$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json) Hash identifier: aZ9mTSJEv6HjevWifnJfeq75TMgpoeQELK7uvwSMuYI= Subject key identifier: 45:1E:2C:72:61:79:EE:4F:9A:C2:58:1E:77:23:13:DF:35:00:1D:29 Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Certificate serial: 74236F62C667423A6BD9FC592D3501590BF3585D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft Manifest number: 01DD Signing time: Sat 06 Sep 2025 20:00:36 +0000 Manifest this update: Sat 06 Sep 2025 19:55:36 +0000 Manifest next update: Wed 10 Sep 2025 02:00:36 +0000 Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: P6xu8LTOAB8poOyvWJDc91sYDe59H/LZ7oNRfCTrj6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:23:6f:62:c6:67:42:3a:6b:d9:fc:59:2d:35:01:59:0b:f3:58:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC Validity Not Before: Sep 6 19:55:36 2025 GMT Not After : Sep 10 02:00:36 2025 GMT Subject: CN=451E2C726179EE4F9AC2581E772313DF35001D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:11:13:0e:43:3f:5b:35:58:f4:a5:10:8f: a1:f9:0a:4a:23:95:cc:a3:d0:73:31:77:3a:9a:0e: fa:05:31:cb:b1:cf:76:1e:a7:3a:c7:76:01:5c:7e: 9f:b2:d3:42:9b:dc:f8:42:21:70:b5:48:64:72:ff: 37:3e:74:08:90:b6:c4:8d:9a:56:10:61:ad:52:b3: 31:8e:0e:43:dd:4c:ca:94:c6:86:cf:bd:a5:09:be: 55:4c:fc:35:d1:23:09:50:6b:81:88:c8:c8:06:da: 2c:31:f4:6a:92:92:41:d7:25:89:5c:c2:eb:ab:8f: 55:28:b4:af:ea:1f:a3:78:a7:ec:2c:49:64:25:cd: e9:9f:8e:a0:cc:55:17:c0:76:3a:c8:64:4d:97:29: d5:69:c6:a2:e7:f4:c0:05:8a:6e:2c:cd:f8:58:b2: ff:6e:10:ce:2b:5a:2e:f0:aa:5a:63:ef:4f:96:2e: 19:53:f2:d1:c8:14:cd:11:d0:05:11:a4:f8:20:0d: d8:fd:8a:68:dc:ef:2c:3d:26:04:af:35:da:cb:bb: a8:a0:40:81:39:7e:d5:61:84:2a:b7:bb:02:f9:f3: 82:c7:49:9d:91:f9:6d:52:e6:e5:14:07:e5:c8:66: 64:73:c4:0e:2b:d1:f4:16:41:35:da:0e:81:2f:5b: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1E:2C:72:61:79:EE:4F:9A:C2:58:1E:77:23:13:DF:35:00:1D:29 X509v3 Authority Key Identifier: keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:08:79:d9:66:2d:7b:73:dc:c9:76:14:26:91:d7:38:87:73: 21:61:06:2c:5e:cd:68:15:a3:86:b5:e3:a6:98:04:5e:e1:51: 6e:b5:b1:d7:e5:8f:8d:5a:9f:f4:bd:88:4f:02:ba:38:45:2c: df:0c:49:9e:c5:a1:b0:4c:27:4f:2f:46:74:ae:dc:3d:eb:4e: 87:2b:03:51:a7:d6:7b:27:12:79:89:c9:de:84:96:b5:ca:93: 03:8b:93:e8:53:f0:91:36:39:c8:87:71:06:37:4b:8f:cc:7e: 04:0d:42:05:99:bc:94:dd:64:61:d1:d8:e3:3a:a5:f1:63:3d: 12:8c:d7:c8:21:10:4a:50:fa:c2:2a:78:7f:b1:ec:69:22:f1: 9d:13:dc:be:6e:b8:76:0a:e4:da:1b:90:f2:75:ae:5c:3b:8b: b2:e5:1b:d0:3a:c1:56:56:c3:32:54:5c:e1:d9:e4:72:fe:6c: 40:ce:42:e2:4d:e5:b1:84:c7:48:10:2f:d6:4c:8b:b3:26:93: ff:5a:4b:d3:00:de:34:7e:0d:c1:5f:37:3c:a3:78:9a:af:1d: 8c:a9:1a:0b:bd:c0:31:ab:26:eb:a0:71:64:52:89:18:45:0c: ce:41:68:0d:e7:72:31:f9:3d:72:33:0d:98:9e:2f:e0:20:76: 3a:e5:33:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCNvYsZnQjpr2fxZLTUBWQvzWF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0 RkVDODlGQzAeFw0yNTA5MDYxOTU1MzZaFw0yNTA5MTAwMjAwMzZaMDMxMTAvBgNV BAMTKDQ1MUUyQzcyNjE3OUVFNEY5QUMyNTgxRTc3MjMxM0RGMzUwMDFEMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZhETDkM/WzVY9KUQj6H5Ckoj lcyj0HMxdzqaDvoFMcuxz3YepzrHdgFcfp+y00Kb3PhCIXC1SGRy/zc+dAiQtsSN mlYQYa1SszGODkPdTMqUxobPvaUJvlVM/DXRIwlQa4GIyMgG2iwx9GqSkkHXJYlc wuurj1UotK/qH6N4p+wsSWQlzemfjqDMVRfAdjrIZE2XKdVpxqLn9MAFim4szfhY sv9uEM4rWi7wqlpj70+WLhlT8tHIFM0R0AURpPggDdj9imjc7yw9JgSvNdrLu6ig QIE5ftVhhCq3uwL584LHSZ2R+W1S5uUUB+XIZmRzxA4r0fQWQTXaDoEvW0yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURR4scmF57k+awlgedyMT3zUAHSkwHwYDVR0j BBgwFoAUUPNxgHLxfFkjOuqBegTy00/sifwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjUxOTk3Yy05YTdjLTRlMDQtYWYxNy1kYmM2M2E0YTkyZWUvMC81MEYzNzE4MDcy RjE3QzU5MjMzQUVBODE3QTA0RjJEMzRGRUM4OUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYyRDM0RkVD ODlGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY1MTk5N2MtOWE3Yy00ZTA0LWFm MTctZGJjNjNhNGE5MmVlLzAvNTBGMzcxODA3MkYxN0M1OTIzM0FFQTgxN0EwNEYy RDM0RkVDODlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwIedlmLXtz3Ml2FCaR1ziHcyFhBixezWgV o4a146aYBF7hUW61sdflj41an/S9iE8CujhFLN8MSZ7FobBMJ08vRnSu3D3rTocr A1Gn1nsnEnmJyd6ElrXKkwOLk+hT8JE2OciHcQY3S4/MfgQNQgWZvJTdZGHR2OM6 pfFjPRKM18ghEEpQ+sIqeH+x7Gki8Z0T3L5uuHYK5NobkPJ1rlw7i7LlG9A6wVZW wzJUXOHZ5HL+bEDOQuJN5bGEx0gQL9ZMi7Mmk/9aS9MA3jR+DcFfNzyjeJqvHYyp Ggu9wDGrJuugcWRSiRhFDM5BaA3ncjH5PXIzDZieL+AgdjrlM/M= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:12 2025 by rpki-client