$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: LU85MlpoPiUsNzNN0nGvxFOoK7Zh6Z3aCNAcPMQlYVQ= Subject key identifier: A2:A4:E8:F8:8F:0E:4E:98:E3:20:F0:00:B9:11:1E:CE:F8:48:64:7D Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 6738E7A15C3D350B25F8A6255DA67F169E0409B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:44:02 +0000 Manifest this update: Thu 18 Jun 2026 09:39:02 +0000 Manifest next update: Fri 19 Jun 2026 10:13:02 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: mOKNV/5bwqVoye8BPKR2W6pU2GxwRU8FYLJgkE7Ieok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:38:e7:a1:5c:3d:35:0b:25:f8:a6:25:5d:a6:7f:16:9e:04:09:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Jun 18 09:39:02 2026 GMT Not After : Jun 19 10:13:02 2026 GMT Subject: CN=A2A4E8F88F0E4E98E320F000B9111ECEF848647D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:46:2b:4f:cb:de:fc:95:67:cf:d3:ee:d7: b0:11:84:2d:5b:34:b4:b6:22:69:6a:88:7c:f1:c3: 32:e0:d5:f1:4e:52:c7:84:30:2f:b3:dc:10:36:8b: 58:51:de:71:96:f1:63:90:36:ed:e6:06:4b:3f:11: a8:46:82:7e:bd:1c:b5:4d:0a:eb:3d:85:9b:8c:ef: 20:c8:51:be:c1:67:a5:05:ad:f6:d6:39:16:e0:33: 7c:46:be:70:0b:68:93:c6:00:ab:39:49:9d:ba:ec: 99:0e:a2:75:60:6d:83:cb:02:10:51:3c:7e:a0:9f: e3:78:5f:9a:b4:a9:fd:ab:b3:ad:b0:7f:05:d1:48: 09:51:73:4e:d5:b2:12:a4:5a:f1:f2:70:db:f8:c7: 96:3a:46:cd:d3:89:f6:9d:82:9c:59:38:e7:a3:43: 61:35:d6:30:50:0c:e3:36:4e:cd:4f:a7:37:eb:54: 4d:ff:71:98:86:fa:25:14:a1:a3:73:13:3b:db:75: a4:15:0e:5c:0a:b2:db:0a:a7:56:8b:cd:4c:b2:3a: 6f:e3:aa:90:ff:a0:4c:f8:4d:88:77:24:c8:53:40: a3:e5:e1:4a:ce:3e:a8:b9:57:b5:03:c1:a4:aa:39: 3d:a2:7f:73:26:5f:f4:a8:f1:e0:76:46:c3:62:64: b3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:E8:F8:8F:0E:4E:98:E3:20:F0:00:B9:11:1E:CE:F8:48:64:7D X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:0a:da:c1:63:e4:ab:f1:ae:eb:98:e4:57:e5:30:0b:28: 91:b4:41:a0:56:04:cc:ff:06:46:4e:17:4b:e0:fd:95:13:94: 06:4d:d6:1c:23:c5:28:d0:8b:f7:2b:e6:bb:f7:24:25:bc:d3: 2f:e3:d6:d8:ec:6a:5f:05:d9:ea:46:47:83:1e:75:8f:4b:dc: 54:31:d2:4c:d2:33:e6:30:a7:24:c8:93:af:81:24:b6:58:03: 29:a1:c4:f4:d4:53:16:73:6a:79:87:8f:2f:7d:28:5a:2f:0a: 06:a3:dd:22:10:de:fb:a0:dd:f6:39:bd:c7:51:23:78:f9:a4: d6:e9:f4:f4:af:f2:31:26:ae:83:43:b9:f5:80:20:08:46:8f: ee:7c:12:ee:26:ab:3a:42:d0:db:91:11:2c:fc:f4:ca:ca:64: 37:09:b7:8b:04:71:65:93:ba:11:79:f0:17:f4:6b:f8:4a:37: c6:68:90:34:12:a5:f1:37:a3:d6:70:39:2d:96:04:69:16:39: fe:41:88:4b:32:b6:c5:54:a4:8a:81:8d:1e:9e:94:7e:ae:c4: 74:f1:e3:0c:80:18:71:94:17:86:61:b8:39:07:6c:ef:10:fb: 29:7d:da:9c:ee:bd:51:af:c3:b1:68:e8:83:0b:0d:db:d1:b4: 55:b8:c8:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzjnoVw9NQsl+KYlXaZ/Fp4ECbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA2MTgwOTM5MDJaFw0yNjA2MTkxMDEzMDJaMDMxMTAvBgNV BAMTKEEyQTRFOEY4OEYwRTRFOThFMzIwRjAwMEI5MTExRUNFRjg0ODY0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDukYrT8ve/JVnz9Pu17ARhC1b NLS2ImlqiHzxwzLg1fFOUseEMC+z3BA2i1hR3nGW8WOQNu3mBks/EahGgn69HLVN Cus9hZuM7yDIUb7BZ6UFrfbWORbgM3xGvnALaJPGAKs5SZ267JkOonVgbYPLAhBR PH6gn+N4X5q0qf2rs62wfwXRSAlRc07VshKkWvHycNv4x5Y6Rs3TifadgpxZOOej Q2E11jBQDOM2Ts1PpzfrVE3/cZiG+iUUoaNzEzvbdaQVDlwKstsKp1aLzUyyOm/j qpD/oEz4TYh3JMhTQKPl4UrOPqi5V7UDwaSqOT2if3MmX/So8eB2RsNiZLMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqTo+I8OTpjjIPAAuREezvhIZH0wHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUsCtrBY+Sr8a7rmORX5TALKJG0QaBWBMz/ BkZOF0vg/ZUTlAZN1hwjxSjQi/cr5rv3JCW80y/j1tjsal8F2epGR4MedY9L3FQx 0kzSM+YwpyTIk6+BJLZYAymhxPTUUxZzanmHjy99KFovCgaj3SIQ3vug3fY5vcdR I3j5pNbp9PSv8jEmroNDufWAIAhGj+58Eu4mqzpC0NuRESz89MrKZDcJt4sEcWWT uhF58Bf0a/hKN8ZokDQSpfE3o9ZwOS2WBGkWOf5BiEsytsVUpIqBjR6elH6uxHTx 4wyAGHGUF4ZhuDkHbO8Q+yl92pzuvVGvw7Fo6IMLDdvRtFW4yGo= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:53 2026 by rpki-client