$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: z3dQVb+UDEEweNqgVG7clK4cj9fUSkQtkjR/AGLfFuk= Subject key identifier: 1D:A3:35:3B:5C:4F:B9:B4:AC:E8:34:1E:68:47:FF:99:D8:4A:E9:E9 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 6F891101E727917D435CE1E5381436353AFA515D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: E7 Signing time: Mon 20 Oct 2025 02:20:05 +0000 Manifest this update: Mon 20 Oct 2025 02:15:05 +0000 Manifest next update: Thu 23 Oct 2025 08:08:05 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: HHbwXFL2oNjN8wYTiMnOJjlDsoTlAVRkx5UlBTX8pGY=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 4: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:89:11:01:e7:27:91:7d:43:5c:e1:e5:38:14:36:35:3a:fa:51:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Oct 20 02:15:05 2025 GMT Not After : Oct 23 08:08:05 2025 GMT Subject: CN=1DA3353B5C4FB9B4ACE8341E6847FF99D84AE9E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:12:2a:1a:57:8f:8d:92:bb:50:1f:25:83: fb:44:8a:92:98:30:22:9d:01:8b:30:01:46:97:ea: a4:3c:66:d7:85:0f:3d:ef:b1:e8:fd:e8:67:99:26: 53:df:30:00:52:61:c6:8b:15:c0:e5:ab:2c:4c:93: 07:27:95:ef:ff:39:46:13:37:de:dd:0f:be:6c:62: 17:bf:a1:e5:da:e0:e7:7e:2f:f7:2f:30:4b:5f:9a: 99:ea:28:23:55:8e:0c:86:99:c2:29:78:6c:52:52: 28:30:c3:14:1c:8c:dc:52:73:3a:f3:f2:90:cb:dd: 34:93:08:fe:6f:18:b2:30:d4:9f:ba:81:d2:d9:09: ac:0f:29:80:5f:55:37:be:02:f6:29:6b:8c:4c:2c: cb:a2:34:b7:e1:85:c4:8b:9c:93:92:90:27:5e:ab: 85:0b:c8:e0:c0:bb:42:25:79:a2:98:d7:90:89:3c: 26:e2:b3:24:c9:ac:1d:69:63:da:e7:9f:4c:9b:40: af:e3:7f:4f:28:d4:4d:2c:bc:48:66:17:d5:1c:46: 9a:6f:1c:9d:9d:6a:2f:e5:e0:e6:cf:97:b1:12:75: 9c:a2:ef:66:54:98:fa:b9:0c:4e:8f:ca:15:e5:44: 6b:ae:46:80:f0:9d:56:a3:8c:7a:df:23:56:fe:cc: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:35:3B:5C:4F:B9:B4:AC:E8:34:1E:68:47:FF:99:D8:4A:E9:E9 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bd:10:b7:ca:e8:26:90:73:90:a1:0c:76:3e:22:fe:17:73: 89:17:88:3c:1b:44:92:a3:be:fa:8b:7b:58:0d:0a:71:74:5c: 87:1a:7b:d6:70:55:64:d4:6b:c2:9d:f5:0a:78:4c:7a:3c:bd: 76:de:b6:22:b2:6c:bc:f4:1f:f6:00:52:81:55:08:2a:75:9d: 71:f6:65:50:f2:f2:43:4f:0e:01:9e:c6:d4:d9:e3:a9:dc:9a: c4:3e:71:b6:84:f1:8e:6c:94:77:9a:f2:64:0f:32:30:f8:70: 6e:f1:06:b2:ec:33:1a:fb:7c:aa:f0:eb:07:ae:23:03:50:1a: f6:3a:b6:f6:38:de:81:75:a9:e5:67:a4:97:b7:f1:62:2c:f1: 46:33:94:3c:ff:49:6c:3f:3d:26:0d:a9:c8:5d:ea:15:d1:8d: 31:64:4e:a8:44:52:9d:bd:15:12:0c:fb:c5:a9:f8:21:01:22: 10:b7:e1:e8:f6:3b:d3:d4:fa:93:87:66:28:db:86:e5:00:e8: 56:0b:1f:79:47:22:dd:ba:e8:d9:47:6c:9f:c9:89:7b:c3:a3: e6:75:91:63:62:b1:b0:8b:af:62:1d:17:e1:c8:21:2b:3d:18: 50:3f:3e:2f:97:09:9f:41:3e:d3:1b:34:b0:4d:10:73:c8:8f: 2b:0d:4b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4kRAecnkX1DXOHlOBQ2NTr6UV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTEwMjAwMjE1MDVaFw0yNTEwMjMwODA4MDVaMDMxMTAvBgNV BAMTKDFEQTMzNTNCNUM0RkI5QjRBQ0U4MzQxRTY4NDdGRjk5RDg0QUU5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUxIqGlePjZK7UB8lg/tEipKY MCKdAYswAUaX6qQ8ZteFDz3vsej96GeZJlPfMABSYcaLFcDlqyxMkwcnle//OUYT N97dD75sYhe/oeXa4Od+L/cvMEtfmpnqKCNVjgyGmcIpeGxSUigwwxQcjNxSczrz 8pDL3TSTCP5vGLIw1J+6gdLZCawPKYBfVTe+AvYpa4xMLMuiNLfhhcSLnJOSkCde q4ULyODAu0IleaKY15CJPCbisyTJrB1pY9rnn0ybQK/jf08o1E0svEhmF9UcRppv HJ2dai/l4ObPl7ESdZyi72ZUmPq5DE6PyhXlRGuuRoDwnVajjHrfI1b+zGKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaM1O1xPubSs6DQeaEf/mdhK6ekwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC9ELfK6CaQc5ChDHY+Iv4Xc4kXiDwbRJKj vvqLe1gNCnF0XIcae9ZwVWTUa8Kd9Qp4THo8vXbetiKybLz0H/YAUoFVCCp1nXH2 ZVDy8kNPDgGextTZ46ncmsQ+cbaE8Y5slHea8mQPMjD4cG7xBrLsMxr7fKrw6weu IwNQGvY6tvY43oF1qeVnpJe38WIs8UYzlDz/SWw/PSYNqchd6hXRjTFkTqhEUp29 FRIM+8Wp+CEBIhC34ej2O9PU+pOHZijbhuUA6FYLH3lHIt266NlHbJ/JiXvDo+Z1 kWNisbCLr2IdF+HIISs9GFA/Pi+XCZ9BPtMbNLBNEHPIjysNS0w= -----END CERTIFICATE-----Generated at Tue Oct 21 16:12:28 2025 by rpki-client