$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: xknRd6L/VG2yXHKlBH4LvIRxXN1kVh642KP00fbCJWQ= Subject key identifier: 8B:00:C6:86:3B:D5:B0:87:51:C4:A1:65:C4:29:5D:59:77:AA:81:4A Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 5EB11B43548159CC931F03A2EB9B74A018E3891B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 0512 Signing time: Wed 03 Sep 2025 19:11:37 +0000 Manifest this update: Wed 03 Sep 2025 19:06:37 +0000 Manifest next update: Sun 07 Sep 2025 05:13:37 +0000 Files and hashes: 1: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: GLcDNEX0tgavndI+MfQtQe+3mTYPu4xrloHdU6jT+Vw=) 2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=) 3: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: psu7tqJATuczN+7EbHC4M1++mK7y/kzYTcOfcv+hO+4=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: SkrAvX0pF+pQyxeTzXJZ/61PFAWYMW8+rbO8WcqeNoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b1:1b:43:54:81:59:cc:93:1f:03:a2:eb:9b:74:a0:18:e3:89:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Sep 3 19:06:37 2025 GMT Not After : Sep 7 05:13:37 2025 GMT Subject: CN=8B00C6863BD5B08751C4A165C4295D5977AA814A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:51:70:b2:7f:9d:32:37:b1:68:70:e2:72: bb:e5:da:8a:f1:0b:cf:f4:fb:d6:67:b0:4a:78:06: 6f:9b:ba:b1:36:f8:e3:9f:53:f1:93:4b:fb:40:a6: b4:3c:a7:65:b1:78:00:c2:ae:06:9b:dc:7a:fd:45: 66:14:a0:53:1d:a6:2f:a2:23:a8:60:77:88:f8:d0: e2:86:21:23:fa:6f:48:8b:0a:6f:94:c4:8e:97:a6: 48:98:74:30:d6:12:d3:ae:4b:8f:a3:19:db:47:a0: e5:6b:f1:3e:d7:18:21:d1:75:90:0e:85:10:70:68: 90:69:7a:37:e2:27:c9:8e:da:7a:ba:ce:22:9f:1d: 63:24:03:f6:c2:9f:d3:d2:ea:16:f2:f6:ce:12:67: 12:fe:50:ef:f7:9d:9e:a1:a2:e3:7f:54:a5:9c:4f: 8f:50:13:ad:61:50:97:d6:55:b3:2f:7a:ac:0b:86: 09:5f:1a:c4:09:dd:45:fc:7d:30:c4:32:0c:72:2b: 7b:b9:dc:50:68:1d:21:aa:cb:7a:93:fe:45:e7:29: 74:c1:8a:f6:5c:9c:1c:c4:45:6e:e7:71:af:66:60: 5e:d1:e5:a8:5c:db:de:94:87:ed:a7:56:34:8a:66: 98:92:e8:27:6a:81:e0:38:6b:75:84:2d:5c:2f:3d: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:00:C6:86:3B:D5:B0:87:51:C4:A1:65:C4:29:5D:59:77:AA:81:4A X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d8:5f:b9:db:a6:f2:f7:e0:dd:18:1b:fb:10:50:8c:04:11: f7:fc:9c:20:ca:99:a5:48:95:ee:30:5c:d6:13:cc:3e:d1:bc: 42:f1:16:82:dd:aa:bc:7d:68:21:4c:f2:cc:e2:5c:fd:df:0b: 57:0c:f6:e9:98:fa:74:1c:4f:9d:68:8f:3c:69:8e:a0:3f:d3: 68:9d:f6:3b:60:fd:a7:5c:92:6e:43:2b:ff:b5:af:0e:fc:d6: 88:29:49:9c:1e:e1:3e:5f:55:af:b2:4a:8f:0c:c1:ec:4e:1e: 3f:03:03:4b:ba:ad:2d:5c:22:ec:18:cc:87:73:e1:14:8f:e8: 11:a1:6f:28:50:cc:e7:3b:26:28:b7:4f:5e:c0:7c:c3:ef:7b: 4d:60:15:76:41:2d:f8:42:16:a9:92:6d:1f:dc:88:28:4b:98: 9c:fb:0d:c8:d9:e9:e6:f5:41:27:29:77:10:92:0d:da:bf:1a: 9d:ec:4d:eb:70:9d:ae:f6:86:57:b6:f1:ad:c8:9d:dc:29:92: dc:27:87:e0:c9:5f:29:12:99:8d:31:28:1f:6d:ed:72:13:f2: 83:07:be:11:22:30:b5:f6:97:e7:41:6d:ef:db:e1:4d:30:78: 0f:4c:a8:4e:b5:18:c9:70:99:28:76:82:69:a7:88:25:b7:6d: ad:bf:8d:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrEbQ1SBWcyTHwOi65t0oBjjiRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTA5MDMxOTA2MzdaFw0yNTA5MDcwNTEzMzdaMDMxMTAvBgNV BAMTKDhCMDBDNjg2M0JENUIwODc1MUM0QTE2NUM0Mjk1RDU5NzdBQTgxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4FFwsn+dMjexaHDicrvl2orx C8/0+9ZnsEp4Bm+burE2+OOfU/GTS/tAprQ8p2WxeADCrgab3Hr9RWYUoFMdpi+i I6hgd4j40OKGISP6b0iLCm+UxI6XpkiYdDDWEtOuS4+jGdtHoOVr8T7XGCHRdZAO hRBwaJBpejfiJ8mO2nq6ziKfHWMkA/bCn9PS6hby9s4SZxL+UO/3nZ6houN/VKWc T49QE61hUJfWVbMveqwLhglfGsQJ3UX8fTDEMgxyK3u53FBoHSGqy3qT/kXnKXTB ivZcnBzERW7nca9mYF7R5ahc296Uh+2nVjSKZpiS6CdqgeA4a3WELVwvPS/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwDGhjvVsIdRxKFlxCldWXeqgUowHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnYX7nbpvL34N0YG/sQUIwEEff8nCDKmaVI le4wXNYTzD7RvELxFoLdqrx9aCFM8sziXP3fC1cM9umY+nQcT51ojzxpjqA/02id 9jtg/adckm5DK/+1rw781ogpSZwe4T5fVa+ySo8MwexOHj8DA0u6rS1cIuwYzIdz 4RSP6BGhbyhQzOc7Jii3T17AfMPve01gFXZBLfhCFqmSbR/ciChLmJz7DcjZ6eb1 QScpdxCSDdq/Gp3sTetwna72hle28a3Indwpktwnh+DJXykSmY0xKB9t7XIT8oMH vhEiMLX2l+dBbe/b4U0weA9MqE61GMlwmSh2gmmniCW3ba2/jas= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client