$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft File: 50D9825940B483F044841C179E5B7712607CAB2A.mft (raw, json) Hash identifier: 99O3vVNI6s20+S43TJJ/mq6oIidH/UHSA1SsQ93MwQg= Subject key identifier: 83:7E:89:61:1C:3C:6F:79:F1:6E:AF:BA:22:24:CD:1A:E9:C0:F8:BA Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 2D647ACAFEE9D6702F423E2CC93AF95506F0D99D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft Manifest number: 01EC Signing time: Tue 03 Jun 2025 21:13:39 +0000 Manifest this update: Tue 03 Jun 2025 21:08:39 +0000 Manifest next update: Sat 07 Jun 2025 06:13:39 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: xyN4gf78a7jI8Z4ciAYVpZOIcZkGTzx+yhZ1lijRom8=) 2: 50D9825940B483F044841C179E5B7712607CAB2A.crl (hash: O8vz5291KURlgs8JqhIdQcR8qDGl0hrofIracIEXcNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:64:7a:ca:fe:e9:d6:70:2f:42:3e:2c:c9:3a:f9:55:06:f0:d9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Jun 3 21:08:39 2025 GMT Not After : Jun 7 06:13:39 2025 GMT Subject: CN=837E89611C3C6F79F16EAFBA2224CD1AE9C0F8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:8c:0f:1f:f4:79:73:a2:c6:d3:f6:27:48: c6:28:c0:ea:db:27:01:56:54:c4:52:bf:5d:a8:1e: 0c:f7:77:93:e1:00:db:8c:a8:c3:37:43:17:4e:12: e9:3d:66:ab:de:62:71:20:b9:e4:a6:38:a2:ca:46: d0:81:d6:ba:b0:e0:30:13:a4:dc:76:db:51:37:09: 64:76:14:ea:c1:ce:09:43:79:96:49:09:a4:0e:87: b7:bb:45:8f:6e:b0:ad:a6:24:93:3f:57:5e:b5:1b: 2b:fd:52:56:bd:33:f3:7f:67:bf:a7:ad:2c:49:1a: 81:5c:5d:47:e4:6b:a0:ef:8e:5c:a1:ea:fa:ae:94: f4:df:fa:1d:1e:dc:5d:90:f3:bc:f8:1b:c2:17:2c: 00:b2:35:22:66:ac:a0:3a:27:10:45:5d:c2:23:bb: 32:32:96:2f:1f:e8:85:12:3e:c4:3f:74:0e:32:66: 3b:f8:93:01:32:23:2f:3a:42:bc:38:25:27:42:46: ba:96:1e:23:a0:7d:5e:f2:2a:dd:50:62:59:41:18: 04:bd:39:98:99:71:52:84:4a:87:0b:76:61:a3:b3: d0:30:68:99:c9:02:4a:58:9b:01:70:eb:bc:12:ad: 0c:2c:be:a2:25:22:e1:c4:ad:b8:60:5f:34:71:66: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:89:61:1C:3C:6F:79:F1:6E:AF:BA:22:24:CD:1A:E9:C0:F8:BA X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f7:ed:d1:30:72:fc:d5:e1:a4:6d:0c:fb:97:3b:51:f7:db: c3:98:4e:fb:64:7f:99:90:b0:e9:92:73:e8:71:ab:c2:ee:40: 37:60:75:06:46:f9:08:b0:51:98:c9:ae:12:92:55:31:76:c9: 2c:d1:0c:4c:ac:33:16:79:ff:cb:50:8a:ee:2c:14:34:de:21: 57:22:04:36:c6:4b:24:07:03:5f:74:50:86:6c:fd:e2:2f:24: da:2f:df:54:78:b1:91:81:08:ff:e6:95:37:06:78:d2:28:3c: 49:eb:29:b5:33:d4:69:10:28:41:98:50:81:2d:ad:10:1e:2e: 20:49:34:6e:85:3b:8b:44:45:90:85:ae:ab:f9:4b:3d:06:c1: f9:b2:f0:fb:05:c1:3c:b2:19:e7:43:9a:07:30:19:48:a1:0c: 24:e9:90:77:c5:ef:a8:43:b6:35:cf:76:c8:61:4f:92:c0:04: 44:76:ce:a5:f6:3f:00:31:74:d3:40:6e:01:35:c2:b9:43:6e: 09:8f:4e:65:9a:23:0a:13:17:07:d2:7d:ea:5a:db:73:c3:c7: 04:dc:28:ce:5a:15:bc:3e:b3:15:6e:fc:b1:f7:d1:c4:35:b6: 77:12:ab:1c:de:90:df:d1:a7:5f:f0:83:ed:50:8d:4d:c9:4d: d3:85:78:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWR6yv7p1nAvQj4syTr5VQbw2Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA2MDMyMTA4MzlaFw0yNTA2MDcwNjEzMzlaMDMxMTAvBgNV BAMTKDgzN0U4OTYxMUMzQzZGNzlGMTZFQUZCQTIyMjRDRDFBRTlDMEY4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUYwPH/R5c6LG0/YnSMYowOrb JwFWVMRSv12oHgz3d5PhANuMqMM3QxdOEuk9ZqveYnEgueSmOKLKRtCB1rqw4DAT pNx221E3CWR2FOrBzglDeZZJCaQOh7e7RY9usK2mJJM/V161Gyv9Ula9M/N/Z7+n rSxJGoFcXUfka6Dvjlyh6vqulPTf+h0e3F2Q87z4G8IXLACyNSJmrKA6JxBFXcIj uzIyli8f6IUSPsQ/dA4yZjv4kwEyIy86Qrw4JSdCRrqWHiOgfV7yKt1QYllBGAS9 OZiZcVKESocLdmGjs9AwaJnJAkpYmwFw67wSrQwsvqIlIuHErbhgXzRxZi3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg36JYRw8b3nxbq+6IiTNGunA+LowHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3 MTI2MDdDQUIyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP37dEwcvzV4aRtDPuXO1H328OYTvtkf5mQ sOmSc+hxq8LuQDdgdQZG+QiwUZjJrhKSVTF2ySzRDEysMxZ5/8tQiu4sFDTeIVci BDbGSyQHA190UIZs/eIvJNov31R4sZGBCP/mlTcGeNIoPEnrKbUz1GkQKEGYUIEt rRAeLiBJNG6FO4tERZCFrqv5Sz0Gwfmy8PsFwTyyGedDmgcwGUihDCTpkHfF76hD tjXPdshhT5LABER2zqX2PwAxdNNAbgE1wrlDbgmPTmWaIwoTFwfSfepa23PDxwTc KM5aFbw+sxVu/LH30cQ1tncSqxzekN/Rp1/wg+1QjU3JTdOFeH8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:08:16 2025 by rpki-client