$ rpki-client -vvf repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft File: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft (raw, json) Hash identifier: qcXf6E8cupkNoAyky6pNZjuXFiS+j5QC3RUHacYUn3k= Subject key identifier: D4:6D:79:53:18:1A:4B:A5:2E:D1:4C:78:04:60:39:AE:7C:0A:E3:3F Authority key identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F Certificate issuer: /CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Certificate serial: 0BDA80A6676B8F785A129EB7393FE2230B36C61F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft Manifest number: 0D Signing time: Tue 17 Mar 2026 11:52:06 +0000 Manifest this update: Tue 17 Mar 2026 11:47:06 +0000 Manifest next update: Fri 20 Mar 2026 16:36:06 +0000 Files and hashes: 1: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl (hash: 984oFlAUmDGaYT/BC4+C4QIcim2CIusX6o9hzGAnQrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 16:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:da:80:a6:67:6b:8f:78:5a:12:9e:b7:39:3f:e2:23:0b:36:c6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Validity Not Before: Mar 17 11:47:06 2026 GMT Not After : Mar 20 16:36:06 2026 GMT Subject: CN=D46D7953181A4BA52ED14C78046039AE7C0AE33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:ef:cd:3a:15:33:32:18:24:06:a9:88:6d: 9b:53:ed:36:f3:f7:ab:bb:50:2d:aa:fd:3f:79:04: 1f:e8:d3:4f:81:71:7a:af:6e:e6:86:88:2e:15:90: f1:31:63:cb:e9:f7:99:61:ad:d1:bd:e0:32:5d:fd: 99:58:03:d4:31:17:c2:78:db:aa:ff:ee:8e:ea:74: 62:fa:34:e2:01:fd:69:0c:77:af:f9:c7:e8:0b:c8: bc:97:d8:cc:9f:0e:f1:5b:47:ad:0f:f3:e3:6b:50: a5:94:48:aa:e1:8b:01:8e:a5:df:8e:0a:85:53:7e: 0e:50:46:32:72:64:97:34:cd:c4:12:c9:4d:1c:50: a9:32:97:d4:77:c4:3f:ee:7c:8b:6a:0d:aa:05:4c: 18:41:63:91:6e:c2:2c:20:d7:75:27:f2:b5:78:1c: 22:70:0c:f2:26:8e:bc:14:41:e0:be:9b:b6:b2:23: 43:75:c8:71:59:55:fe:00:8d:ad:87:63:9f:28:f6: 8f:64:2a:41:ce:9b:ae:6c:2e:ef:e9:16:60:e8:b2: a1:5a:9a:1a:49:75:f1:06:12:04:6f:ea:14:20:d7: d6:c9:a0:cc:30:ef:2a:91:1d:11:ca:89:01:13:0e: bf:1c:95:3b:92:5d:f6:7b:7e:50:73:0b:95:d2:6e: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6D:79:53:18:1A:4B:A5:2E:D1:4C:78:04:60:39:AE:7C:0A:E3:3F X509v3 Authority Key Identifier: keyid:67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f3:9f:48:54:f8:8d:9f:bc:45:18:40:b0:dd:6d:a6:8c:7e: fd:bd:21:80:92:a1:2d:98:15:e6:2c:4d:f5:14:df:0c:dd:01: b9:91:f3:7e:6f:59:ba:f4:2b:f8:4e:b7:04:0b:86:65:9b:07: 6b:51:a3:ff:ae:3e:96:c5:c0:2f:a5:4a:76:73:a2:3d:3e:18: 0e:f6:13:69:c0:21:e6:bc:f6:f9:4d:e8:62:bc:43:82:10:21: 5f:d9:50:70:d1:2b:71:a1:ad:19:37:ae:0e:d3:98:4a:98:fb: 46:4c:c3:6d:9c:44:ce:5f:7f:7b:a9:f0:e3:45:4f:c8:83:60: 0e:3a:1c:f8:e6:fc:d9:e4:78:5e:92:44:a5:aa:57:20:0e:67: d4:e7:1d:92:30:29:61:44:50:25:5e:0b:0c:16:9d:aa:19:cc: be:50:88:da:37:dc:8f:31:97:e4:48:f0:63:70:cb:bf:10:69: e6:9a:ec:cc:d6:9a:0a:8f:6d:fe:45:6a:47:48:2f:e4:eb:99: 96:d5:5a:65:a8:f1:c7:7b:a2:f3:b7:7a:73:ab:fd:f3:51:99: ff:19:ae:af:88:16:39:f3:4c:ca:a9:85:b6:81:b5:c4:74:47: 02:84:d5:30:3c:e5:9c:88:36:39:bd:e3:8f:de:bf:b1:bb:fc: 9e:c2:14:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9qApmdrj3haEp63OT/iIws2xh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIw N0JBRDgyRjAeFw0yNjAzMTcxMTQ3MDZaFw0yNjAzMjAxNjM2MDZaMDMxMTAvBgNV BAMTKEQ0NkQ3OTUzMTgxQTRCQTUyRUQxNEM3ODA0NjAzOUFFN0MwQUUzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClu/NOhUzMhgkBqmIbZtT7Tbz 96u7UC2q/T95BB/o00+BcXqvbuaGiC4VkPExY8vp95lhrdG94DJd/ZlYA9QxF8J4 26r/7o7qdGL6NOIB/WkMd6/5x+gLyLyX2MyfDvFbR60P8+NrUKWUSKrhiwGOpd+O CoVTfg5QRjJyZJc0zcQSyU0cUKkyl9R3xD/ufItqDaoFTBhBY5Fuwiwg13Un8rV4 HCJwDPImjrwUQeC+m7ayI0N1yHFZVf4Aja2HY58o9o9kKkHOm65sLu/pFmDosqFa mhpJdfEGEgRv6hQg19bJoMww7yqRHRHKiQETDr8clTuSXfZ7flBzC5XSbkzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1G15UxgaS6Uu0Ux4BGA5rnwK4z8wHwYDVR0j BBgwFoAUZ9vm1vJG1/yRHWLmisLZgge62C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Mjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMC82N0RCRTZENkYy NDZEN0ZDOTExRDYyRTY4QUMyRDk4MjA3QkFEODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5ODIwN0JB RDgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzAvNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2MkU2OEFDMkQ5 ODIwN0JBRDgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3zn0hU+I2fvEUYQLDdbaaMfv29IYCSoS2Y FeYsTfUU3wzdAbmR835vWbr0K/hOtwQLhmWbB2tRo/+uPpbFwC+lSnZzoj0+GA72 E2nAIea89vlN6GK8Q4IQIV/ZUHDRK3GhrRk3rg7TmEqY+0ZMw22cRM5ff3up8ONF T8iDYA46HPjm/NnkeF6SRKWqVyAOZ9TnHZIwKWFEUCVeCwwWnaoZzL5QiNo33I8x l+RI8GNwy78Qaeaa7MzWmgqPbf5FakdIL+TrmZbVWmWo8cd7ovO3enOr/fNRmf8Z rq+IFjnzTMqphbaBtcR0RwKE1TA85ZyINjm944/ev7G7/J7CFC8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:54 2026 by rpki-client