$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json) Hash identifier: hd+7zxDQTSg14T8M1YHH5KaJmK7pl+xGx8NUbaTQkvk= Subject key identifier: 6B:71:94:87:92:A1:A6:97:8B:02:A8:71:6F:F7:9F:5B:35:26:09:37 Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Certificate serial: 6FB48E66CFB574772E95F2D8F562F635DA02256D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft Manifest number: 047F Signing time: Sun 11 May 2025 09:01:23 +0000 Manifest this update: Sun 11 May 2025 08:56:23 +0000 Manifest next update: Wed 14 May 2025 15:37:23 +0000 Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: iVnxW7j3EEkUpMI9PgdzdUxhMlOchU2uPgGPkrE8jsI=) 2: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: haULMMxylhHb1p5IB0YvGdVYts+WjtpKeS1wbuOW3is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 15:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b4:8e:66:cf:b5:74:77:2e:95:f2:d8:f5:62:f6:35:da:02:25:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Validity Not Before: May 11 08:56:23 2025 GMT Not After : May 14 15:37:23 2025 GMT Subject: CN=6B71948792A1A6978B02A8716FF79F5B35260937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:de:69:e9:b9:bf:04:2b:88:58:bf:f9:00: b8:19:48:1e:08:8f:32:e8:b4:06:eb:c4:cf:c4:47: c1:5f:a1:26:e3:82:31:bc:36:c6:cc:db:7c:1c:4d: 97:4a:5c:2f:14:72:d9:5c:cb:36:8b:8f:bd:16:70: 9e:a6:e5:3b:64:51:7c:e9:ab:45:84:9a:81:df:a7: ce:0c:95:42:ad:9d:38:06:51:dc:76:5b:99:5d:20: 98:ef:fe:11:25:50:89:b4:f6:87:ee:36:cb:73:22: 61:ba:e6:fc:d6:8f:3b:ef:ac:f3:5a:2f:96:ad:e4: c7:5e:d2:6f:04:89:2f:d8:e1:9d:fc:d3:b0:5f:c4: df:e5:ba:d3:dc:80:7d:14:f3:8e:a6:4f:ce:27:3e: c9:f3:60:58:9e:f0:af:86:9b:81:a6:d1:d2:67:d5: 9c:51:e9:26:de:2b:74:98:15:e0:83:2d:24:a7:ba: 82:b1:1b:89:db:d8:da:b3:f9:78:5d:19:a2:b6:34: a6:0c:06:59:25:1e:9f:40:f3:a6:53:04:ce:a9:35: e8:7a:72:ee:c2:39:ae:7e:2d:54:68:80:84:95:eb: a7:ee:e1:64:bb:48:f6:fe:f0:dd:bd:ad:37:6e:79: 3c:c0:e3:7d:84:5c:ec:95:e8:a8:80:7f:9b:1a:ff: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:94:87:92:A1:A6:97:8B:02:A8:71:6F:F7:9F:5B:35:26:09:37 X509v3 Authority Key Identifier: keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ff:d8:4e:d0:04:11:c5:88:f8:81:62:aa:9b:0b:a5:e2:95: ca:66:ed:25:11:80:8e:2e:7c:cd:b9:c3:6f:83:ec:75:f6:3f: 0a:4a:88:5e:53:fd:9a:22:46:62:9b:49:03:2c:37:3e:59:bc: 6e:81:76:e9:eb:a1:7f:ae:3f:2f:97:24:86:e3:4b:75:a0:46: 28:b7:29:be:be:e1:5a:00:8f:b1:67:e9:f3:35:10:08:59:ff: e1:80:5a:27:9d:05:7e:2d:35:3b:a8:63:73:f9:bb:d4:94:62: f1:84:30:68:28:34:7b:c1:13:0a:70:69:ad:5a:a2:20:54:a4: 8f:42:15:eb:92:66:bd:74:84:19:55:f0:57:9e:93:a5:3e:98: c0:37:7a:a1:7e:5f:81:e6:19:73:b8:8d:d2:52:1f:66:ae:2b: 9b:e1:a6:02:ae:24:07:59:0f:06:c5:4c:77:87:42:ec:0f:b7: 19:08:c6:0b:ec:37:8b:78:2d:e1:ab:d5:14:db:a9:27:b3:0e: 8e:3c:2a:21:e9:28:65:53:5d:2c:03:35:84:fe:a5:6a:6f:5e: 6e:fe:cc:d1:4a:18:af:75:ee:e0:e9:05:db:69:0d:ec:d9:43: 83:be:9e:d2:ae:5d:2f:cc:56:9d:0a:b1:4f:27:81:87:4c:08: c6:3e:7d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7SOZs+1dHculfLY9WL2NdoCJW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMw N0JFMERBQjAeFw0yNTA1MTEwODU2MjNaFw0yNTA1MTQxNTM3MjNaMDMxMTAvBgNV BAMTKDZCNzE5NDg3OTJBMUE2OTc4QjAyQTg3MTZGRjc5RjVCMzUyNjA5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJd5p6bm/BCuIWL/5ALgZSB4I jzLotAbrxM/ER8FfoSbjgjG8NsbM23wcTZdKXC8UctlcyzaLj70WcJ6m5TtkUXzp q0WEmoHfp84MlUKtnTgGUdx2W5ldIJjv/hElUIm09ofuNstzImG65vzWjzvvrPNa L5at5Mde0m8EiS/Y4Z3807BfxN/lutPcgH0U846mT84nPsnzYFie8K+Gm4Gm0dJn 1ZxR6SbeK3SYFeCDLSSnuoKxG4nb2Nqz+XhdGaK2NKYMBlklHp9A86ZTBM6pNeh6 cu7COa5+LVRogISV66fu4WS7SPb+8N29rTdueTzA432EXOyV6KiAf5sa/9mFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa3GUh5KhppeLAqhxb/efWzUmCTcwHwYDVR0j BBgwFoAUUL0XOdU/gyqCs+hslTXeYwe+DaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODQyM2I4YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC81MEJEMTczOUQ1 M0Y4MzJBODJCM0U4NkM5NTM1REU2MzA3QkUwREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMwN0JF MERBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURF NjMwN0JFMERBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH/2E7QBBHFiPiBYqqbC6Xilcpm7SURgI4u fM25w2+D7HX2PwpKiF5T/ZoiRmKbSQMsNz5ZvG6BdunroX+uPy+XJIbjS3WgRii3 Kb6+4VoAj7Fn6fM1EAhZ/+GAWiedBX4tNTuoY3P5u9SUYvGEMGgoNHvBEwpwaa1a oiBUpI9CFeuSZr10hBlV8Feek6U+mMA3eqF+X4HmGXO4jdJSH2auK5vhpgKuJAdZ DwbFTHeHQuwPtxkIxgvsN4t4LeGr1RTbqSezDo48KiHpKGVTXSwDNYT+pWpvXm7+ zNFKGK917uDpBdtpDezZQ4O+ntKuXS/MVp0KsU8ngYdMCMY+fdY= -----END CERTIFICATE-----Generated at Mon May 12 07:30:25 2025 by rpki-client