$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json) Hash identifier: KAzSo6Abbvr9PMqy3baMwToTtBWMmcYaE6XyhiwhF0s= Subject key identifier: 77:13:6A:80:71:5C:95:B0:F9:48:21:1F:82:44:95:A8:7A:1F:C9:59 Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Certificate serial: 70AFAAAB4F92CEA7D222680FC24060819E7ADD77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft Manifest number: 04CE Signing time: Mon 03 Nov 2025 13:31:25 +0000 Manifest this update: Mon 03 Nov 2025 13:26:25 +0000 Manifest next update: Thu 06 Nov 2025 17:04:25 +0000 Files and hashes: 1: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: F1JLNAAuarBUVNIHvzZ/PYZTKCm81l5hBlMvVtnnWSk=) 2: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:af:aa:ab:4f:92:ce:a7:d2:22:68:0f:c2:40:60:81:9e:7a:dd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Validity Not Before: Nov 3 13:26:25 2025 GMT Not After : Nov 6 17:04:25 2025 GMT Subject: CN=77136A80715C95B0F948211F824495A87A1FC959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:97:4b:cc:74:c9:0c:73:17:d8:12:c6:f5:e0: 06:89:3e:05:dc:74:47:0d:d1:48:fe:14:68:e4:a9: ea:f1:c1:18:df:5a:d3:6d:16:d4:f9:36:90:b7:a7: de:84:09:89:05:7d:e3:08:78:fa:7a:36:05:30:32: ec:b5:9a:a2:6e:94:a6:24:55:52:5f:be:e2:90:ec: 37:be:e4:36:6a:3f:51:b9:fb:26:12:d6:3d:5b:cf: 28:1a:1c:13:e0:04:40:b3:9b:88:aa:e6:69:f3:e7: d1:7c:33:72:0f:c3:4d:c2:69:70:82:7d:06:ca:82: a3:9b:79:e6:80:20:44:09:dd:53:4b:68:30:25:00: fa:e7:17:f5:5c:c5:fe:ad:08:5f:20:4b:81:a5:bf: 1e:9d:10:3f:19:19:62:2d:ea:fd:4e:11:b5:ad:87: f9:18:0b:83:f1:d4:16:e2:40:c4:eb:19:9d:b3:89: 58:48:ac:cb:f7:69:2c:02:ae:6d:8f:dc:31:be:bb: 65:24:50:65:60:1c:c1:22:c9:c1:07:f4:f8:98:77: f1:ce:64:8c:33:67:c4:60:5a:0b:e5:ca:33:71:ec: 4c:9d:4f:13:3e:be:0e:5b:35:a4:6e:d4:e5:52:58: 80:3c:3a:08:e9:d0:cf:c0:f4:c0:1d:4c:05:36:1b: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:6A:80:71:5C:95:B0:F9:48:21:1F:82:44:95:A8:7A:1F:C9:59 X509v3 Authority Key Identifier: keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:5c:55:c1:e1:45:47:e4:34:20:a5:32:9d:35:5d:d8:91: 0b:4b:f4:dc:dc:54:b4:43:ec:c7:48:64:ff:22:98:fb:fe:6e: c7:e6:ef:4f:cf:1a:b9:57:b0:c2:a1:ea:f4:e3:64:d3:ab:e6: 19:11:e6:75:3d:41:25:06:88:ba:7b:87:58:79:17:2b:93:1e: 10:84:bb:65:1b:a2:f1:7b:cc:77:c5:da:0c:80:29:d9:ca:34: df:34:8c:99:00:89:1a:c4:93:9f:9d:6f:be:15:1b:0d:d8:04: cd:49:7e:73:ac:67:1b:c5:77:8b:dd:9a:da:58:a4:15:05:9c: 4e:2c:3a:40:92:1b:01:a4:21:6a:75:3e:03:74:2a:96:55:ca: b5:15:e4:df:84:fa:44:2a:c3:b7:7e:8f:78:ee:9c:8c:81:d0: 4a:23:ff:5e:bd:00:8d:3d:6d:36:16:ed:37:43:6c:1a:38:41: 2b:c6:d1:69:40:05:6a:f3:2e:41:a6:c9:5a:1e:b7:a4:e7:0a: 33:ed:99:9b:6a:b9:f0:e1:16:fc:dc:82:e5:50:d4:47:51:bd: 10:4c:ff:43:ef:fa:b4:28:2c:2b:f7:95:90:e0:fd:fe:d5:2e: c9:5e:2c:cd:c8:c0:e7:10:b1:65:7b:9b:29:fe:57:0b:3b:99: d1:77:b1:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcK+qq0+SzqfSImgPwkBggZ563XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMw N0JFMERBQjAeFw0yNTExMDMxMzI2MjVaFw0yNTExMDYxNzA0MjVaMDMxMTAvBgNV BAMTKDc3MTM2QTgwNzE1Qzk1QjBGOTQ4MjExRjgyNDQ5NUE4N0ExRkM5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3l0vMdMkMcxfYEsb14AaJPgXc dEcN0Uj+FGjkqerxwRjfWtNtFtT5NpC3p96ECYkFfeMIePp6NgUwMuy1mqJulKYk VVJfvuKQ7De+5DZqP1G5+yYS1j1bzygaHBPgBECzm4iq5mnz59F8M3IPw03CaXCC fQbKgqObeeaAIEQJ3VNLaDAlAPrnF/Vcxf6tCF8gS4Glvx6dED8ZGWIt6v1OEbWt h/kYC4Px1BbiQMTrGZ2ziVhIrMv3aSwCrm2P3DG+u2UkUGVgHMEiycEH9PiYd/HO ZIwzZ8RgWgvlyjNx7EydTxM+vg5bNaRu1OVSWIA8Ogjp0M/A9MAdTAU2G4THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdxNqgHFclbD5SCEfgkSVqHofyVkwHwYDVR0j BBgwFoAUUL0XOdU/gyqCs+hslTXeYwe+DaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODQyM2I4YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC81MEJEMTczOUQ1 M0Y4MzJBODJCM0U4NkM5NTM1REU2MzA3QkUwREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMwN0JF MERBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURF NjMwN0JFMERBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsaXFXB4UVH5DQgpTKdNV3YkQtL9NzcVLRD 7MdIZP8imPv+bsfm70/PGrlXsMKh6vTjZNOr5hkR5nU9QSUGiLp7h1h5FyuTHhCE u2UbovF7zHfF2gyAKdnKNN80jJkAiRrEk5+db74VGw3YBM1JfnOsZxvFd4vdmtpY pBUFnE4sOkCSGwGkIWp1PgN0KpZVyrUV5N+E+kQqw7d+j3junIyB0Eoj/169AI09 bTYW7TdDbBo4QSvG0WlABWrzLkGmyVoet6TnCjPtmZtqufDhFvzcguVQ1EdRvRBM /0Pv+rQoLCv3lZDg/f7VLsleLM3IwOcQsWV7myn+Vws7mdF3sVw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:52 2025 by rpki-client