$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: LzuGUCkii8u5z1iYWUbLi/6xRtq1zn4FY1mEPWL2TR8= Subject key identifier: 82:FA:AC:9B:B7:65:69:8B:C2:43:0D:0B:97:C6:40:E4:CA:F9:95:4B Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 7D050B07E1CDC46F002AB18B3A4E35EE68FD5110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 035A Signing time: Sun 20 Jul 2025 12:00:39 +0000 Manifest this update: Sun 20 Jul 2025 11:55:39 +0000 Manifest next update: Wed 23 Jul 2025 14:33:39 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: th3jOhOYB7kCf1zO+++1xpfXmYalHiVnLO89XvFu4pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:05:0b:07:e1:cd:c4:6f:00:2a:b1:8b:3a:4e:35:ee:68:fd:51:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Jul 20 11:55:39 2025 GMT Not After : Jul 23 14:33:39 2025 GMT Subject: CN=82FAAC9BB765698BC2430D0B97C640E4CAF9954B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:02:01:26:ed:a3:bc:8b:e7:85:03:06:cc: 93:26:3c:b2:70:e6:cf:38:18:78:50:06:77:3d:35: f9:3c:d3:f0:32:75:4f:b3:0a:3c:24:75:cf:42:63: 56:25:1a:5d:c0:7a:c8:bb:51:03:6c:ac:28:1e:ff: e5:62:54:77:8f:fb:82:13:27:4a:5f:ea:f2:54:e0: 2b:c6:04:83:aa:78:48:8a:8c:95:ed:1f:1d:7c:bf: ec:bf:24:8a:8a:b7:8a:c9:8a:f3:24:ad:91:76:d3: 2f:7d:d5:06:fd:47:ae:0c:43:b3:6d:9b:73:cf:35: 87:4f:59:ee:5d:e3:50:58:be:1f:28:76:20:ca:cb: d3:57:b5:6f:e4:1b:37:c3:97:3c:30:6d:38:52:60: 37:15:46:d8:7c:20:ab:63:4f:e7:88:c9:93:73:ef: 1d:83:1c:52:9c:8f:3b:17:f5:ae:b8:88:0a:f2:70: a4:9d:ff:8a:9c:44:54:7e:17:eb:1e:75:cb:d0:91: ea:20:51:ea:74:33:ef:4a:e7:5d:30:31:6e:6e:57: 21:54:17:54:a6:bc:a6:65:ca:9f:43:b0:51:fb:c2: 56:9a:a8:d8:74:c8:72:f2:a9:74:47:42:f4:48:da: 15:51:e1:65:12:91:80:d9:b8:1a:80:c8:5e:d3:a4: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:AC:9B:B7:65:69:8B:C2:43:0D:0B:97:C6:40:E4:CA:F9:95:4B X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:cc:dd:b5:43:b4:b9:69:77:5d:08:4b:7c:5f:c9:fb:98: 65:9d:ed:a8:cb:10:ff:94:17:42:95:21:3d:c4:23:d0:e9:9f: 24:7f:48:82:ba:7d:0a:2b:05:14:3b:60:82:e1:3f:b0:26:1b: cc:e8:1c:85:81:f8:70:dd:3e:ba:e9:d8:ef:6f:a3:39:e1:8c: fa:c1:17:2d:52:21:32:8e:6e:8f:62:08:aa:2b:30:20:fa:b3: 29:24:64:79:e8:c1:d4:28:0d:8f:c9:9e:dd:07:53:3f:42:64: 95:a7:81:a6:38:13:70:27:5d:43:10:1a:78:cb:98:36:85:91: 4e:0b:73:fa:b2:1f:86:51:b4:87:08:ff:c3:7b:02:60:0c:df: fe:d4:8b:7b:4c:db:0f:21:69:87:f4:2f:05:5e:8f:17:b0:30: d4:df:72:cc:2e:fb:2d:df:61:9f:5e:09:fb:dc:6e:4b:98:d4: ab:be:91:95:0c:a6:55:df:1c:f6:c8:b5:41:c0:47:fc:62:4b: 78:2a:01:c6:05:eb:f2:3b:fc:90:27:fc:0f:c6:b7:92:cb:9e: d1:f7:83:8d:a2:9f:ad:2e:57:6a:d3:06:3d:11:79:dc:00:d8: 3e:24:cd:50:31:b5:29:57:ad:db:c6:fa:0c:60:16:ac:1a:27: 87:3c:64:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQULB+HNxG8AKrGLOk417mj9URAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA3MjAxMTU1MzlaFw0yNTA3MjMxNDMzMzlaMDMxMTAvBgNV BAMTKDgyRkFBQzlCQjc2NTY5OEJDMjQzMEQwQjk3QzY0MEU0Q0FGOTk1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTgIBJu2jvIvnhQMGzJMmPLJw 5s84GHhQBnc9Nfk80/AydU+zCjwkdc9CY1YlGl3Aesi7UQNsrCge/+ViVHeP+4IT J0pf6vJU4CvGBIOqeEiKjJXtHx18v+y/JIqKt4rJivMkrZF20y991Qb9R64MQ7Nt m3PPNYdPWe5d41BYvh8odiDKy9NXtW/kGzfDlzwwbThSYDcVRth8IKtjT+eIyZNz 7x2DHFKcjzsX9a64iArycKSd/4qcRFR+F+sedcvQkeogUep0M+9K510wMW5uVyFU F1SmvKZlyp9DsFH7wlaaqNh0yHLyqXRHQvRI2hVR4WUSkYDZuBqAyF7TpA+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvqsm7dlaYvCQw0Ll8ZA5Mr5lUswHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+jzN21Q7S5aXddCEt8X8n7mGWd7ajLEP+U F0KVIT3EI9DpnyR/SIK6fQorBRQ7YILhP7AmG8zoHIWB+HDdPrrp2O9voznhjPrB Fy1SITKObo9iCKorMCD6sykkZHnowdQoDY/Jnt0HUz9CZJWngaY4E3AnXUMQGnjL mDaFkU4Lc/qyH4ZRtIcI/8N7AmAM3/7Ui3tM2w8haYf0LwVejxewMNTfcswu+y3f YZ9eCfvcbkuY1Ku+kZUMplXfHPbItUHAR/xiS3gqAcYF6/I7/JAn/A/Gt5LLntH3 g42in60uV2rTBj0RedwA2D4kzVAxtSlXrdvG+gxgFqwaJ4c8ZBU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:27 2025 by rpki-client