$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft File: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft (raw, json) Hash identifier: 5AF6bviVbrh5qxYfm18wOkb/ffVDk35VCh4ljN6Gg2E= Subject key identifier: 6B:C3:0B:B7:AF:75:CC:A0:1F:65:0B:63:83:80:3B:94:A0:72:6A:D6 Authority key identifier: 67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 Certificate issuer: /CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Certificate serial: 650A6CF49065DE8AEE59E26AB4DFAA2BB209167C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 15:10:47 +0000 Manifest this update: Sun 02 Aug 2026 15:05:47 +0000 Manifest next update: Mon 03 Aug 2026 18:08:47 +0000 Files and hashes: 1: 67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl (hash: EKHXcozPNuNVD/RrerjHbpMut6nfcPEtzvzZ2DOXXwM=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: BN3gUNmY/gIPczSbkoQC3h95M1LdI0wqauqg4a27Pao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0a:6c:f4:90:65:de:8a:ee:59:e2:6a:b4:df:aa:2b:b2:09:16:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BF67CCD74BA06FEECE0BED6457876D494BC2F9 Validity Not Before: Aug 2 15:05:47 2026 GMT Not After : Aug 3 18:08:47 2026 GMT Subject: CN=6BC30BB7AF75CCA01F650B6383803B94A0726AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:c7:e1:6d:87:b2:3b:ac:20:55:68:2f:9d: 5f:62:d9:d4:8c:ae:37:4e:e2:f8:d8:fa:36:36:4c: 7d:91:47:44:df:d3:ab:6a:97:69:d2:75:fc:9b:59: f3:5b:ea:9c:fb:aa:ce:51:a0:13:bd:c2:2e:09:2f: a6:b9:99:3b:46:9b:61:27:48:58:98:d8:7f:d5:35: 5b:45:35:e9:4d:90:45:fd:2e:b7:37:e0:cb:b4:ee: 08:31:db:00:b7:d6:e0:50:a6:eb:9a:5d:40:69:53: 97:1f:7a:3c:b6:be:a3:34:39:ae:bc:9d:71:1c:78: e9:17:d3:89:88:5e:83:d1:7f:b7:81:58:b0:a2:cf: dd:d7:b3:69:34:0c:5d:30:96:92:97:6e:c0:1c:9c: 66:cb:ef:ae:6f:0e:86:ca:16:47:ac:41:f9:31:42: 64:7b:2a:2d:e7:ae:c6:16:e0:e3:6d:52:b7:51:2d: fa:ce:12:5d:d3:21:6d:fa:96:ca:8f:2f:38:b0:17: 9e:d5:b9:8f:8f:0d:58:1e:10:f9:26:a7:fd:37:0e: ef:1c:40:b2:47:02:f9:a2:86:78:35:27:97:3a:d4: 04:b2:79:e3:45:c9:35:e3:55:dd:ef:1b:0f:1e:72: 7f:91:f8:d1:d2:ef:c4:a9:45:80:d4:0d:54:60:3f: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:0B:B7:AF:75:CC:A0:1F:65:0B:63:83:80:3B:94:A0:72:6A:D6 X509v3 Authority Key Identifier: keyid:67:BF:67:CC:D7:4B:A0:6F:EE:CE:0B:ED:64:57:87:6D:49:4B:C2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/67BF67CCD74BA06FEECE0BED6457876D494BC2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:02:f4:8b:46:cd:0c:2b:6d:9f:59:f7:98:9d:03:df:9e:2e: f1:af:1a:da:ac:45:02:07:ae:4f:aa:9c:a5:4f:b9:aa:79:fa: f6:fe:6f:11:43:ef:70:61:0e:4b:14:64:aa:a2:87:03:52:89: 01:04:cb:4b:80:63:d5:7f:57:5c:64:1a:5b:06:46:e3:9e:61: 02:0c:65:cb:d4:98:e9:58:25:57:75:e6:b4:6b:21:08:38:f7: 9e:10:2d:d0:75:39:7d:3b:15:53:c5:08:28:61:4e:ea:dd:b6: cf:f3:0e:f7:b6:ab:1c:c6:47:52:9c:5b:e4:d4:5c:1e:a1:04: 2f:b0:54:16:d7:a2:5a:51:ba:21:00:07:05:78:c5:a4:1a:9b: e4:1b:c2:78:cd:a5:c9:7f:36:ef:2e:dc:77:56:c8:8c:ec:13: 89:84:4c:b1:75:21:88:96:62:35:9d:09:44:83:8a:5a:82:8d: 46:ad:73:79:9e:a5:b4:93:82:56:7f:ac:07:de:bd:81:fc:cc: f3:96:28:2e:18:f6:7c:fa:c4:c0:dd:e4:c2:d0:d3:0f:7c:2f: 94:32:4e:74:3e:72:e9:98:5b:e0:c4:27:84:57:55:b1:70:80: 5b:6d:f7:da:20:ba:fc:5a:47:70:5c:83:29:1d:cd:38:4d:6a: 89:c3:77:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQps9JBl3oruWeJqtN+qK7IJFnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0 OTRCQzJGOTAeFw0yNjA4MDIxNTA1NDdaFw0yNjA4MDMxODA4NDdaMDMxMTAvBgNV BAMTKDZCQzMwQkI3QUY3NUNDQTAxRjY1MEI2MzgzODAzQjk0QTA3MjZBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AcfhbYeyO6wgVWgvnV9i2dSM rjdO4vjY+jY2TH2RR0Tf06tql2nSdfybWfNb6pz7qs5RoBO9wi4JL6a5mTtGm2En SFiY2H/VNVtFNelNkEX9Lrc34Mu07ggx2wC31uBQpuuaXUBpU5cfejy2vqM0Oa68 nXEceOkX04mIXoPRf7eBWLCiz93Xs2k0DF0wlpKXbsAcnGbL765vDobKFkesQfkx QmR7Ki3nrsYW4ONtUrdRLfrOEl3TIW36lsqPLziwF57VuY+PDVgeEPkmp/03Du8c QLJHAvmihng1J5c61ASyeeNFyTXjVd3vGw8ecn+R+NHS78SpRYDUDVRgPxJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8MLt691zKAfZQtjg4A7lKByatYwHwYDVR0j BBgwFoAUZ79nzNdLoG/uzgvtZFeHbUlLwvkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTRlZDhkNmMtZjBmYS00N2NjLWFlYWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NE NzRCQTA2RkVFQ0UwQkVENjQ1Nzg3NkQ0OTRCQzJGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82N0JGNjdDQ0Q3NEJBMDZGRUVDRTBCRUQ2NDU3ODc2RDQ5NEJD MkY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvNjdCRjY3Q0NENzRCQTA2RkVFQ0UwQkVENjQ1Nzg3 NkQ0OTRCQzJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgC9ItGzQwrbZ9Z95idA9+eLvGvGtqsRQIH rk+qnKVPuap5+vb+bxFD73BhDksUZKqihwNSiQEEy0uAY9V/V1xkGlsGRuOeYQIM ZcvUmOlYJVd15rRrIQg4954QLdB1OX07FVPFCChhTurdts/zDve2qxzGR1KcW+TU XB6hBC+wVBbXolpRuiEABwV4xaQam+QbwnjNpcl/Nu8u3HdWyIzsE4mETLF1IYiW YjWdCUSDilqCjUatc3mepbSTglZ/rAfevYH8zPOWKC4Y9nz6xMDd5MLQ0w98L5Qy TnQ+cumYW+DEJ4RXVbFwgFtt99oguvxaR3BcgykdzThNaonDd7U= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:45 2026 by rpki-client