$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft File: 67EFB834694FDF326541D90AA7679322947189B3.mft (raw, json) Hash identifier: bK/jXvR+EesQ2vP0Z2Y16J3XCLoJvyKN+O2lbBKNTsM= Subject key identifier: 56:70:5C:2C:78:0C:37:D3:95:BD:30:6D:70:12:02:FB:5F:D2:45:D0 Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 Certificate issuer: /CN=67EFB834694FDF326541D90AA7679322947189B3 Certificate serial: 38AE4B36A4B7E17A031BFFCBF9545AFECA90C818 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft Manifest number: EE Signing time: Mon 26 Oct 2026 07:46:35 +0000 Manifest this update: Mon 26 Oct 2026 07:41:35 +0000 Manifest next update: Tue 27 Oct 2026 10:24:35 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: 6Vl16dNzoeRKzBu/UGaBeg+RN1aOl59gJEJPta3Z5U4=) 2: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: I6I2rds5tbrSTDfNGBJVoBNAVLa2CLtfgmH3plnMbkE=) 3: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: HqJNR72y60tx+IHjixNLgxPcXZs1k5eDNNpIpPxwoc8=) 4: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=) 5: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: LzSAsxWA0fgKh1RMMG/YhgW6mMukUQNYLTHnbdaiIMo=) 6: 67EFB834694FDF326541D90AA7679322947189B3.crl (hash: 23TC+rEzGwhdfv6tXJ7G2z0MuAne2rN1O8gtY6qNjMQ=) 7: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: 3yR2EetJw0/oTW9Jd2JlHIoWXFNaZZVAvLcOZ+/Wty4=) 8: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: 8eM6PpqxHfl3Geudaa3NUNuJ/PYw2ByWv6dsPSCRAGY=) 9: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: U9EOJ8bWyg53fTX5/xBwCB9D3URUJVmaYk+uSMcOkJM=) 10: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: XTkmlIXCx+NIYx/yl8MiLKLX/AMPwncPF1lXc5QdA9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ae:4b:36:a4:b7:e1:7a:03:1b:ff:cb:f9:54:5a:fe:ca:90:c8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3 Validity Not Before: Oct 26 07:41:35 2026 GMT Not After : Oct 27 10:24:35 2026 GMT Subject: CN=56705C2C780C37D395BD306D701202FB5FD245D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:51:23:b3:ca:2d:a5:50:67:62:b9:8d:2f: 74:18:6f:5d:06:6b:b6:5c:35:eb:a7:97:35:1f:bc: 8d:36:38:b7:87:ae:b6:c6:60:c2:83:b4:a3:4a:bf: 28:16:b3:cc:ee:df:7d:4e:05:3c:20:5b:3a:f5:59: 41:04:6c:ce:be:2f:07:ea:45:8b:72:48:07:61:6b: 03:c2:67:9a:b4:d8:08:61:84:47:58:39:ca:c4:80: 76:1a:f2:d7:f6:e0:ad:20:c9:a1:7a:09:09:cc:78: 77:c1:cf:52:25:ce:85:f2:4a:49:61:47:4f:55:52: d3:a3:26:66:d6:d0:26:90:50:cd:21:a6:b1:69:89: 13:2b:61:c3:b2:70:fa:07:f0:46:b2:23:4c:a9:14: 3e:e8:69:b2:e8:18:c2:34:b7:77:0e:29:31:9d:5b: 0c:a1:74:64:d7:16:46:a2:d3:95:19:fc:10:46:14: 37:c6:d0:1b:7c:5b:28:7a:e4:40:61:74:68:51:94: 54:af:8c:06:8f:1f:23:94:67:91:5b:75:eb:cc:8d: 81:f5:88:b0:5a:ba:ab:13:bf:07:18:a2:f9:d1:45: 8d:b7:6f:fb:87:96:1f:8c:67:e6:0d:c2:6b:3f:7c: b7:3a:c8:77:f2:97:a3:59:8a:a1:91:a6:de:27:66: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:5C:2C:78:0C:37:D3:95:BD:30:6D:70:12:02:FB:5F:D2:45:D0 X509v3 Authority Key Identifier: keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:22:ab:d1:54:d9:f1:15:18:bb:91:04:00:c3:e7:71:11:b2: 77:c1:0c:6e:13:23:9a:24:f8:d8:02:bb:d6:ab:94:4e:5e:68: ce:b4:e6:3f:86:5a:cc:76:36:9e:2d:10:12:74:41:d2:89:d9: 93:35:5e:5e:47:22:13:77:14:94:99:d3:57:eb:0e:a5:f0:6e: eb:99:a5:e9:4c:2d:02:08:d3:4d:a3:2f:cc:59:64:ad:35:80: d1:a8:ec:f0:b5:d9:09:48:0c:df:f5:ab:65:50:82:24:d7:8f: 6c:6a:a7:cc:55:b0:9d:a5:a9:c7:d8:be:bf:61:93:e9:4a:04: 30:7f:91:79:42:d2:86:14:11:61:c0:0d:6f:de:36:4d:90:46: 6a:dd:d2:b0:4f:fc:13:2e:35:09:52:61:1b:3d:bc:af:0e:16: f2:07:80:a3:43:72:e8:00:f1:00:da:46:25:8c:c0:48:18:9e: 89:36:44:68:39:23:84:c7:c8:15:97:ca:c9:39:b8:94:8c:74: d3:2b:19:06:72:60:2c:34:09:26:a0:c7:9b:f7:34:ac:27:8e: 51:bd:db:47:a1:33:ea:97:ae:30:41:2e:c7:ed:1b:06:14:02: d3:c5:68:ab:0b:f2:6a:1d:c5:68:02:b7:6f:c2:9f:c5:c8:8a: b0:f2:86:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOK5LNqS34XoDG//L+VRa/sqQyBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5 NDcxODlCMzAeFw0yNjEwMjYwNzQxMzVaFw0yNjEwMjcxMDI0MzVaMDMxMTAvBgNV BAMTKDU2NzA1QzJDNzgwQzM3RDM5NUJEMzA2RDcwMTIwMkZCNUZEMjQ1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkr1Ejs8otpVBnYrmNL3QYb10G a7ZcNeunlzUfvI02OLeHrrbGYMKDtKNKvygWs8zu331OBTwgWzr1WUEEbM6+Lwfq RYtySAdhawPCZ5q02AhhhEdYOcrEgHYa8tf24K0gyaF6CQnMeHfBz1IlzoXySklh R09VUtOjJmbW0CaQUM0hprFpiRMrYcOycPoH8EayI0ypFD7oabLoGMI0t3cOKTGd WwyhdGTXFkai05UZ/BBGFDfG0Bt8Wyh65EBhdGhRlFSvjAaPHyOUZ5FbdevMjYH1 iLBauqsTvwcYovnRRY23b/uHlh+MZ+YNwms/fLc6yHfyl6NZiqGRpt4nZm9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVnBcLHgMN9OVvTBtcBIC+1/SRdAwHwYDVR0j BBgwFoAUZ++4NGlP3zJlQdkKp2eTIpRxibMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzhkMGU2NDAtMjJlOS00NDFjLTg2MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2 OTRGREYzMjY1NDFEOTBBQTc2NzkzMjI5NDcxODlCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0VGQjgzNDY5NEZERjMyNjU0MUQ5MEFBNzY3OTMyMjk0NzE4 OUIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvNjdFRkI4MzQ2OTRGREYzMjY1NDFEOTBBQTc2Nzkz MjI5NDcxODlCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAiq9FU2fEVGLuRBADD53ERsnfBDG4TI5ok +NgCu9arlE5eaM605j+GWsx2Np4tEBJ0QdKJ2ZM1Xl5HIhN3FJSZ01frDqXwbuuZ pelMLQII002jL8xZZK01gNGo7PC12QlIDN/1q2VQgiTXj2xqp8xVsJ2lqcfYvr9h k+lKBDB/kXlC0oYUEWHADW/eNk2QRmrd0rBP/BMuNQlSYRs9vK8OFvIHgKNDcugA 8QDaRiWMwEgYnok2RGg5I4THyBWXysk5uJSMdNMrGQZyYCw0CSagx5v3NKwnjlG9 20ehM+qXrjBBLsftGwYUAtPFaKsL8modxWgCt2/Cn8XIirDyhkU= -----END CERTIFICATE-----Generated at Mon Oct 26 14:21:59 2026 by rpki-client