$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: 8xiExg5ZsDnQoKuYUa63GSS2Gdxdi5xDoWQQR2Z/7s8= Subject key identifier: B9:08:5F:01:B0:41:C8:3A:0E:70:46:7D:C0:88:0E:80:FB:96:AA:A2 Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 64C8AE44D9BBBD329CC6EBDA53D174E2A99A442A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 03:06:33 +0000 Manifest this update: Tue 03 Nov 2026 03:01:33 +0000 Manifest next update: Wed 04 Nov 2026 05:33:33 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: Nx95I92AYGmIGiZzqiNKqb5TFLCBiMHCbizO5OFDCm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 05:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c8:ae:44:d9:bb:bd:32:9c:c6:eb:da:53:d1:74:e2:a9:9a:44:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Nov 3 03:01:33 2026 GMT Not After : Nov 4 05:33:33 2026 GMT Subject: CN=B9085F01B041C83A0E70467DC0880E80FB96AAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:97:ae:9e:e6:85:61:c7:f3:d6:9b:56:dd: ad:3a:41:1d:37:48:c8:a8:13:17:73:8d:3f:a0:7c: 39:9c:32:f8:92:4e:98:19:18:02:1d:92:99:81:5a: d9:2e:1e:a9:5d:f2:93:ac:92:60:c3:f7:c1:c1:fc: 58:7b:e3:e0:2b:ef:a5:4b:06:26:c5:cc:9f:9c:c3: 4a:a6:2e:24:8c:63:2e:af:a3:45:46:0e:2c:48:37: d6:43:ff:a8:34:87:91:a3:02:d6:8c:53:2e:1f:85: 66:14:6b:e4:eb:7f:d0:f9:6e:d7:ce:57:2d:a2:80: 13:d7:73:f9:84:8e:1d:9a:ad:1a:de:bf:a0:3f:49: 6d:e9:b5:ae:71:81:29:b2:83:07:ae:54:c0:37:c3: 38:70:4a:bc:51:e6:42:68:58:f6:19:8b:22:29:b5: 86:45:d7:13:ec:d6:26:3a:b3:eb:7f:9c:1e:17:9b: 63:5e:1a:5b:3f:b9:4a:de:d4:6c:7e:8d:bd:34:56: 50:0c:d6:07:5c:f5:dd:41:1e:5f:71:84:12:48:80: 93:21:67:ad:0e:69:71:3e:35:c8:17:5b:88:c0:12: c3:66:7c:9d:84:24:24:8e:fd:6f:12:76:c3:0c:5d: 11:9c:08:7a:25:12:22:1c:46:d9:77:a3:42:c4:41: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:5F:01:B0:41:C8:3A:0E:70:46:7D:C0:88:0E:80:FB:96:AA:A2 X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:91:26:74:0a:97:46:7d:c6:2e:af:92:95:55:92:c9:34:d1: 11:d0:9c:8f:8c:d4:85:8b:bb:6a:64:b1:e5:67:74:6c:3e:52: fc:13:43:f3:54:b5:48:85:e4:ab:ed:3d:cf:2b:ea:2e:b3:a3: 6f:4b:b0:75:f9:a6:be:69:5c:c7:10:48:e1:c5:6f:66:d1:38: 8d:58:0a:93:ea:a5:9f:59:42:4e:00:05:7e:55:c8:e4:39:b9: 1a:1f:eb:2f:2d:f3:48:85:02:a7:c4:06:aa:53:ae:89:30:4e: 7a:a1:a4:e2:0f:03:42:cf:95:6f:d4:e0:26:c1:90:56:e2:38: df:f5:9c:f3:fd:cb:84:1d:b3:70:e6:fe:10:e5:b8:9b:f8:39: 4a:e8:6c:5b:cb:88:b3:7c:3b:8e:4b:dd:ce:c4:63:8c:b7:65: 49:96:95:68:2e:42:87:e4:02:4e:38:f4:6c:90:01:dd:b0:94: 39:76:1d:53:22:f6:5d:b1:e7:28:9e:f9:d5:52:2e:b0:21:97: 1b:3d:1a:9a:ec:53:94:c5:a5:9d:3d:a7:91:52:a2:ec:d8:69: e3:d0:9a:32:0d:48:4b:2b:91:78:b5:4d:ed:04:33:33:e0:bd: 28:04:5f:3d:86:37:64:69:48:83:9a:39:f4:6a:43:f3:4c:88: 97:b0:47:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMiuRNm7vTKcxuvaU9F04qmaRCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjExMDMwMzAxMzNaFw0yNjExMDQwNTMzMzNaMDMxMTAvBgNV BAMTKEI5MDg1RjAxQjA0MUM4M0EwRTcwNDY3REMwODgwRTgwRkI5NkFBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrF5eunuaFYcfz1ptW3a06QR03 SMioExdzjT+gfDmcMviSTpgZGAIdkpmBWtkuHqld8pOskmDD98HB/Fh74+Ar76VL BibFzJ+cw0qmLiSMYy6vo0VGDixIN9ZD/6g0h5GjAtaMUy4fhWYUa+Trf9D5btfO Vy2igBPXc/mEjh2arRrev6A/SW3pta5xgSmygweuVMA3wzhwSrxR5kJoWPYZiyIp tYZF1xPs1iY6s+t/nB4Xm2NeGls/uUre1Gx+jb00VlAM1gdc9d1BHl9xhBJIgJMh Z60OaXE+NcgXW4jAEsNmfJ2EJCSO/W8SdsMMXRGcCHolEiIcRtl3o0LEQeM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQhfAbBByDoOcEZ9wIgOgPuWqqIwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICRJnQKl0Z9xi6vkpVVksk00RHQnI+M1IWL u2pkseVndGw+UvwTQ/NUtUiF5KvtPc8r6i6zo29LsHX5pr5pXMcQSOHFb2bROI1Y CpPqpZ9ZQk4ABX5VyOQ5uRof6y8t80iFAqfEBqpTrokwTnqhpOIPA0LPlW/U4CbB kFbiON/1nPP9y4Qds3Dm/hDluJv4OUrobFvLiLN8O45L3c7EY4y3ZUmWlWguQofk Ak449GyQAd2wlDl2HVMi9l2x5yie+dVSLrAhlxs9GprsU5TFpZ09p5FSouzYaePQ mjINSEsrkXi1Te0EMzPgvSgEXz2GN2RpSIOaOfRqQ/NMiJewR6E= -----END CERTIFICATE-----Generated at Tue Nov 3 08:29:16 2026 by rpki-client