$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: IjFvkSW/EmexhXKxznykwub+JmNUYEJREKszUcMN0p8= Subject key identifier: 3A:05:8D:CC:D7:0E:B0:4A:F9:9C:EE:16:D8:9F:34:AE:6E:07:A4:0E Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 7097E9190E018D7560289CD0EFF3D6A533ACA6AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 01DC Signing time: Tue 29 Apr 2025 08:31:44 +0000 Manifest this update: Tue 29 Apr 2025 08:26:44 +0000 Manifest next update: Fri 02 May 2025 10:58:44 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: xyN4gf78a7jI8Z4ciAYVpZOIcZkGTzx+yhZ1lijRom8=) 2: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: gFMn8J5HAl4JhQdGwUzU29CnEcrwpTDkw5Ispw3HqCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:97:e9:19:0e:01:8d:75:60:28:9c:d0:ef:f3:d6:a5:33:ac:a6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Apr 29 08:26:44 2025 GMT Not After : May 2 10:58:44 2025 GMT Subject: CN=3A058DCCD70EB04AF99CEE16D89F34AE6E07A40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:89:dc:f0:f8:f5:21:63:d0:d0:62:69:5b: 98:24:8e:73:28:97:ba:c1:9c:c5:cc:f8:24:e9:22: 99:ac:65:08:93:e4:c2:a6:b5:33:25:4d:99:49:3f: e1:65:5b:30:10:e7:09:41:de:6c:a8:bc:b1:8a:0c: 21:aa:cb:91:1c:a8:d9:ab:77:6a:0a:91:14:18:c9: f8:5d:11:24:8a:4d:6b:0b:10:97:5b:b8:80:2e:91: b2:58:61:a8:39:29:cb:ad:63:b1:03:b8:7d:d6:23: e1:01:e1:a6:03:cc:08:e3:65:d7:dd:39:2b:3e:a3: 27:ee:19:70:17:d2:87:ea:59:b7:13:07:13:10:a4: 1d:8d:2d:c6:c5:85:2f:47:0a:5f:4d:37:dc:60:10: 0a:00:ef:dd:8d:16:d7:6e:e1:40:46:93:f5:62:26: 93:9d:b8:e2:29:92:dc:71:d4:16:d9:62:3d:11:2c: 26:93:07:92:d0:11:75:c1:23:b6:4e:69:b8:3a:ee: 61:6b:93:d1:be:d6:fd:66:b2:7f:6a:c3:c8:a8:66: 29:20:3e:d3:b3:f9:85:32:c3:b2:70:e1:d0:39:6f: 88:f2:16:e8:9d:0c:8e:5a:c5:34:9e:ec:3c:41:47: 21:9c:48:e7:eb:0a:d3:bf:9a:17:28:c6:06:97:ef: c1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:8D:CC:D7:0E:B0:4A:F9:9C:EE:16:D8:9F:34:AE:6E:07:A4:0E X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:94:fd:50:67:3b:3b:70:5b:c8:f6:54:df:bc:18:ee:76: 58:4a:69:cf:13:30:95:c0:c1:ac:89:7f:d2:95:71:c6:c8:8c: 0a:dd:d1:94:fc:c6:54:d3:d2:38:f1:5c:08:db:f1:2c:e5:ad: 2b:fb:22:56:ab:5f:66:e1:ab:ca:32:72:ad:d8:59:87:2e:f3: ea:2b:45:d1:11:e7:79:2e:a5:e4:02:73:31:9b:cd:80:e5:91: 2a:78:46:a0:8a:8b:da:90:ce:57:fc:b4:58:46:78:6e:42:28: a2:b5:6e:87:a7:8f:2e:31:b7:9b:cd:74:a5:0f:21:e2:9b:88: 6a:9a:fc:38:28:b5:e3:f1:57:af:08:cd:71:10:82:03:88:c2: 72:be:4b:3c:a9:c2:a3:fc:7b:0b:18:de:7c:b8:74:78:7c:78: e0:9b:50:a8:5e:9a:ce:10:4b:c9:4f:c1:10:9f:34:49:27:f5: e9:77:7b:e2:a4:29:7c:20:bd:cd:d9:4d:5a:b2:fe:f0:aa:ba: 10:23:6f:15:ad:e6:6b:b6:7e:18:52:9e:4e:e2:02:fd:70:ba: a7:20:23:70:f8:b2:65:a6:8e:33:33:f7:96:f8:53:8f:76:d7: 95:d6:78:69:ac:07:0d:e6:58:e5:b9:65:fa:b5:55:aa:fd:ae: 4e:88:21:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJfpGQ4BjXVgKJzQ7/PWpTOspq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA0MjkwODI2NDRaFw0yNTA1MDIxMDU4NDRaMDMxMTAvBgNV BAMTKDNBMDU4RENDRDcwRUIwNEFGOTlDRUUxNkQ4OUYzNEFFNkUwN0E0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxonc8Pj1IWPQ0GJpW5gkjnMo l7rBnMXM+CTpIpmsZQiT5MKmtTMlTZlJP+FlWzAQ5wlB3myovLGKDCGqy5EcqNmr d2oKkRQYyfhdESSKTWsLEJdbuIAukbJYYag5KcutY7EDuH3WI+EB4aYDzAjjZdfd OSs+oyfuGXAX0ofqWbcTBxMQpB2NLcbFhS9HCl9NN9xgEAoA792NFtdu4UBGk/Vi JpOduOIpktxx1BbZYj0RLCaTB5LQEXXBI7ZOabg67mFrk9G+1v1msn9qw8ioZikg PtOz+YUyw7Jw4dA5b4jyFuidDI5axTSe7DxBRyGcSOfrCtO/mhcoxgaX78EtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOgWNzNcOsEr5nO4W2J80rm4HpA4wHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENslP1QZzs7cFvI9lTfvBjudlhKac8TMJXA wayJf9KVccbIjArd0ZT8xlTT0jjxXAjb8SzlrSv7IlarX2bhq8oycq3YWYcu8+or RdER53kupeQCczGbzYDlkSp4RqCKi9qQzlf8tFhGeG5CKKK1boenjy4xt5vNdKUP IeKbiGqa/DgotePxV68IzXEQggOIwnK+SzypwqP8ewsY3ny4dHh8eOCbUKhems4Q S8lPwRCfNEkn9el3e+KkKXwgvc3ZTVqy/vCquhAjbxWt5mu2fhhSnk7iAv1wuqcg I3D4smWmjjMz95b4U49215XWeGmsBw3mWOW5Zfq1Var9rk6IIdQ= -----END CERTIFICATE-----Generated at Thu May 1 00:43:13 2025 by rpki-client