$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: YbOCvfB4ciWZEEeX6bbGFYxXSJyr80p9oQFX8i9AFpE= Subject key identifier: 64:82:72:32:86:3F:F9:B8:C4:A6:B3:F8:3E:34:06:9F:64:66:2E:91 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 535B9925B25A50CE97837924FF9978F6A9D68123 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 04FE Signing time: Sun 20 Jul 2025 16:31:33 +0000 Manifest this update: Sun 20 Jul 2025 16:26:33 +0000 Manifest next update: Wed 23 Jul 2025 18:41:33 +0000 Files and hashes: 1: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: GLcDNEX0tgavndI+MfQtQe+3mTYPu4xrloHdU6jT+Vw=) 2: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: iOfnllGq9rnCdCbhd9YxV/t+DPAr+Jpm3gZ5xU0FvUM=) 3: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: SkrAvX0pF+pQyxeTzXJZ/61PFAWYMW8+rbO8WcqeNoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5b:99:25:b2:5a:50:ce:97:83:79:24:ff:99:78:f6:a9:d6:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Jul 20 16:26:33 2025 GMT Not After : Jul 23 18:41:33 2025 GMT Subject: CN=64827232863FF9B8C4A6B3F83E34069F64662E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:45:04:17:66:18:37:64:0e:ef:c7:0d:7d:02: 15:fb:cf:d9:68:ed:69:e2:35:6d:c3:61:8e:fc:4a: 0f:e6:19:28:99:03:cb:68:b2:78:28:c2:2c:96:86: 63:21:cb:23:05:1e:cb:aa:9e:e1:07:f6:dd:2f:1a: 11:bd:a6:2a:90:7d:43:bd:e5:2c:c3:46:db:bb:0a: 14:26:76:a1:05:75:37:c9:59:29:96:43:e7:fe:f6: e1:fe:c3:6f:26:fd:f6:f3:fd:63:f5:98:6a:42:68: 0c:7f:cd:9d:33:8a:e6:27:97:a1:30:ae:1a:1a:4c: 7c:ba:55:85:9e:2d:4b:b8:22:af:70:b9:de:f6:05: c9:6c:53:b4:07:a2:1e:31:a6:62:e5:15:f0:e2:cf: e9:a6:d3:28:01:2b:f8:37:22:d7:88:a0:1a:7c:dc: 0c:78:0a:74:8d:d0:c9:09:4b:e3:37:a4:7c:1e:55: 4b:cd:ea:30:31:0d:73:42:ff:5d:f3:ce:43:ef:e5: 63:f5:63:03:e8:1a:bf:6d:22:c9:4b:ad:e4:67:d8: dd:52:1c:17:4b:a5:89:f5:b9:e2:08:12:d5:72:e0: e2:42:8d:b6:77:06:52:f0:01:f8:80:b6:c2:ad:f0: 82:75:9e:e3:87:8d:fb:cd:6c:1f:03:93:62:cb:74: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:72:32:86:3F:F9:B8:C4:A6:B3:F8:3E:34:06:9F:64:66:2E:91 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:10:7f:a8:e5:74:ea:44:74:27:dd:54:6d:49:51:4b:f8:9d: 25:ac:2e:30:5a:b7:0b:6d:7b:fd:87:a5:dc:40:22:a0:04:ec: 04:28:5c:b5:68:bd:3f:1b:ad:ad:d1:f9:5b:7d:1b:81:bc:87: 69:c2:ae:ab:09:29:65:c0:db:c3:4c:72:fb:20:5a:18:bb:62: 60:c4:81:2e:72:71:d3:12:d2:59:92:af:5d:22:d8:6c:fc:e5: a5:fb:16:3f:a8:ae:0c:a1:4e:b5:76:1b:a5:53:24:0a:f8:54: 46:95:4f:19:ea:4c:24:8e:9b:36:78:bc:01:2d:28:31:22:51: ec:25:33:68:4a:c1:9d:fd:49:44:f0:96:75:e7:62:94:a9:dc: 2a:df:fd:ee:0c:54:80:0a:62:ae:78:fa:79:48:3f:01:06:7f: ad:4e:03:28:ed:b4:68:8e:bd:3f:bb:ea:6c:20:d1:ed:ce:29: 64:f6:3c:dd:0a:10:8f:f3:89:15:67:f4:af:c5:d1:59:1a:91: 9c:ab:6e:0a:fc:c9:dc:7f:c3:7f:9b:2e:50:31:5b:c1:6e:ef: 8e:06:68:29:ce:18:a9:e0:80:46:22:74:40:9d:81:50:db:52: 73:d2:d1:cc:9a:6a:80:41:a2:9f:07:22:14:f7:fd:11:d3:ae: 81:5b:38:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1uZJbJaUM6Xg3kk/5l49qnWgSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTA3MjAxNjI2MzNaFw0yNTA3MjMxODQxMzNaMDMxMTAvBgNV BAMTKDY0ODI3MjMyODYzRkY5QjhDNEE2QjNGODNFMzQwNjlGNjQ2NjJFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1RQQXZhg3ZA7vxw19AhX7z9lo 7WniNW3DYY78Sg/mGSiZA8tosngowiyWhmMhyyMFHsuqnuEH9t0vGhG9piqQfUO9 5SzDRtu7ChQmdqEFdTfJWSmWQ+f+9uH+w28m/fbz/WP1mGpCaAx/zZ0ziuYnl6Ew rhoaTHy6VYWeLUu4Iq9wud72BclsU7QHoh4xpmLlFfDiz+mm0ygBK/g3IteIoBp8 3Ax4CnSN0MkJS+M3pHweVUvN6jAxDXNC/13zzkPv5WP1YwPoGr9tIslLreRn2N1S HBdLpYn1ueIIEtVy4OJCjbZ3BlLwAfiAtsKt8IJ1nuOHjfvNbB8Dk2LLdInXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIJyMoY/+bjEprP4PjQGn2RmLpEwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIQf6jldOpEdCfdVG1JUUv4nSWsLjBatwtt e/2HpdxAIqAE7AQoXLVovT8bra3R+Vt9G4G8h2nCrqsJKWXA28NMcvsgWhi7YmDE gS5ycdMS0lmSr10i2Gz85aX7Fj+orgyhTrV2G6VTJAr4VEaVTxnqTCSOmzZ4vAEt KDEiUewlM2hKwZ39SUTwlnXnYpSp3Crf/e4MVIAKYq54+nlIPwEGf61OAyjttGiO vT+76mwg0e3OKWT2PN0KEI/ziRVn9K/F0VkakZyrbgr8ydx/w3+bLlAxW8Fu744G aCnOGKnggEYidECdgVDbUnPS0cyaaoBBop8HIhT3/RHTroFbOFQ= -----END CERTIFICATE-----Generated at Tue Jul 22 04:30:21 2025 by rpki-client