$ rpki-client -vvf repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft File: 50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft (raw, json) Hash identifier: XSH0LwpOEx2nRQwIHa7cG/u0TtnVS54XK4MScj94Sp0= Subject key identifier: F4:F5:12:34:37:EC:34:C5:99:BD:E0:47:45:AF:D8:00:A1:97:9F:57 Authority key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87 Certificate issuer: /CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87 Certificate serial: 136F86343C6B1A49E534C2E1FF9B8E9D3201BEFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft Manifest number: 012D Signing time: Tue 08 Apr 2025 05:02:22 +0000 Manifest this update: Tue 08 Apr 2025 04:57:22 +0000 Manifest next update: Fri 11 Apr 2025 05:53:22 +0000 Files and hashes: 1: 50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl (hash: MS4wHBaSVl3PwGx3Vy6+nmYE0cYEXtvw7noPstGGgoY=) 2: 3130332e33302e3137302e302f32332d3233203d3e20313331373630.roa (hash: NUfOmBVdpcAA/1lr/CUild0ONSeSJsEom9DX7lC0DMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 05:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6f:86:34:3c:6b:1a:49:e5:34:c2:e1:ff:9b:8e:9d:32:01:be:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87 Validity Not Before: Apr 8 04:57:22 2025 GMT Not After : Apr 11 05:53:22 2025 GMT Subject: CN=F4F5123437EC34C599BDE04745AFD800A1979F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:7c:1a:8a:67:c5:16:75:c9:99:39:a5:5e: 02:6d:41:c3:a0:7e:b8:14:74:00:5b:26:90:36:d9: 7f:de:bc:5e:b1:53:7a:c9:44:e0:fd:ff:76:4a:0d: e0:77:1e:d7:69:8d:30:fc:8d:70:f7:f6:f1:8c:1d: 6a:ca:89:17:e3:9a:b9:8b:88:69:8e:8c:9b:72:f0: 51:20:3e:d3:f0:82:97:bc:2d:b4:17:c5:86:30:ba: 2b:2f:3a:56:e3:6b:cc:e3:3f:ba:7d:5c:72:ed:e6: 20:dd:15:08:4a:a2:0e:67:17:86:7d:9e:52:0f:08: 5e:a6:a0:0a:3d:94:ea:a7:95:e1:28:f0:b8:46:f2: 7e:bb:c5:bd:aa:f9:2c:45:22:28:65:f2:37:17:31: 5c:78:fa:5d:98:b2:80:d8:f4:3d:26:5b:7a:cf:6d: ff:0e:93:cc:ac:03:1b:73:f9:6d:5d:37:51:fe:5e: d5:c8:41:71:7a:fa:42:df:12:f8:56:79:90:3a:7b: e8:d2:7f:c8:d5:bf:91:09:3e:0a:4d:f6:4f:45:be: 8e:db:4d:ea:07:e1:c3:77:11:73:2b:f8:97:0d:6f: 5e:7c:70:4a:07:1a:a6:ab:24:97:f2:9b:e7:1e:24: 19:4f:dc:ec:75:a7:d5:e5:ca:9e:96:ea:21:75:f4: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F5:12:34:37:EC:34:C5:99:BD:E0:47:45:AF:D8:00:A1:97:9F:57 X509v3 Authority Key Identifier: keyid:50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ad:5a:d7:d3:97:4f:7f:71:a8:9a:93:39:02:1e:4e:90:29: 66:9d:65:20:22:fd:92:47:b6:70:a2:29:0f:54:bc:ab:de:75: c2:ec:8b:1b:6c:2e:22:3d:e4:86:c3:e6:bd:87:e6:65:dc:97: 5e:4e:fe:bc:42:47:19:3d:75:d5:4c:e2:7c:f5:34:54:a2:58: 4d:20:c5:e4:15:4c:d1:72:3a:b1:41:b7:8f:da:8c:34:fd:4a: ae:ab:78:e9:53:6b:85:b5:e8:5f:6b:18:17:21:b5:b8:33:a3: d1:71:0f:79:52:f5:c4:cc:bf:06:24:aa:6b:f6:0f:e5:0a:6c: 47:b8:43:1c:9d:3f:44:96:ac:1f:3e:0b:f5:59:98:0a:7f:ad: ad:e8:eb:20:03:af:02:e3:f0:f9:de:fb:85:8e:70:92:fd:c6: e6:40:4b:c4:36:7e:5a:d0:c3:c1:44:5d:5c:48:6c:8b:13:59: 69:37:16:df:15:ed:16:de:f2:18:f7:9c:62:a4:34:02:65:db: 3e:00:15:6e:2c:bd:56:23:50:de:cf:6d:ce:c0:44:b6:a7:b1: 18:e8:27:49:21:ec:18:c8:69:9e:5c:2b:85:2d:01:5c:95:ab: ff:d2:7d:fe:c5:9b:7a:0d:62:04:1b:b1:09:e9:be:2e:be:26: 0a:61:47:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2+GNDxrGknlNMLh/5uOnTIBvvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4 MTAzOEY4NzAeFw0yNTA0MDgwNDU3MjJaFw0yNTA0MTEwNTUzMjJaMDMxMTAvBgNV BAMTKEY0RjUxMjM0MzdFQzM0QzU5OUJERTA0NzQ1QUZEODAwQTE5NzlGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztnwaimfFFnXJmTmlXgJtQcOg frgUdABbJpA22X/evF6xU3rJROD9/3ZKDeB3HtdpjTD8jXD39vGMHWrKiRfjmrmL iGmOjJty8FEgPtPwgpe8LbQXxYYwuisvOlbja8zjP7p9XHLt5iDdFQhKog5nF4Z9 nlIPCF6moAo9lOqnleEo8LhG8n67xb2q+SxFIihl8jcXMVx4+l2YsoDY9D0mW3rP bf8Ok8ysAxtz+W1dN1H+XtXIQXF6+kLfEvhWeZA6e+jSf8jVv5EJPgpN9k9Fvo7b TeoH4cN3EXMr+JcNb158cEoHGqarJJfym+ceJBlP3Ox1p9Xlyp6W6iF19JKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PUSNDfsNMWZveBHRa/YAKGXn1cwHwYDVR0j BBgwFoAUUKkunJ8NRckr+l6GSyRsuoEDj4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTYyYWE4YS0wNmU0LTQ2MzQtYjUwMC1hNTI3Y2U4ZTA0ODkvMC81MEE5MkU5QzlG MEQ0NUM5MkJGQTVFODY0QjI0NkNCQTgxMDM4Rjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4MTAz OEY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTk2MmFhOGEtMDZlNC00NjM0LWI1 MDAtYTUyN2NlOGUwNDg5LzAvNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZD QkE4MTAzOEY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOtWtfTl09/caiakzkCHk6QKWadZSAi/ZJH tnCiKQ9UvKvedcLsixtsLiI95IbD5r2H5mXcl15O/rxCRxk9ddVM4nz1NFSiWE0g xeQVTNFyOrFBt4/ajDT9Sq6reOlTa4W16F9rGBchtbgzo9FxD3lS9cTMvwYkqmv2 D+UKbEe4QxydP0SWrB8+C/VZmAp/ra3o6yADrwLj8Pne+4WOcJL9xuZAS8Q2flrQ w8FEXVxIbIsTWWk3Ft8V7Rbe8hj3nGKkNAJl2z4AFW4svVYjUN7Pbc7ARLansRjo J0kh7BjIaZ5cK4UtAVyVq//Sff7Fm3oNYgQbsQnpvi6+JgphR04= -----END CERTIFICATE-----Generated at Tue Apr 8 14:27:58 2025 by rpki-client