$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: dqiXERRCZhbCRxV2+Dj7pPUjXZLuHUV2uHB/u5TK4JU= Subject key identifier: FA:CD:ED:AC:6C:58:7F:6A:81:5F:00:86:3A:81:A3:8B:B3:51:57:A5 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 4F01FA070470696C36F166600760188CEDBEAA3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0139 Signing time: Mon 20 Apr 2026 02:30:06 +0000 Manifest this update: Mon 20 Apr 2026 02:25:06 +0000 Manifest next update: Thu 23 Apr 2026 05:30:06 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: C0in9j+CnZ0LLW1g0Y6V5rXxwqBibwkEBVu4MlI8RT8=) 2: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: ZZckzOr9ywIqKzfUhb2EmuYvzuXBURMp9aGUGSYsMew=) 3: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: dMrGdN3jz8zMFZFmBytqEtO63mjKB2uQPhY+tz5vgrM=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: S8PeiYq+sNMV4GT9BdQ5QdX2kgnaTXk8Ia+DPJXGQoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:01:fa:07:04:70:69:6c:36:f1:66:60:07:60:18:8c:ed:be:aa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Apr 20 02:25:06 2026 GMT Not After : Apr 23 05:30:06 2026 GMT Subject: CN=FACDEDAC6C587F6A815F00863A81A38BB35157A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:eb:22:5f:aa:71:3e:35:f0:5e:12:8f:f5: 41:0f:ef:0e:b3:bb:c8:f8:5b:42:04:7c:d3:90:ee: 72:ae:0b:9b:4e:60:ae:de:41:5c:9e:a1:b4:9b:04: 07:f3:10:d5:52:9b:98:4e:aa:82:39:5c:66:9c:68: 6c:7a:a2:34:40:9e:08:ee:a5:e1:64:2b:a9:30:e3: fc:59:26:00:6e:f7:12:45:fa:ca:db:d4:ee:49:33: d9:59:d3:0f:1c:d1:cf:04:7f:9d:21:bc:88:1d:03: 64:97:ed:31:d7:cb:56:b5:58:a1:84:47:07:49:3c: 01:72:0e:ab:98:b2:3f:e2:11:0b:49:0d:38:81:66: b6:05:ba:6e:d3:84:1f:29:3f:90:a4:26:20:ef:48: 8f:1d:23:01:9d:cb:1d:e0:91:48:fd:45:12:34:61: 90:aa:98:9b:0c:5f:f5:35:d2:65:68:55:52:fc:d4: aa:a7:e5:68:d0:15:f0:de:97:07:7d:68:2e:8e:15: 4b:e4:6d:b1:25:6b:76:fb:83:3b:f8:93:12:a6:ec: 1d:d0:3d:1b:96:85:cf:0e:23:c4:76:07:44:9c:2f: 86:7a:f4:e1:81:de:26:db:67:00:07:56:0a:1c:b2: 7a:1a:3d:99:c4:5a:1c:05:0b:0b:9e:41:f1:9a:6f: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:ED:AC:6C:58:7F:6A:81:5F:00:86:3A:81:A3:8B:B3:51:57:A5 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b7:96:0b:41:77:50:ab:f0:94:5d:0b:53:f7:47:63:2f:af: 59:8c:4c:23:45:f8:6d:4d:57:f2:49:7d:27:84:0b:a1:c5:2f: d1:06:e1:64:eb:52:fb:df:36:12:fd:65:97:f7:cb:69:3a:da: 10:69:07:51:b1:91:69:93:fe:ae:f5:1b:46:4c:92:d4:b7:9d: ea:54:5f:84:5c:1c:b1:04:60:c3:9a:38:32:a4:4b:67:00:87: e8:11:80:67:24:f9:9a:5b:47:ef:17:65:54:1b:87:c2:42:80: a3:ba:51:a4:6e:6d:46:60:e7:e8:5c:c0:df:5f:5e:5f:a4:b0: 1b:ba:73:9c:91:8c:0e:2f:ff:25:62:82:4d:dd:c9:f3:92:b7: 3d:ec:30:cc:62:55:fe:b8:0b:47:8f:77:74:6b:18:47:e8:c8: 8a:b5:24:9c:8f:52:9d:e3:5c:a0:4d:ea:8a:08:a0:c5:f4:47: 76:8e:e5:72:8c:fd:2e:8f:48:8f:f8:46:00:97:65:da:6d:f0: 70:8f:78:ea:59:c6:35:c8:fc:3b:54:a6:50:ae:c8:be:3c:25: d5:d5:e6:3a:c4:17:c7:6f:a1:b8:f6:10:37:12:63:fd:54:62: 60:71:50:bd:05:9b:c5:6a:f8:a8:d0:0b:c0:4f:f2:52:85:de: 08:00:4e:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwH6BwRwaWw28WZgB2AYjO2+qjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNjA0MjAwMjI1MDZaFw0yNjA0MjMwNTMwMDZaMDMxMTAvBgNV BAMTKEZBQ0RFREFDNkM1ODdGNkE4MTVGMDA4NjNBODFBMzhCQjM1MTU3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVousiX6pxPjXwXhKP9UEP7w6z u8j4W0IEfNOQ7nKuC5tOYK7eQVyeobSbBAfzENVSm5hOqoI5XGacaGx6ojRAngju peFkK6kw4/xZJgBu9xJF+srb1O5JM9lZ0w8c0c8Ef50hvIgdA2SX7THXy1a1WKGE RwdJPAFyDquYsj/iEQtJDTiBZrYFum7ThB8pP5CkJiDvSI8dIwGdyx3gkUj9RRI0 YZCqmJsMX/U10mVoVVL81Kqn5WjQFfDelwd9aC6OFUvkbbEla3b7gzv4kxKm7B3Q PRuWhc8OI8R2B0ScL4Z69OGB3ibbZwAHVgocsnoaPZnEWhwFCwueQfGab+rFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+s3trGxYf2qBXwCGOoGji7NRV6UwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIe3lgtBd1Cr8JRdC1P3R2Mvr1mMTCNF+G1N V/JJfSeEC6HFL9EG4WTrUvvfNhL9ZZf3y2k62hBpB1GxkWmT/q71G0ZMktS3nepU X4RcHLEEYMOaODKkS2cAh+gRgGck+ZpbR+8XZVQbh8JCgKO6UaRubUZg5+hcwN9f Xl+ksBu6c5yRjA4v/yVigk3dyfOStz3sMMxiVf64C0ePd3RrGEfoyIq1JJyPUp3j XKBN6ooIoMX0R3aO5XKM/S6PSI/4RgCXZdpt8HCPeOpZxjXI/DtUplCuyL48JdXV 5jrEF8dvobj2EDcSY/1UYmBxUL0Fm8Vq+KjQC8BP8lKF3ggATtk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:33 2026 by rpki-client