$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: K84gHs4SAZKTQC6LmCcxUhn6h3nNLZKgTVDdTfuCIRY= Subject key identifier: E7:F8:C9:CA:E1:10:87:86:FC:FC:C2:D5:16:F8:48:FB:B1:E3:7D:10 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 01618988D9266B7A8BA241006A6EDFA3A6DDE194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: C0 Signing time: Thu 24 Jul 2025 05:00:05 +0000 Manifest this update: Thu 24 Jul 2025 04:55:05 +0000 Manifest next update: Sun 27 Jul 2025 10:31:05 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 4: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: uQjODbUkb8fghfW7cNqmSe4KBtZE6y5uSYOeCwUdZGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 10:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:61:89:88:d9:26:6b:7a:8b:a2:41:00:6a:6e:df:a3:a6:dd:e1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Jul 24 04:55:05 2025 GMT Not After : Jul 27 10:31:05 2025 GMT Subject: CN=E7F8C9CAE1108786FCFCC2D516F848FBB1E37D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:bd:67:bf:06:45:16:b5:c0:38:43:f6:c0: 54:4b:27:ea:0c:42:c7:ac:3e:0f:88:cf:7f:7f:01: 7d:9b:5a:2e:2d:1d:d8:5f:ff:e0:f5:b9:3b:7f:5a: 0b:6a:74:1e:77:99:95:29:2e:89:d8:70:d6:35:71: 73:a6:ea:bc:e5:6a:f5:99:10:22:88:48:4a:c9:f2: 55:75:5b:c8:35:56:67:52:96:65:e3:a5:bd:4e:7e: 1b:d7:56:b7:a6:54:bd:a5:3a:e1:d4:1f:1f:b2:91: 4b:76:4d:90:4f:97:93:67:c5:b9:87:af:9e:17:94: 7c:38:88:72:f4:b3:1b:e5:7a:bf:7b:07:62:da:88: 51:29:6e:65:3a:74:47:32:7b:48:a6:f9:48:6e:34: 6d:8c:ef:92:f7:cf:e5:90:a9:36:ce:67:6a:d5:4a: 00:ab:0b:be:79:1c:2d:83:0f:6d:b7:c0:de:87:70: e7:26:5f:2c:1f:bc:b5:4b:48:22:3e:4a:75:85:1f: 40:d1:83:f1:b6:64:a9:75:6c:60:f1:4d:ac:52:7e: 6e:00:40:bc:b0:07:be:fe:82:76:0c:a2:5a:7f:c8: 9d:20:dd:b3:89:93:ef:91:25:bc:9d:99:5b:d7:76: 8d:12:dc:eb:82:a2:12:97:e3:dd:6b:f8:7b:1e:0f: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F8:C9:CA:E1:10:87:86:FC:FC:C2:D5:16:F8:48:FB:B1:E3:7D:10 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:08:76:be:dc:1a:92:92:0e:8e:ec:c6:98:f6:75:8e:d6: 3f:75:f4:4c:b7:a1:95:e3:43:0a:44:f7:07:9e:0d:a0:23:89: 13:9c:85:da:82:5d:f4:99:7f:19:22:01:62:30:28:f9:62:37: a7:b7:c5:33:69:68:b3:10:5a:96:ac:2f:2e:79:1a:6b:c6:bd: 09:17:67:77:b5:a0:aa:5a:7e:78:a9:f8:f1:b6:3f:4e:da:28: dd:0a:65:b8:68:90:cf:52:62:13:3f:b6:55:6b:42:e1:21:19: e9:fb:28:33:55:58:dd:12:f3:75:96:0a:1e:fd:95:a5:cc:e2: 9c:55:a5:1f:22:2e:9a:23:3e:d5:56:93:7a:15:d6:fa:fa:20: 49:3a:14:37:07:b6:e6:3b:94:15:ad:60:da:2c:84:41:86:6a: 21:dd:6e:32:f6:2f:1b:8b:40:16:49:4b:80:9f:61:2f:9f:c7: c4:ad:3c:af:32:6a:c5:f3:1b:86:1c:a3:5f:66:aa:8c:49:d4: 74:f2:c1:38:de:eb:b2:df:d8:a6:6b:1a:82:f2:8d:9f:42:97: 10:5f:b5:a5:c8:53:e4:c5:58:ab:9d:f6:61:ef:ea:44:8d:70: bb:fa:e6:ff:9f:8a:53:22:79:a8:9f:fc:de:0c:95:3d:4a:a7: 32:1f:cd:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWGJiNkma3qLokEAam7fo6bd4ZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA3MjQwNDU1MDVaFw0yNTA3MjcxMDMxMDVaMDMxMTAvBgNV BAMTKEU3RjhDOUNBRTExMDg3ODZGQ0ZDQzJENTE2Rjg0OEZCQjFFMzdEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlr1nvwZFFrXAOEP2wFRLJ+oM QsesPg+Iz39/AX2bWi4tHdhf/+D1uTt/WgtqdB53mZUpLonYcNY1cXOm6rzlavWZ ECKISErJ8lV1W8g1VmdSlmXjpb1OfhvXVremVL2lOuHUHx+ykUt2TZBPl5NnxbmH r54XlHw4iHL0sxvler97B2LaiFEpbmU6dEcye0im+UhuNG2M75L3z+WQqTbOZ2rV SgCrC755HC2DD223wN6HcOcmXywfvLVLSCI+SnWFH0DRg/G2ZKl1bGDxTaxSfm4A QLywB77+gnYMolp/yJ0g3bOJk++RJbydmVvXdo0S3OuCohKX491r+HseD6vDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/jJyuEQh4b8/MLVFvhI+7HjfRAwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs0CHa+3BqSkg6O7MaY9nWO1j919Ey3oZXj QwpE9weeDaAjiROchdqCXfSZfxkiAWIwKPliN6e3xTNpaLMQWpasLy55GmvGvQkX Z3e1oKpafnip+PG2P07aKN0KZbhokM9SYhM/tlVrQuEhGen7KDNVWN0S83WWCh79 laXM4pxVpR8iLpojPtVWk3oV1vr6IEk6FDcHtuY7lBWtYNoshEGGaiHdbjL2LxuL QBZJS4CfYS+fx8StPK8yasXzG4Yco19mqoxJ1HTywTje67Lf2KZrGoLyjZ9ClxBf taXIU+TFWKud9mHv6kSNcLv65v+filMieaif/N4MlT1KpzIfzZk= -----END CERTIFICATE-----Generated at Fri Jul 25 06:25:09 2025 by rpki-client