$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft File: 67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json) Hash identifier: KDeJNu5aGOfUOZTtJPEBGsWXbNOyx/IPrXa1O9o/N0U= Subject key identifier: C9:6F:C0:D1:DD:00:6F:82:87:23:11:3B:B9:74:A8:1B:D7:A2:11:71 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 77B8B6ECEE5F0F89331027B73ED60E26628040E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:16:14 +0000 Manifest this update: Wed 03 Jun 2026 01:11:14 +0000 Manifest next update: Thu 04 Jun 2026 02:33:14 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=) 2: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=) 3: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=) 4: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=) 5: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=) 6: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=) 7: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=) 8: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=) 9: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: swFFOvcooJq56k+d9o41JbAXs8RrjCOW6hh0X/mlelc=) 10: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b8:b6:ec:ee:5f:0f:89:33:10:27:b7:3e:d6:0e:26:62:80:40:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: Jun 3 01:11:14 2026 GMT Not After : Jun 4 02:33:14 2026 GMT Subject: CN=C96FC0D1DD006F828723113BB974A81BD7A21171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:16:f7:10:c8:ec:54:71:60:ce:83:ec:66: 03:32:93:ab:55:28:b0:d8:27:f5:80:d9:af:5c:5a: 47:f6:55:3a:56:57:72:1d:5a:21:c9:d6:17:68:dc: fc:9f:aa:26:78:99:40:54:c8:ca:c9:7c:49:0e:b7: d3:07:9e:aa:67:71:36:03:0e:15:c7:fd:02:57:e1: 71:c4:72:b8:aa:e1:29:f7:31:5d:13:67:e2:64:3a: 42:f6:7e:3f:01:55:c2:11:4c:1d:f6:d0:87:63:10: 55:a4:b7:28:17:e0:d8:dd:e1:06:51:f3:ba:12:39: cc:a2:00:2c:26:58:60:80:c8:ee:c4:fc:94:25:2f: 12:87:c4:32:58:d9:83:2d:40:a0:d5:b9:51:c1:85: f6:75:17:a4:ae:d2:8a:3b:13:eb:3e:b0:0e:0c:e8: 0e:00:d1:d4:15:9c:68:54:89:bd:ae:b4:06:2b:48: 1b:11:12:0b:22:e0:da:93:66:56:65:1d:82:b4:4a: 6b:5e:d8:49:c5:18:9b:23:4d:4f:72:02:ab:dd:ab: 07:e4:b1:75:0f:ff:a2:03:a7:0b:f3:25:70:81:fd: 2d:de:1e:fd:c8:f4:88:95:ff:b7:6b:9c:e8:ba:0b: 2a:1a:15:0c:67:99:c9:98:b9:c3:4d:65:9d:ed:f1: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:C0:D1:DD:00:6F:82:87:23:11:3B:B9:74:A8:1B:D7:A2:11:71 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:05:77:f4:73:a0:44:11:ec:dc:85:8c:9a:09:c6:7e:90:ea: c0:e1:76:73:6d:17:2b:6c:06:79:91:dc:b2:ee:4f:5a:d1:a6: d5:6e:f4:44:57:3d:13:a7:35:02:6e:bb:a4:4b:8f:e4:ba:67: bd:1b:41:e6:c9:6c:13:42:42:a4:50:bb:0f:a1:47:e4:44:8c: 5a:ec:3a:28:7e:33:bf:d8:77:31:79:fc:48:c4:43:23:cf:7c: 76:c1:6e:ac:ec:5b:30:92:d0:a7:55:8a:88:de:a8:66:ae:cf: 4e:a0:e1:e2:f8:1a:20:55:69:ce:fb:d0:1d:ae:ef:87:51:d2: a7:36:77:6d:7b:ca:6a:45:ac:22:0d:5a:16:21:93:d9:02:de: 2c:a3:69:6f:d4:ce:49:80:1d:ec:dc:f8:12:de:a4:d5:2a:ab: ba:26:dd:a8:72:e9:d6:12:1c:b6:af:82:42:c2:db:5e:ea:c1: 3f:b8:71:eb:54:b8:b7:da:5f:1d:bd:b9:72:54:43:3d:c1:0e: 35:8e:b1:34:6b:34:fe:ab:60:fc:17:15:68:da:8d:39:9f:99: 3c:9e:18:a8:93:c6:01:c4:75:b5:eb:a8:15:d2:b0:d6:e3:3c: f2:b7:b1:d7:63:ad:9a:21:b1:0f:6f:c4:10:d4:a6:a5:86:e8: b4:c3:54:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7i27O5fD4kzECe3PtYOJmKAQOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjA2MDMwMTExMTRaFw0yNjA2MDQwMjMzMTRaMDMxMTAvBgNV BAMTKEM5NkZDMEQxREQwMDZGODI4NzIzMTEzQkI5NzRBODFCRDdBMjExNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuBb3EMjsVHFgzoPsZgMyk6tV KLDYJ/WA2a9cWkf2VTpWV3IdWiHJ1hdo3PyfqiZ4mUBUyMrJfEkOt9MHnqpncTYD DhXH/QJX4XHEcriq4Sn3MV0TZ+JkOkL2fj8BVcIRTB320IdjEFWktygX4Njd4QZR 87oSOcyiACwmWGCAyO7E/JQlLxKHxDJY2YMtQKDVuVHBhfZ1F6Su0oo7E+s+sA4M 6A4A0dQVnGhUib2utAYrSBsREgsi4NqTZlZlHYK0Smte2EnFGJsjTU9yAqvdqwfk sXUP/6IDpwvzJXCB/S3eHv3I9IiV/7drnOi6CyoaFQxnmcmYucNNZZ3t8QdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyW/A0d0Ab4KHIxE7uXSoG9eiEXEwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4Fd/RzoEQR7NyFjJoJxn6Q6sDhdnNtFyts BnmR3LLuT1rRptVu9ERXPROnNQJuu6RLj+S6Z70bQebJbBNCQqRQuw+hR+REjFrs Oih+M7/YdzF5/EjEQyPPfHbBbqzsWzCS0KdViojeqGauz06g4eL4GiBVac770B2u 74dR0qc2d217ympFrCINWhYhk9kC3iyjaW/UzkmAHezc+BLepNUqq7om3ahy6dYS HLavgkLC217qwT+4cetUuLfaXx29uXJUQz3BDjWOsTRrNP6rYPwXFWjajTmfmTye GKiTxgHEdbXrqBXSsNbjPPK3sddjrZohsQ9vxBDUpqWG6LTDVDE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:31 2026 by rpki-client