$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: oVVq8igt86Vr2VO6umYZvNSeNGVsYGv7tDGIc0B7qfY= Subject key identifier: E1:45:5B:11:3F:00:D8:D1:C8:34:9D:84:6D:C4:73:9D:C0:F2:81:46 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 252D0BD4D21B8DED4259A045AC355DFEC22FB96D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 022C Signing time: Wed 25 Mar 2026 01:01:59 +0000 Manifest this update: Wed 25 Mar 2026 00:56:59 +0000 Manifest next update: Sat 28 Mar 2026 10:33:59 +0000 Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: A+WKqP8yblJQ7OVIozewN1oSV4brZlJgAkK2rpBRq+I=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2d:0b:d4:d2:1b:8d:ed:42:59:a0:45:ac:35:5d:fe:c2:2f:b9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Mar 25 00:56:59 2026 GMT Not After : Mar 28 10:33:59 2026 GMT Subject: CN=E1455B113F00D8D1C8349D846DC4739DC0F28146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:09:60:02:fa:24:a3:53:78:e4:f9:de:7d: 24:a0:ba:a7:12:3b:85:fc:b7:02:e0:32:2c:48:50: ea:79:c2:e8:16:a7:84:91:2a:c4:5d:0e:ea:71:7a: b3:7f:85:80:1d:52:cf:27:45:d0:e7:53:eb:e8:51: 84:49:a6:4e:7d:c6:9a:60:75:d2:50:02:d2:f1:ab: 50:68:2f:bd:cd:81:ec:b9:06:bb:51:a4:7c:6d:e4: 62:97:24:60:96:b8:bb:37:70:36:29:c7:9d:eb:c1: 24:53:b7:e7:aa:b2:c4:8e:d0:aa:fc:bf:29:74:cc: 86:47:83:19:92:7d:dd:18:e0:cf:33:dd:ad:f7:e6: 4b:86:59:d1:99:fd:82:38:75:bb:d0:db:3f:d2:01: 8a:0b:f8:12:eb:12:98:48:60:bd:bd:45:c1:94:bf: 3a:d7:95:6c:f7:e1:da:8d:13:f1:27:2e:85:34:33: f1:c2:85:e3:c9:11:b6:77:5a:57:28:80:a4:d3:37: aa:f1:6a:17:85:7d:47:ad:ec:38:2a:a2:b4:da:88: c2:2d:0d:c1:82:1d:5d:c8:b5:c2:83:8f:b1:57:4d: cf:a1:0c:a5:bd:1b:0f:12:41:1a:1d:bd:53:b9:72: dd:60:f7:a1:68:22:94:19:8e:ee:11:b6:31:56:57: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:45:5B:11:3F:00:D8:D1:C8:34:9D:84:6D:C4:73:9D:C0:F2:81:46 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f9:e0:97:7d:60:b7:1a:f2:f0:fe:8a:78:4d:50:17:1b:56: 1c:58:23:d4:69:f4:7a:ea:c6:86:15:b8:de:4d:4a:9c:e1:aa: 6b:a1:39:f9:bb:63:32:0a:b0:61:45:cf:39:ad:37:41:67:6c: 08:66:2b:94:cc:3d:f6:96:c4:aa:87:c6:c1:75:29:45:40:37: f7:92:d0:23:49:30:66:99:ac:72:fe:c5:ab:26:fd:bf:cb:c7: 5b:d6:2e:f6:d4:df:36:d0:46:90:6f:09:9a:b4:60:78:09:e2: a8:36:70:85:08:2b:3e:d9:c9:ee:f4:ec:39:d0:94:f6:8d:77: 06:12:a9:26:0a:d1:b9:08:16:20:bf:29:40:92:d7:87:3c:da: 26:83:97:60:c0:df:60:59:31:6e:d9:92:dc:ae:62:d9:03:95: 9f:ef:a1:92:9d:30:76:15:7b:2b:7b:9c:d5:65:50:b9:91:70: ae:39:81:09:8d:23:2b:c3:4c:fa:4b:98:7c:5e:7e:03:11:b9: b5:63:94:0a:c1:ce:57:38:a7:35:56:3b:67:f8:f5:e9:d4:48: b9:ea:a3:f4:7c:e6:c8:46:e9:5a:a7:f5:40:0e:ee:4b:25:90: 28:3a:e3:69:2f:4a:c9:fa:ee:7c:12:6f:f8:a1:66:1a:e2:45: 62:c0:16:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJS0L1NIbje1CWaBFrDVd/sIvuW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNjAzMjUwMDU2NTlaFw0yNjAzMjgxMDMzNTlaMDMxMTAvBgNV BAMTKEUxNDU1QjExM0YwMEQ4RDFDODM0OUQ4NDZEQzQ3MzlEQzBGMjgxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KwlgAvoko1N45PnefSSguqcS O4X8twLgMixIUOp5wugWp4SRKsRdDupxerN/hYAdUs8nRdDnU+voUYRJpk59xppg ddJQAtLxq1BoL73Ngey5BrtRpHxt5GKXJGCWuLs3cDYpx53rwSRTt+eqssSO0Kr8 vyl0zIZHgxmSfd0Y4M8z3a335kuGWdGZ/YI4dbvQ2z/SAYoL+BLrEphIYL29RcGU vzrXlWz34dqNE/EnLoU0M/HChePJEbZ3WlcogKTTN6rxaheFfUet7DgqorTaiMIt DcGCHV3ItcKDj7FXTc+hDKW9Gw8SQRodvVO5ct1g96FoIpQZju4RtjFWV3RhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4UVbET8A2NHINJ2EbcRzncDygUYwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX54Jd9YLca8vD+inhNUBcbVhxYI9Rp9Hrq xoYVuN5NSpzhqmuhOfm7YzIKsGFFzzmtN0FnbAhmK5TMPfaWxKqHxsF1KUVAN/eS 0CNJMGaZrHL+xasm/b/Lx1vWLvbU3zbQRpBvCZq0YHgJ4qg2cIUIKz7Zye707DnQ lPaNdwYSqSYK0bkIFiC/KUCS14c82iaDl2DA32BZMW7ZktyuYtkDlZ/voZKdMHYV eyt7nNVlULmRcK45gQmNIyvDTPpLmHxefgMRubVjlArBzlc4pzVWO2f49enUSLnq o/R85shG6Vqn9UAO7kslkCg642kvSsn67nwSb/ihZhriRWLAFiY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:31 2026 by rpki-client