$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: sDEGJjCol19orNtprUU+ifNFszy1zfHbbTF+zWI5GVo= Subject key identifier: A9:15:8D:4E:CF:C1:A6:0F:4D:70:08:C5:C4:A8:F7:30:12:8E:3F:82 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 5F6F2CD9ACB5E52D4591FEA3048C7152D161E463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0335 Signing time: Mon 28 Apr 2025 21:30:41 +0000 Manifest this update: Mon 28 Apr 2025 21:25:41 +0000 Manifest next update: Thu 01 May 2025 22:18:41 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: MoiGST5sm0pX2xRcttc32Ws88xV0IO2CPQANgwgn1kY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6f:2c:d9:ac:b5:e5:2d:45:91:fe:a3:04:8c:71:52:d1:61:e4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Apr 28 21:25:41 2025 GMT Not After : May 1 22:18:41 2025 GMT Subject: CN=A9158D4ECFC1A60F4D7008C5C4A8F730128E3F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:b7:2c:e6:a6:54:84:e4:f1:9f:90:13:da: a7:42:2b:86:bb:56:9e:52:f8:0e:4a:37:3b:8d:3a: 97:9e:44:1d:a4:e1:94:90:28:e8:5a:bb:92:49:1f: 2d:2d:75:c5:72:64:60:b5:49:62:7e:b6:38:f4:a4: 25:97:ff:08:61:5f:6b:cd:31:bf:6a:98:d3:91:e8: a4:f9:22:f1:2d:70:c7:71:f5:ac:5d:2f:ac:93:12: 3d:0a:47:7d:64:5a:5e:a1:38:f4:9a:f7:e1:80:23: 7b:bd:7f:4b:20:47:89:d6:1d:24:25:f8:b6:a3:b4: 24:c9:80:52:47:52:d4:7a:e4:f6:67:41:f7:b1:71: 85:20:56:99:89:21:7d:bb:ba:f8:89:c2:53:88:41: a5:6d:ab:f8:7a:a1:1d:b2:1b:0e:a3:dc:37:1d:41: a2:8d:96:b5:1c:90:9a:5b:a7:9c:5f:c9:83:fb:89: 42:5f:34:b8:e5:7a:d2:ad:31:70:26:60:55:85:de: 87:40:11:8e:f7:e5:93:a0:9e:ad:3b:f8:87:5b:0d: 85:3b:11:35:f4:cb:04:aa:39:e6:47:11:47:2a:66: 4a:64:00:37:e5:2f:27:9a:bd:96:9e:6b:05:67:25: bb:1b:ef:97:7d:08:5b:27:6e:25:9d:1d:93:f3:5c: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:8D:4E:CF:C1:A6:0F:4D:70:08:C5:C4:A8:F7:30:12:8E:3F:82 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6a:af:69:58:d1:56:70:2d:90:d1:83:3d:1b:ae:cc:83:31: d6:ed:77:ed:00:8e:58:6d:82:18:17:db:d7:45:ae:07:97:e8: ad:bf:32:b9:2a:37:9f:e6:b6:5b:c3:c6:85:97:a9:ae:42:7b: d8:02:c6:8b:9c:e2:5d:70:a9:84:f6:83:a6:e4:74:61:40:d9: 00:fc:98:2d:79:c1:7f:41:74:29:56:92:44:16:8b:4a:6d:ec: 12:1d:12:79:3b:2b:c5:8f:da:0f:56:41:26:95:5c:a7:6f:95: d3:75:a3:c7:52:dc:78:d4:a1:04:86:2e:e7:1d:b1:1a:20:02: e2:1c:e4:17:73:9e:8c:cd:65:78:f4:98:97:fb:65:21:13:bf: 4f:2c:cf:ab:0f:40:25:84:e8:85:c7:78:5d:e3:00:4d:58:5a: 17:b2:24:f8:db:11:ea:db:c7:86:cb:0c:93:49:1e:4f:70:9e: ae:6a:97:d6:5d:15:57:99:af:c7:d1:cf:3a:db:95:a3:f7:4e: 16:5f:de:e3:bd:51:1f:09:83:24:e7:61:57:d1:42:1b:84:82: 87:c2:ac:d0:08:03:47:27:69:73:1d:06:28:f5:3b:f8:b1:4a: 79:16:27:a3:0a:72:50:89:77:85:8f:b3:be:9e:8d:49:69:68: 0c:ba:6b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX28s2ay15S1Fkf6jBIxxUtFh5GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA0MjgyMTI1NDFaFw0yNTA1MDEyMjE4NDFaMDMxMTAvBgNV BAMTKEE5MTU4RDRFQ0ZDMUE2MEY0RDcwMDhDNUM0QThGNzMwMTI4RTNGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJbcs5qZUhOTxn5AT2qdCK4a7 Vp5S+A5KNzuNOpeeRB2k4ZSQKOhau5JJHy0tdcVyZGC1SWJ+tjj0pCWX/whhX2vN Mb9qmNOR6KT5IvEtcMdx9axdL6yTEj0KR31kWl6hOPSa9+GAI3u9f0sgR4nWHSQl +LajtCTJgFJHUtR65PZnQfexcYUgVpmJIX27uviJwlOIQaVtq/h6oR2yGw6j3Dcd QaKNlrUckJpbp5xfyYP7iUJfNLjletKtMXAmYFWF3odAEY735ZOgnq07+IdbDYU7 ETX0ywSqOeZHEUcqZkpkADflLyeavZaeawVnJbsb75d9CFsnbiWdHZPzXFhjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRWNTs/Bpg9NcAjFxKj3MBKOP4IwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5qr2lY0VZwLZDRgz0brsyDMdbtd+0Ajlht ghgX29dFrgeX6K2/MrkqN5/mtlvDxoWXqa5Ce9gCxouc4l1wqYT2g6bkdGFA2QD8 mC15wX9BdClWkkQWi0pt7BIdEnk7K8WP2g9WQSaVXKdvldN1o8dS3HjUoQSGLucd sRogAuIc5BdznozNZXj0mJf7ZSETv08sz6sPQCWE6IXHeF3jAE1YWheyJPjbEerb x4bLDJNJHk9wnq5ql9ZdFVeZr8fRzzrblaP3ThZf3uO9UR8JgyTnYVfRQhuEgofC rNAIA0cnaXMdBij1O/ixSnkWJ6MKclCJd4WPs76ejUlpaAy6a+8= -----END CERTIFICATE-----Generated at Wed Apr 30 03:29:31 2025 by rpki-client