$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: UesPD0SO4UWLdGFOOSHlywwghrhxwzKGi/AFenpfLts= Subject key identifier: 26:20:A1:EA:2A:C8:44:87:FA:44:2C:3D:10:C0:AD:9A:6B:C3:32:44 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 4AA9A79F8F8B148348B70A69B5A1D33C27A5F801 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0369 Signing time: Sat 23 Aug 2025 12:30:40 +0000 Manifest this update: Sat 23 Aug 2025 12:25:40 +0000 Manifest next update: Tue 26 Aug 2025 18:17:40 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: x0ZIELZSXBjybjn5fW7tGR6eWGDUH28amfBG/jPD7U4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:a7:9f:8f:8b:14:83:48:b7:0a:69:b5:a1:d3:3c:27:a5:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Aug 23 12:25:40 2025 GMT Not After : Aug 26 18:17:40 2025 GMT Subject: CN=2620A1EA2AC84487FA442C3D10C0AD9A6BC33244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:d6:d7:4f:ce:20:43:be:48:ef:bc:30:a5: 59:4b:6a:d2:e8:7a:c9:53:06:14:e5:f2:e0:75:ef: c4:b7:f9:b8:77:c1:3c:b7:98:8c:55:b4:99:57:c9: 34:08:5f:fc:c4:58:b6:25:3a:f9:70:f5:60:e9:89: 00:99:d8:2c:d5:d3:6c:3f:3e:dc:47:34:0d:70:7b: eb:dd:1f:d6:11:b4:4f:96:42:a3:12:64:1f:91:33: bc:e1:b5:62:d9:27:2a:47:7f:a0:51:6a:63:56:70: ed:01:37:a3:fd:97:f6:c4:c7:1c:08:84:63:ea:16: 44:e5:e1:1a:6e:b6:17:4e:58:33:b0:9b:21:c1:54: 7d:75:bc:4f:43:2c:1a:16:8a:1c:91:cc:b1:e2:13: ef:7c:c3:59:ae:b9:d9:f5:fa:bd:1f:3d:f0:61:5f: d7:5f:85:6d:1c:3b:f4:68:49:5b:c9:3d:22:de:7b: a4:a4:ae:4e:f4:84:71:bb:e4:6d:61:a6:87:5f:d0: 32:af:f9:72:97:d9:38:32:59:ed:61:be:d8:19:c3: 78:ce:4d:a7:ce:2c:c5:c3:7d:1e:a9:8a:7d:17:d2: 19:ef:1e:81:7d:62:d6:77:e1:90:0e:4b:8b:65:de: e3:36:29:f7:86:95:12:9f:b1:d7:f1:1b:22:c2:89: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:20:A1:EA:2A:C8:44:87:FA:44:2C:3D:10:C0:AD:9A:6B:C3:32:44 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e1:c6:0a:25:07:c6:a0:07:23:cf:8a:91:5a:45:26:7b:58: 20:6f:b2:1d:60:ac:24:7f:1a:ee:db:fb:2e:2e:d6:78:2a:0a: 2a:67:87:49:3c:ac:d5:f5:1b:25:30:5d:81:74:38:04:eb:bf: 68:fe:c2:53:6b:5f:c0:9d:df:73:55:82:b0:62:2d:06:7c:37: 82:eb:89:29:8b:0b:8c:3d:e4:5d:86:4f:27:2d:89:c5:fa:03: fc:a2:63:6e:6b:b7:5a:68:2c:2b:c4:bd:d5:83:a8:74:2b:cb: a9:40:2d:2b:30:01:0c:a0:ed:30:4d:d0:14:63:c9:49:62:1a: e6:3f:78:6b:cc:2a:68:6d:d0:1e:30:d6:55:ce:48:19:ac:c6: e0:c3:d0:7f:a4:a6:ee:f0:16:22:a8:d6:e7:ba:59:a0:75:13: 24:86:c4:68:2f:3e:1d:6d:e3:d0:f6:d4:69:11:15:7b:6c:3e: 49:51:f4:8e:57:b5:2a:37:15:ba:30:55:b4:fa:e4:03:c4:22: 96:07:37:25:ca:4f:7c:1e:f7:e3:55:84:57:3b:fd:30:ee:e0: e9:71:76:af:07:af:11:de:cd:cc:85:c2:a1:95:6c:32:0a:74: 87:f9:ea:63:dc:d1:b6:d3:6d:8c:52:58:3e:53:14:86:7f:4d: 63:d4:fe:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqmnn4+LFINItwpptaHTPCel+AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA4MjMxMjI1NDBaFw0yNTA4MjYxODE3NDBaMDMxMTAvBgNV BAMTKDI2MjBBMUVBMkFDODQ0ODdGQTQ0MkMzRDEwQzBBRDlBNkJDMzMyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRldbXT84gQ75I77wwpVlLatLo eslTBhTl8uB178S3+bh3wTy3mIxVtJlXyTQIX/zEWLYlOvlw9WDpiQCZ2CzV02w/ PtxHNA1we+vdH9YRtE+WQqMSZB+RM7zhtWLZJypHf6BRamNWcO0BN6P9l/bExxwI hGPqFkTl4RputhdOWDOwmyHBVH11vE9DLBoWihyRzLHiE+98w1muudn1+r0fPfBh X9dfhW0cO/RoSVvJPSLee6Skrk70hHG75G1hpodf0DKv+XKX2TgyWe1hvtgZw3jO TafOLMXDfR6pin0X0hnvHoF9YtZ34ZAOS4tl3uM2KfeGlRKfsdfxGyLCiQlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiCh6irIRIf6RCw9EMCtmmvDMkQwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvhxgolB8agByPPipFaRSZ7WCBvsh1grCR/ Gu7b+y4u1ngqCipnh0k8rNX1GyUwXYF0OATrv2j+wlNrX8Cd33NVgrBiLQZ8N4Lr iSmLC4w95F2GTycticX6A/yiY25rt1poLCvEvdWDqHQry6lALSswAQyg7TBN0BRj yUliGuY/eGvMKmht0B4w1lXOSBmsxuDD0H+kpu7wFiKo1ue6WaB1EySGxGgvPh1t 49D21GkRFXtsPklR9I5XtSo3FbowVbT65APEIpYHNyXKT3we9+NVhFc7/TDu4Olx dq8HrxHezcyFwqGVbDIKdIf56mPc0bbTbYxSWD5TFIZ/TWPU/sU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:23 2025 by rpki-client