$ rpki-client -vvf repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft File: 50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft (raw, json) Hash identifier: NIRY7sDXXOZLxBuTCvP/jg1PjWjDuuUBWksWzJOg69g= Subject key identifier: 7D:C2:5B:B8:51:EB:DA:7E:BB:45:B2:00:0D:F3:5E:CD:59:75:F8:D2 Authority key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87 Certificate issuer: /CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87 Certificate serial: 3ADC688C03B2897380280B593C64567C03D5BA11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft Manifest number: 0140 Signing time: Mon 05 May 2025 05:22:08 +0000 Manifest this update: Mon 05 May 2025 05:17:08 +0000 Manifest next update: Thu 08 May 2025 06:34:08 +0000 Files and hashes: 1: 3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (hash: g9GceOTX9LJTuwCHG+Cr6HSHY6I4upqrk/JI3PWqJI4=) 2: 50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl (hash: YfevJi19k7ZroZKs4c56bi9F81oKJtPkKyMQ3cu1PN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dc:68:8c:03:b2:89:73:80:28:0b:59:3c:64:56:7c:03:d5:ba:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87 Validity Not Before: May 5 05:17:08 2025 GMT Not After : May 8 06:34:08 2025 GMT Subject: CN=7DC25BB851EBDA7EBB45B2000DF35ECD5975F8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:00:83:42:3d:c7:f7:da:21:ae:84:9b:52: d5:b0:58:dd:e8:cf:52:78:23:49:14:2b:35:9d:23: 5b:2e:ac:65:92:89:a6:90:99:73:ea:a4:f8:ba:d9: 64:4a:c5:af:b9:11:83:e6:89:e5:f3:b1:32:7b:a5: 2d:7a:4b:46:e7:0b:9f:34:ab:91:c5:91:40:3e:3f: 6c:a7:72:88:31:e4:65:80:c8:ff:13:e0:b8:a5:4d: 2a:72:d6:bd:07:5d:9f:d6:78:04:a2:03:07:e1:3f: 41:c3:cd:85:07:77:d2:21:00:1d:c2:fc:e8:65:b9: 2a:f0:bb:5e:3c:1e:96:01:0a:21:0e:18:33:ad:dc: 35:cb:f4:21:03:c2:91:6a:3f:5a:29:86:0f:e3:04: cc:17:7c:13:48:20:a1:9d:31:06:c1:5a:3a:22:69: 63:79:d5:3b:9e:89:46:5a:72:b4:89:4c:82:45:0e: 17:95:ab:0f:48:25:42:c2:94:9f:8f:a1:87:03:8b: 60:20:06:b2:29:ec:67:66:ce:57:2b:5a:9b:60:09: 7c:47:fa:06:b2:f0:6c:92:50:84:a6:19:fb:ef:ef: 7b:8f:2c:2f:65:2f:af:23:76:df:33:b5:1f:15:de: 29:b1:72:60:93:37:0d:90:54:8b:a8:63:c9:24:df: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:5B:B8:51:EB:DA:7E:BB:45:B2:00:0D:F3:5E:CD:59:75:F8:D2 X509v3 Authority Key Identifier: keyid:50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:32:c5:3f:b8:78:5c:3c:93:05:6d:e6:e3:ee:3a:33:a7:1b: 96:31:68:8c:54:73:2c:9d:be:16:58:1f:f9:c5:e6:d3:a0:a3: 2a:9b:be:8f:8c:b9:74:d7:6b:aa:9b:d1:70:b7:19:4b:3a:c8: 96:e6:44:d4:23:82:a6:82:75:db:f3:d6:8c:9a:d5:ef:ed:85: f2:85:45:ea:54:a3:ca:61:29:57:83:9b:6f:dc:70:d9:1d:0a: e4:46:fe:c6:ef:38:45:ef:8d:d8:e9:36:47:0f:11:1a:e8:2b: 36:95:72:0f:6e:8b:d5:5d:a7:ef:86:df:c0:35:ad:e7:69:9f: 0b:81:3f:78:ca:f1:43:2b:ee:44:a6:0b:34:20:2a:68:0b:8d: bb:03:78:a2:fd:7e:5c:9b:73:f0:5a:d0:85:7c:6a:a0:6f:85: 06:53:ed:ea:20:d2:5b:a2:b6:84:b4:6c:c7:42:f5:32:2f:4c: 6b:7c:59:2a:75:f6:4f:b8:dc:86:79:36:b5:b9:7f:09:78:f4: f3:79:b0:2e:e3:63:8d:95:c4:cc:3e:e8:85:c8:02:fc:b5:5b: e4:9f:b7:ee:42:d4:e4:ed:54:b9:9a:2e:4e:a6:d7:34:90:50: 24:b7:a9:9f:4c:81:be:04:35:73:60:cb:d8:ad:a5:d4:de:53: 0a:47:13:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtxojAOyiXOAKAtZPGRWfAPVuhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4 MTAzOEY4NzAeFw0yNTA1MDUwNTE3MDhaFw0yNTA1MDgwNjM0MDhaMDMxMTAvBgNV BAMTKDdEQzI1QkI4NTFFQkRBN0VCQjQ1QjIwMDBERjM1RUNENTk3NUY4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNwCDQj3H99ohroSbUtWwWN3o z1J4I0kUKzWdI1surGWSiaaQmXPqpPi62WRKxa+5EYPmieXzsTJ7pS16S0bnC580 q5HFkUA+P2yncogx5GWAyP8T4LilTSpy1r0HXZ/WeASiAwfhP0HDzYUHd9IhAB3C /OhluSrwu148HpYBCiEOGDOt3DXL9CEDwpFqP1ophg/jBMwXfBNIIKGdMQbBWjoi aWN51TueiUZacrSJTIJFDheVqw9IJULClJ+PoYcDi2AgBrIp7GdmzlcrWptgCXxH +gay8GySUISmGfvv73uPLC9lL68jdt8ztR8V3imxcmCTNw2QVIuoY8kk38QhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfcJbuFHr2n67RbIADfNezVl1+NIwHwYDVR0j BBgwFoAUUKkunJ8NRckr+l6GSyRsuoEDj4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTYyYWE4YS0wNmU0LTQ2MzQtYjUwMC1hNTI3Y2U4ZTA0ODkvMC81MEE5MkU5QzlG MEQ0NUM5MkJGQTVFODY0QjI0NkNCQTgxMDM4Rjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4MTAz OEY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTk2MmFhOGEtMDZlNC00NjM0LWI1 MDAtYTUyN2NlOGUwNDg5LzAvNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZD QkE4MTAzOEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4yxT+4eFw8kwVt5uPuOjOnG5YxaIxUcyyd vhZYH/nF5tOgoyqbvo+MuXTXa6qb0XC3GUs6yJbmRNQjgqaCddvz1oya1e/thfKF RepUo8phKVeDm2/ccNkdCuRG/sbvOEXvjdjpNkcPERroKzaVcg9ui9Vdp++G38A1 redpnwuBP3jK8UMr7kSmCzQgKmgLjbsDeKL9flybc/Ba0IV8aqBvhQZT7eog0lui toS0bMdC9TIvTGt8WSp19k+43IZ5NrW5fwl49PN5sC7jY42VxMw+6IXIAvy1W+Sf t+5C1OTtVLmaLk6m1zSQUCS3qZ9Mgb4ENXNgy9itpdTeUwpHEw0= -----END CERTIFICATE-----Generated at Tue May 6 09:27:39 2025 by rpki-client