$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: wX4vYAvq+ARFR/s1mQKE/158izsehrf53MfYqB9LuCI= Subject key identifier: 9A:BF:8F:A4:05:FB:2E:D5:70:8F:34:67:74:49:BB:DF:5C:86:7D:B2 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 53D89117BA760305D1BD0785A3D52913FFF096FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 0526 Signing time: Sat 18 Oct 2025 22:51:37 +0000 Manifest this update: Sat 18 Oct 2025 22:46:37 +0000 Manifest next update: Wed 22 Oct 2025 08:04:37 +0000 Files and hashes: 1: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: sYK1TwLgYoqDA6ZK2i2721pbOzZdVn8uQUqgWGS1YMA=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: SkrAvX0pF+pQyxeTzXJZ/61PFAWYMW8+rbO8WcqeNoE=) 3: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=) 4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: GLcDNEX0tgavndI+MfQtQe+3mTYPu4xrloHdU6jT+Vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d8:91:17:ba:76:03:05:d1:bd:07:85:a3:d5:29:13:ff:f0:96:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Oct 18 22:46:37 2025 GMT Not After : Oct 22 08:04:37 2025 GMT Subject: CN=9ABF8FA405FB2ED5708F34677449BBDF5C867DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:99:1d:6b:46:77:03:83:f9:23:a4:f4:af: 35:c9:0d:82:44:db:de:bd:25:6a:54:0e:a1:d3:20: fd:aa:6a:49:63:1e:4c:7a:b9:f9:89:9e:23:2d:7d: 4f:64:be:2c:01:53:e0:a9:7c:68:c6:d4:7c:71:a7: 96:60:07:95:30:3f:88:a4:9e:2d:7d:a2:58:bb:9d: 03:7f:4c:6c:d4:61:d1:f2:e4:05:d4:51:44:2f:70: f1:55:62:ce:8b:87:fa:5d:3d:58:6b:19:b0:ec:23: 74:f0:a3:6b:8d:11:c6:3c:28:22:dd:58:50:df:e6: e8:04:55:fe:3a:31:8a:fe:da:c7:4a:ba:b9:f5:86: 30:c2:2d:60:a8:eb:77:1e:d1:88:ae:ba:e3:8f:e9: 41:ae:e8:50:90:8c:6d:15:b6:ff:3f:0e:da:98:5b: 6b:95:df:6c:36:d3:8f:66:77:8e:6e:3c:89:f8:96: 5b:a2:13:3d:bc:41:0a:7c:55:e0:0e:cc:bb:20:77: 7e:9e:7b:35:6d:d8:4e:e8:5a:82:40:85:02:ec:eb: 2f:0e:b9:26:c9:4d:d1:52:1e:b8:11:84:90:b4:bf: d6:13:e5:0b:3a:bf:4b:f1:fd:52:51:5e:85:7a:d5: f8:c4:8b:a0:46:b8:4d:bf:ad:58:f8:ef:98:f9:a2: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:8F:A4:05:FB:2E:D5:70:8F:34:67:74:49:BB:DF:5C:86:7D:B2 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:eb:7f:3b:7e:7b:c2:41:4b:b1:27:20:a7:0c:b6:29:ad:b5: 48:40:eb:49:cf:ba:f0:46:21:2f:b3:51:cd:31:a9:b6:97:9d: 5a:32:fd:eb:20:ec:f6:f0:04:48:71:f6:8b:c9:81:ca:4c:f6: 29:41:37:32:e8:10:a6:e4:d7:6a:c5:b8:f2:07:ad:7a:db:a2: 9e:3c:35:08:e7:85:18:4c:e0:38:28:1e:1e:05:11:47:6e:60: 29:f9:bf:4f:0c:2d:60:71:e5:16:78:58:04:70:5f:b9:2e:a1: ae:92:fe:bb:58:76:93:53:db:cf:bc:03:98:f2:26:c1:14:68: 84:7e:11:94:bf:6f:39:ea:02:3a:c3:1c:1f:91:6c:06:10:05: 00:fd:17:85:85:25:d3:c5:5e:5e:2a:a2:78:15:59:e6:de:bd: 68:44:96:9c:67:42:99:be:ee:7d:87:2f:8a:b8:ea:a1:c1:26: 6e:9e:81:eb:be:ff:8e:e6:52:bc:d6:99:81:44:f9:be:4a:e1: 2e:5e:f0:30:22:f0:d0:8b:f3:08:8a:89:95:f2:08:b1:fb:b7: 3e:29:2a:4e:7a:1e:d1:ed:c0:37:80:02:92:1a:0d:e4:54:ab: 07:1e:88:9b:2b:30:56:ce:54:2a:15:a2:c0:cf:5b:46:ab:f0: a2:fb:a9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9iRF7p2AwXRvQeFo9UpE//wlvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTEwMTgyMjQ2MzdaFw0yNTEwMjIwODA0MzdaMDMxMTAvBgNV BAMTKDlBQkY4RkE0MDVGQjJFRDU3MDhGMzQ2Nzc0NDlCQkRGNUM4NjdEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAZkda0Z3A4P5I6T0rzXJDYJE 2969JWpUDqHTIP2qakljHkx6ufmJniMtfU9kviwBU+CpfGjG1Hxxp5ZgB5UwP4ik ni19oli7nQN/TGzUYdHy5AXUUUQvcPFVYs6Lh/pdPVhrGbDsI3Two2uNEcY8KCLd WFDf5ugEVf46MYr+2sdKurn1hjDCLWCo63ce0YiuuuOP6UGu6FCQjG0Vtv8/DtqY W2uV32w2049md45uPIn4lluiEz28QQp8VeAOzLsgd36eezVt2E7oWoJAhQLs6y8O uSbJTdFSHrgRhJC0v9YT5Qs6v0vx/VJRXoV61fjEi6BGuE2/rVj475j5okfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmr+PpAX7LtVwjzRndEm731yGfbIwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITrfzt+e8JBS7EnIKcMtimttUhA60nPuvBG IS+zUc0xqbaXnVoy/esg7PbwBEhx9ovJgcpM9ilBNzLoEKbk12rFuPIHrXrbop48 NQjnhRhM4DgoHh4FEUduYCn5v08MLWBx5RZ4WARwX7kuoa6S/rtYdpNT28+8A5jy JsEUaIR+EZS/bznqAjrDHB+RbAYQBQD9F4WFJdPFXl4qongVWebevWhElpxnQpm+ 7n2HL4q46qHBJm6egeu+/47mUrzWmYFE+b5K4S5e8DAi8NCL8wiKiZXyCLH7tz4p Kk56HtHtwDeAApIaDeRUqwceiJsrMFbOVCoVosDPW0ar8KL7qUM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:32 2025 by rpki-client