$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: Kwp5NPhZI+dILXPDYavJWE/13LyWcqe1WTJe8vNvE2E= Subject key identifier: 6D:5A:EC:AB:46:2D:27:91:2C:C3:87:A5:C2:97:3F:9F:C0:D0:DC:C4 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 3C5F19A6E10872833D2D0C9A5CEFF450EA833AD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01D3 Signing time: Fri 05 Sep 2025 19:51:45 +0000 Manifest this update: Fri 05 Sep 2025 19:46:45 +0000 Manifest next update: Tue 09 Sep 2025 01:19:45 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) 2: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: TluHkik/z+0X51JeFXhtNItmogWtvvt+IKTlBLGdAks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5f:19:a6:e1:08:72:83:3d:2d:0c:9a:5c:ef:f4:50:ea:83:3a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Sep 5 19:46:45 2025 GMT Not After : Sep 9 01:19:45 2025 GMT Subject: CN=6D5AECAB462D27912CC387A5C2973F9FC0D0DCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:3d:33:d7:7f:55:c1:80:44:6f:0b:d1:9c: 93:3f:cf:06:61:d6:6c:f3:ca:77:88:ea:23:41:4b: 05:b9:2c:98:5e:54:e5:2b:1d:72:06:90:08:df:d7: 87:5a:52:a7:c9:03:37:55:79:87:86:20:6e:f5:ff: c2:29:7e:71:20:ce:94:0d:4b:f2:b8:3c:6c:b1:43: ea:8e:a3:75:df:16:e3:ef:38:00:d9:e3:17:8a:e9: a8:e5:8d:1e:08:04:69:81:5e:57:ec:c8:13:48:f6: 80:94:77:ef:84:98:28:03:0f:73:7b:73:89:ba:f8: 30:3e:1f:89:4a:82:ff:8c:cd:5f:ad:00:b6:c5:6f: aa:88:31:02:20:6b:96:f7:bf:44:fc:1d:c0:78:98: 77:d9:d1:9c:cc:3e:fa:61:b3:2a:fd:42:8e:8c:40: b8:14:c3:64:59:0e:2f:e3:56:bb:68:aa:d1:b4:ed: fa:a4:cc:c1:99:30:6a:c0:26:1c:15:71:30:f8:9f: bc:93:80:81:32:84:0f:19:85:ac:26:cd:75:75:22: 8e:f7:8f:a0:83:2a:9c:03:33:22:bd:39:73:d8:91: e1:e7:a0:a4:4b:e8:b4:9b:b9:a1:71:9c:76:cb:5c: c5:17:e8:d0:b2:38:40:8b:42:19:16:54:64:54:35: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:EC:AB:46:2D:27:91:2C:C3:87:A5:C2:97:3F:9F:C0:D0:DC:C4 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f6:7b:15:54:83:10:7b:ea:0a:81:bd:d8:75:ff:c1:da:1b: 35:14:fb:9b:8a:98:e0:74:7c:b5:d6:93:b6:7d:a7:f5:21:da: 2f:ed:ca:fc:6e:18:3d:c5:bd:38:80:a2:58:8a:8f:82:7a:7a: 26:d6:aa:48:0e:32:1d:5e:a4:31:ae:d3:6b:fe:8f:44:98:14: ec:a5:f9:7a:d6:00:08:48:cd:ab:d4:42:02:85:aa:30:f1:d0: 39:2f:2c:8f:55:88:8b:64:24:32:ad:35:ca:d8:99:f4:97:66: 11:22:3c:ab:63:4e:6a:70:bb:de:e6:4b:54:1f:46:1d:5e:a1: 66:f9:74:6c:af:b7:a8:41:58:1f:d3:d1:b8:d0:9e:bc:48:7b: 7f:71:8b:1d:e4:29:d1:fa:96:29:1a:99:81:60:63:da:fe:f9: d6:6f:07:bf:a7:c4:27:fe:0b:18:86:26:c3:a3:66:05:38:08: a1:aa:1d:b6:90:8d:ac:8b:ab:07:0c:ce:0b:82:fc:31:30:90: da:a6:81:2b:f6:03:cb:72:43:d2:fe:28:4e:13:ed:e7:58:90: 87:ac:fe:23:0c:9e:d5:fd:b6:8d:91:6f:cb:0b:30:69:fe:1d: 25:e3:49:6c:2a:47:3b:41:bd:52:b2:9e:60:14:3a:22:a8:2e: ab:df:81:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF8ZpuEIcoM9LQyaXO/0UOqDOtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTA5MDUxOTQ2NDVaFw0yNTA5MDkwMTE5NDVaMDMxMTAvBgNV BAMTKDZENUFFQ0FCNDYyRDI3OTEyQ0MzODdBNUMyOTczRjlGQzBEMERDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEj0z139VwYBEbwvRnJM/zwZh 1mzzyneI6iNBSwW5LJheVOUrHXIGkAjf14daUqfJAzdVeYeGIG71/8IpfnEgzpQN S/K4PGyxQ+qOo3XfFuPvOADZ4xeK6ajljR4IBGmBXlfsyBNI9oCUd++EmCgDD3N7 c4m6+DA+H4lKgv+MzV+tALbFb6qIMQIga5b3v0T8HcB4mHfZ0ZzMPvphsyr9Qo6M QLgUw2RZDi/jVrtoqtG07fqkzMGZMGrAJhwVcTD4n7yTgIEyhA8ZhawmzXV1Io73 j6CDKpwDMyK9OXPYkeHnoKRL6LSbuaFxnHbLXMUX6NCyOECLQhkWVGRUNdJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVrsq0YtJ5Esw4elwpc/n8DQ3MQwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj2exVUgxB76gqBvdh1/8HaGzUU+5uKmOB0 fLXWk7Z9p/Uh2i/tyvxuGD3FvTiAoliKj4J6eibWqkgOMh1epDGu02v+j0SYFOyl +XrWAAhIzavUQgKFqjDx0DkvLI9ViItkJDKtNcrYmfSXZhEiPKtjTmpwu97mS1Qf Rh1eoWb5dGyvt6hBWB/T0bjQnrxIe39xix3kKdH6likamYFgY9r++dZvB7+nxCf+ CxiGJsOjZgU4CKGqHbaQjayLqwcMzguC/DEwkNqmgSv2A8tyQ9L+KE4T7edYkIes /iMMntX9to2Rb8sLMGn+HSXjSWwqRztBvVKynmAUOiKoLqvfgVQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:28 2025 by rpki-client