$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: RAoQQEhKhKZufo+171MzEL7qWMMbymW3c3e1/FFkKvc= Subject key identifier: D5:D7:27:80:46:0C:40:AD:F5:DE:85:E0:62:0F:CF:8E:91:F6:E6:CA Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 20CE1F7C9D510C7264FFF647BB87214CD9B227BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01D6 Signing time: Thu 21 Aug 2025 11:00:35 +0000 Manifest this update: Thu 21 Aug 2025 10:55:35 +0000 Manifest next update: Sun 24 Aug 2025 22:08:35 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: JB1wUcW60juqSmz6gy5Izsyr/dgj2x/sat05DEZq8pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ce:1f:7c:9d:51:0c:72:64:ff:f6:47:bb:87:21:4c:d9:b2:27:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Aug 21 10:55:35 2025 GMT Not After : Aug 24 22:08:35 2025 GMT Subject: CN=D5D72780460C40ADF5DE85E0620FCF8E91F6E6CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:7e:dc:1e:74:a3:2d:3f:59:a2:1a:3b:48: 37:f9:15:72:6b:f1:1e:ce:88:dd:ef:a1:f5:98:1b: 54:3b:e8:94:11:14:59:0a:31:6b:1f:b3:97:c1:a8: 83:bf:71:d1:fe:9f:36:43:bf:6a:0a:40:87:62:f8: b7:b8:9b:22:f0:fb:16:2e:44:c3:e3:61:79:98:ba: ac:4b:17:06:ed:07:d5:a7:5f:3e:40:3d:75:9b:8b: 00:79:ef:27:b9:49:0e:b5:94:96:94:23:96:ae:d2: 9a:2e:41:c5:4b:d6:ef:69:00:fb:77:03:7f:b6:78: a9:ba:4b:b5:e0:49:cf:48:59:91:08:bf:17:d6:52: ff:15:a5:7f:24:ee:15:4c:70:b3:92:9a:8d:bb:4a: e0:39:00:3a:6e:8f:b2:dd:72:5f:90:9a:5c:ed:a2: 48:47:57:f6:7d:b9:48:e5:db:ba:2e:b6:39:f4:fe: 2d:2f:13:68:20:f8:fd:05:0c:77:f9:35:65:85:cd: f4:e5:d5:0e:d1:3c:ce:13:41:ce:b7:fb:35:39:10: fc:64:e2:9a:f1:c3:d1:cf:27:45:50:07:18:f7:f8: f0:bf:85:c0:97:ab:29:b8:3c:67:ec:2d:2b:c1:06: d3:75:b7:9a:6c:95:df:b0:93:52:6d:83:19:5b:91: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:27:80:46:0C:40:AD:F5:DE:85:E0:62:0F:CF:8E:91:F6:E6:CA X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:5d:0b:c5:a5:e2:05:f6:eb:7f:05:8a:a8:90:81:22:84: d0:b5:59:32:38:00:20:8b:72:97:f3:5a:a4:a7:8e:15:52:78: b5:dd:83:b5:dc:a9:c5:cf:47:0d:84:60:1f:ac:e0:35:04:a0: 7a:49:3f:57:88:f9:5b:9d:2c:4a:6d:07:85:0a:c0:4c:ae:c8: f8:f6:87:d8:58:a9:be:3e:6c:97:3c:eb:63:2a:3c:e5:6e:60: 68:e9:8c:65:dc:89:4d:0b:56:bc:a0:5f:18:a0:fe:e9:bb:df: 92:85:29:1b:71:93:39:35:d6:66:07:d2:77:10:05:0b:e0:a2: b1:90:45:66:db:99:17:c5:76:6f:49:c4:38:86:48:f7:dc:1b: 9e:14:cb:ad:f0:40:93:2c:2a:4b:3f:20:89:a3:9e:94:7d:8b: 55:b7:7e:2b:7c:64:94:84:4f:70:83:29:91:66:8e:db:bf:da: e8:15:cb:80:62:9b:75:8b:bb:58:db:b3:21:6e:3b:33:5c:d4: ed:cf:85:44:2b:71:ca:65:fe:d4:3e:a9:34:f9:4d:cd:00:b9: b0:48:d2:50:d8:8f:ff:fb:93:f1:22:32:a2:64:09:4e:ca:e0: 8e:a7:d4:16:aa:d8:2f:1c:8d:1d:85:54:56:de:ae:98:1f:99: e2:51:4a:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM4ffJ1RDHJk//ZHu4chTNmyJ7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTA4MjExMDU1MzVaFw0yNTA4MjQyMjA4MzVaMDMxMTAvBgNV BAMTKEQ1RDcyNzgwNDYwQzQwQURGNURFODVFMDYyMEZDRjhFOTFGNkU2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUX7cHnSjLT9Zoho7SDf5FXJr 8R7OiN3vofWYG1Q76JQRFFkKMWsfs5fBqIO/cdH+nzZDv2oKQIdi+Le4myLw+xYu RMPjYXmYuqxLFwbtB9WnXz5APXWbiwB57ye5SQ61lJaUI5au0pouQcVL1u9pAPt3 A3+2eKm6S7XgSc9IWZEIvxfWUv8VpX8k7hVMcLOSmo27SuA5ADpuj7Ldcl+Qmlzt okhHV/Z9uUjl27outjn0/i0vE2gg+P0FDHf5NWWFzfTl1Q7RPM4TQc63+zU5EPxk 4prxw9HPJ0VQBxj3+PC/hcCXqym4PGfsLSvBBtN1t5psld+wk1JtgxlbkZe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1dcngEYMQK313oXgYg/PjpH25sowHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaeXQvFpeIF9ut/BYqokIEihNC1WTI4ACCL cpfzWqSnjhVSeLXdg7XcqcXPRw2EYB+s4DUEoHpJP1eI+VudLEptB4UKwEyuyPj2 h9hYqb4+bJc862MqPOVuYGjpjGXciU0LVrygXxig/um735KFKRtxkzk11mYH0ncQ BQvgorGQRWbbmRfFdm9JxDiGSPfcG54Uy63wQJMsKks/IImjnpR9i1W3fit8ZJSE T3CDKZFmjtu/2ugVy4Bim3WLu1jbsyFuOzNc1O3PhUQrccpl/tQ+qTT5Tc0AubBI 0lDYj//7k/EiMqJkCU7K4I6n1Baq2C8cjR2FVFberpgfmeJRStM= -----END CERTIFICATE-----Generated at Sat Aug 23 11:53:03 2025 by rpki-client