$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: szGIpTeEZHPjDwoJaJ3LZC8FtTDUMBRVrZhci1pXbag= Subject key identifier: FE:4D:72:54:21:BC:04:C3:00:CF:BD:69:F7:04:3E:3A:CC:CF:3E:4C Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 022D03291288DED6D4A1BD49EC35DD786319C7A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: CD Signing time: Fri 22 Aug 2025 15:20:05 +0000 Manifest this update: Fri 22 Aug 2025 15:15:05 +0000 Manifest next update: Mon 25 Aug 2025 18:08:05 +0000 Files and hashes: 1: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 2: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 3: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 4: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: PVVF/ZTPuRBua51dPnI35GslR1n4L6AH4SBZ3ib+keg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:03:29:12:88:de:d6:d4:a1:bd:49:ec:35:dd:78:63:19:c7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Aug 22 15:15:05 2025 GMT Not After : Aug 25 18:08:05 2025 GMT Subject: CN=FE4D725421BC04C300CFBD69F7043E3ACCCF3E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:03:26:b8:da:67:07:7a:e8:29:7c:ab:02: e5:be:b1:7d:95:1a:e4:2c:c2:27:75:eb:f6:d0:08: c3:22:21:74:b4:8d:04:1f:83:f4:8b:e0:55:c3:c6: d2:22:2f:40:c8:ce:0d:6f:54:b2:e6:c1:d5:9f:ae: cf:c8:ea:09:47:93:98:99:27:15:7f:11:70:99:2a: b4:bc:e9:96:27:36:96:96:93:8d:6a:d9:24:ba:27: 31:41:5e:41:f9:0b:66:15:38:16:df:23:96:2b:44: ce:14:71:09:c6:d1:5f:42:fa:45:a6:9d:a3:c7:ba: 8e:dc:f2:c8:15:3c:f8:fd:00:f8:3e:1b:db:6d:8e: 2f:1e:f5:b3:62:92:25:af:0d:09:64:09:3b:48:cf: 50:3a:85:9d:8b:d4:4e:9e:43:c5:53:23:55:64:8e: 56:06:33:66:9e:7d:21:8b:98:12:62:e4:33:7c:96: 31:77:3a:f7:d7:cc:97:8d:53:b3:73:f0:c9:12:bb: 0f:9a:e4:f6:ad:74:a8:05:b5:f0:4d:00:8a:16:73: 86:b9:65:16:f5:71:4f:b1:13:72:d3:a6:51:dd:b8: f9:e9:ca:e7:ca:da:67:17:90:fe:8f:5d:e0:3c:20: bb:fa:15:24:21:73:f3:e2:ba:ff:bb:e8:f6:c9:30: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4D:72:54:21:BC:04:C3:00:CF:BD:69:F7:04:3E:3A:CC:CF:3E:4C X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1f:4c:68:33:c4:b5:1b:b2:cd:0b:c7:73:ff:4f:c4:74:fe: d0:ea:e9:45:a0:29:9a:e0:16:90:35:e3:4b:95:08:98:0f:e3: ec:b8:6a:c8:bc:7d:60:b4:ba:bc:fc:0f:6f:7b:5c:7b:89:50: cf:c4:36:4c:66:99:32:37:28:b7:98:15:4c:ad:62:c6:d9:c0: f8:3b:87:4f:32:b7:50:4b:21:af:1e:2f:ab:49:fa:b1:c1:2e: 3d:a8:73:57:65:19:b6:0f:f9:bc:ac:a0:db:88:b3:21:6b:9a: 3a:5e:80:72:60:c3:36:49:53:25:bf:7c:e6:e4:ec:e8:16:28: 06:0f:3e:71:91:0d:89:2d:62:7b:ce:21:35:44:64:93:93:4f: 24:b0:ea:c9:bf:3d:ea:36:d0:7d:97:1c:48:b9:53:6b:ba:25: 40:02:3a:cc:ee:2f:84:86:ea:48:89:2a:bc:1b:c0:03:62:9a: fc:18:7a:b0:0d:59:80:2f:ed:9d:6b:e9:7a:2e:e4:58:96:3a: 0c:a9:b0:32:84:09:47:f2:c3:fc:c5:e3:42:d2:a2:3f:c0:a3: d0:91:ef:ef:7e:29:0c:d4:7e:58:ac:1a:3f:75:08:c2:08:a3: d9:a8:d2:a1:b8:d4:0d:a8:65:3d:8a:b1:c2:41:76:91:3d:83: 63:a8:b5:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAi0DKRKI3tbUob1J7DXdeGMZx6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA4MjIxNTE1MDVaFw0yNTA4MjUxODA4MDVaMDMxMTAvBgNV BAMTKEZFNEQ3MjU0MjFCQzA0QzMwMENGQkQ2OUY3MDQzRTNBQ0NDRjNFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6wMmuNpnB3roKXyrAuW+sX2V GuQswid16/bQCMMiIXS0jQQfg/SL4FXDxtIiL0DIzg1vVLLmwdWfrs/I6glHk5iZ JxV/EXCZKrS86ZYnNpaWk41q2SS6JzFBXkH5C2YVOBbfI5YrRM4UcQnG0V9C+kWm naPHuo7c8sgVPPj9APg+G9ttji8e9bNikiWvDQlkCTtIz1A6hZ2L1E6eQ8VTI1Vk jlYGM2aefSGLmBJi5DN8ljF3OvfXzJeNU7Nz8MkSuw+a5PatdKgFtfBNAIoWc4a5 ZRb1cU+xE3LTplHduPnpyufK2mcXkP6PXeA8ILv6FSQhc/Piuv+76PbJMBOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/k1yVCG8BMMAz71p9wQ+OszPPkwwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEfTGgzxLUbss0Lx3P/T8R0/tDq6UWgKZrg FpA140uVCJgP4+y4asi8fWC0urz8D297XHuJUM/ENkxmmTI3KLeYFUytYsbZwPg7 h08yt1BLIa8eL6tJ+rHBLj2oc1dlGbYP+bysoNuIsyFrmjpegHJgwzZJUyW/fObk 7OgWKAYPPnGRDYktYnvOITVEZJOTTySw6sm/Peo20H2XHEi5U2u6JUACOszuL4SG 6kiJKrwbwANimvwYerANWYAv7Z1r6Xou5FiWOgypsDKECUfyw/zF40LSoj/Ao9CR 7+9+KQzUflisGj91CMIIo9mo0qG41A2oZT2KscJBdpE9g2OotfI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:19 2025 by rpki-client