$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: qSkFZVpcLR94VpZ5Xj/I2keJ7ipcD56cafa7Z0vF9QU= Subject key identifier: 39:D0:D6:1A:92:E1:11:AC:76:F8:B8:9C:52:80:15:F9:D1:FF:00:0B Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 02DDB5DCFB25E8FCA3CC33A8644014E94273D51B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: BF Signing time: Mon 21 Jul 2025 22:40:05 +0000 Manifest this update: Mon 21 Jul 2025 22:35:05 +0000 Manifest next update: Fri 25 Jul 2025 04:53:05 +0000 Files and hashes: 1: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: O8IMT0MYth/g2SbqXSfxK2evhgs/BkIwQttoqP1nwZ8=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dd:b5:dc:fb:25:e8:fc:a3:cc:33:a8:64:40:14:e9:42:73:d5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Jul 21 22:35:05 2025 GMT Not After : Jul 25 04:53:05 2025 GMT Subject: CN=39D0D61A92E111AC76F8B89C528015F9D1FF000B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:69:3c:d1:cc:fd:3b:6e:e5:6d:99:ee:82: af:3c:b4:e4:48:3f:49:d6:68:3b:5f:25:72:04:da: 68:00:89:f5:a0:f7:89:11:a7:5f:d0:96:c2:69:f8: 01:19:17:8d:b2:09:5b:b2:57:8f:1f:63:c4:be:9e: 95:04:07:3b:ad:15:46:a2:0f:70:04:80:3c:e8:2f: 78:63:31:b7:c5:83:08:7a:72:d1:2e:95:0e:fa:a7: a9:0c:1c:17:00:1a:c7:67:5e:b5:54:d5:a3:2d:e5: df:f8:72:46:3f:e4:3c:e0:3c:2b:7b:23:36:8a:1c: 82:a4:6d:42:c0:63:15:b8:9e:4b:76:4c:43:de:fe: 2a:3c:af:98:5f:57:9a:c5:5d:06:72:84:77:7e:2c: 69:9b:2f:d0:3c:91:f8:12:16:0f:63:91:44:21:5d: 08:cf:16:41:b5:8e:76:f4:52:57:ef:7e:88:a3:f2: 5a:6e:25:15:1f:41:aa:df:e2:4d:f0:73:57:1e:58: 2e:69:71:34:39:a2:d4:ef:67:8b:fd:a6:7c:46:39: 56:1e:46:41:f2:16:d6:3b:7c:5d:a6:c2:61:40:17: 90:a0:79:4e:6e:62:8d:66:d1:04:ef:69:23:42:21: c5:b9:6c:b9:ba:75:a9:19:ac:4a:e5:48:c0:1b:b2: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:D6:1A:92:E1:11:AC:76:F8:B8:9C:52:80:15:F9:D1:FF:00:0B X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:7f:52:5b:9e:8b:89:24:c3:18:ab:eb:1a:33:6f:62:85: e0:30:1a:f4:b6:a2:f2:f2:6d:74:27:50:be:a2:e7:d4:a9:81: 6e:c9:88:bb:5e:70:f1:dd:27:c8:27:b5:a9:3c:95:90:11:38: c4:ef:7e:2a:c9:60:61:89:a5:65:e9:80:9d:32:ec:ec:6c:b4: 71:ae:8f:68:b6:17:23:f0:00:1d:8c:e8:e0:c0:34:ef:2b:7c: fc:ab:f9:3e:07:1e:eb:bc:9a:5d:27:f9:09:fe:d1:0b:8f:dc: ef:76:9c:db:fc:fa:ea:9a:98:1e:e1:44:ff:78:ec:50:57:99: a6:d0:13:88:c8:3f:5b:8c:90:2c:12:fa:eb:0d:b7:82:fd:71: 6d:5d:2a:14:98:29:18:92:f4:af:b3:0a:c1:bb:fa:1c:2b:78: 8b:0a:44:c0:41:f7:4a:28:95:fc:56:ae:e4:34:25:6b:45:fc: 35:46:e7:9e:67:c7:fb:c4:bf:da:85:be:74:c5:93:54:84:9d: e9:97:e4:d9:1b:9a:4e:e4:20:62:ff:d9:16:73:a2:f4:2b:1e: 29:37:60:9a:e7:1d:ee:d2:38:7f:7c:06:7a:d3:29:6b:c4:d7: d0:72:02:10:eb:ca:e9:91:45:4d:60:4d:ca:5c:5e:cb:42:c4: f7:2a:00:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt213Psl6PyjzDOoZEAU6UJz1RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA3MjEyMjM1MDVaFw0yNTA3MjUwNDUzMDVaMDMxMTAvBgNV BAMTKDM5RDBENjFBOTJFMTExQUM3NkY4Qjg5QzUyODAxNUY5RDFGRjAwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzmk80cz9O27lbZnugq88tORI P0nWaDtfJXIE2mgAifWg94kRp1/QlsJp+AEZF42yCVuyV48fY8S+npUEBzutFUai D3AEgDzoL3hjMbfFgwh6ctEulQ76p6kMHBcAGsdnXrVU1aMt5d/4ckY/5DzgPCt7 IzaKHIKkbULAYxW4nkt2TEPe/io8r5hfV5rFXQZyhHd+LGmbL9A8kfgSFg9jkUQh XQjPFkG1jnb0Ulfvfoij8lpuJRUfQarf4k3wc1ceWC5pcTQ5otTvZ4v9pnxGOVYe RkHyFtY7fF2mwmFAF5CgeU5uYo1m0QTvaSNCIcW5bLm6dakZrErlSMAbsrxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdDWGpLhEax2+LicUoAV+dH/AAswHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW9f1JbnouJJMMYq+saM29iheAwGvS2ovLy bXQnUL6i59SpgW7JiLtecPHdJ8gntak8lZAROMTvfirJYGGJpWXpgJ0y7OxstHGu j2i2FyPwAB2M6ODANO8rfPyr+T4HHuu8ml0n+Qn+0QuP3O92nNv8+uqamB7hRP94 7FBXmabQE4jIP1uMkCwS+usNt4L9cW1dKhSYKRiS9K+zCsG7+hwreIsKRMBB90oo lfxWruQ0JWtF/DVG555nx/vEv9qFvnTFk1SEnemX5Nkbmk7kIGL/2RZzovQrHik3 YJrnHe7SOH98BnrTKWvE19ByAhDryumRRU1gTcpcXstCxPcqAEQ= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:57 2025 by rpki-client