$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: arTMs5gSwg1dzcMLeSHXQjaPXOGq9q389SxMUvqHqz8= Subject key identifier: CA:57:1E:94:A0:02:3D:AF:17:83:E9:2D:6E:BF:1D:DB:F2:C8:2C:FB Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 47CA96772218DCEA2E3174B1C1636C8C38F50C09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 050D Signing time: Fri 22 Aug 2025 18:01:37 +0000 Manifest this update: Fri 22 Aug 2025 17:56:37 +0000 Manifest next update: Mon 25 Aug 2025 21:56:37 +0000 Files and hashes: 1: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: X19NUFU2dm1DXgXrbtYlOw+lLTkwVWi/ap2kXwQ7adQ=) 2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: GLcDNEX0tgavndI+MfQtQe+3mTYPu4xrloHdU6jT+Vw=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: SkrAvX0pF+pQyxeTzXJZ/61PFAWYMW8+rbO8WcqeNoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ca:96:77:22:18:dc:ea:2e:31:74:b1:c1:63:6c:8c:38:f5:0c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Aug 22 17:56:37 2025 GMT Not After : Aug 25 21:56:37 2025 GMT Subject: CN=CA571E94A0023DAF1783E92D6EBF1DDBF2C82CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:48:4f:ae:0e:5d:a7:31:d0:f7:7f:40:f7: f1:b7:7d:2f:22:0b:ec:6a:8f:41:25:ed:cb:fa:07: ee:f4:12:a5:f9:ad:76:33:c0:c2:3f:45:ed:e7:f5: 6b:01:13:e4:21:de:97:2d:44:9d:a1:b5:3e:06:aa: f4:aa:56:9e:ed:1d:c6:eb:7f:5f:90:48:e4:30:1a: ee:ec:c6:c7:94:39:2c:2f:47:e6:17:07:4e:d0:69: 79:68:35:bb:1c:fe:d4:68:41:40:e4:45:02:f7:37: b9:87:f0:bf:8a:f6:31:da:f5:fe:55:f6:82:68:48: 2d:5b:e6:c5:70:32:fe:17:c3:ed:e0:9e:a9:b6:dd: 0f:08:2f:5d:de:de:51:75:2f:4e:16:c5:64:f8:17: c0:e8:0d:af:21:7e:d0:5c:82:36:e5:6a:81:bb:12: d9:7c:ff:70:b6:34:8a:a9:00:a6:3f:94:d0:da:0e: f3:0e:ae:56:1e:0f:3c:85:0c:71:09:5d:a6:3e:9c: 24:50:18:2f:15:4d:85:d8:12:7a:3e:15:af:9f:7b: 4c:b7:86:7b:f3:39:6c:91:5a:08:1c:e2:01:12:57: 75:ed:61:a9:37:fb:5d:1b:1f:d0:63:dd:d2:67:c5: d8:74:ff:bb:f0:79:f2:f9:01:3d:ef:34:63:9e:e6: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:1E:94:A0:02:3D:AF:17:83:E9:2D:6E:BF:1D:DB:F2:C8:2C:FB X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:84:35:60:ca:35:08:6c:21:2c:47:b8:80:a2:7b:86:8c: 7f:92:2c:c6:08:18:7d:45:90:75:de:18:0b:79:81:86:9a:8f: 1e:f9:e0:94:67:3a:24:dc:0d:cb:4a:5f:e1:76:4e:2c:16:2b: f1:12:4e:02:c3:79:52:af:fc:8d:b8:d3:dc:1e:84:2e:00:d4: 38:e2:8e:19:91:c8:03:35:a2:43:1b:83:63:02:19:21:f6:0e: 46:17:8d:e1:18:4a:b1:d9:9b:a2:12:3a:b5:d4:39:44:89:14: 80:0f:87:42:9a:8e:d4:13:47:b3:90:6d:e6:3a:c0:00:ec:16: d4:6f:2b:0a:be:aa:5e:84:10:e0:aa:e4:36:f8:51:8e:27:9d: 8c:bd:59:30:ff:2e:5c:85:95:34:2e:8e:62:5b:af:50:db:c5: 60:c5:4c:7d:9d:77:ff:5a:4e:0b:2e:15:6c:f2:1f:7e:00:be: 5e:91:7a:7e:32:d8:c1:05:bb:01:54:44:b4:48:c7:bb:6d:b3: 92:f6:3a:3a:52:e3:8a:de:f9:5d:f0:b0:c2:5e:76:ac:bf:5f: 94:9a:7d:b5:52:40:92:53:57:f0:c2:a3:08:d7:ae:9b:1a:eb: 68:f8:77:27:2d:6d:04:cd:c3:fc:e2:da:42:28:10:7b:c0:4c: 47:d0:d4:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8qWdyIY3OouMXSxwWNsjDj1DAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTA4MjIxNzU2MzdaFw0yNTA4MjUyMTU2MzdaMDMxMTAvBgNV BAMTKENBNTcxRTk0QTAwMjNEQUYxNzgzRTkyRDZFQkYxRERCRjJDODJDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgUhPrg5dpzHQ939A9/G3fS8i C+xqj0El7cv6B+70EqX5rXYzwMI/Re3n9WsBE+Qh3pctRJ2htT4GqvSqVp7tHcbr f1+QSOQwGu7sxseUOSwvR+YXB07QaXloNbsc/tRoQUDkRQL3N7mH8L+K9jHa9f5V 9oJoSC1b5sVwMv4Xw+3gnqm23Q8IL13e3lF1L04WxWT4F8DoDa8hftBcgjblaoG7 Etl8/3C2NIqpAKY/lNDaDvMOrlYeDzyFDHEJXaY+nCRQGC8VTYXYEno+Fa+fe0y3 hnvzOWyRWggc4gESV3XtYak3+10bH9Bj3dJnxdh0/7vwefL5AT3vNGOe5ptXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylcelKACPa8Xg+ktbr8d2/LILPswHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtdhDVgyjUIbCEsR7iAonuGjH+SLMYIGH1F kHXeGAt5gYaajx754JRnOiTcDctKX+F2TiwWK/ESTgLDeVKv/I2409wehC4A1Dji jhmRyAM1okMbg2MCGSH2DkYXjeEYSrHZm6ISOrXUOUSJFIAPh0KajtQTR7OQbeY6 wADsFtRvKwq+ql6EEOCq5Db4UY4nnYy9WTD/LlyFlTQujmJbr1DbxWDFTH2dd/9a TgsuFWzyH34Avl6Ren4y2MEFuwFURLRIx7tts5L2OjpS44re+V3wsMJedqy/X5Sa fbVSQJJTV/DCowjXrpsa62j4dyctbQTNw/zi2kIoEHvATEfQ1LM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:45 2025 by rpki-client