$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: RhesHRSjPL72GsSzBjyTsPRRpGgofVFyg5cTTwUWHtM= Subject key identifier: 32:97:41:CD:B0:C4:31:0A:2F:02:E8:4C:1D:24:A0:91:D6:2A:0E:AD Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 6AF777CF98901B0A48CB0F7CFC52BCC98C6449C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0389 Signing time: Tue 04 Nov 2025 05:50:40 +0000 Manifest this update: Tue 04 Nov 2025 05:45:40 +0000 Manifest next update: Fri 07 Nov 2025 11:27:40 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: 2TpoMBFKOWnZZ+qmr3xbyEkRwWci0jYLtVC9xQI/IdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f7:77:cf:98:90:1b:0a:48:cb:0f:7c:fc:52:bc:c9:8c:64:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Nov 4 05:45:40 2025 GMT Not After : Nov 7 11:27:40 2025 GMT Subject: CN=329741CDB0C4310A2F02E84C1D24A091D62A0EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:cf:0d:92:1a:b7:45:66:19:7c:14:76:67: db:ba:ef:c7:cc:dc:07:d8:02:47:b2:08:7d:17:ee: c8:77:ef:cc:53:76:24:7f:4c:0c:6e:c8:c7:4c:f8: c3:f1:6b:34:52:af:b4:00:1c:4f:09:4e:25:1a:02: c3:6a:fc:63:4f:58:d2:27:d6:df:3a:8a:9d:55:a3: 82:2c:1a:e9:09:16:21:78:f1:88:96:6f:d7:c9:54: 6b:06:00:51:b9:bf:cd:9f:44:b7:9b:9b:74:28:1c: d7:34:c9:41:dc:63:f3:94:e9:5b:1d:53:98:90:92: 8e:97:a8:47:fc:8f:93:7f:33:22:e4:d1:b0:fa:39: a0:2e:45:1e:31:d0:87:e3:e6:47:c5:b7:a5:a0:b9: ef:08:03:91:13:f7:b8:19:23:19:de:87:2b:4f:58: a2:be:03:c6:a4:38:10:52:ac:5e:98:3a:e5:3f:93: e0:55:07:19:cd:d7:3a:6a:45:f4:e3:5f:23:01:e5: 2d:1e:d9:a1:06:61:16:1f:54:ff:bd:13:21:44:3e: 94:82:d7:18:0c:c7:dc:b3:8c:71:19:07:07:43:9f: 85:d7:fd:1a:31:48:d0:74:0d:fa:2f:65:85:e6:b9: f2:3b:c2:27:a5:a0:e6:a1:5e:62:07:2d:72:b2:9c: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:41:CD:B0:C4:31:0A:2F:02:E8:4C:1D:24:A0:91:D6:2A:0E:AD X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cf:de:30:ca:70:12:f6:3a:66:8c:87:d2:06:2b:c8:e5:6a: 4a:b0:06:31:f3:75:a2:9e:ae:ca:6b:19:32:35:41:c7:bb:25: 83:eb:73:92:fb:ae:15:d9:41:79:81:9c:8e:af:e3:e0:a4:68: 63:35:d3:11:eb:f5:80:b9:c8:4e:1a:1d:de:b7:8d:5c:87:41: 4f:ce:8c:7e:c3:59:16:fb:c1:98:76:a9:30:81:d0:f3:c8:9b: 2c:5e:99:3b:c4:6b:72:75:77:47:f8:4c:bb:a7:13:ce:22:79: 89:b9:65:5a:49:64:62:e4:ea:d8:7d:fa:f1:cb:64:f5:53:c5: 69:3e:ac:be:f2:53:1c:f5:7c:4a:fc:3e:8f:b1:cc:fd:0b:3f: dd:72:3b:a5:8b:84:48:53:bd:c6:b1:4d:01:85:d0:b9:24:29: 0c:b9:1a:2d:e7:2b:d5:30:c2:f5:7e:e2:1f:78:3a:ee:b0:61: a4:47:d4:1e:0e:af:84:59:c3:68:39:da:e2:fe:9f:6f:5b:57: a9:84:68:e9:d5:d4:85:fb:23:55:f2:4f:03:e4:17:6f:fd:5d: 1f:ff:6d:5a:cb:85:f2:67:cf:c6:e5:37:d3:91:76:c5:68:fe: 06:a7:09:6f:3f:c3:39:de:60:64:c4:4b:62:79:8d:19:7a:83: 54:1c:22:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavd3z5iQGwpIyw98/FK8yYxkSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTExMDQwNTQ1NDBaFw0yNTExMDcxMTI3NDBaMDMxMTAvBgNV BAMTKDMyOTc0MUNEQjBDNDMxMEEyRjAyRTg0QzFEMjRBMDkxRDYyQTBFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XM8Nkhq3RWYZfBR2Z9u678fM 3AfYAkeyCH0X7sh378xTdiR/TAxuyMdM+MPxazRSr7QAHE8JTiUaAsNq/GNPWNIn 1t86ip1Vo4IsGukJFiF48YiWb9fJVGsGAFG5v82fRLebm3QoHNc0yUHcY/OU6Vsd U5iQko6XqEf8j5N/MyLk0bD6OaAuRR4x0Ifj5kfFt6Wgue8IA5ET97gZIxnehytP WKK+A8akOBBSrF6YOuU/k+BVBxnN1zpqRfTjXyMB5S0e2aEGYRYfVP+9EyFEPpSC 1xgMx9yzjHEZBwdDn4XX/RoxSNB0DfovZYXmufI7wieloOahXmIHLXKynEK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpdBzbDEMQovAuhMHSSgkdYqDq0wHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/P3jDKcBL2OmaMh9IGK8jlakqwBjHzdaKe rsprGTI1Qce7JYPrc5L7rhXZQXmBnI6v4+CkaGM10xHr9YC5yE4aHd63jVyHQU/O jH7DWRb7wZh2qTCB0PPImyxemTvEa3J1d0f4TLunE84ieYm5ZVpJZGLk6th9+vHL ZPVTxWk+rL7yUxz1fEr8Po+xzP0LP91yO6WLhEhTvcaxTQGF0LkkKQy5Gi3nK9Uw wvV+4h94Ou6wYaRH1B4Or4RZw2g52uL+n29bV6mEaOnV1IX7I1XyTwPkF2/9XR// bVrLhfJnz8blN9ORdsVo/ganCW8/wzneYGTES2J5jRl6g1QcIho= -----END CERTIFICATE-----Generated at Wed Nov 5 08:17:45 2025 by rpki-client