$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: nCvHGk3WbymybnD59/OShxFUSubGwGux/uNfVcI68bY= Subject key identifier: 99:F0:77:E9:23:1B:78:2D:4D:9F:42:27:A9:AF:88:1F:65:C8:4D:4D Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 739D1BAD3F6B05B2B245634872B693A0C3F31350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: B8 Signing time: Sat 05 Jul 2025 16:00:05 +0000 Manifest this update: Sat 05 Jul 2025 15:55:05 +0000 Manifest next update: Wed 09 Jul 2025 01:10:05 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: xpm9ehVCZ7EVMslXWqu2CZOvuA5KyJV1kzieKVXsMbM=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9d:1b:ad:3f:6b:05:b2:b2:45:63:48:72:b6:93:a0:c3:f3:13:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Jul 5 15:55:05 2025 GMT Not After : Jul 9 01:10:05 2025 GMT Subject: CN=99F077E9231B782D4D9F4227A9AF881F65C84D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:24:9b:f8:3c:72:93:5f:ab:ad:75:b1:45: 34:2d:b8:ee:e9:53:d8:91:41:65:5c:92:c1:9c:ed: 68:da:fd:19:6e:47:79:60:b2:c2:4c:f3:19:37:ba: c1:e9:fb:ed:b6:d0:ea:2a:1c:2a:6f:8c:f0:9d:54: 1e:98:33:4b:13:6e:ff:75:51:01:db:11:84:b6:a5: b4:b7:8e:54:83:35:27:d4:74:23:20:19:d7:f3:c3: 71:27:7c:c1:f3:4c:d5:5e:46:50:46:16:ca:d2:fe: 68:a2:de:34:51:8a:fe:80:ce:45:8e:94:60:42:24: 26:bd:5b:09:14:aa:2f:ac:be:1b:f9:90:e3:82:e3: c1:c3:9e:18:11:9f:af:b2:71:d9:cb:33:7e:3d:fc: f6:c2:53:42:8f:c8:a5:11:65:bd:79:8f:94:39:0b: 6f:08:6d:7d:5a:8f:02:bb:53:54:26:fe:aa:98:40: e5:39:06:ed:38:76:ba:4d:e1:29:b1:94:42:9b:5a: fa:78:7b:33:58:8e:7a:98:cc:f3:b6:f8:57:49:63: 81:b7:80:e7:17:7c:87:18:98:28:27:2e:3d:f3:34: 46:6a:4b:2d:f3:d5:74:bf:b0:57:41:63:03:76:5a: 23:ad:32:82:78:52:d9:c6:a5:03:78:c9:c8:12:2e: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F0:77:E9:23:1B:78:2D:4D:9F:42:27:A9:AF:88:1F:65:C8:4D:4D X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8c:d9:c0:df:bb:f8:db:98:32:7e:0b:f1:89:1f:f7:8c:39: 0d:70:b5:8d:be:53:b5:af:a0:e0:15:20:8c:f5:3f:b8:fe:af: aa:12:dc:56:0a:52:5b:39:06:c0:55:63:bc:06:8c:5d:b0:5c: 8d:bd:f4:66:ae:81:8c:33:7d:47:b7:ae:ea:ae:24:12:f8:4d: c0:00:4f:de:8a:52:f7:ca:35:54:98:6a:83:29:be:00:dc:37: 6c:1d:1b:ac:02:a7:86:2e:d8:e7:d3:98:68:8d:5f:e6:74:a6: da:bc:56:ec:b8:05:6f:ac:e6:8c:d6:4b:50:2b:9a:d5:3d:27: 40:0a:95:9e:39:36:64:39:4e:be:73:d8:19:2a:de:1e:f7:f4: 85:b8:3c:d9:7b:60:d6:06:17:8b:48:3f:ea:68:a5:98:8f:be: 17:8c:e5:0e:11:29:56:85:67:3f:5e:2c:d6:b3:51:2a:a5:db: 71:c9:6d:11:c7:04:e4:e7:75:be:ec:f9:22:59:40:91:c4:47: 5c:ea:96:0c:ef:90:21:d5:8e:6c:a6:bc:08:cb:6f:69:17:51: ab:fd:8e:07:9e:38:e3:d6:0c:3b:f0:b0:89:6e:c7:32:f2:46: 93:74:04:64:e9:b1:57:d9:74:52:39:fb:ae:3f:b8:d8:6b:50: b1:18:21:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc50brT9rBbKyRWNIcraToMPzE1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA3MDUxNTU1MDVaFw0yNTA3MDkwMTEwMDVaMDMxMTAvBgNV BAMTKDk5RjA3N0U5MjMxQjc4MkQ0RDlGNDIyN0E5QUY4ODFGNjVDODRENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOiSb+Dxyk1+rrXWxRTQtuO7p U9iRQWVcksGc7Wja/RluR3lgssJM8xk3usHp++220OoqHCpvjPCdVB6YM0sTbv91 UQHbEYS2pbS3jlSDNSfUdCMgGdfzw3EnfMHzTNVeRlBGFsrS/mii3jRRiv6AzkWO lGBCJCa9WwkUqi+svhv5kOOC48HDnhgRn6+ycdnLM349/PbCU0KPyKURZb15j5Q5 C28IbX1ajwK7U1Qm/qqYQOU5Bu04drpN4SmxlEKbWvp4ezNYjnqYzPO2+FdJY4G3 gOcXfIcYmCgnLj3zNEZqSy3z1XS/sFdBYwN2WiOtMoJ4UtnGpQN4ycgSLvBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfB36SMbeC1Nn0Inqa+IH2XITU0wHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeM2cDfu/jbmDJ+C/GJH/eMOQ1wtY2+U7Wv oOAVIIz1P7j+r6oS3FYKUls5BsBVY7wGjF2wXI299GaugYwzfUe3ruquJBL4TcAA T96KUvfKNVSYaoMpvgDcN2wdG6wCp4Yu2OfTmGiNX+Z0ptq8Vuy4BW+s5ozWS1Ar mtU9J0AKlZ45NmQ5Tr5z2Bkq3h739IW4PNl7YNYGF4tIP+popZiPvheM5Q4RKVaF Zz9eLNazUSql23HJbRHHBOTndb7s+SJZQJHER1zqlgzvkCHVjmymvAjLb2kXUav9 jgeeOOPWDDvwsIluxzLyRpN0BGTpsVfZdFI5+64/uNhrULEYIfU= -----END CERTIFICATE-----Generated at Sat Jul 5 20:57:14 2025 by rpki-client