$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json) Hash identifier: jK00lnmM10Zp7eV+BgUtoBeX1P3PP2H/HoLOV1oxbNE= Subject key identifier: 45:5A:09:6F:8F:6B:61:FF:ED:F0:EE:20:E3:D2:05:FC:E1:38:7C:34 Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Certificate serial: 4515A3F27CDC3BA1F6D99A9D52B96DFAF479BA38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft Manifest number: 04A8 Signing time: Sun 10 Aug 2025 18:21:25 +0000 Manifest this update: Sun 10 Aug 2025 18:16:25 +0000 Manifest next update: Thu 14 Aug 2025 03:16:25 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=) 2: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: JPn76wBPiDmfd+Z7KEPgWc9lzYFrn2ih+YrCqNyXf10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:15:a3:f2:7c:dc:3b:a1:f6:d9:9a:9d:52:b9:6d:fa:f4:79:ba:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Validity Not Before: Aug 10 18:16:25 2025 GMT Not After : Aug 14 03:16:25 2025 GMT Subject: CN=455A096F8F6B61FFEDF0EE20E3D205FCE1387C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:a7:8f:1f:9a:b1:19:3d:8c:df:d2:35:a6: 2b:2c:a3:4a:be:b6:dc:dd:07:fd:5a:55:43:a7:62: cf:42:57:63:c2:e9:65:92:d8:d2:2d:18:12:22:90: 86:b4:d1:cb:9a:4d:10:f7:06:2e:9d:b2:a4:72:e1: e9:35:4a:81:7e:28:f6:74:58:da:d8:80:a6:69:b8: c0:af:46:91:b0:ec:ba:a9:98:bc:3a:73:40:1f:05: 01:d9:dd:d2:95:fd:14:32:8a:3d:08:fb:60:d5:9b: 93:d5:5f:2d:97:dd:51:9c:2e:e7:47:18:2d:f2:a9: 77:b4:4c:2f:d6:b8:5e:fc:9b:b6:6e:2e:07:40:5b: 81:4b:08:95:32:67:7b:c9:b1:4b:90:8a:3f:a7:86: 2e:b8:de:b5:70:14:53:fc:c6:e3:8e:bd:92:45:9d: a8:3e:77:ef:d9:a6:42:4e:be:12:a2:1d:fb:8d:f0: 9a:13:bc:f2:47:b1:03:76:93:c0:ff:7d:99:58:2a: 34:0f:d1:36:50:97:2e:58:ed:bd:c5:48:2f:f4:54: 1b:50:92:00:13:b5:d8:a3:58:56:66:d3:71:de:96: 75:ba:63:e3:9c:21:ac:cf:1c:f6:75:ba:34:0c:eb: 22:4d:5b:12:43:12:8e:7e:c9:4f:dd:7d:c3:25:05: 60:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5A:09:6F:8F:6B:61:FF:ED:F0:EE:20:E3:D2:05:FC:E1:38:7C:34 X509v3 Authority Key Identifier: keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a8:00:20:a9:f3:69:e4:97:39:82:1b:43:96:b8:58:aa:ff: e1:a7:a8:9e:0a:a7:5d:dd:02:93:97:07:53:d7:82:cf:45:04: 48:0d:80:1f:96:da:ea:7e:b9:12:f7:b3:b0:05:0f:d6:83:a8: f3:7f:71:e2:3f:3c:00:96:ff:67:96:cd:d1:a2:c5:44:92:c7: a2:d0:a2:e0:5a:a1:d5:23:f9:0f:dd:84:0e:e9:db:7e:bf:bc: f2:f4:1c:8b:b7:aa:ac:a2:fb:0e:73:d4:77:d1:e7:a6:6a:b7: ff:be:19:0f:e0:b6:c1:17:59:5b:6f:2e:21:d7:a1:d6:4f:80: 47:3a:93:5f:ba:d6:06:08:1c:14:22:6d:8c:28:a7:41:89:fb: 1c:25:f5:da:e8:b3:3c:51:82:97:49:a3:66:ca:cb:5f:8c:74: ee:02:42:23:35:2f:22:da:70:01:af:14:31:46:6f:d6:d1:25: f8:b3:52:50:98:97:63:14:ff:e8:64:db:55:36:c3:00:83:e0: 69:1f:3f:1b:0a:9b:9f:70:02:ab:d5:56:af:8b:1b:a3:c5:d2: 8c:4d:34:76:ec:dc:f0:6a:c2:9e:27:89:0d:33:ae:0d:7e:05: 81:50:d4:75:21:41:49:dd:49:ef:b6:7c:b1:cf:0c:8f:8a:38: ae:4f:ab:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRWj8nzcO6H22ZqdUrlt+vR5ujgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMw N0JFMERBQjAeFw0yNTA4MTAxODE2MjVaFw0yNTA4MTQwMzE2MjVaMDMxMTAvBgNV BAMTKDQ1NUEwOTZGOEY2QjYxRkZFREYwRUUyMEUzRDIwNUZDRTEzODdDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5J6ePH5qxGT2M39I1pisso0q+ ttzdB/1aVUOnYs9CV2PC6WWS2NItGBIikIa00cuaTRD3Bi6dsqRy4ek1SoF+KPZ0 WNrYgKZpuMCvRpGw7LqpmLw6c0AfBQHZ3dKV/RQyij0I+2DVm5PVXy2X3VGcLudH GC3yqXe0TC/WuF78m7ZuLgdAW4FLCJUyZ3vJsUuQij+nhi643rVwFFP8xuOOvZJF nag+d+/ZpkJOvhKiHfuN8JoTvPJHsQN2k8D/fZlYKjQP0TZQly5Y7b3FSC/0VBtQ kgATtdijWFZm03HelnW6Y+OcIazPHPZ1ujQM6yJNWxJDEo5+yU/dfcMlBWADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVoJb49rYf/t8O4g49IF/OE4fDQwHwYDVR0j BBgwFoAUUL0XOdU/gyqCs+hslTXeYwe+DaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODQyM2I4YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC81MEJEMTczOUQ1 M0Y4MzJBODJCM0U4NkM5NTM1REU2MzA3QkUwREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMwN0JF MERBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURF NjMwN0JFMERBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaoACCp82nklzmCG0OWuFiq/+GnqJ4Kp13d ApOXB1PXgs9FBEgNgB+W2up+uRL3s7AFD9aDqPN/ceI/PACW/2eWzdGixUSSx6LQ ouBaodUj+Q/dhA7p236/vPL0HIu3qqyi+w5z1HfR56Zqt/++GQ/gtsEXWVtvLiHX odZPgEc6k1+61gYIHBQibYwop0GJ+xwl9droszxRgpdJo2bKy1+MdO4CQiM1LyLa cAGvFDFGb9bRJfizUlCYl2MU/+hk21U2wwCD4GkfPxsKm59wAqvVVq+LG6PF0oxN NHbs3PBqwp4niQ0zrg1+BYFQ1HUhQUndSe+2fLHPDI+KOK5Pq/I= -----END CERTIFICATE-----Generated at Sun Aug 10 21:02:21 2025 by rpki-client