$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: MC+lxJxDWh3OMWdv+o+whzsblufNbF5uRKiDEv0Y61E= Subject key identifier: CA:E2:8E:51:DB:11:90:02:F8:D2:B4:05:6C:85:42:34:A6:3A:AE:CD Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 04EA5E5F144B90E0BF28E74D3D219315158C6C2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01CF Signing time: Tue 05 Aug 2025 23:00:36 +0000 Manifest this update: Tue 05 Aug 2025 22:55:36 +0000 Manifest next update: Sat 09 Aug 2025 05:36:36 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: 8MEx8PBeL+D4MvvycxMY4K03W73U0H8Zz2Ycd0YES40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ea:5e:5f:14:4b:90:e0:bf:28:e7:4d:3d:21:93:15:15:8c:6c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Aug 5 22:55:36 2025 GMT Not After : Aug 9 05:36:36 2025 GMT Subject: CN=CAE28E51DB119002F8D2B4056C854234A63AAECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:f2:db:6c:e8:94:2f:60:e4:5b:e5:12:49: d6:ca:4f:b1:f4:0c:ea:68:a0:cc:74:21:d8:dd:ec: e5:f6:5d:6b:c9:0a:b7:ab:74:32:ad:d5:4a:2e:16: 4a:f7:c6:25:fc:17:7a:cd:62:c3:fc:73:68:6b:4e: 21:66:97:83:af:48:c0:d5:b7:27:01:79:90:df:d2: 47:7b:9e:49:b6:14:1d:8c:8a:1f:4b:76:fa:bc:c2: df:04:64:44:3d:52:b3:4a:15:b2:00:57:fd:4e:a7: 21:74:ca:c0:e2:e6:c7:54:07:dc:3b:54:1d:6e:35: d2:36:e7:35:93:69:4d:d3:a8:d6:50:50:fe:76:0b: 32:cf:3b:44:d0:53:47:0d:2a:05:0f:e5:9e:46:85: e2:c0:26:f1:40:3e:c7:1c:81:2e:43:fc:cc:fd:7c: 0a:23:f0:8a:cd:7e:9b:f5:3a:06:37:b1:01:de:7c: 15:ed:d7:0d:e4:17:8e:f1:07:fe:f5:0f:73:f5:63: 7a:4c:80:68:49:4b:1c:a4:d6:c2:ce:98:9d:59:93: ef:76:03:27:43:98:e9:9a:3e:ba:b3:f7:be:82:c6: 9d:4b:01:72:09:44:d7:40:51:58:b0:92:97:63:5a: 0c:1f:dd:6b:ac:91:4e:f6:da:b2:12:ed:fe:d8:ac: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E2:8E:51:DB:11:90:02:F8:D2:B4:05:6C:85:42:34:A6:3A:AE:CD X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:46:75:19:2f:73:8a:e8:25:6d:c4:52:e9:dc:fa:56:50:df: 6b:3e:98:69:2c:b3:b7:42:9c:76:09:43:08:e0:1c:40:43:5c: 76:7b:ce:e3:29:e4:cd:2a:75:1d:ff:61:99:97:21:bf:c3:d8: ee:9d:12:0b:d1:42:23:28:8f:3e:66:4f:d1:b0:7b:df:b4:83: 5b:bf:fb:69:97:de:a0:f5:21:ac:a9:04:1c:70:4f:7c:46:0d: 77:6d:b2:ec:b1:a7:e3:c3:5a:bd:c2:ed:c0:a2:84:42:de:a8: 83:53:54:21:21:7a:49:17:da:df:3d:1d:6b:a7:77:bf:f0:e1: e3:2c:e9:bd:38:5f:c0:39:57:e7:57:25:7e:fb:f1:c8:5f:d6: 2e:19:54:fb:d7:0c:75:5e:b3:3e:99:a5:f0:79:f3:2e:86:95: 76:7a:1a:05:a9:91:2e:a7:ca:a4:2b:3c:c6:a2:99:4d:52:eb: b8:fb:4c:49:d5:21:d4:5f:5b:c4:ca:70:fb:aa:25:d8:ae:d3: 56:79:f9:0a:c4:ea:43:00:2b:b0:93:45:e7:69:2c:23:58:5b: 2b:38:31:5e:a5:e1:8b:fb:f9:85:1e:c0:67:ba:25:5a:94:62: 61:13:b7:1f:d0:eb:3c:14:ab:e9:ad:8f:84:81:34:ae:ba:8c: c3:db:7a:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOpeXxRLkOC/KOdNPSGTFRWMbCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTA4MDUyMjU1MzZaFw0yNTA4MDkwNTM2MzZaMDMxMTAvBgNV BAMTKENBRTI4RTUxREIxMTkwMDJGOEQyQjQwNTZDODU0MjM0QTYzQUFFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEV/LbbOiUL2DkW+USSdbKT7H0 DOpooMx0Idjd7OX2XWvJCrerdDKt1UouFkr3xiX8F3rNYsP8c2hrTiFml4OvSMDV tycBeZDf0kd7nkm2FB2Mih9Ldvq8wt8EZEQ9UrNKFbIAV/1OpyF0ysDi5sdUB9w7 VB1uNdI25zWTaU3TqNZQUP52CzLPO0TQU0cNKgUP5Z5GheLAJvFAPsccgS5D/Mz9 fAoj8IrNfpv1OgY3sQHefBXt1w3kF47xB/71D3P1Y3pMgGhJSxyk1sLOmJ1Zk+92 AydDmOmaPrqz976Cxp1LAXIJRNdAUViwkpdjWgwf3WuskU722rIS7f7YrJMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuKOUdsRkAL40rQFbIVCNKY6rs0wHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlGdRkvc4roJW3EUunc+lZQ32s+mGkss7dC nHYJQwjgHEBDXHZ7zuMp5M0qdR3/YZmXIb/D2O6dEgvRQiMojz5mT9Gwe9+0g1u/ +2mX3qD1IaypBBxwT3xGDXdtsuyxp+PDWr3C7cCihELeqINTVCEhekkX2t89HWun d7/w4eMs6b04X8A5V+dXJX778chf1i4ZVPvXDHVesz6ZpfB58y6GlXZ6GgWpkS6n yqQrPMaimU1S67j7TEnVIdRfW8TKcPuqJdiu01Z5+QrE6kMAK7CTRedpLCNYWys4 MV6l4Yv7+YUewGe6JVqUYmETtx/Q6zwUq+mtj4SBNK66jMPbek4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:07:33 2025 by rpki-client