$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: SD0Qfeh8iZqXcDXxLXlHfDw9PVbW619Cj0SbTD9DXOs= Subject key identifier: 20:3E:1D:57:DD:A5:A5:5A:64:02:A1:CE:FB:FD:D5:12:7B:6F:95:29 Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 5F39E73B1CFC326FFF21054562ECB5757F0757CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01F0 Signing time: Sun 19 Oct 2025 17:40:36 +0000 Manifest this update: Sun 19 Oct 2025 17:35:36 +0000 Manifest next update: Thu 23 Oct 2025 00:30:36 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: GkiE02E/aOylaP9xUamBCncT5L4qO/xBsQmBzR606Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:39:e7:3b:1c:fc:32:6f:ff:21:05:45:62:ec:b5:75:7f:07:57:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Oct 19 17:35:36 2025 GMT Not After : Oct 23 00:30:36 2025 GMT Subject: CN=203E1D57DDA5A55A6402A1CEFBFDD5127B6F9529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:84:22:76:c1:0e:4e:e3:6c:50:ef:45:ce: b3:bd:77:80:71:e4:93:6b:69:a6:f7:bb:67:b8:08: e9:83:1e:97:6c:63:85:a6:f9:aa:f0:02:30:21:39: 81:d7:28:1b:1f:4e:1b:19:4c:39:9c:6b:57:f8:67: 61:9a:75:ce:8e:b7:aa:e0:5d:57:4c:f1:ec:f7:85: 07:dc:cc:57:ff:d0:d9:23:27:01:3b:37:f1:5a:b5: 1d:c8:5b:e4:66:f0:f3:68:0d:64:36:8d:87:8d:4e: 25:9b:7f:47:72:eb:ea:ef:0a:a6:db:8d:e7:b7:ef: 75:92:6e:39:8d:ed:42:86:81:8f:b8:b9:40:01:e8: 22:10:06:0a:ea:af:84:3c:a0:a0:44:1b:38:06:5d: ca:d1:47:d8:94:7d:0e:13:25:34:6f:2a:8a:c8:c4: b3:d2:f1:e8:9e:7a:9f:e0:fb:92:72:74:6b:21:7c: 87:9a:a4:6e:eb:6d:01:d6:68:6b:b1:a7:59:de:ea: a2:86:5f:a8:98:d3:61:ba:d1:38:bb:f6:62:4c:b4: 39:11:dd:7a:c7:96:33:bb:42:8b:05:ba:79:ea:11: 8f:96:05:d2:8f:22:2c:49:15:d0:f0:67:4f:7a:ee: 63:88:6d:1b:d5:c9:97:5b:8a:13:bd:45:32:5e:b6: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:1D:57:DD:A5:A5:5A:64:02:A1:CE:FB:FD:D5:12:7B:6F:95:29 X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9c:82:ab:1b:3f:f2:63:69:4d:7f:1b:cd:94:ca:b0:1d:bd: 30:e5:96:43:f5:21:db:18:57:02:5e:10:2c:42:7c:ce:73:c6: e9:0b:fd:de:cc:69:8e:11:c0:70:9d:0b:b1:63:0f:4d:ad:c4: ed:80:12:a5:68:70:d5:06:db:f6:e8:a4:3d:84:d2:9c:7f:27: a6:38:5a:38:72:b6:4c:5f:ed:70:d6:19:ec:dd:34:2d:26:ca: a1:a4:67:2f:6a:ed:2a:8e:14:d4:2c:28:ed:27:4e:6a:b5:92: de:d2:cc:eb:c6:0a:6e:82:7f:4d:2d:69:d5:92:d1:8f:b9:44: 5f:b9:9e:dc:ab:ab:67:ae:87:b3:33:02:cf:8f:76:ad:6e:f3: 4d:e0:32:9e:c7:92:63:eb:c4:66:71:73:50:ed:54:17:46:dc: 6c:c7:2b:31:31:e9:a8:fa:54:3e:ef:70:89:f7:a3:44:10:e2: 5a:25:57:f0:4c:66:ef:2a:5c:92:bf:c3:34:b4:c5:49:3d:66: 68:a5:58:45:15:12:0e:b8:bb:a2:aa:a2:7a:df:7e:80:58:9b: f5:7f:78:90:74:58:9c:51:e6:1c:45:db:a4:28:d9:c1:7d:3e: 49:16:85:f9:ea:ee:ad:74:ef:8a:49:2b:b9:10:ea:8d:d1:82: 9d:4a:77:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXznnOxz8Mm//IQVFYuy1dX8HV80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTEwMTkxNzM1MzZaFw0yNTEwMjMwMDMwMzZaMDMxMTAvBgNV BAMTKDIwM0UxRDU3RERBNUE1NUE2NDAyQTFDRUZCRkRENTEyN0I2Rjk1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINYQidsEOTuNsUO9FzrO9d4Bx 5JNraab3u2e4COmDHpdsY4Wm+arwAjAhOYHXKBsfThsZTDmca1f4Z2Gadc6Ot6rg XVdM8ez3hQfczFf/0NkjJwE7N/FatR3IW+Rm8PNoDWQ2jYeNTiWbf0dy6+rvCqbb jee373WSbjmN7UKGgY+4uUAB6CIQBgrqr4Q8oKBEGzgGXcrRR9iUfQ4TJTRvKorI xLPS8eieep/g+5JydGshfIeapG7rbQHWaGuxp1ne6qKGX6iY02G60Ti79mJMtDkR 3XrHljO7QosFunnqEY+WBdKPIixJFdDwZ0967mOIbRvVyZdbihO9RTJetqJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUID4dV92lpVpkAqHO+/3VEntvlSkwHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmcgqsbP/JjaU1/G82UyrAdvTDllkP1IdsY VwJeECxCfM5zxukL/d7MaY4RwHCdC7FjD02txO2AEqVocNUG2/bopD2E0px/J6Y4 Wjhytkxf7XDWGezdNC0myqGkZy9q7SqOFNQsKO0nTmq1kt7SzOvGCm6Cf00tadWS 0Y+5RF+5ntyrq2euh7MzAs+Pdq1u803gMp7HkmPrxGZxc1DtVBdG3GzHKzEx6aj6 VD7vcIn3o0QQ4lolV/BMZu8qXJK/wzS0xUk9ZmilWEUVEg64u6KqonrffoBYm/V/ eJB0WJxR5hxF26Qo2cF9PkkWhfnq7q1074pJK7kQ6o3Rgp1Kd4c= -----END CERTIFICATE-----Generated at Mon Oct 20 15:03:21 2025 by rpki-client