$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: ohkEriiEr/A9sCx5i8mhgbq7vEdIFsHFfA/dPTPejJY= Subject key identifier: 2E:AD:19:BB:01:CF:8E:8E:37:7A:C2:14:DE:A9:76:D2:4E:F0:F7:C0 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 08850BB3DD6009D4C82F64CED4B57405983B1CAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 21:49:56 +0000 Manifest this update: Fri 17 Jul 2026 21:44:56 +0000 Manifest next update: Sat 18 Jul 2026 21:58:56 +0000 Files and hashes: 1: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: MEpHhKssGo2E8Fao8brULhFMxnjzMAAJjxQfgpxn648=) 2: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 3: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 5: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:85:0b:b3:dd:60:09:d4:c8:2f:64:ce:d4:b5:74:05:98:3b:1c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Jul 17 21:44:56 2026 GMT Not After : Jul 18 21:58:56 2026 GMT Subject: CN=2EAD19BB01CF8E8E377AC214DEA976D24EF0F7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:7f:bf:52:99:09:ff:34:c8:c4:ee:6a:19: f7:e5:c8:ed:d9:ea:05:d0:04:c9:7d:50:5e:89:75: 4d:70:7b:14:f6:68:01:fd:24:c2:0c:cd:2b:10:08: ff:c4:0f:70:3e:61:8c:ea:59:97:07:c6:e3:80:7c: 3e:88:da:cf:88:46:c2:3b:c2:83:00:ff:a6:fb:ea: 6b:ab:08:e4:ca:d5:a8:16:51:5b:c0:28:a2:79:e5: 50:01:a8:6b:6a:c0:70:35:cb:b3:2d:1b:e4:2a:1d: d0:de:81:d6:ba:4f:c8:42:0f:41:4c:3d:e5:5d:23: ef:26:3c:6f:03:2d:1e:eb:c1:18:55:20:5c:32:87: e0:ad:63:1d:2e:2f:30:44:98:fc:00:95:24:a8:9a: fa:3b:71:b5:4f:67:15:d1:5a:31:34:92:fd:93:b4: b1:af:d3:f4:43:ee:41:b4:78:ce:67:db:1d:1d:d6: 7f:5b:2c:b7:ab:ae:92:32:5f:4d:8e:57:e6:bb:18: 1a:ac:ec:eb:27:92:44:02:49:bc:de:a7:1d:44:ed: e8:c0:fe:b3:f0:25:fe:6b:b4:11:04:c3:44:3e:dc: 91:39:58:29:72:c3:ad:6a:f8:64:45:fe:d4:ee:b6: fe:89:ad:7e:79:86:59:44:31:62:2c:3b:51:73:fe: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:19:BB:01:CF:8E:8E:37:7A:C2:14:DE:A9:76:D2:4E:F0:F7:C0 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:af:de:df:54:e0:b2:fc:11:08:51:2f:0c:fa:8d:f1:49:f9: 67:18:de:14:32:ca:58:5c:4e:f6:76:4d:3f:15:2c:1e:41:53: 99:fc:79:7a:1d:cb:d0:78:d7:78:13:aa:02:3b:2c:b8:b6:64: f0:21:e0:ad:fd:66:d6:b0:bb:94:b1:97:87:f1:3c:ed:d2:9b: 54:f9:0e:24:75:72:0b:63:3a:34:11:4f:77:1f:e8:5d:ea:09: 23:53:26:88:d7:86:99:d0:05:3d:0c:c3:80:9c:aa:8b:ad:c2: 3f:47:6b:ea:d2:c1:0e:61:bc:6b:00:c6:b5:3b:43:73:5b:d6: 9f:fc:3c:e5:fa:3d:c9:49:6d:ec:b0:3c:39:ba:96:a7:63:84: a0:cc:c8:5b:79:c9:62:df:8f:61:11:d4:31:8f:f1:3f:2e:91: 49:de:b3:b1:c9:0b:ee:cf:26:6d:4f:46:45:71:04:18:45:67: 21:07:72:ce:d6:fb:66:95:bc:65:c7:c2:b8:c5:05:ca:be:f3: 1d:7a:45:43:31:bc:1d:0e:93:06:19:68:82:8f:1b:d2:4b:3d: d2:bc:e9:42:30:24:19:e6:45:8c:d7:dc:78:82:66:a2:eb:02: d5:71:f5:07:d0:59:65:e5:f0:17:04:e0:00:84:59:87:f9:61: 65:3b:ce:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIULs91gCdTIL2TO1LV0BZg7HK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA3MTcyMTQ0NTZaFw0yNjA3MTgyMTU4NTZaMDMxMTAvBgNV BAMTKDJFQUQxOUJCMDFDRjhFOEUzNzdBQzIxNERFQTk3NkQyNEVGMEY3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrd3+/UpkJ/zTIxO5qGfflyO3Z 6gXQBMl9UF6JdU1wexT2aAH9JMIMzSsQCP/ED3A+YYzqWZcHxuOAfD6I2s+IRsI7 woMA/6b76murCOTK1agWUVvAKKJ55VABqGtqwHA1y7MtG+QqHdDegda6T8hCD0FM PeVdI+8mPG8DLR7rwRhVIFwyh+CtYx0uLzBEmPwAlSSomvo7cbVPZxXRWjE0kv2T tLGv0/RD7kG0eM5n2x0d1n9bLLerrpIyX02OV+a7GBqs7OsnkkQCSbzepx1E7ejA /rPwJf5rtBEEw0Q+3JE5WClyw61q+GRF/tTutv6JrX55hllEMWIsO1Fz/v9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULq0ZuwHPjo43esIU3ql20k7w98AwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2v3t9U4LL8EQhRLwz6jfFJ+WcY3hQyylhc TvZ2TT8VLB5BU5n8eXody9B413gTqgI7LLi2ZPAh4K39Ztawu5Sxl4fxPO3Sm1T5 DiR1cgtjOjQRT3cf6F3qCSNTJojXhpnQBT0Mw4Ccqoutwj9Ha+rSwQ5hvGsAxrU7 Q3Nb1p/8POX6PclJbeywPDm6lqdjhKDMyFt5yWLfj2ER1DGP8T8ukUnes7HJC+7P Jm1PRkVxBBhFZyEHcs7W+2aVvGXHwrjFBcq+8x16RUMxvB0OkwYZaIKPG9JLPdK8 6UIwJBnmRYzX3HiCZqLrAtVx9QfQWWXl8BcE4ACEWYf5YWU7zvs= -----END CERTIFICATE-----Generated at Sat Jul 18 08:21:59 2026 by rpki-client