$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: BjDdUbVP+YzBlkYAngb9/JeTo4wRqJ8byJg31Sw+quc= Subject key identifier: A2:CC:7F:82:83:F7:42:2F:87:57:FC:B7:BD:BC:CB:8A:B1:BD:70:10 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 60AF20C0E7D5E633F563E42BEA341C3BD8F9DBC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0124 Signing time: Thu 05 Mar 2026 14:30:06 +0000 Manifest this update: Thu 05 Mar 2026 14:25:06 +0000 Manifest next update: Sun 08 Mar 2026 19:54:06 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: MQKo7HDpBSWRDu9ohcHnHOIwc/TVkWugiFl3GumZoGI=) 4: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 19:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:af:20:c0:e7:d5:e6:33:f5:63:e4:2b:ea:34:1c:3b:d8:f9:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Mar 5 14:25:06 2026 GMT Not After : Mar 8 19:54:06 2026 GMT Subject: CN=A2CC7F8283F7422F8757FCB7BDBCCB8AB1BD7010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:7a:d5:0d:e4:31:49:1a:e6:be:dc:01:3f: c4:f6:02:ae:57:0a:d5:eb:89:0e:65:68:9a:7c:bb: 31:4f:7b:12:dc:be:10:81:5b:12:2d:f8:ad:8c:70: 05:cf:d7:85:66:87:db:46:6a:0f:24:32:ed:06:1c: 40:68:84:f6:28:c9:93:c1:76:09:19:55:68:01:10: a6:31:8a:ad:7e:86:c0:50:3e:25:9e:6c:8b:8f:95: 6d:91:8a:54:b6:ec:a8:bd:4a:6d:e0:3e:52:e9:cd: 38:f7:42:81:63:39:85:f4:2e:2f:9f:0f:5f:eb:c2: 51:1d:17:63:8e:a9:b7:b4:d3:cf:84:5e:19:61:0b: 81:02:42:3a:73:8d:e3:42:5b:43:9a:93:b9:29:2c: 55:ec:05:a4:12:ae:71:64:2a:87:4b:0d:4b:58:ce: cc:43:ad:a4:d3:9f:f2:df:82:db:8f:a9:27:f4:cd: 2e:61:f2:45:ca:2f:94:ed:90:a5:17:c5:57:2b:44: 33:18:82:6d:8b:75:0b:1b:a2:28:55:19:c9:d8:5b: f6:72:fa:dd:b9:d5:6e:ab:4c:13:e2:15:2b:76:60: 81:81:86:b3:02:48:22:98:dc:0c:07:cb:02:e2:25: 4e:cc:62:4b:7d:9c:16:8b:0b:8f:ef:da:ad:0d:0a: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:7F:82:83:F7:42:2F:87:57:FC:B7:BD:BC:CB:8A:B1:BD:70:10 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c1:04:1e:65:48:f8:b4:c0:1d:10:72:36:d6:8d:25:4b:4f: 77:01:da:f9:b1:84:7b:9e:e6:ed:39:61:5f:b3:d3:a0:ea:3e: 0d:e1:c5:a4:a3:fc:10:93:f8:d8:54:75:92:9f:2a:8a:c9:9c: e0:c3:b0:61:8a:63:ad:fa:e1:1d:16:0c:a9:97:3d:28:f1:23: 58:2c:f3:12:48:b5:aa:0c:d9:68:3c:7e:7b:c5:55:03:fc:40: 79:55:be:ba:3e:f8:e4:e4:6c:c2:97:3d:c8:ac:47:25:13:4c: 1e:24:3a:d5:4a:6f:d0:46:ae:c3:b0:c6:aa:09:72:ee:72:ff: 7c:1a:45:e7:be:99:b0:d0:c4:7a:de:2b:22:7c:6e:36:f6:57: bf:c1:b6:ae:af:3b:24:99:df:f6:89:d8:69:ba:bf:bb:23:22: 31:f5:17:d0:7b:5b:d5:c8:23:88:29:3f:ca:b9:a7:b1:c3:0f: 54:e7:3a:3a:2c:f7:52:f0:52:56:e9:2a:39:fb:65:81:c6:e3: 27:d3:fc:83:2e:10:0b:dc:70:37:62:bd:88:b2:d7:9a:bd:9a: cd:51:b5:83:e4:b3:cc:bc:7d:ca:75:34:6b:27:80:22:4f:ed: be:8c:9e:03:6c:fb:d9:cd:0e:f4:d1:d2:5a:07:42:89:ff:63: e7:88:4a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYK8gwOfV5jP1Y+Qr6jQcO9j528kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNjAzMDUxNDI1MDZaFw0yNjAzMDgxOTU0MDZaMDMxMTAvBgNV BAMTKEEyQ0M3RjgyODNGNzQyMkY4NzU3RkNCN0JEQkNDQjhBQjFCRDcwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZ3rVDeQxSRrmvtwBP8T2Aq5X CtXriQ5laJp8uzFPexLcvhCBWxIt+K2McAXP14Vmh9tGag8kMu0GHEBohPYoyZPB dgkZVWgBEKYxiq1+hsBQPiWebIuPlW2RilS27Ki9Sm3gPlLpzTj3QoFjOYX0Li+f D1/rwlEdF2OOqbe008+EXhlhC4ECQjpzjeNCW0Oak7kpLFXsBaQSrnFkKodLDUtY zsxDraTTn/LfgtuPqSf0zS5h8kXKL5TtkKUXxVcrRDMYgm2LdQsboihVGcnYW/Zy +t251W6rTBPiFSt2YIGBhrMCSCKY3AwHywLiJU7MYkt9nBaLC4/v2q0NCubFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosx/goP3Qi+HV/y3vbzLirG9cBAwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/BBB5lSPi0wB0QcjbWjSVLT3cB2vmxhHue 5u05YV+z06DqPg3hxaSj/BCT+NhUdZKfKorJnODDsGGKY6364R0WDKmXPSjxI1gs 8xJItaoM2Wg8fnvFVQP8QHlVvro++OTkbMKXPcisRyUTTB4kOtVKb9BGrsOwxqoJ cu5y/3waRee+mbDQxHreKyJ8bjb2V7/Btq6vOySZ3/aJ2Gm6v7sjIjH1F9B7W9XI I4gpP8q5p7HDD1TnOjos91LwUlbpKjn7ZYHG4yfT/IMuEAvccDdivYiy15q9ms1R tYPks8y8fcp1NGsngCJP7b6MngNs+9nNDvTR0loHQon/Y+eISok= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:34 2026 by rpki-client