$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: 0eGnPK4LTwxwfgdy2hiTDwPZGKROlDnF47b06N7FuWw= Subject key identifier: 48:93:49:B3:6E:99:99:E2:BA:05:17:E0:13:A9:FD:96:4E:D2:27:92 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 5E3EEAC89AD65E78D16A477FA2BDE66066A0AEC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01C5 Signing time: Tue 05 Aug 2025 22:11:43 +0000 Manifest this update: Tue 05 Aug 2025 22:06:43 +0000 Manifest next update: Sat 09 Aug 2025 04:18:43 +0000 Files and hashes: 1: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: eVAWRH0JEB5nkL82/NbBgucyjQrmrTJHsoo3b4q9F2o=) 2: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3e:ea:c8:9a:d6:5e:78:d1:6a:47:7f:a2:bd:e6:60:66:a0:ae:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Aug 5 22:06:43 2025 GMT Not After : Aug 9 04:18:43 2025 GMT Subject: CN=489349B36E9999E2BA0517E013A9FD964ED22792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:5a:52:16:13:20:3d:68:20:37:bf:2d:a6: d1:a7:8f:06:59:be:1b:0b:b5:6f:b4:89:0b:7d:48: 3c:9a:8c:fd:89:f6:37:05:5c:d7:ac:11:1b:70:df: a0:92:b7:06:58:98:65:4b:e5:a1:d8:12:4e:07:69: 8a:d7:3f:fd:cc:43:78:0c:9c:b4:b1:1a:a5:32:2d: 3b:56:f2:40:85:35:cd:92:bf:b9:7a:55:fd:b5:22: dc:05:ef:4f:96:10:5f:1a:0e:b1:b4:75:6a:47:9d: c6:10:f7:30:69:42:5a:f3:7b:88:80:22:68:50:a4: 34:6f:28:42:e4:9c:5e:6a:01:39:0a:06:6c:33:e9: 3c:48:bf:d3:b4:5e:d1:3b:3f:1b:12:01:00:06:2c: f4:16:15:1f:b4:00:8b:1f:17:b8:3d:d3:96:b0:ad: 79:44:0b:4b:d6:4c:e8:db:60:53:d4:f7:f4:7b:ce: 4d:10:ad:5b:e7:39:fa:bb:7e:49:2d:ed:94:58:c5: 98:ce:71:73:37:16:d2:16:6e:d0:35:02:24:5b:04: 89:e1:e7:58:49:8c:66:0f:c9:72:45:ba:20:9d:a3: 92:26:31:27:93:7f:1f:b9:a4:de:5d:28:57:01:3a: 50:9b:d9:51:43:37:7d:95:3d:85:b8:ce:a6:5f:05: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:93:49:B3:6E:99:99:E2:BA:05:17:E0:13:A9:FD:96:4E:D2:27:92 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:df:db:99:8e:33:fe:3e:da:2b:a7:8b:7d:09:99:5c:2c: 03:d0:25:da:d8:7e:5c:11:8f:bd:6a:21:cd:24:6b:0e:7b:7d: 18:fe:2b:69:ed:e5:aa:cf:28:ab:c1:c5:11:a0:9c:21:ee:32: da:11:a8:0d:a5:f3:a4:35:28:6e:e3:22:25:99:d4:5a:b4:7c: 3a:b2:2e:79:dd:c9:d2:4a:ca:59:64:39:7b:a0:82:fd:05:c2: 49:ff:fa:26:c0:9d:25:49:68:39:37:eb:55:eb:1c:0f:ef:dc: ee:0d:c1:9f:c4:a5:08:fb:e9:cb:92:11:35:1f:d0:29:b8:3e: 57:7c:c5:ff:9b:54:37:9d:4e:8e:85:4a:5b:51:e7:96:31:18: 57:91:b3:03:2b:56:4b:4c:7a:3b:e1:38:16:3c:18:d4:1b:7b: 46:8c:da:13:c4:39:9a:05:72:0a:45:40:0a:a7:bf:c1:8b:0e: fc:b1:ea:d9:fb:19:8e:b4:82:71:af:e1:20:5b:9e:a8:6c:2e: cb:ea:47:ff:a9:9e:45:c3:0c:40:09:7e:53:8a:fc:2c:e9:88: 95:04:f1:99:1c:25:73:f4:39:d1:c0:38:bc:f4:ba:73:8c:99: 63:a0:72:c6:81:bc:18:81:bc:6c:10:6c:b6:e6:08:9f:82:fe: d9:e8:f3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXj7qyJrWXnjRakd/or3mYGagrsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTA4MDUyMjA2NDNaFw0yNTA4MDkwNDE4NDNaMDMxMTAvBgNV BAMTKDQ4OTM0OUIzNkU5OTk5RTJCQTA1MTdFMDEzQTlGRDk2NEVEMjI3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVFpSFhMgPWggN78tptGnjwZZ vhsLtW+0iQt9SDyajP2J9jcFXNesERtw36CStwZYmGVL5aHYEk4HaYrXP/3MQ3gM nLSxGqUyLTtW8kCFNc2Sv7l6Vf21ItwF70+WEF8aDrG0dWpHncYQ9zBpQlrze4iA ImhQpDRvKELknF5qATkKBmwz6TxIv9O0XtE7PxsSAQAGLPQWFR+0AIsfF7g905aw rXlEC0vWTOjbYFPU9/R7zk0QrVvnOfq7fkkt7ZRYxZjOcXM3FtIWbtA1AiRbBInh 51hJjGYPyXJFuiCdo5ImMSeTfx+5pN5dKFcBOlCb2VFDN32VPYW4zqZfBbRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJNJs26ZmeK6BRfgE6n9lk7SJ5IwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqY39uZjjP+Ptorp4t9CZlcLAPQJdrYflwR j71qIc0kaw57fRj+K2nt5arPKKvBxRGgnCHuMtoRqA2l86Q1KG7jIiWZ1Fq0fDqy LnndydJKyllkOXuggv0Fwkn/+ibAnSVJaDk361XrHA/v3O4NwZ/EpQj76cuSETUf 0Cm4Pld8xf+bVDedTo6FSltR55YxGFeRswMrVktMejvhOBY8GNQbe0aM2hPEOZoF cgpFQAqnv8GLDvyx6tn7GY60gnGv4SBbnqhsLsvqR/+pnkXDDEAJflOK/CzpiJUE 8ZkcJXP0OdHAOLz0unOMmWOgcsaBvBiBvGwQbLbmCJ+C/tno8/g= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:14 2025 by rpki-client