a5:97:8c:77:9c:c5:16:24:21:e1:a7:fa:ea: f2:55:e3:56:41:dc:6b:8c:16:8f:4c:72:e8:f1:3d:a2:63:54: 8d:49:d2:50:4c:f1:38:40:a0:2e:e6:32:75:b5:f1:54:b9:37: c2:37:55:be:63:e8:f2:46:0d:fb:dc:7d:5e:28:3e:aa:6e:7a: a0:4d:9a:0b:e4:40:13:7b:53:8f:f9:dc:c8:8d:b8:67:38:cf: ec:95:8b:a3:59:f3:8f:3b:d4:e9:56:22:b4:94:cd:4d:95:e7: f2:e2:ba:d0:0a:8f:2e:0f:6b:4a:4c:2b:ad:81:b1:35:a3:4c: 3e:45:f7:38:71:d4:fc:90:f0:97:50:c8:66:19:da:59:e7:33: 1f:ac:0e:9d:30:fa:b1:81:8e:02:16:2a:e2:33:67:ed:8b:5b: 3b:28:bd:37:a5:da:ba:ce:d8:0a:86:02:aa:a4:e4:87:6b:34: 4d:07:17:c0:5d:d3:05:bf:27:c2:2e:36:e0:15:45:ac:57:ec: 1b:9f:8d:63:1d:c7:b0:1e:8c:5d:4e:02:85:89:f1:dd:ad:7d: 56:ca:9e:ca:e8:d7:82:8a:90:b3:69:c5:b3:93:e9:58:4e:9e: 49:35:d5:41:30:c7:49:76:f6:69:cf:8a:2f:1a:46:79:b9:59: e5:f6:6c:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/4/3AY/ND60OPVYjunQUmiG+zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA5MjIwOTM4MzdaFw0yNjA5MjMxMDA4MzdaMDMxMTAvBgNV BAMTKDA5N0ZEQkMwRDExN0EwRjVBNUIwMzFGQUEyMjlBOTlBQ0MzNTQyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPrHuuAO+xFLGDVH8Jn53uFC6 WN00cXVCGscdTk2LDW+5AK/Ut3ZV73AbrcIV8tKJnpYI+SgAB9IkI84oPDzeZr/C gWs0uRKHxbR0H3FQKOmMyo7Y28bZQOfqBUc9isw/r7dR3qpxMlcvXevGSNdEBZN5 ASZ9Y5Sy7rp+JOJDWeV/EOs68bzqcld7jPUxKf3TzrerM4jtsye+tG8udU10av3A v8H6Sj8xOc0y8ZBtlGciFhWNZFEO9rjxmQ0bTeVbBtojuiDwDeDCzpD99eai7fIX I1p/vSnTk63KCDtJgg3HwgL+1XVANwcXTVw0G7xnwFxb71+24KVGYT43h7o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCX/bwNEXoPWlsDH6oimpmsw1Qr4wHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9+63kkpZeMd5zFFiQh4af66vJV41ZB3GuM Fo9McujxPaJjVI1J0lBM8ThAoC7mMnW18VS5N8I3Vb5j6PJGDfvcfV4oPqpueqBN mgvkQBN7U4/53MiNuGc4z+yVi6NZ84871OlWIrSUzU2V5/LiutAKjy4Pa0pMK62B sTWjTD5F9zhx1PyQ8JdQyGYZ2lnnMx+sDp0w+rGBjgIWKuIzZ+2LWzsovTel2rrO 2AqGAqqk5IdrNE0HF8Bd0wW/J8IuNuAVRaxX7BufjWMdx7AejF1OAoWJ8d2tfVbK nsro14KKkLNpxbOT6VhOnkk11UEwx0l29mnPii8aRnm5WeX2bKM= -----END CERTIFICATE-----Generated at Wed Sep 23 02:22:36 2026 by rpki-client