$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: Vns3gT6fNIlAeCdlI1GuWmI14H5McIx/iZRGIvt+QWo= Subject key identifier: 12:8F:42:78:A2:C8:C6:77:0F:EC:3B:8A:57:20:A2:EF:26:B2:65:88 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 42E6DBA9A0E426574F2A3CB58C9FB8F184A8EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 03D1 Signing time: Wed 15 Apr 2026 11:00:49 +0000 Manifest this update: Wed 15 Apr 2026 10:55:49 +0000 Manifest next update: Sat 18 Apr 2026 15:28:49 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: hs4DWt/r6k5I4Vz7oKelCb/hYfpAORn8x87UiMGF8nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e6:db:a9:a0:e4:26:57:4f:2a:3c:b5:8c:9f:b8:f1:84:a8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Apr 15 10:55:49 2026 GMT Not After : Apr 18 15:28:49 2026 GMT Subject: CN=128F4278A2C8C6770FEC3B8A5720A2EF26B26588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:42:9e:ea:77:16:e0:bb:81:5c:d5:d8:fb: fc:a4:67:7d:ec:d3:58:b6:e6:d6:6f:ec:4d:5a:ba: 92:56:e7:e4:b8:d0:52:13:d7:c9:b9:5f:5e:17:8e: 86:9f:4a:89:f3:74:42:fc:34:57:90:21:7d:fe:6e: 9d:16:9b:b4:c0:f1:88:e8:a5:37:dd:b3:c0:13:f4: 3b:97:bb:22:5e:0a:1f:d3:0e:a0:d5:ed:e2:5c:11: 60:77:2e:89:80:25:40:95:4a:16:86:12:eb:79:b3: dd:31:f8:39:4e:ae:fa:ea:cb:aa:93:da:0a:3b:90: 3b:49:5e:5c:68:16:4b:87:f1:36:b9:db:8f:36:9e: 8b:f9:02:68:bd:46:b6:31:c3:a5:ad:13:2e:4f:83: 4d:3b:4f:f0:f2:a8:f2:39:19:73:1e:b5:56:0c:99: b2:54:16:ef:41:99:db:9e:f8:05:b7:e3:65:0e:a9: 80:8d:84:77:35:d5:8c:d3:ff:e6:f4:85:27:ca:b3: 8c:fb:b9:d1:6a:6d:5a:34:67:f2:60:e0:63:55:32: 22:bd:ec:c6:14:82:16:a2:21:7e:17:85:76:4c:27: f9:e2:17:6f:44:b2:8b:0d:43:4b:8a:a0:10:89:b4: be:84:95:ac:ae:3d:84:1b:49:52:01:fc:8e:64:b6: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:42:78:A2:C8:C6:77:0F:EC:3B:8A:57:20:A2:EF:26:B2:65:88 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d1:29:71:6d:ab:09:de:e6:c0:79:28:3a:c8:cc:95:80:55: 57:c5:b7:81:8e:f4:5a:cf:82:81:a1:b8:8c:73:3e:2b:d3:cf: f2:97:0e:aa:36:93:54:2c:de:32:04:3c:2a:2b:68:6c:f5:95: b4:3a:9a:94:44:66:85:0a:fd:be:6a:eb:70:1f:fa:bf:d4:ad: 1c:14:44:19:39:b6:db:e3:88:16:27:ad:0c:2e:d2:b2:bb:08: d4:bf:a7:79:2f:f0:d3:90:54:da:d2:a3:22:d8:4e:3b:12:d3: d4:be:7e:53:fe:b7:89:5c:de:c8:0a:7c:80:bf:fe:ef:59:e2: f7:dd:17:45:dd:3a:78:a7:8e:ff:e1:2e:23:aa:75:74:60:f2: 4d:f8:da:2a:01:cb:3a:db:fe:99:ac:c8:fd:06:05:e5:7e:b4: dd:fa:ae:c6:52:80:fc:80:58:e4:c8:66:78:0e:cf:ba:fa:9b: 31:88:8a:b7:08:b0:39:c2:89:4b:14:c7:0c:c0:e2:94:26:38: e4:05:3c:db:63:d7:6d:8f:4e:4d:d1:ac:14:f1:c3:b2:ff:fa: b5:dc:ca:0e:db:e0:22:bc:b7:77:68:10:6a:0f:46:eb:fd:33: 7e:74:32:3d:36:c2:6f:52:f7:ec:f3:8c:b0:be:58:55:13:b8: 8b:44:5d:a5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQubbqaDkJldPKjy1jJ+48YSo6jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1MDdDRDFBQkVCOTExOTU0RjMzQTE4QTJERjlBMzFDRTMy MERBRjk3MB4XDTI2MDQxNTEwNTU0OVoXDTI2MDQxODE1Mjg0OVowMzExMC8GA1UE AxMoMTI4RjQyNzhBMkM4QzY3NzBGRUMzQjhBNTcyMEEyRUYyNkIyNjU4ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPfQp7qdxbgu4Fc1dj7/KRnfezT WLbm1m/sTVq6klbn5LjQUhPXyblfXheOhp9KifN0Qvw0V5Ahff5unRabtMDxiOil N92zwBP0O5e7Il4KH9MOoNXt4lwRYHcuiYAlQJVKFoYS63mz3TH4OU6u+urLqpPa CjuQO0leXGgWS4fxNrnbjzaei/kCaL1GtjHDpa0TLk+DTTtP8PKo8jkZcx61VgyZ slQW70GZ2574BbfjZQ6pgI2EdzXVjNP/5vSFJ8qzjPu50WptWjRn8mDgY1UyIr3s xhSCFqIhfheFdkwn+eIXb0Syiw1DS4qgEIm0voSVrK49hBtJUgH8jmS23UECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQSj0J4osjGdw/sO4pXIKLvJrJliDAfBgNVHSME GDAWgBRQfNGr65EZVPM6GKLfmjHOMg2vlzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Fm Y2FmMjdkLTY0ZTktNDc0Yi1hNzNiLTM1YWRiZTliMmYwMS8wLzUwN0NEMUFCRUI5 MTE5NTRGMzNBMThBMkRGOUEzMUNFMzIwREFGOTcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81MDdDRDFBQkVCOTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERB Rjk3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9hZmNhZjI3ZC02NGU5LTQ3NGItYTcz Yi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVCOTExOTU0RjMzQTE4QTJERjlBMzFD RTMyMERBRjk3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAL9EpcW2rCd7mwHkoOsjMlYBVV8W3gY70Ws+C gaG4jHM+K9PP8pcOqjaTVCzeMgQ8KitobPWVtDqalERmhQr9vmrrcB/6v9StHBRE GTm22+OIFietDC7SsrsI1L+neS/w05BU2tKjIthOOxLT1L5+U/63iVzeyAp8gL/+ 71ni990XRd06eKeO/+EuI6p1dGDyTfjaKgHLOtv+mazI/QYF5X603fquxlKA/IBY 5MhmeA7PuvqbMYiKtwiwOcKJSxTHDMDilCY45AU822PXbY9OTdGsFPHDsv/6tdzK DtvgIry3d2gQag9G6/0zfnQyPTbCb1L37POMsL5YVRO4i0RdpQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:31:55 2026 by rpki-client