$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: Zi0OgHwe+qYUcbtTKVaMQbl2ssbWayNrnLr7s0BtAuM= Subject key identifier: 8E:38:B3:90:A0:C1:BC:68:C4:13:06:0C:6F:CD:6B:D3:37:CC:6D:74 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 5C3F3E2434E75F2EA2F714DDCA8106C295AFC91D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 012D Signing time: Wed 25 Mar 2026 18:20:06 +0000 Manifest this update: Wed 25 Mar 2026 18:15:06 +0000 Manifest next update: Sun 29 Mar 2026 03:27:06 +0000 Files and hashes: 1: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 2: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: brY7+6NGM5WNzjKBdNsHShrDv+lOcvr7mqVDdTHSQdk=) 4: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3f:3e:24:34:e7:5f:2e:a2:f7:14:dd:ca:81:06:c2:95:af:c9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Mar 25 18:15:06 2026 GMT Not After : Mar 29 03:27:06 2026 GMT Subject: CN=8E38B390A0C1BC68C413060C6FCD6BD337CC6D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:16:41:82:64:94:14:c4:f1:24:5b:42:a0: 4b:0d:94:ef:2c:2a:e2:94:9a:a9:ca:5d:7e:a6:67: 46:80:47:d7:64:21:f1:78:5e:61:dd:5b:2d:f6:2c: d6:a0:6d:25:2c:f3:2e:37:a2:f3:52:05:7b:d9:f4: b4:d1:23:cd:82:d2:6e:8f:02:4c:85:03:dc:0e:32: a4:75:fa:12:ad:3b:97:b4:e7:2c:ff:32:3e:62:2f: 49:c9:11:98:b6:b8:7b:98:7c:3b:9c:6c:07:5a:3e: 4d:ed:57:d8:f7:6f:62:d4:b1:a6:e1:f7:f4:72:b4: 70:55:e7:32:3a:8d:c9:3c:11:ab:04:53:e8:10:95: 40:6d:ce:91:59:c6:c3:b1:ca:70:33:36:85:95:61: ce:2e:17:de:99:e2:51:25:a7:e4:df:6b:b3:d3:19: d5:7c:a6:bd:de:3b:30:a0:8a:a0:82:b2:2d:84:63: a3:b7:1a:45:e6:9b:6b:e9:06:56:5c:30:97:60:de: 11:d9:c0:94:0b:bd:3a:7f:48:a4:5a:1a:16:11:98: d6:e8:91:24:92:bb:24:e7:b3:dc:75:d1:5a:25:a2: 20:d0:4a:35:18:a8:47:f5:25:d2:21:d2:97:5c:e1: 97:5d:b8:ca:13:b9:c8:f3:33:de:a1:90:c3:20:5d: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:B3:90:A0:C1:BC:68:C4:13:06:0C:6F:CD:6B:D3:37:CC:6D:74 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:09:8e:f8:a2:c7:b5:c0:55:1a:18:c5:45:6d:19:8d:0e:48: 99:b1:9f:be:09:4b:e5:6c:60:b5:08:7f:65:f6:bf:44:79:76: 5a:a9:03:d9:cf:b0:19:b9:ca:be:65:ae:fd:f4:d3:4d:d2:a7: 4e:9d:5e:b1:7c:cd:82:a9:d8:3f:76:08:8f:14:d2:ee:09:51: 85:06:a5:bb:cf:99:18:69:97:6a:94:5c:3c:3b:6c:a4:aa:15: f8:f2:46:2d:d4:5f:20:c1:dd:dd:0f:2d:87:ce:31:ad:71:74: 84:29:aa:ce:bc:e1:67:17:80:38:4d:8f:e5:3d:06:32:46:39: 08:b4:e9:29:a9:f4:69:4b:95:50:91:61:69:e7:08:8e:37:7b: ef:ea:bb:43:aa:c2:d1:05:98:91:dc:cd:0a:1f:74:60:8c:e4: f3:a2:0a:ba:83:0c:2b:dc:3a:f7:0b:aa:91:6c:a2:ca:7a:bb: 60:75:e2:0d:2c:81:e2:5e:94:90:ad:62:04:3d:9b:a5:db:d1: 86:63:71:fd:a6:ec:70:a5:9d:67:9b:e7:b3:40:11:82:43:23: 54:71:8f:72:27:ff:2e:22:a3:fe:8e:c5:d6:2f:69:b3:f6:34: 3e:ed:01:13:c0:57:b2:fc:14:d2:73:4d:32:5b:9d:f6:17:25: 09:91:cb:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXD8+JDTnXy6i9xTdyoEGwpWvyR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNjAzMjUxODE1MDZaFw0yNjAzMjkwMzI3MDZaMDMxMTAvBgNV BAMTKDhFMzhCMzkwQTBDMUJDNjhDNDEzMDYwQzZGQ0Q2QkQzMzdDQzZENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/xZBgmSUFMTxJFtCoEsNlO8s KuKUmqnKXX6mZ0aAR9dkIfF4XmHdWy32LNagbSUs8y43ovNSBXvZ9LTRI82C0m6P AkyFA9wOMqR1+hKtO5e05yz/Mj5iL0nJEZi2uHuYfDucbAdaPk3tV9j3b2LUsabh 9/RytHBV5zI6jck8EasEU+gQlUBtzpFZxsOxynAzNoWVYc4uF96Z4lElp+Tfa7PT GdV8pr3eOzCgiqCCsi2EY6O3GkXmm2vpBlZcMJdg3hHZwJQLvTp/SKRaGhYRmNbo kSSSuyTns9x10VoloiDQSjUYqEf1JdIh0pdc4ZdduMoTucjzM96hkMMgXZuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjizkKDBvGjEEwYMb81r0zfMbXQwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8Jjviix7XAVRoYxUVtGY0OSJmxn74JS+Vs YLUIf2X2v0R5dlqpA9nPsBm5yr5lrv30003Sp06dXrF8zYKp2D92CI8U0u4JUYUG pbvPmRhpl2qUXDw7bKSqFfjyRi3UXyDB3d0PLYfOMa1xdIQpqs684WcXgDhNj+U9 BjJGOQi06Smp9GlLlVCRYWnnCI43e+/qu0OqwtEFmJHczQofdGCM5POiCrqDDCvc OvcLqpFsosp6u2B14g0sgeJelJCtYgQ9m6Xb0YZjcf2m7HClnWeb57NAEYJDI1Rx j3In/y4io/6OxdYvabP2ND7tARPAV7L8FNJzTTJbnfYXJQmRy+E= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:57 2026 by rpki-client