$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: JH3P81C7o7Pnb+h/wLByeut+DhsjbbWJZ1SdvAYnh3E= Subject key identifier: 4D:6D:34:78:44:59:7C:AF:8F:9F:6E:14:87:2A:DA:F8:8E:F5:4A:25 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 7BF51812FD089C3EF3DE188CC087A16724D8130A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: DA Signing time: Fri 06 Mar 2026 17:01:13 +0000 Manifest this update: Fri 06 Mar 2026 16:56:13 +0000 Manifest next update: Tue 10 Mar 2026 02:42:13 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: 1c9Ar9SodNYAPjG8z11gzQTa6C68Be1TfsWXyRtWagQ=) 2: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow=) 3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f5:18:12:fd:08:9c:3e:f3:de:18:8c:c0:87:a1:67:24:d8:13:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Mar 6 16:56:13 2026 GMT Not After : Mar 10 02:42:13 2026 GMT Subject: CN=4D6D347844597CAF8F9F6E14872ADAF88EF54A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:f6:f7:40:bd:fc:f7:7a:22:9c:b3:77:15: ee:62:8a:4f:e2:cb:1b:29:d0:d3:61:e6:81:7b:86: 4d:37:aa:53:a9:f8:fc:43:49:95:17:02:66:e6:b0: c8:8c:9e:e9:87:51:2d:d4:43:61:eb:5b:42:6d:33: 88:16:70:3b:01:07:75:5d:b5:7b:20:14:43:71:d1: c8:54:c9:2e:21:d0:f9:55:a3:c6:6e:19:ec:a6:93: 59:4f:d5:83:d7:cb:cd:57:2b:65:4a:80:11:d1:48: 0d:da:99:3d:dc:ae:e6:4c:d2:78:c6:e2:03:89:3a: 0b:de:66:e0:ff:f5:4e:fd:9b:28:45:80:26:6f:10: 0e:12:82:d2:93:be:df:d2:09:1c:8a:fb:35:c8:a2: f9:05:bb:91:5f:29:a3:52:9f:70:e8:ee:43:78:00: 69:b2:82:7d:62:6d:13:cf:46:cc:d0:c1:e7:e0:b2: 46:2c:80:cf:2e:bb:be:b9:bf:9e:81:b0:5a:ef:88: 64:ad:a5:d6:e8:37:67:b2:fd:56:2e:08:b8:84:b7: bf:65:4f:5a:2c:23:08:62:e4:a4:9b:33:bb:73:9a: 40:44:b6:b0:82:5d:17:5e:12:0d:66:0d:bd:b1:bf: 6e:58:60:f6:f6:1f:85:03:ea:da:45:e5:18:1d:6f: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6D:34:78:44:59:7C:AF:8F:9F:6E:14:87:2A:DA:F8:8E:F5:4A:25 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:19:f3:6b:92:37:2c:48:55:64:97:ff:6b:1e:79:d0:70:53: 44:d0:b1:20:c7:4a:2a:7b:02:7c:84:f1:84:53:76:08:42:d0: f0:ea:26:13:fd:e5:2c:6c:ff:6d:34:aa:1f:21:fa:7c:7d:21: 91:09:23:91:40:4c:ff:2a:b9:d5:b4:3e:61:d4:6d:9b:73:bb: f6:52:96:c0:da:6c:cf:f5:f3:6f:b8:39:79:8f:12:f4:25:e2: 0a:35:33:84:c6:24:5c:1b:f8:2e:51:2f:ef:03:cd:73:f4:f9: 27:0b:1c:38:60:5d:68:4e:db:aa:65:8a:08:2d:2b:ac:e6:38: da:66:1f:c5:e2:9a:ac:02:d9:7c:8a:c3:bd:85:59:aa:29:be: c3:4e:be:1f:d4:87:5c:3c:a9:c4:72:c2:36:a8:6c:75:bc:0d: 1d:77:50:13:21:01:1b:72:8e:a0:33:62:52:71:59:ec:e7:b9: 8a:87:d6:16:93:23:f7:06:fd:16:2f:34:5a:03:8f:94:36:e5: 69:7e:c3:f5:a3:32:60:dd:7d:51:9b:a6:82:c0:c1:bd:85:c5: 23:75:a4:e6:57:49:86:75:53:93:bf:7d:d9:9a:c2:a4:d7:0a: 13:a3:85:7b:cb:7c:03:f5:6e:9c:69:1a:7a:38:ec:91:d8:23: 96:1e:09:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/UYEv0InD7z3hiMwIehZyTYEwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNjAzMDYxNjU2MTNaFw0yNjAzMTAwMjQyMTNaMDMxMTAvBgNV BAMTKDRENkQzNDc4NDQ1OTdDQUY4RjlGNkUxNDg3MkFEQUY4OEVGNTRBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Vvb3QL3893oinLN3Fe5iik/i yxsp0NNh5oF7hk03qlOp+PxDSZUXAmbmsMiMnumHUS3UQ2HrW0JtM4gWcDsBB3Vd tXsgFENx0chUyS4h0PlVo8ZuGeymk1lP1YPXy81XK2VKgBHRSA3amT3cruZM0njG 4gOJOgveZuD/9U79myhFgCZvEA4SgtKTvt/SCRyK+zXIovkFu5FfKaNSn3Do7kN4 AGmygn1ibRPPRszQwefgskYsgM8uu765v56BsFrviGStpdboN2ey/VYuCLiEt79l T1osIwhi5KSbM7tzmkBEtrCCXRdeEg1mDb2xv25YYPb2H4UD6tpF5Rgdb3QtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTW00eERZfK+Pn24Uhyra+I71SiUwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcZ82uSNyxIVWSX/2seedBwU0TQsSDHSip7 AnyE8YRTdghC0PDqJhP95Sxs/200qh8h+nx9IZEJI5FATP8qudW0PmHUbZtzu/ZS lsDabM/182+4OXmPEvQl4go1M4TGJFwb+C5RL+8DzXP0+ScLHDhgXWhO26pliggt K6zmONpmH8XimqwC2XyKw72FWaopvsNOvh/Uh1w8qcRywjaobHW8DR13UBMhARty jqAzYlJxWeznuYqH1haTI/cG/RYvNFoDj5Q25Wl+w/WjMmDdfVGbpoLAwb2FxSN1 pOZXSYZ1U5O/fdmawqTXChOjhXvLfAP1bpxpGno47JHYI5YeCbg= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:04 2026 by rpki-client