$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: HZAP/jTvJQXhAOIjFfmVfgcvNXJjBAFd5eEfH5AX6hM= Subject key identifier: 07:76:CD:5E:FE:A9:10:5A:A4:45:33:C1:E1:CC:E5:C2:DC:72:41:10 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 015A32171DF5025470CEBF4C385AF641B84A8CAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01E6 Signing time: Sat 18 Oct 2025 18:31:44 +0000 Manifest this update: Sat 18 Oct 2025 18:26:44 +0000 Manifest next update: Wed 22 Oct 2025 01:57:44 +0000 Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: Na5W4Mp4jAiw3KusEjCQv2Z53eCEDUtT8VcTtmCgUlI=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5a:32:17:1d:f5:02:54:70:ce:bf:4c:38:5a:f6:41:b8:4a:8c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Oct 18 18:26:44 2025 GMT Not After : Oct 22 01:57:44 2025 GMT Subject: CN=0776CD5EFEA9105AA44533C1E1CCE5C2DC724110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:d7:3d:00:50:b9:57:9d:48:30:18:a6:f4: 16:75:99:b5:81:de:8c:c9:0f:4b:e1:2f:a6:65:b2: ab:58:b3:d2:2f:f2:a8:19:06:9a:f9:42:8a:19:ef: 8f:67:30:8a:0f:48:99:ee:8d:17:48:44:5d:a4:dc: a9:a6:25:5e:46:a7:5e:11:5f:76:64:95:ce:a8:9c: 54:de:a8:0f:a4:73:bc:1e:54:9f:4c:a8:75:4e:6a: 69:eb:25:36:7f:e6:7e:d8:83:b1:4a:5b:3d:fe:c8: 53:fc:36:50:3c:af:c3:d4:df:d0:ce:b9:b3:53:42: 74:92:24:3e:4f:44:c8:ca:64:a2:7f:1a:08:cb:94: c3:fb:d1:d0:8c:d3:67:6e:57:57:ab:73:ae:f2:1d: d2:64:76:8e:c0:ac:93:6f:f6:27:4e:d8:fb:33:58: ba:12:a5:b2:38:ef:ad:b9:3a:ff:1f:e4:43:31:d3: 5c:6d:f8:63:cc:17:56:bb:a3:51:d1:d6:17:1c:c0: 04:b2:ba:de:7d:70:27:80:40:5a:b1:18:2b:12:ad: b6:bb:eb:e2:1e:cf:ab:7b:72:86:a7:26:87:0c:b8: 7e:c1:0f:bb:76:16:5b:6b:36:bb:7b:4d:19:ae:f9: b9:3a:89:b7:eb:a9:c5:e9:4c:7c:53:68:2f:05:0b: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:76:CD:5E:FE:A9:10:5A:A4:45:33:C1:E1:CC:E5:C2:DC:72:41:10 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:aa:3d:05:4e:d6:e4:f7:57:7c:80:b6:70:88:5d:8a:1b:d0: 3c:49:26:a6:36:3d:6d:07:a8:a4:c3:87:86:b9:a0:e8:3b:ed: db:16:05:34:29:80:57:3b:0a:a7:e8:a6:b5:8f:bc:51:da:b2: bf:9c:e3:ef:2b:c3:2a:23:72:f1:2e:b1:e6:bc:88:56:08:0d: b9:1c:73:00:df:9a:db:97:9e:e4:f4:bf:8d:ff:52:e7:f6:c7: ab:c6:a1:f4:c3:4e:3e:07:3b:04:1d:4e:8d:c8:e9:f4:83:49: 34:67:ce:23:ff:3a:46:11:0f:5e:55:d5:26:0c:cb:90:92:06: 2f:24:51:c6:99:9f:c6:86:25:c9:45:09:fa:ff:4e:65:72:a9: 24:ae:bc:e9:eb:3a:9e:14:5c:a2:0a:e2:a5:9f:f9:f4:1a:c8: d9:1f:b8:33:8b:39:16:9d:cc:82:bd:4f:2e:0f:d1:a6:46:2a: 9d:78:bc:f7:e4:a0:0e:50:6f:6a:e9:fd:7f:88:4d:f0:1d:2f: 93:31:ba:ac:eb:71:8f:36:06:7f:c8:5e:38:c3:3a:93:e1:51: 7e:b0:a0:25:25:35:31:cb:60:72:ee:85:e5:5a:59:01:3f:fa: 8a:50:85:b4:57:a7:c6:97:26:b7:78:72:ae:d5:61:68:b6:69: 5c:63:05:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVoyFx31AlRwzr9MOFr2QbhKjKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTEwMTgxODI2NDRaFw0yNTEwMjIwMTU3NDRaMDMxMTAvBgNV BAMTKDA3NzZDRDVFRkVBOTEwNUFBNDQ1MzNDMUUxQ0NFNUMyREM3MjQxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHdc9AFC5V51IMBim9BZ1mbWB 3ozJD0vhL6ZlsqtYs9Iv8qgZBpr5QooZ749nMIoPSJnujRdIRF2k3KmmJV5Gp14R X3Zklc6onFTeqA+kc7weVJ9MqHVOamnrJTZ/5n7Yg7FKWz3+yFP8NlA8r8PU39DO ubNTQnSSJD5PRMjKZKJ/GgjLlMP70dCM02duV1erc67yHdJkdo7ArJNv9idO2Psz WLoSpbI47625Ov8f5EMx01xt+GPMF1a7o1HR1hccwASyut59cCeAQFqxGCsSrba7 6+Iez6t7coanJocMuH7BD7t2FltrNrt7TRmu+bk6ibfrqcXpTHxTaC8FCwItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3bNXv6pEFqkRTPB4czlwtxyQRAwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2qPQVO1uT3V3yAtnCIXYob0DxJJqY2PW0H qKTDh4a5oOg77dsWBTQpgFc7CqfoprWPvFHasr+c4+8rwyojcvEusea8iFYIDbkc cwDfmtuXnuT0v43/Uuf2x6vGofTDTj4HOwQdTo3I6fSDSTRnziP/OkYRD15V1SYM y5CSBi8kUcaZn8aGJclFCfr/TmVyqSSuvOnrOp4UXKIK4qWf+fQayNkfuDOLORad zIK9Ty4P0aZGKp14vPfkoA5Qb2rp/X+ITfAdL5MxuqzrcY82Bn/IXjjDOpPhUX6w oCUlNTHLYHLuheVaWQE/+opQhbRXp8aXJrd4cq7VYWi2aVxjBfI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:50 2025 by rpki-client