$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: JGkiGskOVyrlVwYmhs1xpFpG2e6v5dPbOhrYoIDW44E= Subject key identifier: 21:5B:10:BE:B1:89:FE:BD:3E:D9:56:F4:50:F4:AB:73:DA:0E:CF:52 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 2610AAAD2AAE8ABB04FD954194F91E83CA32C837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01CC Signing time: Thu 21 Aug 2025 08:01:48 +0000 Manifest this update: Thu 21 Aug 2025 07:56:48 +0000 Manifest next update: Sun 24 Aug 2025 12:05:48 +0000 Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: AzE6FyA795L20oTOVJ5Ar7R3fOEQaGR2NcRbAJ27UNY=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:10:aa:ad:2a:ae:8a:bb:04:fd:95:41:94:f9:1e:83:ca:32:c8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Aug 21 07:56:48 2025 GMT Not After : Aug 24 12:05:48 2025 GMT Subject: CN=215B10BEB189FEBD3ED956F450F4AB73DA0ECF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:33:41:e4:1f:6b:04:73:01:87:d6:2f:6f: 4d:af:0e:e9:8d:59:5d:e6:07:b8:19:74:a9:39:71: 67:a9:a6:6f:43:cd:ca:07:13:bb:69:b4:48:2c:ec: b1:97:c4:fe:e2:67:0f:a0:a5:8e:6c:8b:d9:9b:b3: 8b:12:79:f5:99:a4:75:51:32:8a:e6:24:e1:3b:72: d4:a0:e7:31:56:8e:a5:9a:d6:46:6b:01:77:4a:7f: fe:33:b9:d5:a2:4e:6b:83:c5:b7:99:31:22:56:7c: a0:0c:d1:5b:f3:26:e3:47:3e:88:ce:87:42:f1:71: e8:4b:cf:44:a2:b6:67:7d:d2:58:00:60:b3:cd:6f: 13:33:02:66:c6:bc:c4:0e:f5:f4:8e:70:62:da:76: 7a:a1:f7:4f:e1:6b:42:29:4c:bd:c3:84:3b:e6:d3: 3d:80:ee:01:48:8a:af:5b:a1:76:aa:3f:c1:4a:c9: 02:49:43:d0:82:d3:50:04:de:fb:6a:2e:7a:a5:73: 9d:93:e1:a9:ff:a2:90:4c:36:6b:95:8a:12:b1:25: 13:e0:fb:ba:ce:24:6d:c0:ee:40:d0:d1:84:ad:1e: 5c:99:e5:9a:e1:98:4f:57:04:80:88:40:3c:81:fc: ff:c6:8b:87:58:d9:d9:65:46:12:d5:c3:86:18:55: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5B:10:BE:B1:89:FE:BD:3E:D9:56:F4:50:F4:AB:73:DA:0E:CF:52 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:85:99:c6:a9:fd:69:9e:f3:1f:29:df:44:21:74:f6:bc:09: 3f:9e:4b:3a:57:0c:1e:21:80:fc:43:e8:de:86:02:3d:91:33: d5:d9:22:b6:be:a6:2c:4c:b7:ea:c6:e9:3b:c1:45:a9:91:1b: 68:26:0e:13:70:19:a5:53:72:45:ce:93:57:0e:53:32:88:b1: 49:45:4e:1f:a7:18:0b:73:a8:a4:a1:0f:e6:16:f9:47:e1:13: 6e:4f:96:13:ff:23:96:44:82:3a:b4:0f:05:24:27:a2:4a:05: 73:09:28:ac:04:55:b6:bf:f9:90:2c:8e:09:a3:d4:0f:88:d7: db:94:ba:3a:7a:98:11:d1:1d:71:7d:aa:1c:83:60:13:ce:e8: 05:2b:f9:d6:27:65:dc:3a:f1:6c:93:6a:60:56:fb:6e:8e:35: 4a:f6:ac:ab:7c:ce:2d:c3:c0:61:9f:d3:08:11:e9:0e:81:0e: 15:1d:bf:6a:0b:a2:85:ea:6f:da:3e:3b:0b:14:6b:6a:a9:a0: ee:88:cf:85:cc:3b:0d:8e:53:48:43:48:1b:82:e6:7e:66:55: 95:b5:35:d5:94:c0:8d:a9:9d:a3:67:11:ab:f2:6e:16:2c:3b: be:7d:06:87:87:27:54:e9:f7:fe:87:46:e2:8a:3d:b2:5f:1f: 67:cf:c3:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhCqrSquirsE/ZVBlPkeg8oyyDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTA4MjEwNzU2NDhaFw0yNTA4MjQxMjA1NDhaMDMxMTAvBgNV BAMTKDIxNUIxMEJFQjE4OUZFQkQzRUQ5NTZGNDUwRjRBQjczREEwRUNGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIszNB5B9rBHMBh9Yvb02vDumN WV3mB7gZdKk5cWeppm9DzcoHE7tptEgs7LGXxP7iZw+gpY5si9mbs4sSefWZpHVR MormJOE7ctSg5zFWjqWa1kZrAXdKf/4zudWiTmuDxbeZMSJWfKAM0VvzJuNHPojO h0LxcehLz0Sitmd90lgAYLPNbxMzAmbGvMQO9fSOcGLadnqh90/ha0IpTL3DhDvm 0z2A7gFIiq9boXaqP8FKyQJJQ9CC01AE3vtqLnqlc52T4an/opBMNmuVihKxJRPg +7rOJG3A7kDQ0YStHlyZ5ZrhmE9XBICIQDyB/P/Gi4dY2dllRhLVw4YYVfy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVsQvrGJ/r0+2Vb0UPSrc9oOz1IwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqFmcap/Wme8x8p30QhdPa8CT+eSzpXDB4h gPxD6N6GAj2RM9XZIra+pixMt+rG6TvBRamRG2gmDhNwGaVTckXOk1cOUzKIsUlF Th+nGAtzqKShD+YW+UfhE25PlhP/I5ZEgjq0DwUkJ6JKBXMJKKwEVba/+ZAsjgmj 1A+I19uUujp6mBHRHXF9qhyDYBPO6AUr+dYnZdw68WyTamBW+26ONUr2rKt8zi3D wGGf0wgR6Q6BDhUdv2oLooXqb9o+OwsUa2qpoO6Iz4XMOw2OU0hDSBuC5n5mVZW1 NdWUwI2pnaNnEavybhYsO759BoeHJ1Tp9/6HRuKKPbJfH2fPwx4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:21 2025 by rpki-client