
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json)
Hash identifier: SO7DTSBF4RSopkONCXbLoVZvueWXUPH2QFVW7ypD0DU=
Subject key identifier: A7:FE:40:39:FA:8E:ED:73:99:01:CA:C0:75:21:70:FE:07:05:28:CA
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial: 110A936AEB685D128903E2B0F68A8905E2F331CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 15:05:11 +0000
Manifest this update: Mon 20 Jul 2026 15:00:11 +0000
Manifest next update: Tue 21 Jul 2026 18:08:11 +0000
Files and hashes: 1: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: AFOFY0trrnDSY9/fq1HkAtq7BpYaho/gdLVRE/TE720=)
2: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=)
3: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=)
4: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=)
5: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=)
6: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=)
7: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=)
8: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0a:93:6a:eb:68:5d:12:89:03:e2:b0:f6:8a:89:05:e2:f3:31:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Validity
Not Before: Jul 20 15:00:11 2026 GMT
Not After : Jul 21 18:08:11 2026 GMT
Subject: CN=A7FE4039FA8EED739901CAC0752170FE070528CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ba:da:b9:a4:b7:e9:49:85:8a:33:90:37:99:
f0:4b:7c:2c:4e:17:2b:80:47:6c:64:d5:d7:ce:63:
3f:5e:91:7c:5d:d5:4b:16:28:c4:c7:39:4e:22:08:
d6:38:ca:20:07:74:74:62:c5:c9:fd:9f:74:47:65:
2c:f9:ef:1b:54:2b:d1:76:48:48:a2:a4:b2:e6:5a:
14:cc:70:7c:21:86:2e:91:d7:19:b3:be:f3:22:10:
02:61:8c:cc:2f:30:94:fd:23:73:16:11:ee:4c:05:
6f:c7:b0:60:c6:13:70:e0:e0:76:b4:d5:3f:7f:5b:
eb:2f:ff:a5:10:bd:a3:75:c2:9c:60:37:62:d0:fa:
86:8c:df:bc:0f:81:c6:69:24:ad:8c:b0:22:71:89:
0e:78:f7:78:26:cd:de:a1:6c:d2:bf:42:4b:ea:ae:
72:b1:25:0c:61:c4:e8:94:dc:0c:ae:60:4c:73:c4:
c0:40:7c:26:4f:75:6d:9f:1b:01:50:76:2f:88:ee:
3d:b3:27:9a:36:52:86:ac:01:83:df:03:9f:9e:78:
e0:e6:eb:8d:00:0b:7e:4b:55:f6:91:41:7a:20:fc:
fa:07:42:1b:9f:10:8d:c2:3c:74:9d:b2:c7:74:95:
a6:38:72:53:96:f2:cb:1b:00:9f:20:5f:04:b3:b8:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:40:39:FA:8E:ED:73:99:01:CA:C0:75:21:70:FE:07:05:28:CA
X509v3 Authority Key Identifier:
keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a2:42:d3:d7:36:6c:23:ee:7e:ea:e1:f4:1f:0a:24:17:9e:
d7:87:9c:63:98:56:50:e1:35:64:3f:49:9a:55:77:e3:ad:e1:
0a:4a:ae:cd:e1:2d:66:80:2b:08:5a:77:e1:f0:e2:5c:e9:36:
53:6f:c2:a9:9f:70:e6:e8:37:b3:45:c0:b9:63:e1:ea:91:a3:
ef:a0:68:63:a1:2f:e3:89:8c:d7:4e:db:a9:6b:38:91:f2:af:
62:88:7b:b8:2b:e3:2d:8a:30:d6:dd:76:90:3a:18:de:3f:22:
d2:30:55:0d:df:1b:3c:53:24:59:28:d1:90:85:cd:9e:3b:c8:
42:52:f3:1f:89:b2:7d:6d:b8:17:77:18:3e:39:cb:f4:89:cf:
f3:ea:36:a1:6f:fd:7e:78:d7:47:d9:75:12:da:6b:ee:52:72:
73:d3:0a:c2:34:e7:c9:9e:86:16:cb:09:22:3e:48:9e:fc:cb:
9c:21:57:8f:40:90:34:6d:b7:e7:5e:6e:55:ee:92:80:62:42:
61:41:8e:40:9f:97:6d:04:4d:89:f8:22:8b:ce:eb:fe:ca:2d:
5a:69:a5:13:c2:88:c2:6d:eb:0e:f1:2a:49:bf:7b:49:b9:14:
66:cb:d2:c0:a4:2a:9e:c7:76:fb:33:9a:df:ce:a1:f2:19:5f:
ee:37:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:37:44 2026 by rpki-client