$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: ZyEChwZxNYi3ilzL1tCnc2EWiWHmuj10q/Yi2pmSqHk= Subject key identifier: 75:23:BB:E6:A1:A1:CE:88:5A:7A:20:A8:01:54:3C:68:E0:59:B2:C7 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 255E572EC49E099580298297F518BBFED92F577A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0122 Signing time: Sun 01 Mar 2026 12:20:06 +0000 Manifest this update: Sun 01 Mar 2026 12:15:06 +0000 Manifest next update: Wed 04 Mar 2026 12:27:06 +0000 Files and hashes: 1: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: PIdGoGZHvEOYrOpNOSNY7PVI3MsqhkYhm7Mr1hPQAJI=) 2: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: DhApzFWM2Yz0xUZPdFDWyaJVrtCTZnr7Udi3dtMinS8=) 3: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: aR3Z66Gksl8aWzzmV5EgX+Fsc4Zsdk7wCOxsP02PzAU=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: 1UK1zxP1h56AVvKuHuDtaKwGRBaj3UFi5/u+i0iGx0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5e:57:2e:c4:9e:09:95:80:29:82:97:f5:18:bb:fe:d9:2f:57:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Mar 1 12:15:06 2026 GMT Not After : Mar 4 12:27:06 2026 GMT Subject: CN=7523BBE6A1A1CE885A7A20A801543C68E059B2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:ed:39:9a:98:e1:92:e2:cd:51:3e:d0:d8: 31:dc:bb:3a:ac:67:05:33:c5:43:0c:94:d0:5e:31: b7:d1:c4:db:eb:93:c7:2d:d7:b1:80:86:9f:76:74: e2:ad:8f:dc:d1:e5:d6:64:be:96:06:1d:4e:71:b2: eb:16:a4:22:ed:e2:92:91:61:8b:2f:e7:4c:9b:6b: 77:22:c6:44:d6:fc:27:eb:a1:a9:f0:b3:67:76:81: 2d:c8:08:66:52:76:a0:05:80:38:51:a1:20:b9:29: 9a:a9:f6:33:78:90:f8:23:69:54:d2:b0:80:2a:7a: 83:c2:0a:05:87:5f:e3:f2:ce:66:fc:32:1e:35:ad: f0:6a:49:17:25:de:8e:60:81:f3:1a:c6:06:8d:39: bf:05:c2:80:0d:f0:2d:35:16:ea:5b:f3:d5:6e:bc: ee:8b:76:cb:1b:87:8a:52:91:33:83:d2:a9:97:6f: 5c:9f:62:96:51:12:65:28:cd:1f:1f:43:45:3f:c4: 40:13:9f:44:c1:5e:1d:03:ce:fd:92:0a:50:4c:07: 3f:b5:07:6c:ea:b5:8e:0a:62:b2:c6:68:ae:6b:d3: 01:61:03:bf:94:9a:ce:a6:e2:65:4e:8d:92:81:b7: 3d:96:25:ce:cc:4f:29:80:e9:a7:92:62:24:ff:17: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:BB:E6:A1:A1:CE:88:5A:7A:20:A8:01:54:3C:68:E0:59:B2:C7 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:42:bd:dd:14:35:92:d9:15:a0:43:3a:67:23:26:09:4f:c6: f3:e8:99:f2:93:8e:a2:70:d2:69:74:53:62:cb:1a:8f:14:ca: 65:f0:ba:ae:0c:be:a0:61:92:13:71:07:e7:56:bf:38:c3:1f: d1:f7:7c:f5:9a:39:14:50:84:63:a4:9d:20:b4:f9:74:28:a8: 98:7f:ac:b5:a7:f2:84:6a:56:c0:19:b3:81:ac:ba:04:25:2b: b4:7f:e0:90:ef:1c:cf:3e:79:d7:ca:9a:31:3e:8e:03:81:38: fa:0e:05:1c:dd:c6:11:a8:07:64:0a:9b:a4:6b:7d:61:68:7d: 51:54:ad:44:f8:25:7b:1d:16:9a:3b:f0:10:46:95:02:8f:fa: 06:54:7f:7c:e6:76:b8:36:9e:e1:a7:6c:4a:f3:2d:53:81:23: 9a:8c:05:c5:22:22:e9:45:54:15:44:cb:bf:80:97:84:cc:94: 7a:20:49:70:e2:0c:f7:e7:f0:52:d4:73:78:cc:5f:85:59:cf: db:79:b6:db:fc:d7:43:9e:b8:28:59:ee:95:f9:bc:24:2a:df: dd:51:99:7e:e3:f0:c8:39:34:9c:35:39:ae:10:de:49:9b:fd: 9a:25:9e:e4:e6:69:be:b6:2b:3f:be:0e:c5:43:d0:45:3a:16: bc:b4:35:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJV5XLsSeCZWAKYKX9Ri7/tkvV3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNjAzMDExMjE1MDZaFw0yNjAzMDQxMjI3MDZaMDMxMTAvBgNV BAMTKDc1MjNCQkU2QTFBMUNFODg1QTdBMjBBODAxNTQzQzY4RTA1OUIyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynu05mpjhkuLNUT7Q2DHcuzqs ZwUzxUMMlNBeMbfRxNvrk8ct17GAhp92dOKtj9zR5dZkvpYGHU5xsusWpCLt4pKR YYsv50yba3cixkTW/Cfroanws2d2gS3ICGZSdqAFgDhRoSC5KZqp9jN4kPgjaVTS sIAqeoPCCgWHX+Pyzmb8Mh41rfBqSRcl3o5ggfMaxgaNOb8FwoAN8C01Fupb89Vu vO6Ldssbh4pSkTOD0qmXb1yfYpZREmUozR8fQ0U/xEATn0TBXh0Dzv2SClBMBz+1 B2zqtY4KYrLGaK5r0wFhA7+Ums6m4mVOjZKBtz2WJc7MTymA6aeSYiT/F5gbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSO75qGhzohaeiCoAVQ8aOBZsscwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNCvd0UNZLZFaBDOmcjJglPxvPomfKTjqJw 0ml0U2LLGo8UymXwuq4MvqBhkhNxB+dWvzjDH9H3fPWaORRQhGOknSC0+XQoqJh/ rLWn8oRqVsAZs4GsugQlK7R/4JDvHM8+edfKmjE+jgOBOPoOBRzdxhGoB2QKm6Rr fWFofVFUrUT4JXsdFpo78BBGlQKP+gZUf3zmdrg2nuGnbErzLVOBI5qMBcUiIulF VBVEy7+Al4TMlHogSXDiDPfn8FLUc3jMX4VZz9t5ttv810OeuChZ7pX5vCQq391R mX7j8Mg5NJw1Oa4Q3kmb/ZolnuTmab62Kz++DsVD0EU6Fry0NXA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:18 2026 by rpki-client