$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: U7E/h24CcK4XnKGEHB4F69r+CM9gu2kAqCEWaLPgRxE= Subject key identifier: 01:60:51:07:55:C9:13:EF:16:D4:3A:FD:84:A2:A8:41:74:80:E2:D4 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 7F6878EE01C6A59DD4DBCECBEC3CAB0653912F57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: C7 Signing time: Fri 08 Aug 2025 21:40:05 +0000 Manifest this update: Fri 08 Aug 2025 21:35:05 +0000 Manifest next update: Tue 12 Aug 2025 02:28:05 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: WmAMI39DNnz6e683xzuWcMEtBachEiKFTpW1ldtmBhI=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 3: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) 4: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:78:ee:01:c6:a5:9d:d4:db:ce:cb:ec:3c:ab:06:53:91:2f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Aug 8 21:35:05 2025 GMT Not After : Aug 12 02:28:05 2025 GMT Subject: CN=0160510755C913EF16D43AFD84A2A8417480E2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:d0:44:35:5d:c7:f2:ac:ac:8c:ff:22:66: db:64:07:85:98:0e:aa:66:6e:77:88:1a:d3:cb:e4: 24:72:bf:50:2c:4b:9e:90:74:da:7a:e3:9d:ba:55: 6c:ec:52:12:3a:65:5d:d5:7d:d8:b8:6f:d3:0e:b5: 8a:64:91:ce:4e:13:98:db:da:be:7b:27:52:10:ca: f5:8b:52:45:a6:80:bf:f3:db:8a:65:b7:de:35:ea: 4a:02:d2:99:52:9d:67:08:fa:54:e0:94:fc:dc:40: 20:7b:46:c4:ba:0a:40:13:22:b1:e4:20:36:fd:8b: b0:e7:ce:52:96:b2:ca:0d:2d:a8:12:7f:cb:2a:5f: 9c:9e:87:8e:c5:a6:c1:da:ab:17:93:d2:1a:87:ed: c3:72:7e:d5:fa:6d:31:fa:9c:89:c2:23:1f:5c:3b: 3b:18:2e:1f:32:18:14:c1:ce:6e:ba:ee:07:50:9d: e8:b1:d7:cf:ef:97:36:0b:18:1b:57:2a:2e:24:d0: 3e:76:37:a5:a7:49:8f:b6:9c:0e:38:35:c0:56:f4: e0:e4:f2:86:8c:95:c4:c3:8d:22:a7:14:13:71:7f: 3e:ae:27:59:64:89:32:96:26:16:12:e7:06:f9:b2: 8d:ba:5c:ba:fd:b8:ff:33:56:9f:b8:89:0f:e6:6e: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:60:51:07:55:C9:13:EF:16:D4:3A:FD:84:A2:A8:41:74:80:E2:D4 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0b:aa:cf:a7:d9:42:f0:21:bc:3e:c9:98:b6:66:ed:9c:4a: 47:0f:31:00:f0:79:2f:ca:0c:09:a8:36:d6:77:59:fd:4a:a0: 8c:c2:f4:c9:bd:36:f6:35:66:0a:43:9c:44:9f:da:dc:68:cb: b0:f4:2d:d8:9f:b4:e8:f6:ea:61:8d:a5:03:7e:ab:95:bd:7f: a8:6b:d9:7e:9d:73:6f:3a:81:14:3f:3e:9c:75:88:e3:70:f2: 8d:b7:c1:7a:16:7b:7f:dd:13:2d:e5:0f:91:62:9c:a4:9e:28: d4:3c:89:45:6f:62:27:ae:5b:46:d9:cc:bb:40:4f:73:fe:70: fe:7f:17:e6:4d:57:f3:5b:06:3f:f5:3e:e0:56:61:c6:92:d9: 9a:78:8c:eb:21:ba:24:e6:de:86:58:a0:02:6a:83:a2:c5:db: 94:dd:da:27:90:86:26:3a:a4:78:42:be:c5:0a:1f:11:31:ca: 90:fe:92:f2:1f:e0:c7:7c:73:3d:ed:21:0a:02:ec:ab:ab:9e: 83:da:a5:32:e8:3d:31:bc:70:79:91:5a:ec:9f:06:bb:ae:2e: 31:9c:b2:69:43:d6:07:b7:de:72:17:9e:25:fc:30:c7:63:ab: d9:f0:6a:f9:33:61:59:71:65:56:21:8f:63:3b:63:d0:f3:ea: 1f:14:f2:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2h47gHGpZ3U287L7DyrBlORL1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNTA4MDgyMTM1MDVaFw0yNTA4MTIwMjI4MDVaMDMxMTAvBgNV BAMTKDAxNjA1MTA3NTVDOTEzRUYxNkQ0M0FGRDg0QTJBODQxNzQ4MEUyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSNBENV3H8qysjP8iZttkB4WY DqpmbneIGtPL5CRyv1AsS56QdNp64526VWzsUhI6ZV3Vfdi4b9MOtYpkkc5OE5jb 2r57J1IQyvWLUkWmgL/z24plt9416koC0plSnWcI+lTglPzcQCB7RsS6CkATIrHk IDb9i7DnzlKWssoNLagSf8sqX5yeh47FpsHaqxeT0hqH7cNyftX6bTH6nInCIx9c OzsYLh8yGBTBzm667gdQneix18/vlzYLGBtXKi4k0D52N6WnSY+2nA44NcBW9ODk 8oaMlcTDjSKnFBNxfz6uJ1lkiTKWJhYS5wb5so26XLr9uP8zVp+4iQ/mbnYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAWBRB1XJE+8W1Dr9hKKoQXSA4tQwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMLqs+n2ULwIbw+yZi2Zu2cSkcPMQDweS/K DAmoNtZ3Wf1KoIzC9Mm9NvY1ZgpDnESf2txoy7D0LdiftOj26mGNpQN+q5W9f6hr 2X6dc286gRQ/Ppx1iONw8o23wXoWe3/dEy3lD5FinKSeKNQ8iUVvYieuW0bZzLtA T3P+cP5/F+ZNV/NbBj/1PuBWYcaS2Zp4jOshuiTm3oZYoAJqg6LF25Td2ieQhiY6 pHhCvsUKHxExypD+kvIf4Md8cz3tIQoC7KurnoPapTLoPTG8cHmRWuyfBruuLjGc smlD1ge33nIXniX8MMdjq9nwavkzYVlxZVYhj2M7Y9Dz6h8U8nI= -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:12 2025 by rpki-client