$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: tQ1AqCTfzOhyXvwo5Bfx6mzursvZeK9x1J67IJnBrgY= Subject key identifier: 89:AB:9D:4D:73:B6:BD:66:DC:1C:D0:40:EE:98:BF:DA:09:CF:4D:A7 Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 1DE6CB1741A84814203DDA01A1ABB590B777D433 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 020A Signing time: Fri 08 Aug 2025 16:03:34 +0000 Manifest this update: Fri 08 Aug 2025 15:58:34 +0000 Manifest next update: Mon 11 Aug 2025 19:05:34 +0000 Files and hashes: 1: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: DWeen9CXcDfBjS7au5xqaTSSispaMnTL4Un3lXhNrHo=) 2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: 8ucdhC8+G/GM9sLgWMqJbTh8/P5IkKccW0COx5GovCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e6:cb:17:41:a8:48:14:20:3d:da:01:a1:ab:b5:90:b7:77:d4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Aug 8 15:58:34 2025 GMT Not After : Aug 11 19:05:34 2025 GMT Subject: CN=89AB9D4D73B6BD66DC1CD040EE98BFDA09CF4DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ca:19:32:c2:df:fc:94:49:31:b4:47:9e:a8: fc:51:45:ba:3a:a8:79:19:98:ff:98:af:1d:07:8c: 74:78:96:c6:1c:bb:b4:4c:bd:e4:c5:d2:ed:dc:51: 70:ab:5e:e8:21:a1:11:b3:ed:88:ab:c0:55:75:30: b2:65:b7:16:ec:48:fb:70:a3:a8:92:4c:fc:1c:e6: d1:aa:e4:44:dd:44:c3:30:16:8b:85:48:a2:cd:87: 47:76:ac:e4:15:27:48:16:38:9d:fb:4d:3d:ba:1b: 35:0a:6a:8e:15:89:b0:4c:54:2a:31:8a:50:10:f5: 6a:6a:f1:b9:c3:7c:42:e1:7a:e5:9c:9d:2e:76:ed: 6f:8c:97:5e:44:90:e4:f1:4f:03:b1:84:23:18:25: 92:66:10:61:8f:cd:2a:c9:2d:03:36:b3:b4:b5:5f: e5:71:33:73:de:e3:90:a9:40:97:90:5d:ef:1e:de: d1:fd:74:07:18:6e:7a:87:48:fa:da:41:54:33:cf: 29:54:02:d0:13:b1:8c:04:cf:64:9c:f9:a0:a7:c7: c3:1c:09:ed:76:70:03:f5:94:c6:b5:fc:6a:2c:1e: 49:5e:4f:46:68:15:23:ef:ea:74:da:5e:f0:1e:77: 96:af:4b:00:cc:5c:6a:d0:a6:de:ac:ec:27:b2:ee: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:9D:4D:73:B6:BD:66:DC:1C:D0:40:EE:98:BF:DA:09:CF:4D:A7 X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1c:c9:59:c4:d9:4e:3b:97:33:c6:74:49:c7:6f:c3:d2:19: 69:f7:09:25:68:2a:da:26:d3:72:9d:19:45:0c:56:77:20:22: 7d:03:c5:3b:de:f7:e3:7e:6e:e3:cd:4e:99:a7:53:24:6e:08: c2:4d:72:25:43:ab:47:79:9c:f7:0a:25:a9:a5:91:5a:21:75: 98:e5:06:be:04:c9:7b:61:92:f2:de:67:89:b0:ce:ea:50:5e: 1c:84:32:2b:8f:47:ea:08:89:a1:1b:dd:53:37:bd:c7:c4:74: f5:f5:1f:fe:f2:5f:46:d5:7b:64:9f:11:bb:be:4e:a0:3c:a5: e3:d5:f7:1f:ff:d5:04:6d:2e:85:01:69:6c:9a:a1:3e:72:83: 55:31:96:c6:94:39:55:8f:f2:ad:49:b1:9e:bf:65:b4:38:5f: 3a:42:c9:a5:cc:06:09:e1:49:f2:c7:ff:b5:22:48:54:ea:b0: 9d:2e:fb:39:cc:29:91:bf:0d:84:85:7f:f0:90:06:0c:b0:68: d5:7f:f7:bb:f9:5c:fe:dd:0e:55:c3:c3:91:0e:ee:d9:68:0a: b3:25:20:6e:43:9e:9a:82:65:ff:2f:5c:e8:40:b5:ac:d8:4f: 03:94:b2:1c:1f:cb:b1:b3:73:09:22:b1:ad:22:5a:7d:6e:89: 1e:f7:69:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHebLF0GoSBQgPdoBoau1kLd31DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA4MDgxNTU4MzRaFw0yNTA4MTExOTA1MzRaMDMxMTAvBgNV BAMTKDg5QUI5RDRENzNCNkJENjZEQzFDRDA0MEVFOThCRkRBMDlDRjREQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5yhkywt/8lEkxtEeeqPxRRbo6 qHkZmP+Yrx0HjHR4lsYcu7RMveTF0u3cUXCrXughoRGz7YirwFV1MLJltxbsSPtw o6iSTPwc5tGq5ETdRMMwFouFSKLNh0d2rOQVJ0gWOJ37TT26GzUKao4VibBMVCox ilAQ9Wpq8bnDfELheuWcnS527W+Ml15EkOTxTwOxhCMYJZJmEGGPzSrJLQM2s7S1 X+VxM3Pe45CpQJeQXe8e3tH9dAcYbnqHSPraQVQzzylUAtATsYwEz2Sc+aCnx8Mc Ce12cAP1lMa1/GosHkleT0ZoFSPv6nTaXvAed5avSwDMXGrQpt6s7Cey7hLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiaudTXO2vWbcHNBA7pi/2gnPTacwHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4cyVnE2U47lzPGdEnHb8PSGWn3CSVoKtom 03KdGUUMVncgIn0DxTve9+N+buPNTpmnUyRuCMJNciVDq0d5nPcKJamlkVohdZjl Br4EyXthkvLeZ4mwzupQXhyEMiuPR+oIiaEb3VM3vcfEdPX1H/7yX0bVe2SfEbu+ TqA8pePV9x//1QRtLoUBaWyaoT5yg1UxlsaUOVWP8q1JsZ6/ZbQ4XzpCyaXMBgnh SfLH/7UiSFTqsJ0u+znMKZG/DYSFf/CQBgywaNV/97v5XP7dDlXDw5EO7tloCrMl IG5DnpqCZf8vXOhAtazYTwOUshwfy7Gzcwkisa0iWn1uiR73aR8= -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:42 2025 by rpki-client