$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: vqE7yU0UFMhZeqonWh+8qKfOCDo6t1bKCJh7R+p9wPI= Subject key identifier: 90:59:57:63:22:EA:80:2A:53:9E:04:C3:A1:A2:2B:B0:67:17:5D:30 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 7AD55C9AF46A0BD0A8B2423EC224951F649B15C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 21:36:04 +0000 Manifest this update: Fri 23 Oct 2026 21:31:04 +0000 Manifest next update: Sat 24 Oct 2026 23:41:04 +0000 Files and hashes: 1: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) 2: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 3: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 5: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: R/Kw3i5a/EsvrQF8xq3sAf73QvtFZg2F7ppHBqGqFoM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 23:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d5:5c:9a:f4:6a:0b:d0:a8:b2:42:3e:c2:24:95:1f:64:9b:15:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Oct 23 21:31:04 2026 GMT Not After : Oct 24 23:41:04 2026 GMT Subject: CN=9059576322EA802A539E04C3A1A22BB067175D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:eb:81:e9:54:7f:93:c0:8d:0a:2a:81:cf: 12:18:c6:0b:36:54:21:5e:79:b9:a5:3a:d0:f1:1a: 05:a6:f1:8d:a3:b2:07:af:b1:1c:6d:8d:1d:c2:c0: 32:d1:03:5e:68:4b:2b:6b:88:fc:83:ff:60:42:13: 12:e8:25:b9:95:d7:30:ec:76:51:0a:0b:d4:35:6a: a6:d9:27:86:2d:8a:96:56:12:66:a8:22:4f:59:cb: 34:cf:f1:12:6a:6b:09:4b:59:aa:e9:b1:e7:28:32: c0:46:a3:1f:a3:fa:1a:72:bf:05:c9:46:5c:92:5f: a9:99:07:c5:26:e5:df:1d:c7:e5:86:a8:18:58:e8: 98:60:cc:5d:9f:d3:79:08:45:17:9d:df:b8:25:07: b8:28:58:8b:9c:7a:86:c9:99:8e:7c:a6:1e:18:7e: 29:97:5b:c2:6d:ba:8e:86:2d:f5:69:ae:5c:24:85: 59:af:5a:ec:88:2d:79:60:ad:44:6d:42:e1:b1:f2: a1:2f:1e:d2:a4:29:4b:3a:62:48:9d:5c:e6:e0:33: 7e:f6:0c:46:bd:d3:03:62:82:d5:6c:f2:b7:24:b5: 95:7c:5f:07:2f:4a:6f:1a:4a:6f:93:75:fe:f5:73: da:d3:ee:17:9c:2e:a3:65:e9:5b:ec:c1:20:99:fe: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:57:63:22:EA:80:2A:53:9E:04:C3:A1:A2:2B:B0:67:17:5D:30 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b4:5c:95:0a:76:99:9b:83:d5:f6:e8:f9:38:91:4f:94:66: 70:e4:c5:63:50:60:6e:ad:ae:13:18:6e:40:90:33:9a:11:82: a7:6b:e2:1d:17:b0:5d:32:57:10:9d:4a:1a:e0:cd:9c:27:03: be:cd:f3:68:b7:db:56:0b:08:3b:50:2c:24:4e:e3:86:be:af: a1:71:8c:56:5e:7c:23:9d:c5:66:19:40:f5:3c:b0:62:08:0b: 86:23:7c:45:31:af:10:f2:e2:7b:10:ad:2c:ae:e4:1e:2c:00: 0c:ce:da:ff:17:e3:2b:ee:57:05:08:f7:21:72:99:a6:f0:55: 81:68:08:62:d0:ba:b5:d1:0f:2f:cb:4f:7f:7a:4c:53:99:77: 17:58:9c:ef:28:f5:11:1c:d4:b7:52:a3:ff:ae:29:14:82:3c: d8:1b:b7:aa:e7:c4:bf:ba:9f:ed:28:fb:6b:87:de:7a:b4:0d: 65:d5:42:d3:cb:53:07:a6:9d:1c:d7:6f:02:fa:f5:27:61:f5: 02:9b:d9:12:84:b8:c6:7f:82:1a:bc:ff:b2:54:ee:e4:c2:d9: 44:ef:e3:d3:cb:2c:6f:0f:55:ec:61:b8:ff:1e:ea:63:5d:db: e5:9f:ee:cd:e1:85:80:7a:b5:a0:99:a5:b0:3e:a4:69:e6:e9: 6b:71:7d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUetVcmvRqC9CoskI+wiSVH2SbFcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjEwMjMyMTMxMDRaFw0yNjEwMjQyMzQxMDRaMDMxMTAvBgNV BAMTKDkwNTk1NzYzMjJFQTgwMkE1MzlFMDRDM0ExQTIyQkIwNjcxNzVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWuuB6VR/k8CNCiqBzxIYxgs2 VCFeebmlOtDxGgWm8Y2jsgevsRxtjR3CwDLRA15oSytriPyD/2BCExLoJbmV1zDs dlEKC9Q1aqbZJ4YtipZWEmaoIk9ZyzTP8RJqawlLWarpsecoMsBGox+j+hpyvwXJ RlySX6mZB8Um5d8dx+WGqBhY6JhgzF2f03kIRRed37glB7goWIuceobJmY58ph4Y fimXW8Jtuo6GLfVprlwkhVmvWuyILXlgrURtQuGx8qEvHtKkKUs6YkidXObgM372 DEa90wNigtVs8rcktZV8XwcvSm8aSm+Tdf71c9rT7hecLqNl6VvswSCZ/j83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFlXYyLqgCpTngTDoaIrsGcXXTAwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu0XJUKdpmbg9X26Pk4kU+UZnDkxWNQYG6t rhMYbkCQM5oRgqdr4h0XsF0yVxCdShrgzZwnA77N82i321YLCDtQLCRO44a+r6Fx jFZefCOdxWYZQPU8sGIIC4YjfEUxrxDy4nsQrSyu5B4sAAzO2v8X4yvuVwUI9yFy mabwVYFoCGLQurXRDy/LT396TFOZdxdYnO8o9REc1LdSo/+uKRSCPNgbt6rnxL+6 n+0o+2uH3nq0DWXVQtPLUwemnRzXbwL69Sdh9QKb2RKEuMZ/ghq8/7JU7uTC2UTv 49PLLG8PVexhuP8e6mNd2+Wf7s3hhYB6taCZpbA+pGnm6WtxfT8= -----END CERTIFICATE-----Generated at Sat Oct 24 09:38:57 2026 by rpki-client