$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft File: 50A2EED432F4BC38B22EB315635CF701DA108F7E.mft (raw, json) Hash identifier: tdaZSvQZrCKP/ir4EzhG9CNwvEStRSxwi90IyCCecGY= Subject key identifier: 06:C2:2E:72:6E:49:BD:77:8B:55:31:25:BE:C9:AB:6F:C9:41:F8:89 Authority key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E Certificate issuer: /CN=50A2EED432F4BC38B22EB315635CF701DA108F7E Certificate serial: 02BFF95203DEFCC384C87214FF1BF7F569E2E15C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft Manifest number: 03E1 Signing time: Wed 25 Mar 2026 08:51:43 +0000 Manifest this update: Wed 25 Mar 2026 08:46:43 +0000 Manifest next update: Sat 28 Mar 2026 17:40:43 +0000 Files and hashes: 1: 50A2EED432F4BC38B22EB315635CF701DA108F7E.crl (hash: HEmBTSQaTuWJqtYIOpKh9KdP8GKb9Iy7vj8vVxrCWn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bf:f9:52:03:de:fc:c3:84:c8:72:14:ff:1b:f7:f5:69:e2:e1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E Validity Not Before: Mar 25 08:46:43 2026 GMT Not After : Mar 28 17:40:43 2026 GMT Subject: CN=06C22E726E49BD778B553125BEC9AB6FC941F889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:69:87:c2:2f:e6:93:27:e8:fc:68:95:04: 4a:89:b1:ee:bd:98:da:83:e4:7c:13:88:51:f5:83: 52:dd:aa:4e:1d:9b:50:32:9b:02:00:52:44:a1:6e: 4d:f2:51:2c:22:92:d8:e2:a3:8c:87:72:5b:17:53: 1a:9d:54:2a:6e:ad:52:ae:c5:a8:e5:23:69:87:5f: cf:8e:4f:37:f0:e2:48:ea:86:36:51:e4:24:7a:e4: 88:85:b4:4d:f1:3a:92:fa:46:bf:08:e5:e1:26:09: 5a:45:29:cc:f8:be:3b:0f:5d:92:49:2b:8b:53:a4: 31:3c:ef:d4:b3:95:b3:2d:93:ac:30:a6:c4:ee:43: 0b:db:00:22:8b:e8:6d:ee:98:77:48:28:dc:37:5e: 17:a1:df:97:05:ba:b9:31:31:e6:44:4a:98:e7:46: 54:26:20:83:11:ad:2d:c2:29:21:4a:a6:a5:ee:12: 39:79:66:ee:a3:d2:da:6b:33:80:bc:33:06:cd:69: b6:84:15:3b:0c:49:49:be:b9:11:48:26:21:9e:7f: 82:0a:1b:7c:18:3b:c8:cf:e6:b6:75:19:e4:f7:31: de:4e:bf:4b:0b:f8:fd:f8:40:f9:ea:3b:5f:46:b8: 8e:ed:aa:f0:e6:35:24:44:29:a2:87:9e:c8:4b:da: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:2E:72:6E:49:BD:77:8B:55:31:25:BE:C9:AB:6F:C9:41:F8:89 X509v3 Authority Key Identifier: keyid:50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:f8:71:86:0b:01:dd:3c:b3:b3:f3:45:d4:c1:ab:75:51: e2:f6:79:54:08:81:08:6f:84:b3:93:0b:22:30:d5:4c:45:8e: 65:d1:3a:e3:53:e5:39:28:78:c6:3d:86:f5:ea:ea:44:54:bf: f5:51:ca:af:fe:c0:bd:52:72:c3:50:d9:90:2c:94:7f:07:ae: 92:9a:7e:ac:87:2b:da:6f:86:8f:19:4f:b1:6e:04:01:00:a4: c5:fe:5b:e4:19:79:8c:cb:c1:cd:39:01:36:99:19:4b:24:c6: 36:f8:fb:c7:1d:45:30:45:3d:07:99:3d:70:c7:f3:21:2b:e7: 85:ec:a3:51:5f:26:f0:1f:58:03:b8:be:29:2e:22:59:f1:f5: 89:18:35:0c:d7:c6:62:a4:e4:33:2d:35:4d:cf:dd:4e:c0:a5: 93:4d:d9:4e:42:a4:66:9e:19:d9:86:78:06:4c:4e:38:ee:96: f2:e1:a7:1d:c5:dc:04:e8:c5:d6:2d:ae:4a:98:dc:cc:b9:ce: 81:0e:a0:c4:2c:07:7e:2b:b9:1f:37:7b:ac:5f:45:68:be:cc: 3f:f4:4a:18:1e:73:a1:2c:7e:a7:bc:27:4d:38:d1:0f:ab:58: e7:a5:71:d1:7c:13:d6:f4:c8:c7:0c:5f:35:bf:6c:d2:2d:22: b8:c5:35:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr/5UgPe/MOEyHIU/xv39Wni4VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBBMkVFRDQzMkY0QkMzOEIyMkVCMzE1NjM1Q0Y3MDFE QTEwOEY3RTAeFw0yNjAzMjUwODQ2NDNaFw0yNjAzMjgxNzQwNDNaMDMxMTAvBgNV BAMTKDA2QzIyRTcyNkU0OUJENzc4QjU1MzEyNUJFQzlBQjZGQzk0MUY4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3mmHwi/mkyfo/GiVBEqJse69 mNqD5HwTiFH1g1Ldqk4dm1AymwIAUkShbk3yUSwiktjio4yHclsXUxqdVCpurVKu xajlI2mHX8+OTzfw4kjqhjZR5CR65IiFtE3xOpL6Rr8I5eEmCVpFKcz4vjsPXZJJ K4tTpDE879SzlbMtk6wwpsTuQwvbACKL6G3umHdIKNw3Xheh35cFurkxMeZESpjn RlQmIIMRrS3CKSFKpqXuEjl5Zu6j0tprM4C8MwbNabaEFTsMSUm+uRFIJiGef4IK G3wYO8jP5rZ1GeT3Md5Ov0sL+P34QPnqO19GuI7tqvDmNSREKaKHnshL2hv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsIucm5JvXeLVTElvsmrb8lB+IkwHwYDVR0j BBgwFoAUUKLu1DL0vDiyLrMVY1z3AdoQj34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZWI3OGY2OC1jN2NiLTQ1MmYtOTZiNS1jNDFkNjUzNzIwMjEvMC81MEEyRUVENDMy RjRCQzM4QjIyRUIzMTU2MzVDRjcwMURBMTA4RjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBBMkVFRDQzMkY0QkMzOEIyMkVCMzE1NjM1Q0Y3MDFEQTEw OEY3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWViNzhmNjgtYzdjYi00NTJmLTk2 YjUtYzQxZDY1MzcyMDIxLzAvNTBBMkVFRDQzMkY0QkMzOEIyMkVCMzE1NjM1Q0Y3 MDFEQTEwOEY3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUs+HGGCwHdPLOz80XUwat1UeL2eVQIgQhv hLOTCyIw1UxFjmXROuNT5TkoeMY9hvXq6kRUv/VRyq/+wL1ScsNQ2ZAslH8HrpKa fqyHK9pvho8ZT7FuBAEApMX+W+QZeYzLwc05ATaZGUskxjb4+8cdRTBFPQeZPXDH 8yEr54Xso1FfJvAfWAO4vikuIlnx9YkYNQzXxmKk5DMtNU3P3U7ApZNN2U5CpGae GdmGeAZMTjjulvLhpx3F3AToxdYtrkqY3My5zoEOoMQsB34ruR83e6xfRWi+zD/0 Shgec6Esfqe8J0040Q+rWOelcdF8E9b0yMcMXzW/bNItIrjFNWE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:35 2026 by rpki-client