$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: 0yai2As+yANTolohfxt03yP30oyMz3mZzAyz/9Uy6C0= Subject key identifier: 23:F8:90:63:7A:35:10:1F:44:A6:3F:10:79:6F:45:81:18:E7:46:1C Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 6367C88C1031CD7FD0B8F68316612F43AB8E1F6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 03BC Signing time: Fri 27 Feb 2026 18:00:45 +0000 Manifest this update: Fri 27 Feb 2026 17:55:45 +0000 Manifest next update: Tue 03 Mar 2026 03:04:45 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: eT9EAhUU8CvsLF4jyc7TbkiNJ+JCGP8RMn1QFmU6NLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:67:c8:8c:10:31:cd:7f:d0:b8:f6:83:16:61:2f:43:ab:8e:1f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Feb 27 17:55:45 2026 GMT Not After : Mar 3 03:04:45 2026 GMT Subject: CN=23F890637A35101F44A63F10796F458118E7461C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:75:71:7b:5c:bb:1a:71:74:05:af:43:dc: 82:f1:d3:37:74:21:7a:62:cf:bd:9c:c0:64:75:59: a9:5c:a1:af:89:51:ef:52:23:ea:90:06:b1:b2:4f: 23:ed:70:9d:fe:60:db:09:91:0c:fe:53:fc:8d:21: 3f:6f:e2:ab:17:3a:b4:97:35:76:97:5b:21:4e:f8: 94:58:21:85:a0:62:5c:cd:3e:1b:4a:f0:04:ac:31: bb:fd:f4:77:3e:59:17:f3:2e:9d:73:61:31:09:71: 36:47:46:31:ab:65:2b:21:94:9b:6f:67:91:54:64: 9d:72:ba:4d:eb:20:cb:f7:43:d4:1f:84:db:9d:32: c8:82:81:3d:2a:96:53:ad:df:bf:8c:f3:50:a4:b4: 9e:93:7e:79:ff:5d:14:81:5b:fc:39:39:fb:a9:22: c2:42:4c:25:1a:bd:ca:39:97:ae:1c:c9:19:c3:7f: aa:a0:bd:05:87:b9:16:bf:09:1b:c6:0e:cc:b4:c3: b2:1c:b2:85:55:a8:49:97:e7:3f:f3:7e:fc:f4:1f: 61:d5:fd:49:cf:08:52:b0:1f:15:4a:a6:96:70:85: 90:27:14:3f:21:cb:e4:1d:88:06:08:3a:a2:c4:13: 94:89:71:6f:f7:29:47:d4:2b:f0:d5:23:ab:a5:54: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F8:90:63:7A:35:10:1F:44:A6:3F:10:79:6F:45:81:18:E7:46:1C X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c8:df:6f:b3:30:7b:b7:76:9f:5e:55:ac:61:8e:b6:92:97: cf:c8:fe:f0:d4:c0:8a:9f:75:40:bc:d1:11:7c:f1:09:a3:fc: 88:d2:d7:2a:03:9e:b0:2d:71:9d:06:ce:c6:5a:40:21:d4:8f: ac:2d:6c:4f:11:f0:f8:93:71:aa:55:c0:9a:74:f8:25:7f:53: 7a:9d:16:61:fd:4d:5e:29:c9:f7:91:66:7e:f9:ca:a0:90:ba: 16:4b:ed:9a:49:cb:f9:fe:91:f4:2e:b1:54:f2:0c:71:25:4b: 4a:89:0d:96:58:3a:c5:de:cd:2f:04:ce:4b:df:57:ea:ca:9e: 0c:d3:a0:b7:96:7f:75:22:68:f1:02:27:15:6e:32:1a:b8:ad: 25:5d:9c:59:51:0b:e1:ac:83:03:f5:0f:c1:0a:ea:80:84:8d: bc:5b:fa:5c:9c:ff:4a:3b:fa:69:96:6b:90:97:de:f4:75:e0: 7e:27:7f:1c:5b:01:18:c7:eb:a9:e9:0e:9c:9c:30:60:c9:b4: 7f:7e:80:2d:49:0b:98:7b:7d:3c:46:06:f9:86:8c:a3:20:45: 1b:27:a2:a3:0e:db:22:7b:c8:85:36:83:0f:f7:ce:ee:83:2a: b9:e7:22:98:70:0a:af:07:ff:55:c5:84:b9:4e:38:14:26:5b: 4b:f8:13:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2fIjBAxzX/QuPaDFmEvQ6uOH2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNjAyMjcxNzU1NDVaFw0yNjAzMDMwMzA0NDVaMDMxMTAvBgNV BAMTKDIzRjg5MDYzN0EzNTEwMUY0NEE2M0YxMDc5NkY0NTgxMThFNzQ2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mXVxe1y7GnF0Ba9D3ILx0zd0 IXpiz72cwGR1Walcoa+JUe9SI+qQBrGyTyPtcJ3+YNsJkQz+U/yNIT9v4qsXOrSX NXaXWyFO+JRYIYWgYlzNPhtK8ASsMbv99Hc+WRfzLp1zYTEJcTZHRjGrZSshlJtv Z5FUZJ1yuk3rIMv3Q9QfhNudMsiCgT0qllOt37+M81CktJ6Tfnn/XRSBW/w5Ofup IsJCTCUavco5l64cyRnDf6qgvQWHuRa/CRvGDsy0w7IcsoVVqEmX5z/zfvz0H2HV /UnPCFKwHxVKppZwhZAnFD8hy+QdiAYIOqLEE5SJcW/3KUfUK/DVI6ulVNHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/iQY3o1EB9Epj8QeW9FgRjnRhwwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvI32+zMHu3dp9eVaxhjraSl8/I/vDUwIqf dUC80RF88Qmj/IjS1yoDnrAtcZ0GzsZaQCHUj6wtbE8R8PiTcapVwJp0+CV/U3qd FmH9TV4pyfeRZn75yqCQuhZL7ZpJy/n+kfQusVTyDHElS0qJDZZYOsXezS8Ezkvf V+rKngzToLeWf3UiaPECJxVuMhq4rSVdnFlRC+GsgwP1D8EK6oCEjbxb+lyc/0o7 +mmWa5CX3vR14H4nfxxbARjH66npDpycMGDJtH9+gC1JC5h7fTxGBvmGjKMgRRsn oqMO2yJ7yIU2gw/3zu6DKrnnIphwCq8H/1XFhLlOOBQmW0v4E6c= -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:57 2026 by rpki-client