$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: 6Ad2TF7V76XjlqqjCjpLhJwsxmpRG/Hmr2k/I+OCCDE= Subject key identifier: 34:1E:1C:DB:C4:78:50:CC:C5:50:DE:7C:48:A6:57:3B:F3:64:C7:6A Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 39B2D257FC84F5F7A61D69337688A1F7963B6709 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 05:47:56 +0000 Manifest this update: Wed 29 Jul 2026 05:42:56 +0000 Manifest next update: Thu 30 Jul 2026 09:38:56 +0000 Files and hashes: 1: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: PsMXTLi5gLWyg66tf5J/NkJsf2Vvn2cnpNHzQ+kGqSY=) 2: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 3: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 4: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 5: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b2:d2:57:fc:84:f5:f7:a6:1d:69:33:76:88:a1:f7:96:3b:67:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Jul 29 05:42:56 2026 GMT Not After : Jul 30 09:38:56 2026 GMT Subject: CN=341E1CDBC47850CCC550DE7C48A6573BF364C76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:11:8e:8f:9f:40:d4:6e:5c:82:ec:e7:e3: 33:66:81:73:b0:08:0f:36:76:ec:15:91:40:fd:30: 94:02:cf:cf:23:f5:bd:75:79:53:c5:c2:0b:d3:3a: f6:0b:d8:f4:7f:2b:c1:8c:f0:eb:d2:e6:df:8b:d3: b6:ea:70:56:9d:9d:c7:a6:77:a3:1f:ef:06:e7:07: b4:d8:67:71:74:c9:97:e4:1d:88:09:b0:95:69:90: 6a:14:ed:f4:9e:0a:4f:00:5f:d6:d6:23:f0:fd:1c: 9f:a5:dc:bc:4b:da:c2:3f:e0:5d:64:04:60:c4:22: d9:db:db:56:a8:04:38:a4:12:2f:be:3a:0a:db:5f: 51:75:e1:71:fb:10:25:c1:a3:c8:8e:7a:5e:ed:3b: e8:6a:e8:ce:70:4f:cb:7c:b3:a8:77:75:5b:8b:34: 5b:13:77:61:f0:9a:58:ba:9d:97:66:1e:21:55:aa: 64:f5:f7:c3:ad:fb:f4:1a:76:cf:49:f1:24:24:12: c7:39:2d:bf:5a:2d:78:2b:c2:d3:d3:2b:45:28:6f: 9d:c2:8e:9f:95:3c:e2:7e:8f:54:fd:62:63:84:33: 1a:0c:8e:7c:c2:2f:d3:ad:65:9e:74:7a:79:12:ec: af:9e:9f:af:18:5f:83:55:07:13:90:95:1f:b7:3f: 22:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:1C:DB:C4:78:50:CC:C5:50:DE:7C:48:A6:57:3B:F3:64:C7:6A X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e6:c3:10:40:6b:7d:41:4d:cd:8b:ae:b3:84:5a:b7:c8:44: c5:5d:52:36:9c:fc:88:71:e2:00:e5:2c:cd:cc:69:20:b7:5f: 14:52:8c:88:a1:4b:d8:8a:97:df:35:01:aa:2a:16:4f:7d:9e: 81:bb:3d:49:d3:b0:14:87:17:6f:3e:bd:43:e7:13:90:39:82: 94:c2:82:40:6c:67:0b:27:b9:3b:25:78:c5:48:ce:19:d2:69: bb:67:6f:f3:fc:9c:24:c0:67:bc:51:f6:39:50:38:27:46:1a: c7:c4:f6:8a:77:e4:b6:f3:7c:aa:15:49:8c:fc:c6:88:be:e3: 93:93:74:02:0f:20:ce:db:3e:86:65:d5:af:78:4a:17:44:12: 35:c0:b0:3f:c3:bd:90:38:cc:b6:d4:09:27:65:f9:55:9c:49: 32:50:da:61:57:cb:16:53:5b:60:13:27:d1:01:11:53:6f:ee: ee:6c:bf:21:33:3a:cf:83:df:69:af:c2:a3:bc:d6:01:c2:31: 9f:3f:a7:ba:c4:ef:17:66:82:32:ac:98:23:99:98:a5:aa:36: 71:43:6c:0c:ea:ce:4e:d9:8a:af:c5:dc:be:b1:d3:93:4a:f7: 16:4f:49:5c:62:0e:7a:64:b6:fd:f5:62:49:fd:a3:98:72:5a: b2:e5:f9:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObLSV/yE9femHWkzdoih95Y7ZwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA3MjkwNTQyNTZaFw0yNjA3MzAwOTM4NTZaMDMxMTAvBgNV BAMTKDM0MUUxQ0RCQzQ3ODUwQ0NDNTUwREU3QzQ4QTY1NzNCRjM2NEM3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6BGOj59A1G5cguzn4zNmgXOw CA82duwVkUD9MJQCz88j9b11eVPFwgvTOvYL2PR/K8GM8OvS5t+L07bqcFadncem d6Mf7wbnB7TYZ3F0yZfkHYgJsJVpkGoU7fSeCk8AX9bWI/D9HJ+l3LxL2sI/4F1k BGDEItnb21aoBDikEi++OgrbX1F14XH7ECXBo8iOel7tO+hq6M5wT8t8s6h3dVuL NFsTd2Hwmli6nZdmHiFVqmT198Ot+/Qads9J8SQkEsc5Lb9aLXgrwtPTK0Uob53C jp+VPOJ+j1T9YmOEMxoMjnzCL9OtZZ50enkS7K+en68YX4NVBxOQlR+3PyIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNB4c28R4UMzFUN58SKZXO/Nkx2owHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/mwxBAa31BTc2LrrOEWrfIRMVdUjac/Ihx 4gDlLM3MaSC3XxRSjIihS9iKl981AaoqFk99noG7PUnTsBSHF28+vUPnE5A5gpTC gkBsZwsnuTsleMVIzhnSabtnb/P8nCTAZ7xR9jlQOCdGGsfE9op35LbzfKoVSYz8 xoi+45OTdAIPIM7bPoZl1a94ShdEEjXAsD/DvZA4zLbUCSdl+VWcSTJQ2mFXyxZT W2ATJ9EBEVNv7u5svyEzOs+D32mvwqO81gHCMZ8/p7rE7xdmgjKsmCOZmKWqNnFD bAzqzk7Ziq/F3L6x05NK9xZPSVxiDnpktv31Ykn9o5hyWrLl+XM= -----END CERTIFICATE-----Generated at Wed Jul 29 08:59:31 2026 by rpki-client