$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: e9wJLn8xfzTd3QhyjPz8Nhay4bIsK0fWfpaUov0Z/lg= Subject key identifier: 04:EC:96:42:14:64:27:2B:DC:42:92:91:43:C7:34:45:52:86:DE:50 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 631B4EDAFAD73D888020C8D554250768A77BD8F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 033A Signing time: Fri 09 May 2025 18:00:39 +0000 Manifest this update: Fri 09 May 2025 17:55:39 +0000 Manifest next update: Tue 13 May 2025 04:19:39 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: GzzU4GMxg1J9blfJiEVWyZsh8otYvAusp6/HtdHHiOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1b:4e:da:fa:d7:3d:88:80:20:c8:d5:54:25:07:68:a7:7b:d8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: May 9 17:55:39 2025 GMT Not After : May 13 04:19:39 2025 GMT Subject: CN=04EC96421464272BDC42929143C734455286DE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:b5:2b:37:6b:d7:4b:94:54:56:d3:c8:e3: 2b:42:16:43:cf:c2:11:ed:d7:35:8d:b5:72:6e:32: 17:94:9d:9c:02:bc:9e:28:28:c0:2f:c8:67:98:2f: c7:62:6e:48:2e:9e:24:f5:96:c0:91:59:f7:e1:92: 97:c6:cc:d8:12:d9:ab:19:8f:d2:99:f5:87:a9:6a: ee:66:c5:e0:99:36:40:86:5b:e8:f8:26:09:9a:d4: f5:5b:cb:49:85:65:fc:a2:a7:b8:53:2f:16:ce:45: 5e:7a:22:2d:44:be:c6:28:3d:8b:33:19:0c:67:07: 1f:b9:65:01:08:1b:f1:68:cb:52:ba:22:bc:58:53: 2f:7f:b3:22:f1:d2:43:ed:d6:c4:e4:83:87:c1:db: b4:fd:37:4b:00:32:75:f3:da:2d:d1:f8:4e:28:3b: be:ae:6a:f9:40:5b:e6:d2:4c:05:c5:3c:33:71:01: c1:98:87:7a:7b:2c:a2:63:31:23:49:88:cf:04:ae: 10:b2:f8:e4:86:37:31:8e:52:68:e3:76:73:e9:87: 96:de:f1:c9:ed:2d:4e:29:b6:b3:54:39:c1:10:06: e0:1d:5e:99:0a:58:19:16:c0:f4:83:68:f6:01:e6: ec:d4:6e:21:1c:8a:f6:7c:5e:29:c0:2f:86:91:46: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:96:42:14:64:27:2B:DC:42:92:91:43:C7:34:45:52:86:DE:50 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d1:f3:fd:c9:11:de:dd:de:40:48:a2:1a:14:b8:ab:db:f0: 15:9a:26:aa:64:1c:63:c0:0f:42:0b:ca:df:a0:bf:dd:8b:e2: 72:92:35:3a:a8:dd:48:c9:1d:93:14:a2:74:6d:cd:83:14:97: 52:41:f7:23:a9:f0:b1:af:95:e7:24:65:60:f1:a7:44:33:61: 1e:4f:27:3a:91:d7:4d:7a:fc:d6:02:a9:ed:b5:19:c4:f1:17: fa:cd:0d:07:a6:ea:45:e1:c3:12:eb:74:c2:1b:f3:77:df:5f: a4:6b:a4:23:39:c5:52:8a:cc:eb:aa:cc:d5:a8:ab:c7:fc:66: 35:eb:3e:0b:0b:c7:4e:5c:66:48:5d:8a:8c:28:7a:9f:78:8f: 52:6f:37:3f:8e:23:ec:1b:44:48:93:f6:77:b7:8e:bd:5e:d6: 37:6c:ff:f4:28:c9:66:15:fe:89:5d:a6:12:39:7f:d7:d6:1f: 14:c2:db:69:90:17:6a:71:93:7a:3b:44:90:ff:d1:2c:6c:a2: 98:bf:85:7d:75:17:fe:43:11:82:fb:4c:96:11:c5:b5:23:fb: 95:1e:b2:17:6d:be:51:ac:c3:06:0c:fc:38:0e:7c:ff:d0:14: e5:56:60:4d:cf:15:9d:11:76:58:e2:e4:90:0f:9b:10:58:50: 1f:bf:13:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxtO2vrXPYiAIMjVVCUHaKd72PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA1MDkxNzU1MzlaFw0yNTA1MTMwNDE5MzlaMDMxMTAvBgNV BAMTKDA0RUM5NjQyMTQ2NDI3MkJEQzQyOTI5MTQzQzczNDQ1NTI4NkRFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv4rUrN2vXS5RUVtPI4ytCFkPP whHt1zWNtXJuMheUnZwCvJ4oKMAvyGeYL8dibkguniT1lsCRWffhkpfGzNgS2asZ j9KZ9Yepau5mxeCZNkCGW+j4Jgma1PVby0mFZfyip7hTLxbORV56Ii1EvsYoPYsz GQxnBx+5ZQEIG/Foy1K6IrxYUy9/syLx0kPt1sTkg4fB27T9N0sAMnXz2i3R+E4o O76uavlAW+bSTAXFPDNxAcGYh3p7LKJjMSNJiM8ErhCy+OSGNzGOUmjjdnPph5be 8cntLU4ptrNUOcEQBuAdXpkKWBkWwPSDaPYB5uzUbiEcivZ8XinAL4aRRrClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBOyWQhRkJyvcQpKRQ8c0RVKG3lAwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzR8/3JEd7d3kBIohoUuKvb8BWaJqpkHGPA D0ILyt+gv92L4nKSNTqo3UjJHZMUonRtzYMUl1JB9yOp8LGvleckZWDxp0QzYR5P JzqR1016/NYCqe21GcTxF/rNDQem6kXhwxLrdMIb83ffX6RrpCM5xVKKzOuqzNWo q8f8ZjXrPgsLx05cZkhdiowoep94j1JvNz+OI+wbREiT9ne3jr1e1jds//QoyWYV /oldphI5f9fWHxTC22mQF2pxk3o7RJD/0Sxsopi/hX11F/5DEYL7TJYRxbUj+5Ue shdtvlGswwYM/DgOfP/QFOVWYE3PFZ0Rdlji5JAPmxBYUB+/E/I= -----END CERTIFICATE-----Generated at Sun May 11 14:11:20 2025 by rpki-client