$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: 7GCA5YnuPbkMyERQ4DwsDcyFg1mo5OtoxwoF2JykBkY= Subject key identifier: 20:34:64:1C:27:67:A1:5F:EF:3E:61:AD:88:AC:16:79:93:D5:F9:60 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 47DF071C11F88AFA4DBB920BFC9524BFBD36E016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 12:11:57 +0000 Manifest this update: Thu 03 Sep 2026 12:06:57 +0000 Manifest next update: Fri 04 Sep 2026 12:21:57 +0000 Files and hashes: 1: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 2: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 3: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: sUOdmDQQvZrl6x2+VIlwwhNkJfgdElDDJz318+7TURk=) 4: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 5: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:df:07:1c:11:f8:8a:fa:4d:bb:92:0b:fc:95:24:bf:bd:36:e0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Sep 3 12:06:57 2026 GMT Not After : Sep 4 12:21:57 2026 GMT Subject: CN=2034641C2767A15FEF3E61AD88AC167993D5F960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:79:ec:86:af:45:71:1e:f0:94:c5:c7:54: f4:a7:5b:22:ca:e3:d1:ff:6e:46:ae:d2:67:08:00: 83:37:3a:26:46:a7:ce:ab:44:5c:c5:61:65:d4:57: a6:16:d2:05:1b:71:bd:a7:a1:43:a1:5d:42:d8:94: f8:ab:ef:07:94:58:ed:97:f4:8c:19:34:f3:87:5c: e3:80:14:ef:cc:86:33:99:38:9b:92:5a:58:e4:30: 86:b5:0e:73:bb:ee:67:63:48:89:c1:54:56:92:02: 3c:14:23:0e:0b:d3:fe:11:e5:0e:52:9e:f2:e1:1c: 95:56:91:3f:69:5e:e8:90:d8:26:27:95:6a:07:a6: 4e:83:d5:5d:63:52:31:ab:7f:ea:4e:23:a7:97:c0: eb:1c:48:ea:1a:64:86:86:8b:dc:6f:ac:fd:7e:4e: 9c:15:76:95:9b:ef:0d:6b:40:f1:20:f1:0a:67:42: 4c:17:74:39:32:79:5c:54:72:ea:f5:03:73:47:f8: fd:4d:d0:c7:5b:dc:8e:0f:4d:5f:23:82:49:31:d1: 66:41:d3:66:13:e0:3a:0b:4a:bb:7c:02:0a:c4:78: d2:a4:e3:1e:9f:35:f4:63:3e:72:ce:fb:a0:c9:3a: b3:1f:2a:d9:14:5d:2d:48:6a:79:a0:68:f8:0c:9b: 72:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:64:1C:27:67:A1:5F:EF:3E:61:AD:88:AC:16:79:93:D5:F9:60 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:5a:12:19:09:7d:6c:99:36:8d:c0:01:75:10:de:de:6e:78: d5:9d:5c:cb:06:7d:0a:60:69:19:ec:0e:0d:bf:a9:5a:09:b4: f4:37:e6:c7:72:c8:99:15:27:79:84:3f:bb:e5:69:6b:72:2b: ec:8d:d9:b3:d3:08:de:60:b6:b0:e2:8e:9a:19:24:58:a9:22: 2f:21:91:fc:83:00:79:9f:cd:34:d5:67:d3:22:f5:93:86:86: c6:bb:e0:80:5f:d0:dc:6e:9f:c8:49:e1:67:f8:bd:91:f2:b8: fa:c6:d6:72:8d:e3:9d:80:d4:fa:eb:0c:b5:cb:df:0e:9f:f6: f2:ac:84:f5:a7:1c:0e:7c:20:22:77:ab:5f:09:25:10:23:34: 54:9b:3b:a4:8d:53:6b:a2:ae:81:14:07:57:6a:54:ed:99:1f: 52:de:7d:63:77:63:d9:df:a3:ab:e9:51:d4:42:fb:12:23:95: f9:4f:12:9b:b5:ee:e7:8b:d1:d9:55:89:c9:e2:c8:8c:a1:7e: 4e:76:1e:d0:d3:40:24:39:41:e2:b9:00:6e:a6:36:4e:30:a7: 9e:42:3b:f1:b6:30:c0:32:04:54:39:85:d0:f4:e9:2f:1a:57: 59:f5:4a:6d:b1:d5:9a:8a:e3:d7:39:76:d4:8f:03:db:90:f8: 8d:47:58:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR98HHBH4ivpNu5IL/JUkv7024BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA5MDMxMjA2NTdaFw0yNjA5MDQxMjIxNTdaMDMxMTAvBgNV BAMTKDIwMzQ2NDFDMjc2N0ExNUZFRjNFNjFBRDg4QUMxNjc5OTNENUY5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrnnshq9FcR7wlMXHVPSnWyLK 49H/bkau0mcIAIM3OiZGp86rRFzFYWXUV6YW0gUbcb2noUOhXULYlPir7weUWO2X 9IwZNPOHXOOAFO/MhjOZOJuSWljkMIa1DnO77mdjSInBVFaSAjwUIw4L0/4R5Q5S nvLhHJVWkT9pXuiQ2CYnlWoHpk6D1V1jUjGrf+pOI6eXwOscSOoaZIaGi9xvrP1+ TpwVdpWb7w1rQPEg8QpnQkwXdDkyeVxUcur1A3NH+P1N0Mdb3I4PTV8jgkkx0WZB 02YT4DoLSrt8AgrEeNKk4x6fNfRjPnLO+6DJOrMfKtkUXS1IanmgaPgMm3JFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDRkHCdnoV/vPmGtiKwWeZPV+WAwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlaEhkJfWyZNo3AAXUQ3t5ueNWdXMsGfQpg aRnsDg2/qVoJtPQ35sdyyJkVJ3mEP7vlaWtyK+yN2bPTCN5gtrDijpoZJFipIi8h kfyDAHmfzTTVZ9Mi9ZOGhsa74IBf0Nxun8hJ4Wf4vZHyuPrG1nKN452A1PrrDLXL 3w6f9vKshPWnHA58ICJ3q18JJRAjNFSbO6SNU2uiroEUB1dqVO2ZH1LefWN3Y9nf o6vpUdRC+xIjlflPEpu17ueL0dlVicniyIyhfk52HtDTQCQ5QeK5AG6mNk4wp55C O/G2MMAyBFQ5hdD06S8aV1n1Sm2x1ZqK49c5dtSPA9uQ+I1HWNA= -----END CERTIFICATE-----Generated at Thu Sep 3 18:57:54 2026 by rpki-client