$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: I8pi5p4ghUeT7X9lrRyLBOAe2wQkg4cn4aTaheG9h2I= Subject key identifier: 7E:C4:A5:78:A8:02:F7:8D:EC:A2:04:C7:EF:A1:73:DF:9C:78:00:95 Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 3B3E4B29E2DB18CA6DEB373357C85B99435DDE63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 0240 Signing time: Sat 18 Apr 2026 20:00:42 +0000 Manifest this update: Sat 18 Apr 2026 19:55:42 +0000 Manifest next update: Tue 21 Apr 2026 20:43:42 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: d2N5AOaqq/2HzAJmmdjhgzKzk2HbQ9iVaAxTgu/oPk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3e:4b:29:e2:db:18:ca:6d:eb:37:33:57:c8:5b:99:43:5d:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Apr 18 19:55:42 2026 GMT Not After : Apr 21 20:43:42 2026 GMT Subject: CN=7EC4A578A802F78DECA204C7EFA173DF9C780095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:2c:e3:31:24:6a:4c:cf:8b:74:bf:1a:64: 54:f0:05:9a:01:1b:2a:4c:fd:58:55:70:2a:e3:bb: 5b:d6:34:1c:33:f5:d3:e1:30:19:87:5f:39:7f:6e: 1a:9a:b1:25:ff:2b:12:84:3b:b0:ed:3b:48:0d:dc: ea:ff:31:c8:8f:ac:24:a7:7a:f3:26:59:07:e3:2d: 03:c4:f4:03:2b:31:ef:a7:54:22:ab:3c:7c:c6:a6: 99:7b:e6:22:6f:5b:49:68:d3:69:d3:b8:1f:cb:b2: fa:14:47:a2:fe:52:e9:de:b8:b2:90:73:0a:38:26: af:47:ca:ab:d4:97:89:87:8a:85:1c:8d:93:98:75: c7:51:c9:41:2d:74:dc:ec:43:54:50:e9:d2:dc:8c: cc:29:57:35:b9:35:89:30:36:3a:b6:ec:85:07:24: b3:41:87:6e:1d:c3:53:06:c5:38:44:d2:73:a9:ae: b1:63:25:f0:12:0a:47:78:d7:6a:3c:e1:f2:3a:52: 58:94:bb:2a:7a:56:a0:8e:26:6d:69:4c:0d:80:21: 37:e7:3a:95:7b:eb:01:6e:bb:23:61:67:cf:c2:5a: 2f:70:fc:7a:7e:33:65:e9:a4:3d:b6:cc:92:03:e0: 99:49:0b:6b:a9:b7:ea:a3:e6:a4:16:1b:da:69:2f: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C4:A5:78:A8:02:F7:8D:EC:A2:04:C7:EF:A1:73:DF:9C:78:00:95 X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3f:9a:59:a7:4d:bb:0e:7f:5b:84:21:59:04:9b:ce:7b:67: 94:c4:b8:0f:85:86:b7:46:a1:33:1a:28:a5:d8:0d:b9:ac:36: d4:6e:1c:79:37:75:c3:25:f0:60:7a:0d:d0:ac:c2:c8:cd:5e: c0:49:36:16:25:da:66:55:7d:7d:a7:ad:0a:2e:26:6b:d5:5d: e4:96:04:94:ff:7b:2e:1c:60:cd:50:f6:5a:ee:a4:13:57:bf: 60:8f:7f:0f:17:a4:2d:eb:67:76:bc:a3:ef:75:5c:99:08:88: ed:4d:44:7b:95:60:89:44:d1:71:ec:0a:82:11:5b:34:c3:75: 27:3c:15:3a:f4:70:a5:fc:ec:bd:80:b5:67:42:fe:23:c4:4a: 58:0d:07:ec:a1:1d:2f:20:d6:94:1d:3a:cd:1f:42:fb:ee:0d: c8:3e:75:0a:c2:24:0d:5e:27:17:fa:a8:e6:d7:58:10:fa:17: 27:70:f2:4b:c6:88:e6:ef:13:3c:23:47:62:b6:37:6c:29:ca: f6:a9:4e:ee:7c:73:7b:bd:99:34:7e:44:b5:fa:0b:1c:00:1a: 5b:cb:63:17:2b:1a:86:ef:a3:d2:29:db:2b:ba:24:83:c9:e3: db:82:a3:59:87:9c:85:21:89:b1:19:4c:a4:97:57:cb:a5:0b: f5:e0:44:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOz5LKeLbGMpt6zczV8hbmUNd3mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNjA0MTgxOTU1NDJaFw0yNjA0MjEyMDQzNDJaMDMxMTAvBgNV BAMTKDdFQzRBNTc4QTgwMkY3OERFQ0EyMDRDN0VGQTE3M0RGOUM3ODAwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZlSzjMSRqTM+LdL8aZFTwBZoB GypM/VhVcCrju1vWNBwz9dPhMBmHXzl/bhqasSX/KxKEO7DtO0gN3Or/MciPrCSn evMmWQfjLQPE9AMrMe+nVCKrPHzGppl75iJvW0lo02nTuB/LsvoUR6L+UuneuLKQ cwo4Jq9HyqvUl4mHioUcjZOYdcdRyUEtdNzsQ1RQ6dLcjMwpVzW5NYkwNjq27IUH JLNBh24dw1MGxThE0nOprrFjJfASCkd412o84fI6UliUuyp6VqCOJm1pTA2AITfn OpV76wFuuyNhZ8/CWi9w/Hp+M2XppD22zJID4JlJC2upt+qj5qQWG9ppLxPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsSleKgC943sogTH76Fz35x4AJUwHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE/mlmnTbsOf1uEIVkEm857Z5TEuA+FhrdG oTMaKKXYDbmsNtRuHHk3dcMl8GB6DdCswsjNXsBJNhYl2mZVfX2nrQouJmvVXeSW BJT/ey4cYM1Q9lrupBNXv2CPfw8XpC3rZ3a8o+91XJkIiO1NRHuVYIlE0XHsCoIR WzTDdSc8FTr0cKX87L2AtWdC/iPESlgNB+yhHS8g1pQdOs0fQvvuDcg+dQrCJA1e Jxf6qObXWBD6Fydw8kvGiObvEzwjR2K2N2wpyvapTu58c3u9mTR+RLX6CxwAGlvL YxcrGobvo9Ip2yu6JIPJ49uCo1mHnIUhibEZTKSXV8ulC/XgRHg= -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:50 2026 by rpki-client