$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft File: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft (raw, json) Hash identifier: SQsu00xH0m8qEQ7GAYPP8KQHIcuOFX5xSf9GuPxzM4k= Subject key identifier: AA:D9:21:1A:3E:2F:DD:AE:D3:6E:0A:FC:44:07:DA:C5:E8:95:24:23 Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Certificate serial: 69ED3A95494B1DD4D06925F4EF1D4F662B9F9A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:15:09 +0000 Manifest this update: Tue 02 Jun 2026 12:10:09 +0000 Manifest next update: Wed 03 Jun 2026 13:11:09 +0000 Files and hashes: 1: 3130332e3235332e3232392e302f32342d3234203d3e20313531343034.roa (hash: RIHwrudrpVLaaegedVMsJkZlIo5win2AAp+8+JVMcXs=) 2: 31342e3130322e34372e302f32342d3234203d3e20313333313832.roa (hash: FUD9he0QI5yNIyIL9mEBFlbiysMPlVf4Uqe0OcWuIXc=) 3: 67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl (hash: v3gI4yNPPxNI0Ej6yIWX99WkuAOg7uwciXuFZXCq3/E=) 4: 323030313a6466333a313834303a3a2f34382d3438203d3e20313531343034.roa (hash: Vx6ld1JtPTgoHi+TIJ7XQ/J/UliTwzZZOU68XOwrY5w=) 5: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (hash: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ed:3a:95:49:4b:1d:d4:d0:69:25:f4:ef:1d:4f:66:2b:9f:9a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00 Validity Not Before: Jun 2 12:10:09 2026 GMT Not After : Jun 3 13:11:09 2026 GMT Subject: CN=AAD9211A3E2FDDAED36E0AFC4407DAC5E8952423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:20:88:03:0f:1a:a7:bb:72:a7:53:a5:bc: 33:42:5e:06:df:cf:63:7c:55:5d:67:39:7e:f8:37: 75:48:59:80:f7:96:5f:78:68:c6:2f:b7:c7:e8:c3: 29:a0:5e:9c:66:41:cd:d1:c7:c5:f7:d4:18:9b:5c: 08:0c:82:08:b0:bb:9f:54:23:3a:09:55:93:6b:42: dd:40:c7:f2:bf:49:1e:ac:da:61:30:15:86:fb:b9: 2d:07:d1:ea:dd:65:83:3f:63:c5:da:34:91:70:5c: c0:c7:e2:e5:93:fb:4c:94:18:60:4c:df:27:1d:59: 4e:97:d7:0a:ea:28:df:61:49:69:60:85:ee:b1:e5: 3f:75:9d:25:39:dc:67:a6:da:1e:1d:26:6a:49:af: df:57:70:c5:e5:02:79:06:99:20:01:24:b3:8b:15: 10:3c:8f:6a:69:c1:c3:86:38:e0:83:5d:5b:af:eb: 97:0b:c8:fa:c5:a6:e0:c8:1c:80:bd:b7:11:8f:d5: 06:97:d4:00:88:60:7a:64:43:08:2f:b9:0c:11:7d: a8:27:77:9b:0f:fb:c7:c0:9f:e3:68:d1:ce:61:54: cc:c3:86:e1:df:85:92:66:c8:12:6c:d7:9c:c9:2a: b6:7a:45:ba:87:cc:3d:04:b2:7f:f8:8f:db:3c:0f: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D9:21:1A:3E:2F:DD:AE:D3:6E:0A:FC:44:07:DA:C5:E8:95:24:23 X509v3 Authority Key Identifier: keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5d:f2:a3:0c:b1:0a:b7:3c:6f:e5:37:f2:21:93:ea:db:3c: f0:b3:f8:28:ca:b6:ba:37:2e:dc:f5:f6:c2:6f:88:c0:0e:e5: 48:2d:78:ac:4b:65:67:08:04:eb:59:1d:a3:41:c3:d9:a1:da: ad:c1:0c:7d:18:b7:fe:e7:01:7c:0b:52:4b:a8:ac:1d:9a:4d: dd:b0:82:37:13:6d:8f:3d:db:f7:c5:7d:27:c3:32:41:47:46: fb:d3:f4:47:21:f5:e2:cc:c1:75:46:c6:2a:3c:3b:88:fe:17: 34:00:9c:7a:9b:50:79:d1:d6:78:5f:fd:5e:55:2d:e5:fc:cf: b9:58:a0:04:76:c8:48:0c:3f:74:44:f5:76:09:86:3a:0c:d3: 8e:97:24:22:81:62:0f:1f:ba:2e:2f:5a:00:37:2b:66:ee:3a: af:70:f5:d8:21:e1:cf:9e:3c:33:98:2c:55:ba:45:2b:63:19: 88:83:26:b6:df:44:b4:19:28:58:12:dc:66:53:55:89:00:71: 0f:ab:de:b9:bf:3d:d6:36:ee:06:d9:68:79:83:bf:c1:7a:eb: 78:8d:89:38:5f:1c:3f:e3:6a:a0:da:af:60:30:fb:f3:2a:01: 28:95:93:c8:77:c3:18:69:21:98:9e:31:ca:26:4b:44:d8:cf: dd:a4:97:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae06lUlLHdTQaSX07x1PZiufmiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUw MjYxM0UwMDAeFw0yNjA2MDIxMjEwMDlaFw0yNjA2MDMxMzExMDlaMDMxMTAvBgNV BAMTKEFBRDkyMTFBM0UyRkREQUVEMzZFMEFGQzQ0MDdEQUM1RTg5NTI0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUkyCIAw8ap7typ1OlvDNCXgbf z2N8VV1nOX74N3VIWYD3ll94aMYvt8fowymgXpxmQc3Rx8X31BibXAgMggiwu59U IzoJVZNrQt1Ax/K/SR6s2mEwFYb7uS0H0erdZYM/Y8XaNJFwXMDH4uWT+0yUGGBM 3ycdWU6X1wrqKN9hSWlghe6x5T91nSU53Gem2h4dJmpJr99XcMXlAnkGmSABJLOL FRA8j2ppwcOGOOCDXVuv65cLyPrFpuDIHIC9txGP1QaX1ACIYHpkQwgvuQwRfagn d5sP+8fAn+No0c5hVMzDhuHfhZJmyBJs15zJKrZ6RbqHzD0Esn/4j9s8D5zHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtkhGj4v3a7Tbgr8RAfaxeiVJCMwHwYDVR0j BBgwFoAUZ61eo66eyxu0SqEAjXBAvgJhPgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdkMTVkNTMtYTRiNC00NDM1LWExZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNB RTlFQ0IxQkI0NEFBMTAwOEQ3MDQwQkUwMjYxM0UwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82N0FENUVBM0FFOUVDQjFCQjQ0QUExMDA4RDcwNDBCRTAyNjEz RTAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdkMTVkNTMtYTRiNC00NDM1LWEx ZGEtNTJkMDIxMmVmMzNkLzAvNjdBRDVFQTNBRTlFQ0IxQkI0NEFBMTAwOEQ3MDQw QkUwMjYxM0UwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANd8qMMsQq3PG/lN/Ihk+rbPPCz+CjKtro3 Ltz19sJviMAO5UgteKxLZWcIBOtZHaNBw9mh2q3BDH0Yt/7nAXwLUkuorB2aTd2w gjcTbY892/fFfSfDMkFHRvvT9Ech9eLMwXVGxio8O4j+FzQAnHqbUHnR1nhf/V5V LeX8z7lYoAR2yEgMP3RE9XYJhjoM046XJCKBYg8fui4vWgA3K2buOq9w9dgh4c+e PDOYLFW6RStjGYiDJrbfRLQZKFgS3GZTVYkAcQ+r3rm/PdY27gbZaHmDv8F663iN iThfHD/jaqDar2Aw+/MqASiVk8h3wxhpIZieMcomS0TYz92klwU= -----END CERTIFICATE-----Generated at Tue Jun 2 21:46:52 2026 by rpki-client