$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: E3kR3oobXByhtch1pYOM9KSKRMjL/+/Jnl7DjmdyVpY= Subject key identifier: D9:6C:E3:DB:EF:36:51:B7:6F:3A:76:BB:C0:BB:1A:2C:5B:9D:9A:F1 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 0144E2DBCD5568EAE084ED4FD2E4C36023CDA1FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: EE Signing time: Tue 04 Nov 2025 15:50:05 +0000 Manifest this update: Tue 04 Nov 2025 15:45:05 +0000 Manifest next update: Fri 07 Nov 2025 18:36:05 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: 5tseSxccB/aU9UeJ/w7coLafSufiN6/wGXvWz/ye5vU=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:44:e2:db:cd:55:68:ea:e0:84:ed:4f:d2:e4:c3:60:23:cd:a1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Nov 4 15:45:05 2025 GMT Not After : Nov 7 18:36:05 2025 GMT Subject: CN=D96CE3DBEF3651B76F3A76BBC0BB1A2C5B9D9AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:de:3d:9e:9e:e6:34:f8:8e:d5:12:46:1c: 9d:c5:81:63:35:38:4f:5a:fd:93:6b:df:a0:2d:bf: 46:73:b6:e5:9a:28:7d:99:c2:2f:1a:12:cc:13:91: 02:9c:6a:5d:bc:49:ad:bc:79:e5:8d:b3:79:34:61: e8:55:90:75:18:a9:97:a0:36:3a:d1:43:99:24:a5: d5:e3:e4:99:6c:69:d6:ba:f6:92:bd:92:22:9b:4a: a3:45:c2:b6:9e:22:fd:87:ff:4f:d6:31:9b:f4:5d: 55:e3:e7:05:c2:46:04:10:80:44:8b:c7:e5:ce:7a: 5d:52:e0:99:15:38:51:ff:11:d6:d5:ec:53:54:b4: 12:cd:25:86:46:d2:2d:2b:95:0e:c4:18:93:1f:53: fc:70:de:54:dd:45:7d:4b:5f:49:35:1c:07:a2:c5: f5:6b:06:2a:11:bb:56:9e:6a:cb:73:3b:bb:ba:6f: e1:1c:bb:a5:6c:87:b0:a9:b7:20:88:10:79:95:a7: dc:08:0e:0c:07:74:74:43:20:5a:3b:22:fb:04:4b: 86:de:17:b5:e3:9e:8c:04:4d:dd:54:84:84:86:f3: 31:23:db:ae:30:cd:59:d3:02:08:a0:c7:06:55:30: d2:6f:82:bb:3c:aa:1c:bb:f7:ff:1b:0f:b6:d0:5a: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:E3:DB:EF:36:51:B7:6F:3A:76:BB:C0:BB:1A:2C:5B:9D:9A:F1 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7b:1b:b3:d8:b4:20:43:1c:02:bb:fd:83:59:3c:cf:38:36: d7:d7:93:26:cd:2d:41:94:63:a0:9c:45:5d:98:92:50:67:d0: 77:f5:91:fe:af:36:d1:66:21:13:e9:18:ff:2c:ce:25:f8:09: 1d:ac:30:b3:c2:71:5e:35:a9:68:1e:1a:49:e4:20:7e:0d:6c: 19:84:87:79:c2:1c:bd:91:5b:2f:c2:69:cf:80:f7:e9:b8:e1: 31:03:7a:05:05:bb:be:8c:ec:2b:58:20:2f:ed:b7:1a:db:c0: 78:5e:06:ca:5b:fc:1e:53:a9:50:ef:df:78:8f:65:71:92:ff: e9:60:a6:df:81:bd:2e:11:06:3a:eb:a1:af:18:a5:6a:b6:e0: a7:bb:a2:4b:f6:15:4b:8c:36:02:c9:1f:6a:57:d9:88:71:9f: 4c:09:93:e9:44:60:56:af:c2:00:b2:8c:70:6a:ea:f6:03:5e: bd:a6:cc:2b:43:23:85:76:a4:e7:44:a4:63:ed:9c:47:fd:fc: 62:37:0f:76:47:bc:bb:db:ec:53:9f:30:57:0d:67:8b:02:34: 52:4d:97:d4:25:e8:76:8e:10:23:27:a0:c3:5c:3d:da:0c:93: c5:e7:cf:55:c0:5f:be:e7:fc:de:f5:7f:12:f2:94:96:cc:67: 41:3b:a7:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUTi281VaOrghO1P0uTDYCPNof0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTExMDQxNTQ1MDVaFw0yNTExMDcxODM2MDVaMDMxMTAvBgNV BAMTKEQ5NkNFM0RCRUYzNjUxQjc2RjNBNzZCQkMwQkIxQTJDNUI5RDlBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BN49np7mNPiO1RJGHJ3FgWM1 OE9a/ZNr36Atv0ZztuWaKH2Zwi8aEswTkQKcal28Sa28eeWNs3k0YehVkHUYqZeg NjrRQ5kkpdXj5Jlsada69pK9kiKbSqNFwraeIv2H/0/WMZv0XVXj5wXCRgQQgESL x+XOel1S4JkVOFH/EdbV7FNUtBLNJYZG0i0rlQ7EGJMfU/xw3lTdRX1LX0k1HAei xfVrBioRu1aeastzO7u6b+Ecu6Vsh7CptyCIEHmVp9wIDgwHdHRDIFo7IvsES4be F7XjnowETd1UhISG8zEj264wzVnTAgigxwZVMNJvgrs8qhy79/8bD7bQWiNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Wzj2+82UbdvOna7wLsaLFudmvEwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJx7G7PYtCBDHAK7/YNZPM84NtfXkybNLUGU Y6CcRV2YklBn0Hf1kf6vNtFmIRPpGP8sziX4CR2sMLPCcV41qWgeGknkIH4NbBmE h3nCHL2RWy/Cac+A9+m44TEDegUFu76M7CtYIC/ttxrbwHheBspb/B5TqVDv33iP ZXGS/+lgpt+BvS4RBjrroa8YpWq24Ke7okv2FUuMNgLJH2pX2Yhxn0wJk+lEYFav wgCyjHBq6vYDXr2mzCtDI4V2pOdEpGPtnEf9/GI3D3ZHvLvb7FOfMFcNZ4sCNFJN l9Ql6HaOECMnoMNcPdoMk8Xnz1XAX77n/N71fxLylJbMZ0E7pxo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:39 2025 by rpki-client