$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: Az4FibN5gSRb5C71fYJ2TolI3yEtx1peWJSKhx4Joaw= Subject key identifier: 32:FD:41:57:F5:66:0E:A2:BD:AD:2A:E1:53:72:04:AD:52:63:3A:AB Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 0A4FADA2C6E8AC520899E1EC87B5A79E9F652B7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 01FA Signing time: Sat 05 Jul 2025 00:31:45 +0000 Manifest this update: Sat 05 Jul 2025 00:26:45 +0000 Manifest next update: Tue 08 Jul 2025 06:49:45 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: xyN4gf78a7jI8Z4ciAYVpZOIcZkGTzx+yhZ1lijRom8=) 2: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: 0ADWsa5rDeBa1opknNKMYXxmt8zcCCXhzrNOKibkDEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4f:ad:a2:c6:e8:ac:52:08:99:e1:ec:87:b5:a7:9e:9f:65:2b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Jul 5 00:26:45 2025 GMT Not After : Jul 8 06:49:45 2025 GMT Subject: CN=32FD4157F5660EA2BDAD2AE1537204AD52633AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:80:83:40:99:6a:f3:f5:9e:dc:eb:66:21: d4:49:e3:20:7c:b5:7b:da:a1:41:d1:ec:d2:8e:2c: de:14:5c:94:25:cc:4c:00:a0:c6:bf:34:54:36:21: ae:95:b8:eb:3a:32:83:19:85:38:a2:77:16:91:54: 63:83:39:8a:52:4d:1e:3f:e9:ef:d4:94:f5:06:e5: ef:d6:da:0c:a0:20:bc:df:e3:bb:e7:44:2b:2b:da: e3:35:fa:27:9c:7c:5b:6d:ba:be:5e:5c:8e:76:00: 75:a1:10:9e:15:c0:51:e8:3a:a8:ee:55:56:0b:18: 35:8f:7e:06:1b:e3:57:fe:4a:ae:cb:b7:10:ff:d9: e2:dd:ec:e4:cb:eb:3e:a6:0e:6f:55:08:a5:9e:a8: d2:65:c7:17:74:a2:c2:71:f0:d9:e4:2b:b8:38:85: 15:26:21:5a:51:59:fb:4c:3c:25:75:68:16:61:02: d2:fc:ad:0c:4b:32:4b:2e:25:77:39:ed:b8:57:59: 52:5f:01:3a:be:f7:7e:fa:67:9d:b1:99:b5:17:09: 45:ac:17:57:36:52:28:5f:91:25:59:a7:67:5a:c4: 1e:31:6b:2a:bd:f7:af:f4:3b:0d:5e:ee:46:b5:f2: ee:ea:c0:5d:8d:de:86:a2:66:d4:af:d5:26:b5:6e: 24:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:41:57:F5:66:0E:A2:BD:AD:2A:E1:53:72:04:AD:52:63:3A:AB X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b6:d3:ef:04:5c:d7:77:86:7c:b4:af:bd:17:c4:9b:d8:f2: b4:9e:e6:65:41:de:3e:d9:da:93:9d:e7:b6:f6:54:af:64:94: 2f:d5:f7:f0:a6:42:3e:37:92:10:b5:8c:4d:32:1a:1d:64:12: a2:2a:84:98:0f:b9:d1:43:13:a7:6f:89:b8:49:39:89:b2:55: 9c:41:5c:00:cd:64:8f:3b:8a:d0:0f:f0:cc:87:50:8c:11:77: 6c:2f:e6:73:54:f8:9c:f3:87:7d:49:2e:bd:4d:77:14:78:d0: ac:a4:36:43:0d:af:82:45:1c:16:1b:76:24:c6:be:ec:44:59: 66:c1:66:db:ac:d2:7f:0a:28:a9:ec:c4:2d:5f:28:11:88:3f: 4f:44:91:aa:2a:38:67:6b:80:1b:f3:ae:5c:6b:33:5d:ff:bf: 01:3c:fb:53:15:17:2a:97:2e:a6:75:0a:93:59:97:77:a9:97: a1:27:2e:63:81:d8:b9:05:6e:c5:9d:97:2d:cc:83:b5:d3:b0: df:68:9b:da:97:68:19:47:39:c9:4c:b1:18:9b:e3:17:25:ae: b2:dc:8a:c9:c9:c5:97:78:cb:be:54:c1:da:c9:34:a5:ef:05: 4f:46:ff:88:09:16:c6:03:80:fc:02:3b:5b:d9:cc:50:7a:8a: 7f:a7:6f:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCk+tosborFIImeHsh7Wnnp9lK30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA3MDUwMDI2NDVaFw0yNTA3MDgwNjQ5NDVaMDMxMTAvBgNV BAMTKDMyRkQ0MTU3RjU2NjBFQTJCREFEMkFFMTUzNzIwNEFENTI2MzNBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3YCDQJlq8/We3OtmIdRJ4yB8 tXvaoUHR7NKOLN4UXJQlzEwAoMa/NFQ2Ia6VuOs6MoMZhTiidxaRVGODOYpSTR4/ 6e/UlPUG5e/W2gygILzf47vnRCsr2uM1+iecfFttur5eXI52AHWhEJ4VwFHoOqju VVYLGDWPfgYb41f+Sq7LtxD/2eLd7OTL6z6mDm9VCKWeqNJlxxd0osJx8NnkK7g4 hRUmIVpRWftMPCV1aBZhAtL8rQxLMksuJXc57bhXWVJfATq+9376Z52xmbUXCUWs F1c2UihfkSVZp2daxB4xayq996/0Ow1e7ka18u7qwF2N3oaiZtSv1Sa1biTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMv1BV/VmDqK9rSrhU3IErVJjOqswHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD620+8EXNd3hny0r70XxJvY8rSe5mVB3j7Z 2pOd57b2VK9klC/V9/CmQj43khC1jE0yGh1kEqIqhJgPudFDE6dvibhJOYmyVZxB XADNZI87itAP8MyHUIwRd2wv5nNU+Jzzh31JLr1NdxR40KykNkMNr4JFHBYbdiTG vuxEWWbBZtus0n8KKKnsxC1fKBGIP09EkaoqOGdrgBvzrlxrM13/vwE8+1MVFyqX LqZ1CpNZl3epl6EnLmOB2LkFbsWdly3Mg7XTsN9om9qXaBlHOclMsRib4xclrrLc isnJxZd4y75UwdrJNKXvBU9G/4gJFsYDgPwCO1vZzFB6in+nbxo= -----END CERTIFICATE-----Generated at Sat Jul 5 01:22:54 2025 by rpki-client