$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: 19FR3icawn3g4Ngsxz1wEtYmIt7piJISamuw8BKwyx4= Subject key identifier: EA:78:2D:AC:74:3A:4E:AB:93:71:20:A7:21:6A:FA:BC:D1:97:8C:0C Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 5B51A4007D9FEE3F480ACD19349057FB6BB2A573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 0235 Signing time: Tue 24 Mar 2026 17:00:43 +0000 Manifest this update: Tue 24 Mar 2026 16:55:43 +0000 Manifest next update: Fri 27 Mar 2026 22:58:43 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: zE5Lde/jOoxwHeHuIvS9Oo3yl9XYb1Cd0hMycSL+hYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:51:a4:00:7d:9f:ee:3f:48:0a:cd:19:34:90:57:fb:6b:b2:a5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Mar 24 16:55:43 2026 GMT Not After : Mar 27 22:58:43 2026 GMT Subject: CN=EA782DAC743A4EAB937120A7216AFABCD1978C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:cc:76:4f:40:45:78:84:23:be:07:d3:92: 2a:f3:0d:37:34:dc:0b:e9:98:f7:6c:a5:a9:ac:ed: b0:6b:85:6f:9f:b3:30:37:9a:0a:85:9a:29:77:58: f4:75:dc:8b:2b:55:74:36:58:98:dd:0b:27:1a:0c: 3e:fe:19:ba:fd:9e:42:c9:39:ed:26:36:9c:21:82: ca:01:67:2e:bd:d1:c3:41:9b:5e:6c:5d:2f:d1:e5: 84:dd:db:dc:ca:50:24:3b:a5:56:c5:01:41:d3:7f: d0:b9:33:17:56:a0:19:04:fe:6e:1b:0c:fa:cc:7f: 28:47:67:4f:4a:dc:a4:c4:44:d0:6e:74:22:0f:5c: e8:0b:d3:6c:48:54:a8:5c:fb:50:7a:84:42:51:91: 5f:de:07:c1:50:58:c2:0e:c2:8c:46:70:6f:63:8f: e0:47:c3:c3:1f:a6:97:91:db:5b:e9:37:3f:40:34: 44:da:69:88:94:ba:03:da:b2:cf:8c:5d:a9:2e:e6: cf:ea:92:6b:10:8e:6a:ad:f9:14:20:25:5a:d2:da: 6d:00:d9:53:f1:e2:23:0c:89:8a:b3:50:0c:43:02: ec:69:ec:b6:27:0d:ca:8d:98:e2:20:61:51:46:4f: d2:fe:cb:fd:9d:2c:00:28:39:f9:8b:c2:a4:4d:e8: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:78:2D:AC:74:3A:4E:AB:93:71:20:A7:21:6A:FA:BC:D1:97:8C:0C X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:56:5b:17:76:b9:fd:29:9f:9b:d0:bd:4e:68:46:b2:cc: de:b5:97:62:1b:8e:f0:86:66:97:83:96:9d:0e:08:a3:7f:8c: 9e:6f:79:8d:bb:48:4c:8e:53:ae:e5:47:3c:0e:fb:b2:d6:e5: 60:d3:1b:34:59:96:89:ea:bb:85:fe:7f:67:f7:2b:16:c7:68: 99:c5:88:b5:9c:14:41:51:3b:b0:52:58:9e:a2:76:da:e7:98: 77:4a:e2:03:93:b2:27:51:62:23:6e:c2:bd:aa:63:4a:35:be: 0d:50:ec:79:4f:fb:af:b8:da:de:af:7b:b9:a6:8b:5a:33:88: b4:88:bd:9d:a2:13:17:c3:78:ec:6c:36:11:4e:c4:56:b7:dc: 87:64:b8:79:04:9f:7c:a7:3c:dd:18:58:cb:27:73:d8:ff:d6: 1a:4d:1e:a5:c9:57:a1:09:7e:59:a0:0f:ce:b4:b5:95:22:3f: ea:fb:97:9e:be:fd:98:32:00:54:e9:ea:3a:1b:4c:b9:3c:1f: 6e:d2:bc:22:c8:c4:54:44:93:0b:9b:b8:ed:3e:e8:18:29:29: cd:8b:b3:d8:e1:0b:4d:85:57:37:9d:fa:95:47:1d:19:cc:26: 38:85:7d:8b:25:d9:50:bc:65:5e:e4:5b:02:98:57:19:94:a2: db:17:1d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1GkAH2f7j9ICs0ZNJBX+2uypXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNjAzMjQxNjU1NDNaFw0yNjAzMjcyMjU4NDNaMDMxMTAvBgNV BAMTKEVBNzgyREFDNzQzQTRFQUI5MzcxMjBBNzIxNkFGQUJDRDE5NzhDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDsx2T0BFeIQjvgfTkirzDTc0 3AvpmPdspams7bBrhW+fszA3mgqFmil3WPR13IsrVXQ2WJjdCycaDD7+Gbr9nkLJ Oe0mNpwhgsoBZy690cNBm15sXS/R5YTd29zKUCQ7pVbFAUHTf9C5MxdWoBkE/m4b DPrMfyhHZ09K3KTERNBudCIPXOgL02xIVKhc+1B6hEJRkV/eB8FQWMIOwoxGcG9j j+BHw8MfppeR21vpNz9ANETaaYiUugPass+MXaku5s/qkmsQjmqt+RQgJVrS2m0A 2VPx4iMMiYqzUAxDAuxp7LYnDcqNmOIgYVFGT9L+y/2dLAAoOfmLwqRN6LCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ngtrHQ6TquTcSCnIWr6vNGXjAwwHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkHVlsXdrn9KZ+b0L1OaEayzN61l2IbjvCG ZpeDlp0OCKN/jJ5veY27SEyOU67lRzwO+7LW5WDTGzRZlonqu4X+f2f3KxbHaJnF iLWcFEFRO7BSWJ6idtrnmHdK4gOTsidRYiNuwr2qY0o1vg1Q7HlP+6+42t6ve7mm i1oziLSIvZ2iExfDeOxsNhFOxFa33IdkuHkEn3ynPN0YWMsnc9j/1hpNHqXJV6EJ flmgD860tZUiP+r7l56+/ZgyAFTp6jobTLk8H27SvCLIxFREkwubuO0+6BgpKc2L s9jhC02FVzed+pVHHRnMJjiFfYsl2VC8ZV7kWwKYVxmUotsXHbY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:44 2026 by rpki-client