$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: z9tFXq/XtdCsd6BhJJp/rClCkS07RUcA6VFM5JhjZd0= Subject key identifier: 66:7E:C8:23:B5:74:DC:98:F5:23:E4:77:14:A2:C6:18:D4:71:E2:F0 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 49C7D72FC0081400DA50481ADA090884C6E1B8F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 056D Signing time: Wed 25 Mar 2026 06:11:53 +0000 Manifest this update: Wed 25 Mar 2026 06:06:53 +0000 Manifest next update: Sat 28 Mar 2026 08:27:53 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: XP0ftXtJRKTRnMmM5RHfXvqivFStcWbbL9fTaa1lIQs=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: Z+yI+qBEJQ4HpP+yvfIUbQbmmee7rBGeSeum3wqAtpo=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: MxlZMpoNv5CdONEOPyJ0XCI3HYckgI0HEgji/tMrUdg=) 4: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: mIkzIj0PpuXIr0f4TyiB2RhnHxN1ZViLs3zildFZzEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c7:d7:2f:c0:08:14:00:da:50:48:1a:da:09:08:84:c6:e1:b8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Mar 25 06:06:53 2026 GMT Not After : Mar 28 08:27:53 2026 GMT Subject: CN=667EC823B574DC98F523E47714A2C618D471E2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:cc:ec:0c:0a:82:9f:fe:83:60:1d:95:20: 0f:74:78:de:07:49:7d:ea:50:ce:04:77:fd:2d:2a: 09:95:87:04:a0:fa:70:fa:44:61:24:c9:66:41:3f: 2f:0b:3c:11:d6:af:69:de:19:d2:f1:46:fa:8d:4d: 58:d7:0b:bb:47:45:08:b1:e8:92:f5:98:dc:2c:26: 4c:dc:94:ca:da:29:ec:6e:ad:16:ed:54:36:80:9a: b3:f3:fe:4e:f8:d7:ad:55:71:34:05:94:cf:05:8c: 2f:93:f4:ec:cb:4f:c3:b6:18:7e:28:55:1a:48:84: f9:4c:2e:b8:d1:0f:41:46:49:42:4e:47:68:05:65: 19:36:0f:51:0d:70:e7:c8:08:34:f0:f9:0a:be:36: 87:12:ae:cb:ba:a9:85:77:44:57:22:4a:ae:41:6d: e6:f7:de:08:4b:38:89:7d:3f:4b:fc:ed:85:ca:8c: 0c:c2:94:2b:e0:1b:ce:88:df:3b:b9:3c:29:44:6a: 63:1f:58:cd:8a:86:38:ee:10:96:c7:93:d0:47:ee: 33:02:95:5e:33:4d:c0:fd:4f:63:4c:1c:ee:c3:42: 9d:da:77:2e:2d:c2:c2:52:69:63:d5:f2:1e:b0:fb: cb:c4:75:2c:fa:ba:a7:5f:d6:23:e2:34:1e:6c:d5: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:C8:23:B5:74:DC:98:F5:23:E4:77:14:A2:C6:18:D4:71:E2:F0 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:79:84:73:99:83:83:ac:b6:fe:25:95:e4:73:aa:ef:05:58: c8:49:f1:35:cd:7b:dd:20:01:d7:10:2e:27:92:46:bc:53:03: ce:0c:e6:1e:39:ab:09:12:76:0a:78:d1:da:05:a1:e9:10:7f: 04:60:57:36:c5:50:24:7b:db:4a:1a:bc:6d:30:a3:1e:fb:45: ae:b0:a9:79:69:37:a9:45:e9:c2:e6:33:81:71:19:05:f1:97: 8a:4e:37:49:9a:7c:db:92:b6:6b:12:ef:a2:9d:33:ff:12:3a: b8:c9:7a:e7:3c:8b:ed:4f:23:93:b0:99:26:3c:3a:22:1b:3a: c9:69:d4:bd:0e:e7:6c:ed:bd:72:9c:8c:8f:b0:f6:7b:a9:fd: 05:80:ef:fa:6d:cd:5d:48:ec:f3:ae:39:82:62:0a:d8:b0:bf: 43:e2:2b:77:08:d4:48:15:0f:a9:59:7e:79:e1:87:84:cd:19: 57:fe:3b:57:a2:87:07:9f:39:94:41:fd:f9:87:6a:23:83:33: 46:72:b5:54:5b:d2:98:c7:6c:23:fa:86:e1:8f:d4:01:b6:dc: 72:4f:c2:9e:93:4a:62:25:26:a2:7d:86:4f:a2:3f:1e:7e:e3: 4e:62:73:5f:2b:1f:ab:95:c2:d7:ae:5b:fe:bb:c8:b3:2b:4a: 3c:4f:61:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScfXL8AIFADaUEga2gkIhMbhuPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNjAzMjUwNjA2NTNaFw0yNjAzMjgwODI3NTNaMDMxMTAvBgNV BAMTKDY2N0VDODIzQjU3NERDOThGNTIzRTQ3NzE0QTJDNjE4RDQ3MUUyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKMzsDAqCn/6DYB2VIA90eN4H SX3qUM4Ed/0tKgmVhwSg+nD6RGEkyWZBPy8LPBHWr2neGdLxRvqNTVjXC7tHRQix 6JL1mNwsJkzclMraKexurRbtVDaAmrPz/k74161VcTQFlM8FjC+T9OzLT8O2GH4o VRpIhPlMLrjRD0FGSUJOR2gFZRk2D1ENcOfICDTw+Qq+NocSrsu6qYV3RFciSq5B beb33ghLOIl9P0v87YXKjAzClCvgG86I3zu5PClEamMfWM2KhjjuEJbHk9BH7jMC lV4zTcD9T2NMHO7DQp3ady4twsJSaWPV8h6w+8vEdSz6uqdf1iPiNB5s1XwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZn7II7V03Jj1I+R3FKLGGNRx4vAwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKl5hHOZg4Ostv4lleRzqu8FWMhJ8TXNe90g AdcQLieSRrxTA84M5h45qwkSdgp40doFoekQfwRgVzbFUCR720oavG0wox77Ra6w qXlpN6lF6cLmM4FxGQXxl4pON0mafNuStmsS76KdM/8SOrjJeuc8i+1PI5OwmSY8 OiIbOslp1L0O52ztvXKcjI+w9nup/QWA7/ptzV1I7POuOYJiCtiwv0PiK3cI1EgV D6lZfnnhh4TNGVf+O1eihwefOZRB/fmHaiODM0ZytVRb0pjHbCP6huGP1AG23HJP wp6TSmIlJqJ9hk+iPx5+405ic18rH6uVwteuW/67yLMrSjxPYQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:21:00 2026 by rpki-client