$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: Y1CQdaqEcp+7H0CCxnVqYD4VOg9FI5A5STVWHulKdtA= Subject key identifier: 17:9B:A6:76:F6:48:F9:DF:D3:1E:AD:99:BD:21:B0:1A:62:83:FA:22 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 11F47B4D356C23955A53D19EB9F8C19AB362C13C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0346 Signing time: Thu 05 Jun 2025 16:30:40 +0000 Manifest this update: Thu 05 Jun 2025 16:25:40 +0000 Manifest next update: Mon 09 Jun 2025 03:51:40 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: WBm7oAw/ixFXC0VpK8KH7GCYxUkF+1WqMtqPZ2dY9/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f4:7b:4d:35:6c:23:95:5a:53:d1:9e:b9:f8:c1:9a:b3:62:c1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Jun 5 16:25:40 2025 GMT Not After : Jun 9 03:51:40 2025 GMT Subject: CN=179BA676F648F9DFD31EAD99BD21B01A6283FA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:22:e5:a2:32:2f:2f:51:d9:ba:66:5c:40: 35:38:df:18:99:9c:f7:56:47:92:72:be:b2:cf:6b: d2:8b:de:ab:e4:e7:64:d9:1b:64:79:0b:dd:9a:90: 57:70:07:66:58:36:28:a5:ef:81:f7:59:ea:15:3e: ad:a9:5c:fa:98:f8:1c:12:72:aa:63:56:9f:26:89: b2:97:87:b3:ee:3c:45:3d:5b:3e:74:74:c5:5f:9b: b3:28:2f:fd:d1:1a:65:04:56:82:4c:c1:bc:d5:c6: a8:5e:1f:61:52:83:1e:d4:15:02:18:81:a2:41:75: f9:4d:ff:32:94:46:7b:63:95:5b:98:0f:95:9c:ec: d3:4c:30:53:42:fc:a3:f8:41:be:99:ab:e5:3e:2e: 1a:d2:6f:95:66:ef:63:bf:7e:43:d6:5b:84:73:94: d7:af:02:70:af:37:d0:f9:08:aa:3b:94:23:6c:d4: e2:59:4a:fd:06:ed:c2:21:f1:80:d9:67:8c:2a:1b: dc:f0:76:82:19:5a:e6:89:f5:15:00:e9:be:25:b0: 1b:b8:37:f6:6f:6f:94:26:81:95:f6:cc:23:e1:12: 06:0f:4a:5a:5f:27:d5:8c:62:97:7d:89:10:c2:b5: 53:4a:5f:26:80:c8:76:87:70:e4:19:2c:f6:4d:0b: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9B:A6:76:F6:48:F9:DF:D3:1E:AD:99:BD:21:B0:1A:62:83:FA:22 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:77:f6:42:40:48:dd:bb:d4:93:d7:bd:a9:84:d9:26:c6:19: 2d:ec:06:3e:9c:96:44:05:d1:59:bb:30:de:e3:bc:21:82:c5: a9:f3:84:4e:1a:d1:a3:af:58:6b:37:34:f7:a2:4b:6e:5f:44: 89:2d:4f:38:29:e4:0e:b5:a1:cd:09:15:dc:42:80:2d:5f:98: 5e:b6:46:6b:67:b3:7f:5b:87:6d:be:39:52:01:27:ea:82:ca: 2a:07:9f:ec:a5:af:50:f1:c7:47:25:e8:74:0e:99:ce:73:0f: 44:53:42:41:af:27:5c:d5:72:a7:4b:3a:f8:ea:44:3a:eb:4e: 02:4f:4a:c0:a7:45:2a:6f:0b:01:03:11:f1:ec:b6:b1:c2:51: 0f:cb:b2:c3:0d:64:17:0c:97:6b:c5:b2:a7:2d:a5:49:50:a7: c5:f1:43:a9:ac:bd:8b:53:24:23:7d:91:f6:3d:c2:2b:3d:ad: 8b:72:6d:89:6b:64:ef:8f:7f:0d:dc:23:6b:03:a0:e9:60:02: e7:1a:38:d0:0a:23:b5:52:e7:1a:fc:5e:a2:73:e7:53:09:00: fc:e2:22:0c:e8:5b:fa:bd:a7:57:6a:cb:a9:33:dd:2f:38:ed: d5:8d:bc:ff:86:2c:ec:e8:4a:2b:ad:74:83:46:c9:71:45:e8: 6c:98:d6:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfR7TTVsI5VaU9GeufjBmrNiwTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA2MDUxNjI1NDBaFw0yNTA2MDkwMzUxNDBaMDMxMTAvBgNV BAMTKDE3OUJBNjc2RjY0OEY5REZEMzFFQUQ5OUJEMjFCMDFBNjI4M0ZBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzyLlojIvL1HZumZcQDU43xiZ nPdWR5JyvrLPa9KL3qvk52TZG2R5C92akFdwB2ZYNiil74H3WeoVPq2pXPqY+BwS cqpjVp8mibKXh7PuPEU9Wz50dMVfm7MoL/3RGmUEVoJMwbzVxqheH2FSgx7UFQIY gaJBdflN/zKURntjlVuYD5Wc7NNMMFNC/KP4Qb6Zq+U+LhrSb5Vm72O/fkPWW4Rz lNevAnCvN9D5CKo7lCNs1OJZSv0G7cIh8YDZZ4wqG9zwdoIZWuaJ9RUA6b4lsBu4 N/Zvb5QmgZX2zCPhEgYPSlpfJ9WMYpd9iRDCtVNKXyaAyHaHcOQZLPZNC5LTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5umdvZI+d/THq2ZvSGwGmKD+iIwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB39kJASN271JPXvamE2SbGGS3sBj6clkQF 0Vm7MN7jvCGCxanzhE4a0aOvWGs3NPeiS25fRIktTzgp5A61oc0JFdxCgC1fmF62 Rmtns39bh22+OVIBJ+qCyioHn+ylr1Dxx0cl6HQOmc5zD0RTQkGvJ1zVcqdLOvjq RDrrTgJPSsCnRSpvCwEDEfHstrHCUQ/LssMNZBcMl2vFsqctpUlQp8XxQ6msvYtT JCN9kfY9wis9rYtybYlrZO+Pfw3cI2sDoOlgAucaONAKI7VS5xr8XqJz51MJAPzi IgzoW/q9p1dqy6kz3S847dWNvP+GLOzoSiutdINGyXFF6GyY1uk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:02 2025 by rpki-client