$ rpki-client -vvf repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft File: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft (raw, json) Hash identifier: q6SVbSMf8/yl71ByZLsiqQHy4dq5QpkR25oojjA5JNM= Subject key identifier: 63:2C:8C:42:E0:9D:31:5A:96:E9:9B:63:F6:63:32:E1:59:39:9C:65 Authority key identifier: 50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A Certificate issuer: /CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Certificate serial: 4965EEA87FD47DAD6A1FA2FF8A29AF385410A7FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft Manifest number: 0507 Signing time: Sat 09 Aug 2025 14:01:36 +0000 Manifest this update: Sat 09 Aug 2025 13:56:36 +0000 Manifest next update: Tue 12 Aug 2025 16:46:36 +0000 Files and hashes: 1: 507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl (hash: 9DLY5klKwodFdgHm5ScFxt1GCDR+DG5yl3AMqUoOCNs=) 2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: Gana4QKhwHnw0VC/M1qNMIrQlt1jUUuSXlhGSBWKWAo=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: GLcDNEX0tgavndI+MfQtQe+3mTYPu4xrloHdU6jT+Vw=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: SkrAvX0pF+pQyxeTzXJZ/61PFAWYMW8+rbO8WcqeNoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 16:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:65:ee:a8:7f:d4:7d:ad:6a:1f:a2:ff:8a:29:af:38:54:10:a7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507DBCE0DE73C38C3EE975AE23FB7C0C0377011A Validity Not Before: Aug 9 13:56:36 2025 GMT Not After : Aug 12 16:46:36 2025 GMT Subject: CN=632C8C42E09D315A96E99B63F66332E159399C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:52:de:e0:84:7e:cb:92:0c:67:79:6f:c7: ed:b4:03:af:a1:da:9f:42:f8:1f:62:16:a3:9d:bf: f7:90:32:94:3d:95:9f:48:b7:32:89:db:5e:b2:8b: af:f1:b4:07:d7:dc:ad:79:e9:d4:07:1b:a3:dd:dc: 7d:9d:8a:fc:ff:86:fa:61:a5:e7:c1:3f:e1:01:51: 07:a4:8a:31:c6:f3:4e:17:ec:f8:dd:f0:5d:79:4a: 1e:e2:bd:f7:b0:88:40:a8:6b:8d:d3:ca:16:c2:ec: 0e:73:44:1e:6d:69:ac:4d:64:54:6b:57:0a:97:51: 3b:2b:60:ef:38:58:5d:6b:4e:68:ff:13:d9:86:2a: f7:46:20:13:8f:8b:b2:03:db:28:fc:89:6a:55:90: 9e:ce:53:e4:df:39:87:1e:04:1d:d7:17:04:ca:e0: e5:b2:e9:84:6e:a4:cc:39:06:07:73:2d:e3:9e:1f: bc:a5:72:11:0f:f0:00:bb:a1:2c:61:16:54:4c:dc: 06:54:c3:34:56:f9:7b:26:2a:0a:88:e6:59:c6:09: fe:ac:7e:9c:14:91:1a:bf:8a:03:aa:d2:53:fa:72: c0:9e:3c:53:cf:b3:bd:89:d1:90:44:95:2f:17:fb: 0a:80:4d:9a:80:41:43:8d:3a:55:4d:72:11:a6:f8: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2C:8C:42:E0:9D:31:5A:96:E9:9B:63:F6:63:32:E1:59:39:9C:65 X509v3 Authority Key Identifier: keyid:50:7D:BC:E0:DE:73:C3:8C:3E:E9:75:AE:23:FB:7C:0C:03:77:01:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/507DBCE0DE73C38C3EE975AE23FB7C0C0377011A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e0:c0:9b:74:64:85:da:d5:f8:4b:ef:f1:0a:0f:0f:89:bd: e8:59:72:3c:46:a0:37:6b:cc:72:4e:5a:14:91:38:67:8c:6c: d4:26:ab:58:de:86:9c:1f:a4:d4:72:ec:a0:40:09:9c:ef:aa: df:1d:51:51:cf:fe:07:c1:42:ec:65:f6:30:fb:b6:38:e8:3f: fd:06:4b:f2:f0:63:42:ad:cc:2e:52:04:b1:a0:d4:82:52:5b: af:42:c7:aa:e4:d9:23:f4:a3:c7:1b:6d:80:84:e5:0a:c7:5b: 92:6f:a6:c1:3a:2b:4d:f5:75:0e:50:85:11:55:d9:32:aa:49: e0:a5:a8:ec:2e:a7:ef:fb:7b:9e:00:3d:6b:93:03:7e:a0:3f: 9b:c5:e3:f6:dd:18:2c:a9:40:c2:74:2a:67:0b:99:7b:1e:3e: db:cd:12:16:18:4c:e9:00:07:48:9f:ce:6d:68:85:6f:ce:6d: 50:87:6a:b8:21:32:ef:82:53:60:75:bd:46:5b:f9:3a:04:6b: d1:98:68:b1:2a:14:2c:8a:ab:14:1e:2b:f3:a0:4f:b6:83:c3: 04:1f:64:21:a8:55:e0:7e:cc:42:c1:30:8f:64:59:39:59:ef: d7:98:b9:35:93:5c:c2:f1:df:e2:64:fd:c2:8f:f1:8a:21:74: 07:ed:64:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWXuqH/Ufa1qH6L/iimvOFQQp/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMw Mzc3MDExQTAeFw0yNTA4MDkxMzU2MzZaFw0yNTA4MTIxNjQ2MzZaMDMxMTAvBgNV BAMTKDYzMkM4QzQyRTA5RDMxNUE5NkU5OUI2M0Y2NjMzMkUxNTkzOTlDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85VLe4IR+y5IMZ3lvx+20A6+h 2p9C+B9iFqOdv/eQMpQ9lZ9ItzKJ216yi6/xtAfX3K156dQHG6Pd3H2divz/hvph pefBP+EBUQekijHG804X7Pjd8F15Sh7ivfewiECoa43TyhbC7A5zRB5taaxNZFRr VwqXUTsrYO84WF1rTmj/E9mGKvdGIBOPi7ID2yj8iWpVkJ7OU+TfOYceBB3XFwTK 4OWy6YRupMw5BgdzLeOeH7ylchEP8AC7oSxhFlRM3AZUwzRW+XsmKgqI5lnGCf6s fpwUkRq/igOq0lP6csCePFPPs72J0ZBElS8X+wqATZqAQUONOlVNchGm+LCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyyMQuCdMVqW6Ztj9mMy4Vk5nGUwHwYDVR0j BBgwFoAUUH284N5zw4w+6XWuI/t8DAN3ARowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWIwYTU5YS02MWJhLTQ2MmUtYTgyYS1hMjAyYjdmYjgwZjAvMC81MDdEQkNFMERF NzNDMzhDM0VFOTc1QUUyM0ZCN0MwQzAzNzcwMTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdDMEMwMzc3 MDExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvNTA3REJDRTBERTczQzM4QzNFRTk3NUFFMjNGQjdD MEMwMzc3MDExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjgwJt0ZIXa1fhL7/EKDw+JvehZcjxGoDdr zHJOWhSROGeMbNQmq1jehpwfpNRy7KBACZzvqt8dUVHP/gfBQuxl9jD7tjjoP/0G S/LwY0KtzC5SBLGg1IJSW69Cx6rk2SP0o8cbbYCE5QrHW5JvpsE6K031dQ5QhRFV 2TKqSeClqOwup+/7e54APWuTA36gP5vF4/bdGCypQMJ0KmcLmXsePtvNEhYYTOkA B0ifzm1ohW/ObVCHarghMu+CU2B1vUZb+ToEa9GYaLEqFCyKqxQeK/OgT7aDwwQf ZCGoVeB+zELBMI9kWTlZ79eYuTWTXMLx3+Jk/cKP8YohdAftZBE= -----END CERTIFICATE-----Generated at Mon Aug 11 07:24:52 2025 by rpki-client