$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: 5xyh/M2CBonG9HpTRUH/7vK/q+oFAS0Ypm5HYoCBLt4= Subject key identifier: 96:F4:86:E1:E7:54:0D:09:95:23:34:F9:68:50:60:4C:E6:E1:3D:6F Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 5B1C06E71384E1B25A0C5B22D04D096858F5C778 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0382 Signing time: Sat 18 Oct 2025 16:10:40 +0000 Manifest this update: Sat 18 Oct 2025 16:05:40 +0000 Manifest next update: Wed 22 Oct 2025 01:22:40 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: 8qeZiLs9v059I7Uftwt7Zigzx2pwvDGscHFryNU0Ivg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:06:e7:13:84:e1:b2:5a:0c:5b:22:d0:4d:09:68:58:f5:c7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Oct 18 16:05:40 2025 GMT Not After : Oct 22 01:22:40 2025 GMT Subject: CN=96F486E1E7540D09952334F96850604CE6E13D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:71:70:98:5f:9b:9b:85:ee:1b:18:c0:31: 12:b3:5a:da:1d:cd:7b:22:5d:36:db:49:ae:c8:26: eb:5d:50:e1:07:fa:88:f8:de:0c:0c:44:61:57:47: 31:66:af:98:24:2f:b0:bd:d5:63:a3:52:c5:96:f9: 26:65:c7:a2:4c:b8:2e:1e:c1:e3:08:d8:3e:c4:2f: ca:8c:34:ae:db:1d:43:0d:1d:9e:72:ea:92:57:ca: 6a:8d:2c:bf:f9:fd:4d:f0:aa:b4:b1:4c:ff:4b:ab: 0d:0a:aa:2c:11:ae:dc:a8:fc:dd:d7:23:a9:2d:e2: 83:73:75:19:7a:dd:9b:88:65:d0:b0:4f:41:14:db: 53:18:e1:f4:c7:2e:0b:8e:b4:84:a4:36:79:4b:0d: c1:2e:5a:2b:c0:18:2d:f5:4e:b2:b0:8f:dd:6e:1c: 69:44:dc:e6:f0:91:cd:d7:34:4d:21:9a:ff:cf:d6: e5:73:2e:59:51:f9:be:a3:6e:99:be:85:7a:48:15: 0e:e9:f1:0e:54:b2:3f:1f:96:47:e2:d2:da:eb:91: c7:d8:16:ea:77:8b:bf:c2:bd:14:e9:89:72:d5:55: fb:d0:47:7b:66:1d:dd:39:c2:08:78:e7:1a:02:be: 16:66:bb:1c:4f:97:a1:cf:c9:da:60:ad:e9:c9:38: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F4:86:E1:E7:54:0D:09:95:23:34:F9:68:50:60:4C:E6:E1:3D:6F X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:14:5f:5e:80:35:de:56:06:8c:a2:66:be:e6:b5:08:d7:4e: d6:42:63:f2:8f:76:77:8c:74:05:c3:fb:4f:d6:8c:52:bf:4d: 28:a8:bf:35:73:8a:2d:d1:ca:ed:ab:63:e4:f5:bd:ef:4d:a3: b5:32:eb:6e:68:94:d3:15:0e:91:df:49:79:c2:e0:ed:89:05: c4:8b:03:54:8f:18:a9:86:21:55:63:31:69:03:de:e7:bf:1e: 14:74:53:50:80:4b:98:65:6d:14:fb:cc:a3:6b:09:5f:9c:c9: 6d:06:71:30:e0:29:75:93:83:bf:e9:0b:ed:57:29:0a:e1:82: c1:d7:ac:0a:eb:cb:ce:39:76:10:c1:3f:07:74:71:2b:48:92: c7:77:e8:b1:16:2f:23:99:7e:aa:f8:23:6f:ce:22:82:f8:c6: 18:28:e2:e9:4d:dc:1a:b1:6e:d7:80:47:7b:03:c4:c6:dc:d3: 5e:d1:44:2b:a8:a8:eb:fa:55:33:dd:d9:60:52:a8:48:8c:bc: dd:fa:ed:e7:6b:08:3f:ab:ce:fa:27:9f:8d:f6:18:f5:2d:03: cc:23:14:ef:ae:32:1e:e3:52:57:d0:56:e4:d6:f3:76:3e:23: cb:a9:55:3d:07:ee:02:4d:06:f2:b1:db:fa:83:c6:8e:ce:e7: c3:7c:e8:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxwG5xOE4bJaDFsi0E0JaFj1x3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTEwMTgxNjA1NDBaFw0yNTEwMjIwMTIyNDBaMDMxMTAvBgNV BAMTKDk2RjQ4NkUxRTc1NDBEMDk5NTIzMzRGOTY4NTA2MDRDRTZFMTNENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMHFwmF+bm4XuGxjAMRKzWtod zXsiXTbbSa7IJutdUOEH+oj43gwMRGFXRzFmr5gkL7C91WOjUsWW+SZlx6JMuC4e weMI2D7EL8qMNK7bHUMNHZ5y6pJXymqNLL/5/U3wqrSxTP9Lqw0KqiwRrtyo/N3X I6kt4oNzdRl63ZuIZdCwT0EU21MY4fTHLguOtISkNnlLDcEuWivAGC31TrKwj91u HGlE3Obwkc3XNE0hmv/P1uVzLllR+b6jbpm+hXpIFQ7p8Q5Usj8flkfi0trrkcfY Fup3i7/CvRTpiXLVVfvQR3tmHd05wgh45xoCvhZmuxxPl6HPydpgrenJOHuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvSG4edUDQmVIzT5aFBgTObhPW8wHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUUX16ANd5WBoyiZr7mtQjXTtZCY/KPdneM dAXD+0/WjFK/TSiovzVzii3Ryu2rY+T1ve9No7Uy625olNMVDpHfSXnC4O2JBcSL A1SPGKmGIVVjMWkD3ue/HhR0U1CAS5hlbRT7zKNrCV+cyW0GcTDgKXWTg7/pC+1X KQrhgsHXrArry845dhDBPwd0cStIksd36LEWLyOZfqr4I2/OIoL4xhgo4ulN3Bqx bteAR3sDxMbc017RRCuoqOv6VTPd2WBSqEiMvN367edrCD+rzvonn432GPUtA8wj FO+uMh7jUlfQVuTW83Y+I8upVT0H7gJNBvKx2/qDxo7O58N86HY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:42 2025 by rpki-client