$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: zR5pmI01fXitRNQGlzRu/YWVaPpVUoH31PK6AL3n3r0= Subject key identifier: 03:E9:8E:00:38:26:CF:8C:38:20:90:8F:23:7B:1F:B8:67:C2:7F:F0 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 2F1E0749575CA4B6DAC25B458D27C0D9B7217883 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 0237 Signing time: Fri 17 Apr 2026 20:02:01 +0000 Manifest this update: Fri 17 Apr 2026 19:57:01 +0000 Manifest next update: Mon 20 Apr 2026 20:54:01 +0000 Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: z+z1c3lGN39/ybMfP7zdHUFWqzm3E47P8Y6AucGWcO0=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1e:07:49:57:5c:a4:b6:da:c2:5b:45:8d:27:c0:d9:b7:21:78:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Apr 17 19:57:01 2026 GMT Not After : Apr 20 20:54:01 2026 GMT Subject: CN=03E98E003826CF8C3820908F237B1FB867C27FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:c7:80:ee:c9:f1:41:a6:a0:42:6a:44:50: f1:15:af:2e:10:f7:79:4a:4f:19:ba:2d:66:ee:a4: b2:b1:d0:00:f6:b8:b9:20:ef:9e:54:ed:cc:e7:f9: d1:4b:9e:d7:54:08:8f:d2:c6:f7:e4:91:1b:78:c2: d1:e1:80:ee:cf:39:11:f3:5c:a3:11:10:2f:78:83: 00:b4:50:57:1a:c6:f1:b8:71:5f:1d:6d:b2:63:98: f3:55:f0:26:95:9f:97:77:c5:8b:58:d1:ed:29:e4: 9e:3e:74:0a:90:aa:20:eb:f3:e7:70:16:af:78:bc: be:69:82:35:a7:cd:0f:07:91:19:f9:a6:12:b4:bf: 5f:ea:83:ec:da:19:24:28:d8:0c:cd:e1:19:ab:2b: 8e:4f:da:24:6c:06:82:20:b7:95:73:3f:df:1c:ed: 75:81:bf:b5:dd:7b:be:d4:8e:10:e9:5a:9b:5a:d3: 7f:0a:18:23:62:71:3d:11:dc:5e:d0:7b:2f:2e:1d: b4:fa:17:2a:36:0a:51:1a:90:08:03:4b:60:1b:1c: 9c:ba:2a:77:e4:30:80:27:cf:1e:51:22:88:8f:c2: eb:fa:68:9c:5d:87:f4:a0:d4:6d:89:d4:c0:74:64: 47:e0:5a:ec:ca:7c:77:31:e4:d4:1b:02:56:8b:dc: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:8E:00:38:26:CF:8C:38:20:90:8F:23:7B:1F:B8:67:C2:7F:F0 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:dc:44:7f:05:f1:fb:67:b0:75:b9:9a:e2:39:ca:2f:ae:9f: cf:f0:04:af:a2:35:21:94:76:76:02:f0:fb:f0:a3:9a:4e:f4: d6:b4:68:c5:e6:61:06:f5:97:70:9b:26:cb:28:83:ce:14:a6: 10:ee:14:8d:55:74:2b:ff:3e:a1:08:86:69:19:3a:00:95:c3: e4:9d:53:0b:07:64:f3:55:a8:1b:8f:c1:b4:c9:3b:0e:91:4b: dc:86:3e:c9:27:22:32:76:74:3c:18:fe:e1:98:a2:cb:48:61: 5c:57:76:da:63:0f:a1:20:ef:38:82:09:89:dd:83:e3:8b:a9: 99:6a:6c:4d:e4:2b:56:0b:f0:06:a9:d2:72:71:bf:33:74:14: 6e:a6:2e:2f:44:37:e0:48:39:e2:25:20:9b:a8:01:04:2a:ed: e3:33:e8:63:7a:bc:f1:38:6d:9a:0c:bc:78:d9:bf:0d:71:b6: ae:f1:49:23:71:bd:0a:da:69:4b:3e:61:ba:54:ce:06:e5:0e: 4f:be:a8:ed:02:5b:da:fb:c1:c8:77:19:a5:d4:4f:52:0c:17: 1f:00:ff:4f:48:86:5f:80:dd:3f:06:dd:75:70:e5:c4:47:e2: eb:f3:76:d6:9a:f0:7a:d1:79:96:77:be:11:9d:e5:89:be:72: 31:69:1f:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULx4HSVdcpLbawltFjSfA2bcheIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNjA0MTcxOTU3MDFaFw0yNjA0MjAyMDU0MDFaMDMxMTAvBgNV BAMTKDAzRTk4RTAwMzgyNkNGOEMzODIwOTA4RjIzN0IxRkI4NjdDMjdGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdP8eA7snxQaagQmpEUPEVry4Q 93lKTxm6LWbupLKx0AD2uLkg755U7czn+dFLntdUCI/SxvfkkRt4wtHhgO7PORHz XKMREC94gwC0UFcaxvG4cV8dbbJjmPNV8CaVn5d3xYtY0e0p5J4+dAqQqiDr8+dw Fq94vL5pgjWnzQ8HkRn5phK0v1/qg+zaGSQo2AzN4RmrK45P2iRsBoIgt5VzP98c 7XWBv7Xde77UjhDpWpta038KGCNicT0R3F7Qey8uHbT6Fyo2ClEakAgDS2AbHJy6 KnfkMIAnzx5RIoiPwuv6aJxdh/Sg1G2J1MB0ZEfgWuzKfHcx5NQbAlaL3BJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+mOADgmz4w4IJCPI3sfuGfCf/AwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPcRH8F8ftnsHW5muI5yi+un8/wBK+iNSGU dnYC8Pvwo5pO9Na0aMXmYQb1l3CbJssog84UphDuFI1VdCv/PqEIhmkZOgCVw+Sd UwsHZPNVqBuPwbTJOw6RS9yGPsknIjJ2dDwY/uGYostIYVxXdtpjD6Eg7ziCCYnd g+OLqZlqbE3kK1YL8Aap0nJxvzN0FG6mLi9EN+BIOeIlIJuoAQQq7eMz6GN6vPE4 bZoMvHjZvw1xtq7xSSNxvQraaUs+YbpUzgblDk++qO0CW9r7wch3GaXUT1IMFx8A /09Ihl+A3T8G3XVw5cRH4uvzdtaa8HrReZZ3vhGd5Ym+cjFpH68= -----END CERTIFICATE-----Generated at Sun Apr 19 10:32:27 2026 by rpki-client