$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: 2Ivegr5FYiaretM8Ty/8RnpnCi4vjsZonQ51RkSPkK4= Subject key identifier: C8:4C:08:7E:46:BF:8C:96:F6:29:A7:C0:AE:4D:4F:B7:CF:58:36:0B Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 115D356D5A31EA94EE83570D2798C80542BBF422 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01A7 Signing time: Tue 06 May 2025 20:50:33 +0000 Manifest this update: Tue 06 May 2025 20:45:33 +0000 Manifest next update: Sat 10 May 2025 04:59:33 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: wiNqv1++j9GaZMj6wmp2dMoR/lCL9kBw20c69FUoE44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5d:35:6d:5a:31:ea:94:ee:83:57:0d:27:98:c8:05:42:bb:f4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: May 6 20:45:33 2025 GMT Not After : May 10 04:59:33 2025 GMT Subject: CN=C84C087E46BF8C96F629A7C0AE4D4FB7CF58360B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:3a:a5:5a:3e:4e:0c:d0:79:20:a8:23:d5: bd:34:0b:60:d3:58:bf:2f:41:2d:21:2a:a7:0c:b5: 49:f2:73:87:b1:89:a5:f9:c6:d7:74:91:51:e2:df: 5b:5d:db:48:97:ba:50:84:8e:54:2a:1a:0f:c6:dc: 93:79:ed:0a:39:d9:b6:b3:d4:b5:f3:29:6b:24:fb: 14:95:ac:fc:ab:db:66:e9:46:9e:04:25:cf:3d:3b: 9a:61:12:55:db:44:15:8f:1b:f9:cf:1f:f7:ea:2f: f8:d5:b1:2d:c3:81:c7:5e:b3:f5:ca:26:07:28:b5: e9:74:20:9f:53:3a:91:4b:58:ba:0c:90:69:5a:67: 8e:24:bc:be:25:83:65:a9:91:46:56:ff:b1:a4:98: 86:0c:d9:5a:fb:47:99:1c:e7:2d:13:00:8f:b4:15: 89:8f:d9:19:74:7d:38:65:40:82:ab:14:c7:ff:05: 83:ac:0e:a2:0a:a4:ba:2d:f4:cc:8e:83:33:95:25: 57:a2:89:e6:60:bc:db:70:a8:2f:d8:16:11:cb:0d: 10:8a:80:5e:be:9d:b1:b1:24:11:be:0a:d5:a5:43: f0:9e:9a:7b:6d:d6:06:b3:38:ae:61:a2:40:5a:7f: fb:a2:77:eb:49:c0:70:34:da:bc:79:93:7c:be:78: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4C:08:7E:46:BF:8C:96:F6:29:A7:C0:AE:4D:4F:B7:CF:58:36:0B X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c8:e9:18:b6:94:66:ea:1a:2c:01:93:00:89:fd:be:db:30: c6:f6:48:97:c1:ca:42:de:76:43:4a:9b:d6:e2:6a:24:9a:3a: 42:19:a1:df:5b:e4:29:7b:89:9c:16:ad:31:ae:b5:f2:54:e7: 83:88:af:53:4b:dd:fa:35:ad:52:57:e1:bb:2b:fa:11:2e:e4: ee:42:c3:df:99:73:b5:d2:cf:18:02:c2:9f:f1:f3:13:e5:dd: b5:33:21:52:fc:07:80:34:d3:a2:f2:63:bb:1f:9a:49:83:6b: a0:75:e8:34:95:d0:0b:e0:7f:45:f4:61:84:12:70:41:6d:99: 8e:e4:bf:df:eb:3e:95:1f:c7:17:f5:d4:d9:4a:fc:54:c3:a2: 16:ce:77:b1:c6:b1:9c:4e:f9:8f:35:cd:a6:2c:2c:be:37:6d: fd:4b:67:9e:6a:93:11:86:5c:be:13:65:57:8f:20:39:ca:53: 5a:02:d5:22:4f:87:32:0d:df:4d:6e:bd:25:ff:7e:ab:e1:53: fc:14:f9:8c:b0:8e:53:73:fb:46:06:0d:34:e8:53:90:53:90: 82:d9:45:60:27:81:9e:73:d2:bf:b2:ff:28:73:87:b3:ea:b2: f3:9f:98:b7:11:26:43:c0:11:71:a7:0f:1c:0c:a7:59:29:86: 24:46:08:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEV01bVox6pTug1cNJ5jIBUK79CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTA1MDYyMDQ1MzNaFw0yNTA1MTAwNDU5MzNaMDMxMTAvBgNV BAMTKEM4NEMwODdFNDZCRjhDOTZGNjI5QTdDMEFFNEQ0RkI3Q0Y1ODM2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUeTqlWj5ODNB5IKgj1b00C2DT WL8vQS0hKqcMtUnyc4exiaX5xtd0kVHi31td20iXulCEjlQqGg/G3JN57Qo52baz 1LXzKWsk+xSVrPyr22bpRp4EJc89O5phElXbRBWPG/nPH/fqL/jVsS3Dgcdes/XK Jgcotel0IJ9TOpFLWLoMkGlaZ44kvL4lg2WpkUZW/7GkmIYM2Vr7R5kc5y0TAI+0 FYmP2Rl0fThlQIKrFMf/BYOsDqIKpLot9MyOgzOVJVeiieZgvNtwqC/YFhHLDRCK gF6+nbGxJBG+CtWlQ/Cemntt1gazOK5hokBaf/uid+tJwHA02rx5k3y+eAmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEwIfka/jJb2KafArk1Pt89YNgswHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfI6Ri2lGbqGiwBkwCJ/b7bMMb2SJfBykLe dkNKm9biaiSaOkIZod9b5Cl7iZwWrTGutfJU54OIr1NL3fo1rVJX4bsr+hEu5O5C w9+Zc7XSzxgCwp/x8xPl3bUzIVL8B4A006LyY7sfmkmDa6B16DSV0Avgf0X0YYQS cEFtmY7kv9/rPpUfxxf11NlK/FTDohbOd7HGsZxO+Y81zaYsLL43bf1LZ55qkxGG XL4TZVePIDnKU1oC1SJPhzIN301uvSX/fqvhU/wU+YywjlNz+0YGDTToU5BTkILZ RWAngZ5z0r+y/yhzh7PqsvOfmLcRJkPAEXGnDxwMp1kphiRGCD0= -----END CERTIFICATE-----Generated at Thu May 8 07:59:54 2025 by rpki-client