$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: l0mmXncdfGeQQfJ5n635tItVa1YkWFHb1oeXy96wcew= Subject key identifier: 3B:9D:0A:72:0F:53:91:95:1B:EE:CF:9A:A9:E6:5D:FD:5F:B8:9D:1F Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 71D2C5718D51C9B5F60EFE482D0C53B3E156029E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01BE Signing time: Sat 28 Jun 2025 05:10:34 +0000 Manifest this update: Sat 28 Jun 2025 05:05:34 +0000 Manifest next update: Tue 01 Jul 2025 09:50:34 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: hH6mjnd08gwUFSzCCOJiOMRNIhGl7X58YFs7Lit2ufc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d2:c5:71:8d:51:c9:b5:f6:0e:fe:48:2d:0c:53:b3:e1:56:02:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Jun 28 05:05:34 2025 GMT Not After : Jul 1 09:50:34 2025 GMT Subject: CN=3B9D0A720F5391951BEECF9AA9E65DFD5FB89D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:cc:36:8b:b6:86:25:43:01:68:76:c0:fb: 9c:e7:09:cd:52:df:6f:f2:5b:8a:c1:7c:fc:a3:38: 2b:34:ed:83:bc:ee:70:f3:30:38:aa:56:26:a1:71: cb:18:43:06:8f:36:72:91:dd:10:43:76:66:95:7f: 7c:b3:58:3b:ea:25:aa:9a:fd:63:49:a2:fd:da:c9: f9:07:93:90:d1:33:4a:39:c0:81:3b:03:69:c2:60: 15:b8:f2:50:06:23:c8:55:e1:da:ea:df:9b:5b:7b: 47:0a:bc:56:9e:69:e8:b0:b2:05:49:ed:3a:e6:87: b4:1e:3a:e0:3c:f0:d6:6d:52:03:f7:f5:d4:fe:1d: 55:7f:1e:a2:b1:34:87:34:12:74:e3:d2:43:64:a1: 0e:b1:05:00:55:01:2c:d1:e8:82:e6:be:2a:5c:6d: 75:ce:4d:73:1f:63:3b:f2:d5:a6:f3:22:6e:2e:1d: b8:29:34:d5:df:34:08:bc:23:34:d3:d3:8d:ce:48: 77:23:55:23:d2:70:e3:ef:ed:c5:4f:1c:2c:28:77: 02:40:13:d5:5a:8d:c1:8f:4e:e2:2e:67:6c:6d:a5: 43:58:1a:b4:ba:25:12:62:4d:1d:5b:3a:7c:24:42: 17:40:08:17:b8:06:1d:97:1d:79:70:69:24:be:ee: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9D:0A:72:0F:53:91:95:1B:EE:CF:9A:A9:E6:5D:FD:5F:B8:9D:1F X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:22:58:b6:8a:a9:cb:c8:0b:bf:ee:cc:ec:5f:99:ca:f1:98: 59:ff:b0:7f:1f:5e:10:2d:84:35:e7:6c:2f:fe:96:e7:3c:df: ca:cd:4c:d3:20:24:85:31:8d:87:bd:fa:75:26:f9:28:23:2f: 01:6c:eb:e9:2d:a9:4a:99:79:df:f2:9c:5a:3d:b1:df:c7:af: 6e:c1:2a:d7:14:e5:2c:0c:cd:f7:1d:ef:8c:98:80:4e:04:7c: 97:95:bd:d3:66:1c:bc:5b:1c:f8:3a:d0:06:ad:45:6e:01:fb: bc:15:7d:61:b7:c9:a4:34:a2:c9:b4:7d:16:7c:78:93:c0:c6: d6:6a:20:d7:1a:63:42:11:22:ed:3c:19:57:3f:ae:86:8b:3f: f7:3a:b5:28:8c:33:2c:f3:8a:a9:95:54:2e:f7:90:c7:7b:80: 6d:02:a8:d3:6d:be:16:41:02:79:b3:22:af:6d:51:4b:5d:15: 10:33:d6:96:1a:e8:8b:64:fd:72:17:c3:10:c8:3c:23:13:6a: 46:34:5e:23:73:73:11:83:af:d1:37:ef:81:93:c0:4d:c3:3d: 76:91:ab:1f:b8:7d:19:2f:2b:2d:7f:c5:23:0f:db:1a:f4:59: f7:f1:83:ee:1f:32:2a:2a:f1:27:1c:53:87:fd:df:8a:97:a2: 2b:b1:a3:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdLFcY1RybX2Dv5ILQxTs+FWAp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTA2MjgwNTA1MzRaFw0yNTA3MDEwOTUwMzRaMDMxMTAvBgNV BAMTKDNCOUQwQTcyMEY1MzkxOTUxQkVFQ0Y5QUE5RTY1REZENUZCODlEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtksw2i7aGJUMBaHbA+5znCc1S 32/yW4rBfPyjOCs07YO87nDzMDiqViahccsYQwaPNnKR3RBDdmaVf3yzWDvqJaqa /WNJov3ayfkHk5DRM0o5wIE7A2nCYBW48lAGI8hV4drq35tbe0cKvFaeaeiwsgVJ 7Trmh7QeOuA88NZtUgP39dT+HVV/HqKxNIc0EnTj0kNkoQ6xBQBVASzR6ILmvipc bXXOTXMfYzvy1abzIm4uHbgpNNXfNAi8IzTT043OSHcjVSPScOPv7cVPHCwodwJA E9VajcGPTuIuZ2xtpUNYGrS6JRJiTR1bOnwkQhdACBe4Bh2XHXlwaSS+7vZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO50Kcg9TkZUb7s+aqeZd/V+4nR8wHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQiWLaKqcvIC7/uzOxfmcrxmFn/sH8fXhAt hDXnbC/+luc838rNTNMgJIUxjYe9+nUm+SgjLwFs6+ktqUqZed/ynFo9sd/Hr27B KtcU5SwMzfcd74yYgE4EfJeVvdNmHLxbHPg60AatRW4B+7wVfWG3yaQ0osm0fRZ8 eJPAxtZqINcaY0IRIu08GVc/roaLP/c6tSiMMyzziqmVVC73kMd7gG0CqNNtvhZB AnmzIq9tUUtdFRAz1pYa6Itk/XIXwxDIPCMTakY0XiNzcxGDr9E374GTwE3DPXaR qx+4fRkvKy1/xSMP2xr0Wffxg+4fMioq8SccU4f934qXoiuxoyQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:06 2025 by rpki-client