$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft File: 676E12EDA912B67493E88316A428CFDBCAB51941.mft (raw, json) Hash identifier: XRL5D9iELs0MNhOI1ga5rAe4fcp4/qxvFNIBFBPLLfg= Subject key identifier: CA:5E:92:CD:D3:75:8B:0A:BB:55:29:39:7B:1C:AC:67:43:55:F5:F8 Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941 Certificate serial: 467C60DE43F2CE24315AE52F8B96E8007AB9B991 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft Manifest number: 0138 Signing time: Fri 17 Apr 2026 15:10:06 +0000 Manifest this update: Fri 17 Apr 2026 15:05:06 +0000 Manifest next update: Tue 21 Apr 2026 02:22:06 +0000 Files and hashes: 1: 3135372e36362e352e302f32342d3234203d3e20313336383633.roa (hash: ZZckzOr9ywIqKzfUhb2EmuYvzuXBURMp9aGUGSYsMew=) 2: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (hash: dMrGdN3jz8zMFZFmBytqEtO63mjKB2uQPhY+tz5vgrM=) 3: 676E12EDA912B67493E88316A428CFDBCAB51941.crl (hash: UpgUstg9zuLLMo8S4t9m5S0ySKNsDfgcKty62E6eYRM=) 4: 3135372e36362e342e302f32332d3233203d3e20313336383633.roa (hash: S8PeiYq+sNMV4GT9BdQ5QdX2kgnaTXk8Ia+DPJXGQoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7c:60:de:43:f2:ce:24:31:5a:e5:2f:8b:96:e8:00:7a:b9:b9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941 Validity Not Before: Apr 17 15:05:06 2026 GMT Not After : Apr 21 02:22:06 2026 GMT Subject: CN=CA5E92CDD3758B0ABB5529397B1CAC674355F5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:6a:e7:a4:64:b1:b7:02:ee:27:52:9e:ff: 73:23:66:a6:07:42:c1:aa:ea:af:3b:e7:80:b3:76: ef:32:5c:59:18:bf:be:6f:bb:71:f7:8b:17:35:27: 26:f9:a1:d7:1e:e6:c6:33:da:d3:fb:51:11:45:0e: 36:87:18:df:b8:a6:28:21:6e:37:1b:02:2b:33:0c: eb:bc:b2:93:6b:cd:33:3c:0c:62:ae:c4:5d:86:06: 2f:7d:ce:90:98:9c:23:54:3f:76:ca:39:e4:ea:2e: a4:58:13:86:68:9b:89:fb:59:dc:b7:b6:e6:83:cf: 1f:a3:30:b5:6b:bf:54:11:11:e8:cd:7b:39:e4:b3: a7:54:81:67:29:ea:5c:63:93:37:95:a2:9a:a7:d7: 74:fd:f1:1a:3c:fb:e2:ab:14:b0:aa:92:f5:81:c4: a6:e5:49:41:87:e6:2d:14:d7:1b:66:e0:05:82:1e: 12:d0:3d:e4:2e:68:dd:85:a7:57:3f:67:3f:a5:db: 1c:0a:1c:19:e5:6b:5c:6e:72:f4:17:2f:a1:3d:9f: 74:04:19:55:a7:a9:c5:4e:f9:a7:90:55:be:26:0b: 08:78:8d:92:53:a9:8c:40:26:bf:da:d6:f1:07:a7: e2:69:cd:ee:5a:5e:ab:0b:70:92:e3:77:e9:e2:dc: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:92:CD:D3:75:8B:0A:BB:55:29:39:7B:1C:AC:67:43:55:F5:F8 X509v3 Authority Key Identifier: keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e0:a2:98:64:6e:34:46:9e:c3:5e:08:04:b3:bb:c5:38:70: 9d:7f:03:c8:1d:72:62:0f:52:71:65:24:bf:6e:63:3f:16:d2: 39:d0:92:0f:bd:fa:6c:50:1c:1a:fb:8f:11:45:47:fc:98:6c: 07:fb:1f:0a:1d:34:4c:06:ea:75:e8:40:8b:7d:77:62:21:e3: 75:65:b8:35:33:6a:6f:57:a1:62:ae:b9:c5:56:b8:de:0a:52: 20:96:99:b2:c6:13:7b:f3:16:2b:cf:52:bd:81:d4:5b:11:be: 9f:ce:a9:5a:65:a8:53:b0:a6:20:68:94:cd:ac:90:81:51:ab: 62:7e:f9:67:d1:3f:96:61:89:8b:2f:50:97:e8:11:36:ce:eb: 5a:9a:38:ba:45:06:95:23:a2:08:a4:cc:9f:2d:54:be:c4:f7: b4:b3:19:0a:bc:e7:ae:37:5c:38:f3:99:58:d8:a6:9e:79:30: e2:5e:c6:f2:d9:ef:d5:fa:69:6e:2b:0c:46:5b:8a:fa:1c:80: 51:dd:86:3c:ca:09:0b:83:fd:6d:fa:a3:c0:cf:f5:c8:c9:5a: 14:f9:f4:0e:32:37:c9:49:49:a7:0a:e9:ac:86:fd:95:31:4c: 0c:ce:f8:82:61:7b:cb:99:e5:89:5e:da:e5:4f:f2:1b:de:36: 30:45:cd:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnxg3kPyziQxWuUvi5boAHq5uZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD QUI1MTk0MTAeFw0yNjA0MTcxNTA1MDZaFw0yNjA0MjEwMjIyMDZaMDMxMTAvBgNV BAMTKENBNUU5MkNERDM3NThCMEFCQjU1MjkzOTdCMUNBQzY3NDM1NUY1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCou2rnpGSxtwLuJ1Ke/3MjZqYH QsGq6q8754Czdu8yXFkYv75vu3H3ixc1Jyb5odce5sYz2tP7URFFDjaHGN+4pigh bjcbAiszDOu8spNrzTM8DGKuxF2GBi99zpCYnCNUP3bKOeTqLqRYE4Zom4n7Wdy3 tuaDzx+jMLVrv1QREejNeznks6dUgWcp6lxjkzeVopqn13T98Ro8++KrFLCqkvWB xKblSUGH5i0U1xtm4AWCHhLQPeQuaN2Fp1c/Zz+l2xwKHBnla1xucvQXL6E9n3QE GVWnqcVO+aeQVb4mCwh4jZJTqYxAJr/a1vEHp+Jpze5aXqsLcJLjd+ni3HpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyl6SzdN1iwq7VSk5exysZ0NV9fgwHwYDVR0j BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5 MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1 MTk0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI2NGJmYjItZDQxZC00MzE3LWI5 MmQtYmI5NDQxZmQwZGNmLzAvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENG REJDQUI1MTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7gophkbjRGnsNeCASzu8U4cJ1/A8gdcmIP UnFlJL9uYz8W0jnQkg+9+mxQHBr7jxFFR/yYbAf7HwodNEwG6nXoQIt9d2Ih43Vl uDUzam9XoWKuucVWuN4KUiCWmbLGE3vzFivPUr2B1FsRvp/OqVplqFOwpiBolM2s kIFRq2J++WfRP5ZhiYsvUJfoETbO61qaOLpFBpUjogikzJ8tVL7E97SzGQq85643 XDjzmVjYpp55MOJexvLZ79X6aW4rDEZbivocgFHdhjzKCQuD/W36o8DP9cjJWhT5 9A4yN8lJSacK6ayG/ZUxTAzO+IJhe8uZ5Yle2uVP8hveNjBFzSE= -----END CERTIFICATE-----Generated at Sat Apr 18 07:31:33 2026 by rpki-client