$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: pl9phJwwrAuuwdRScsgNH0aeqmyyxayjXtMJuv5nNb0= Subject key identifier: 24:7A:A3:74:85:47:1F:17:09:16:E3:7E:BD:26:13:37:EA:BA:62:54 Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 56539D2E6DC131AD7464C44AB19860E79876EC30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 01E1 Signing time: Sat 10 May 2025 13:01:47 +0000 Manifest this update: Sat 10 May 2025 12:56:47 +0000 Manifest next update: Tue 13 May 2025 22:58:47 +0000 Files and hashes: 1: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: /pnwXXu9bEl+8Z1UjNDdRyiOq6PQjp24i6sLPXK0JVU=) 2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: xyN4gf78a7jI8Z4ciAYVpZOIcZkGTzx+yhZ1lijRom8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:53:9d:2e:6d:c1:31:ad:74:64:c4:4a:b1:98:60:e7:98:76:ec:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: May 10 12:56:47 2025 GMT Not After : May 13 22:58:47 2025 GMT Subject: CN=247AA37485471F170916E37EBD261337EABA6254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:29:c0:30:d2:01:54:5d:92:01:6c:e6:4e: 31:01:f4:42:8d:73:fd:32:a7:c9:76:70:c4:f7:70: b7:39:08:89:90:94:25:97:60:b3:89:1b:39:c1:90: 12:bc:1b:1f:8a:18:35:75:c3:88:0e:10:8c:e2:65: 11:74:e7:94:30:83:6a:67:d6:53:7f:2b:2a:03:91: 9a:d9:45:21:31:06:c2:ab:8c:34:a5:81:65:78:f9: 8a:01:d6:ed:77:94:9d:0e:75:88:0b:ba:08:4b:27: 5b:15:ed:0c:9a:0c:c9:fb:32:c0:8f:88:20:0f:c3: ca:51:2c:3b:9b:c4:4c:23:28:e7:68:38:3d:a2:ca: 35:0b:4b:9c:bf:47:0d:f6:44:6a:62:9b:ed:ca:7a: 5a:cf:77:b9:97:45:19:aa:87:ba:19:09:9b:f0:21: c0:7e:4d:72:36:8f:1f:92:08:28:f3:bf:b2:a7:f8: 51:51:14:8f:b8:18:d4:60:03:77:f0:10:60:a0:af: 8c:19:3d:dc:dd:81:e0:fc:a2:e0:c0:6c:2e:e3:b3: 39:4e:7d:2f:92:c7:71:e5:5f:19:c3:57:f9:6e:d1: 39:71:53:43:f2:3f:ff:56:ae:b9:90:b4:89:9b:26: 90:59:01:f0:49:de:0c:63:92:b3:4c:d1:f1:52:e2: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:A3:74:85:47:1F:17:09:16:E3:7E:BD:26:13:37:EA:BA:62:54 X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f9:39:f8:64:ea:47:9e:b3:f2:b7:77:63:f7:de:5e:a4:a6: bc:ba:26:73:d4:73:f5:8b:70:37:66:47:5f:52:07:af:79:db: 81:d4:8a:ef:25:3c:5f:b7:33:27:1e:b4:a7:d8:32:40:20:03: 61:e7:9f:6e:8d:d3:5a:72:26:0a:0c:eb:b8:8b:95:57:48:7a: 6b:08:81:bd:c2:2f:35:24:08:0b:08:59:d3:1f:14:57:cd:b5: 8f:d7:57:3b:75:69:a7:f1:51:0d:7e:ba:d5:7b:2a:8b:fa:6e: d8:85:77:c4:69:57:98:79:34:b9:d5:c2:39:5f:8e:fa:e0:0f: 06:42:ad:e4:34:3d:45:15:a0:87:ed:de:01:51:9d:68:df:95: 48:cc:df:b2:8e:6a:a4:09:ce:34:ef:af:3e:dc:d0:c0:ee:79: b5:d3:fe:26:16:a4:ba:7b:07:45:0d:cf:ca:41:9d:c5:b2:06: 57:be:ac:ab:25:c2:b6:46:9e:1a:ef:bd:b0:bd:e4:a5:69:9c: 3b:3d:80:79:88:cd:28:25:8b:45:08:f2:78:7f:93:9b:8c:1a: 95:3b:ed:76:b5:71:77:2d:8b:6b:8c:a3:49:58:45:c8:73:78: dc:e2:e2:95:8c:6b:78:c3:a3:85:76:ea:ff:24:cc:75:78:4f: 80:6d:7f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlOdLm3BMa10ZMRKsZhg55h27DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA1MTAxMjU2NDdaFw0yNTA1MTMyMjU4NDdaMDMxMTAvBgNV BAMTKDI0N0FBMzc0ODU0NzFGMTcwOTE2RTM3RUJEMjYxMzM3RUFCQTYyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6CnAMNIBVF2SAWzmTjEB9EKN c/0yp8l2cMT3cLc5CImQlCWXYLOJGznBkBK8Gx+KGDV1w4gOEIziZRF055Qwg2pn 1lN/KyoDkZrZRSExBsKrjDSlgWV4+YoB1u13lJ0OdYgLughLJ1sV7QyaDMn7MsCP iCAPw8pRLDubxEwjKOdoOD2iyjULS5y/Rw32RGpim+3KelrPd7mXRRmqh7oZCZvw IcB+TXI2jx+SCCjzv7Kn+FFRFI+4GNRgA3fwEGCgr4wZPdzdgeD8ouDAbC7jszlO fS+Sx3HlXxnDV/lu0TlxU0PyP/9WrrmQtImbJpBZAfBJ3gxjkrNM0fFS4uRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHqjdIVHHxcJFuN+vSYTN+q6YlQwHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT5Ofhk6kees/K3d2P33l6kpry6JnPUc/WL cDdmR19SB69524HUiu8lPF+3MycetKfYMkAgA2Hnn26N01pyJgoM67iLlVdIemsI gb3CLzUkCAsIWdMfFFfNtY/XVzt1aafxUQ1+utV7Kov6btiFd8RpV5h5NLnVwjlf jvrgDwZCreQ0PUUVoIft3gFRnWjflUjM37KOaqQJzjTvrz7c0MDuebXT/iYWpLp7 B0UNz8pBncWyBle+rKslwrZGnhrvvbC95KVpnDs9gHmIzSgli0UI8nh/k5uMGpU7 7Xa1cXcti2uMo0lYRchzeNzi4pWMa3jDo4V26v8kzHV4T4Btf48= -----END CERTIFICATE-----Generated at Tue May 13 00:16:00 2025 by rpki-client