$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: KMutyEFlBgUlL8RiubC0E8Pdj4T7DbowBfz9KfAM87M= Subject key identifier: 0E:C2:84:23:AA:25:82:08:00:B1:91:D6:32:B8:8F:FC:B1:D5:01:3C Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 5E770CE14AB7369BD06A2BDC9AB47472BC7F32FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:49:45 +0000 Manifest this update: Wed 16 Sep 2026 20:44:45 +0000 Manifest next update: Thu 17 Sep 2026 22:28:45 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) 2: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: mZRFhNGyvlaaDUZXiV3MX1EJ62PAz2H4WCImlvBrkKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:77:0c:e1:4a:b7:36:9b:d0:6a:2b:dc:9a:b4:74:72:bc:7f:32:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Sep 16 20:44:45 2026 GMT Not After : Sep 17 22:28:45 2026 GMT Subject: CN=0EC28423AA25820800B191D632B88FFCB1D5013C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:62:d6:6c:0b:86:75:5c:0e:79:eb:be:b3: 2f:e9:bd:cb:8c:57:26:d7:28:74:75:41:36:c4:64: a6:fb:d0:7c:55:28:ac:e3:9f:ce:e9:2f:1d:23:0d: b2:46:f1:9b:5c:4e:3e:f8:83:32:c6:a2:2e:aa:31: 43:91:44:3b:c3:62:cc:55:ad:a9:b9:ef:b9:80:14: 0f:81:f4:c1:96:c8:ec:f0:7d:17:f6:28:68:5c:ab: 45:bd:e3:f8:b2:62:36:fe:6b:2e:e5:6c:d2:cf:b4: f0:7f:6d:ad:9f:43:79:1c:4a:b2:48:26:1a:20:d9: 27:0f:0b:cb:f1:b4:26:60:43:40:b3:b5:4d:09:9b: 57:95:d0:36:bc:68:3b:8b:bd:17:74:aa:17:64:be: a3:d0:f1:f2:9b:f6:97:2d:48:fd:62:16:5a:38:fb: 27:a1:92:96:de:11:fe:91:dc:c7:b7:8b:07:f5:0e: be:94:d6:5e:9d:47:b2:68:1c:76:0b:4b:51:ff:c5: 95:c9:93:87:3b:c8:2a:c2:1f:9b:41:d7:ca:0f:0a: fe:3c:7a:3b:d3:e8:0e:88:0d:14:01:63:99:0e:67: a2:68:86:77:24:bf:a6:e1:d7:7b:ec:86:c8:f8:d1: 42:4f:d7:45:0b:e7:13:52:02:89:90:2b:7b:0e:d2: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C2:84:23:AA:25:82:08:00:B1:91:D6:32:B8:8F:FC:B1:D5:01:3C X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:09:a2:89:c4:31:5a:ee:11:4c:01:db:d2:2c:a7:60:d4: 73:2c:32:56:3a:c0:94:e0:0d:7e:f8:47:ea:b4:9d:df:d6:6b: 75:3a:1d:6f:c6:9b:ce:17:b1:17:96:10:03:b3:33:e8:38:4b: 1c:45:38:e0:c2:e7:71:f5:15:73:8d:33:89:b0:1d:f6:05:6d: b5:0b:fc:f8:10:d5:4f:2a:e2:aa:ac:f4:8e:3c:4e:5c:c3:7c: d5:60:0e:ff:51:24:82:db:76:83:37:2f:12:73:b2:e1:76:14: d4:34:f1:f4:fb:45:6d:bb:3f:ff:05:f8:33:09:6d:e6:4b:b8: 20:1a:64:55:b7:ad:2c:48:71:95:d5:14:1a:78:5d:10:70:92: 12:fb:6b:4b:3d:a5:31:4e:e5:b7:33:ad:45:49:0d:ef:f8:e0: e8:e3:9d:2b:26:ba:9a:a3:63:dd:24:5b:1c:9b:18:8d:55:e3: 03:01:db:54:9a:b6:99:62:d1:9d:59:fe:e0:5b:44:af:87:96: 69:4d:e7:6f:af:a8:94:4a:54:1c:d2:09:28:8d:f0:1c:eb:f8: 55:90:63:c6:0b:c8:5a:30:91:08:32:13:c4:67:d2:45:7e:02: 37:30:a2:84:6a:08:74:e8:f9:e1:d4:82:0e:d3:82:43:8d:d5: 8a:c8:83:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXncM4Uq3NpvQaivcmrR0crx/Mv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA5MTYyMDQ0NDVaFw0yNjA5MTcyMjI4NDVaMDMxMTAvBgNV BAMTKDBFQzI4NDIzQUEyNTgyMDgwMEIxOTFENjMyQjg4RkZDQjFENTAxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCw2LWbAuGdVwOeeu+sy/pvcuM VybXKHR1QTbEZKb70HxVKKzjn87pLx0jDbJG8ZtcTj74gzLGoi6qMUORRDvDYsxV ram577mAFA+B9MGWyOzwfRf2KGhcq0W94/iyYjb+ay7lbNLPtPB/ba2fQ3kcSrJI Jhog2ScPC8vxtCZgQ0CztU0Jm1eV0Da8aDuLvRd0qhdkvqPQ8fKb9pctSP1iFlo4 +yehkpbeEf6R3Me3iwf1Dr6U1l6dR7JoHHYLS1H/xZXJk4c7yCrCH5tB18oPCv48 ejvT6A6IDRQBY5kOZ6Johnckv6bh13vshsj40UJP10UL5xNSAomQK3sO0ob9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsKEI6olgggAsZHWMriP/LHVATwwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkICaKJxDFa7hFMAdvSLKdg1HMsMlY6wJTg DX74R+q0nd/Wa3U6HW/Gm84XsReWEAOzM+g4SxxFOODC53H1FXONM4mwHfYFbbUL /PgQ1U8q4qqs9I48TlzDfNVgDv9RJILbdoM3LxJzsuF2FNQ08fT7RW27P/8F+DMJ beZLuCAaZFW3rSxIcZXVFBp4XRBwkhL7a0s9pTFO5bczrUVJDe/44OjjnSsmupqj Y90kWxybGI1V4wMB21Satpli0Z1Z/uBbRK+HlmlN52+vqJRKVBzSCSiN8Bzr+FWQ Y8YLyFowkQgyE8Rn0kV+AjcwooRqCHTo+eHUgg7TgkON1YrIg6s= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:57 2026 by rpki-client