$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: vFz4KqFEDJNaq5qS+D/yRytdz1ra9UjPBqIuHGfgFEA= Subject key identifier: 33:3E:3D:FB:5B:4E:86:A0:E5:C2:AB:20:9B:73:60:93:34:C0:40:5F Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 484936C57A2337362E3E01E35118E5388D26B45D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 03C7 Signing time: Tue 24 Mar 2026 10:20:48 +0000 Manifest this update: Tue 24 Mar 2026 10:15:48 +0000 Manifest next update: Fri 27 Mar 2026 11:06:48 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: NuawtP7Kp2cxFcA1S5drWcLxSy9yy/3sy/ceJLpAons=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:36:c5:7a:23:37:36:2e:3e:01:e3:51:18:e5:38:8d:26:b4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Mar 24 10:15:48 2026 GMT Not After : Mar 27 11:06:48 2026 GMT Subject: CN=333E3DFB5B4E86A0E5C2AB209B73609334C0405F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:02:6b:c5:47:f0:43:7f:23:14:25:50:cf: 25:81:2a:74:2e:03:aa:fb:76:90:a3:f4:67:7d:85: 51:d7:04:a7:65:3f:71:ed:8a:89:bd:53:05:b7:84: 97:fc:04:e9:3e:ce:ab:f7:c0:b6:4e:57:73:47:eb: 30:78:12:2d:62:93:83:46:49:6d:46:67:a8:bb:d8: f0:9e:1b:5f:08:63:e8:c4:24:a1:94:b6:cd:a1:76: db:50:bd:f6:96:4d:0e:c5:42:0c:b7:75:bc:d8:7e: 21:d8:dd:28:24:00:a8:2d:5f:1a:64:ed:c5:9b:a2: 6e:11:5b:fe:7c:57:ef:3e:0f:4c:7e:bc:2f:1e:23: 87:b1:bb:36:04:e1:d8:6d:28:fc:a8:e2:e3:d1:08: fc:c3:59:9e:68:73:25:86:ce:e3:30:1c:1f:2e:26: da:ec:db:c9:d1:77:aa:4a:c3:73:5c:87:4d:44:34: bd:1f:db:94:1b:f7:76:ce:64:14:5d:45:3a:fb:7d: 13:51:2c:c3:87:ad:59:a0:4e:ab:9a:50:78:25:e4: 38:7a:ec:9b:ee:75:46:96:73:ad:cc:15:60:42:c2: b9:68:28:11:e8:41:3f:35:34:4d:31:ef:eb:d5:ef: 11:ef:75:56:f6:36:38:f0:9e:d1:8f:86:97:cb:1a: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:3D:FB:5B:4E:86:A0:E5:C2:AB:20:9B:73:60:93:34:C0:40:5F X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0d:68:d5:b7:76:35:b9:6d:69:15:e4:14:db:9f:9a:c5:8b: f8:a4:52:b3:d0:d9:42:52:d2:5c:96:72:d8:ce:0d:28:6d:45: 7c:43:72:cc:94:b2:e0:9c:e9:05:14:d4:b5:69:d0:4c:67:43: e4:2a:2e:9f:ba:9f:c1:09:3c:14:b4:52:b8:f3:aa:8b:43:91: 9e:e5:00:b3:d9:0c:3d:11:c7:b3:a2:b5:0c:9c:63:be:50:14: bb:40:dc:0a:db:a1:cf:e7:4d:a7:56:6e:0f:63:e9:2b:b3:ee: 14:c2:ba:1c:2c:e8:80:f9:ac:f1:ae:cc:3e:18:6e:54:48:cc: a2:0b:37:7e:12:a5:aa:2f:0e:f3:5d:50:c4:6c:9b:ba:a5:f4: d0:e4:28:ea:a8:9b:00:8a:0c:b4:e4:7f:5d:d0:30:f6:c6:b6: 1f:e1:b4:6e:d7:f9:70:66:d1:9c:4c:3d:4a:11:8a:9f:a0:83: 69:31:cd:fb:44:85:a3:92:e0:ce:c8:6a:90:f6:da:7f:3d:b1: 08:93:68:63:78:57:01:4a:4a:f6:4d:bf:5b:e8:ad:54:82:84: 3e:b9:b5:1e:b9:eb:62:12:08:c9:1e:a7:58:51:c5:b7:c6:92: c9:3e:cb:21:b7:65:e1:11:cd:2b:4b:75:30:3c:9a:6e:40:e5: bd:43:e9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEk2xXojNzYuPgHjURjlOI0mtF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNjAzMjQxMDE1NDhaFw0yNjAzMjcxMTA2NDhaMDMxMTAvBgNV BAMTKDMzM0UzREZCNUI0RTg2QTBFNUMyQUIyMDlCNzM2MDkzMzRDMDQwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2gJrxUfwQ38jFCVQzyWBKnQu A6r7dpCj9Gd9hVHXBKdlP3Htiom9UwW3hJf8BOk+zqv3wLZOV3NH6zB4Ei1ik4NG SW1GZ6i72PCeG18IY+jEJKGUts2hdttQvfaWTQ7FQgy3dbzYfiHY3SgkAKgtXxpk 7cWbom4RW/58V+8+D0x+vC8eI4exuzYE4dhtKPyo4uPRCPzDWZ5ocyWGzuMwHB8u Jtrs28nRd6pKw3Nch01ENL0f25Qb93bOZBRdRTr7fRNRLMOHrVmgTquaUHgl5Dh6 7JvudUaWc63MFWBCwrloKBHoQT81NE0x7+vV7xHvdVb2NjjwntGPhpfLGiy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMz49+1tOhqDlwqsgm3NgkzTAQF8wHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4NaNW3djW5bWkV5BTbn5rFi/ikUrPQ2UJS 0lyWctjODShtRXxDcsyUsuCc6QUU1LVp0ExnQ+QqLp+6n8EJPBS0UrjzqotDkZ7l ALPZDD0Rx7OitQycY75QFLtA3Arboc/nTadWbg9j6Suz7hTCuhws6ID5rPGuzD4Y blRIzKILN34SpaovDvNdUMRsm7ql9NDkKOqomwCKDLTkf13QMPbGth/htG7X+XBm 0ZxMPUoRip+gg2kxzftEhaOS4M7IapD22n89sQiTaGN4VwFKSvZNv1vorVSChD65 tR6562ISCMkep1hRxbfGksk+yyG3ZeERzStLdTA8mm5A5b1D6XQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:13:50 2026 by rpki-client