
$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json)
Hash identifier: iAuxzgVvmgLVobPAvNXA/Q3fYQOQk0KTV+Nlbs9/x8s=
Subject key identifier: DB:A9:D0:D5:32:8E:C5:C7:3C:A0:3A:92:5F:35:BB:68:A1:AF:64:17
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial: 57EFB1D58D92909446557759766890A356522B3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 15:08:22 +0000
Manifest this update: Tue 02 Jun 2026 15:03:22 +0000
Manifest next update: Wed 03 Jun 2026 17:06:22 +0000
Files and hashes: 1: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=)
2: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=)
3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=)
4: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=)
5: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=)
6: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: wGwwQKUh6hFYtcNqfKplToe8R9RpMMJVkWcclPBy0iU=)
7: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=)
8: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ef:b1:d5:8d:92:90:94:46:55:77:59:76:68:90:a3:56:52:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Validity
Not Before: Jun 2 15:03:22 2026 GMT
Not After : Jun 3 17:06:22 2026 GMT
Subject: CN=DBA9D0D5328EC5C73CA03A925F35BB68A1AF6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:ec:63:e3:87:04:bb:46:91:64:91:0a:a6:
28:ea:48:92:ed:60:08:6d:d9:16:b9:0b:d0:11:06:
76:da:65:d8:41:2e:7b:0e:b5:50:29:5d:91:8a:01:
a9:c8:b3:c8:1d:af:b0:f9:9a:88:bd:f6:bc:b1:32:
08:be:71:d4:ef:99:bb:5e:6b:e0:4f:95:ed:d3:f1:
63:b0:81:a8:ee:f1:5e:7d:87:f6:1f:bd:71:8a:7f:
ba:4c:b0:5e:68:fb:22:cf:a1:a1:54:e0:ac:40:e6:
99:95:bd:c5:d6:95:1a:05:53:f8:cf:6c:19:74:df:
7e:24:e6:69:f8:9f:d9:5c:12:7c:e0:8a:4c:a5:9e:
9a:91:b4:55:70:73:d3:8c:1f:7d:82:89:c0:73:37:
4e:f3:a6:ff:fa:b8:5b:0b:58:90:23:e5:74:00:33:
1f:90:2b:96:96:bf:49:d7:5f:a8:dc:17:ba:40:2c:
a5:04:b5:83:6e:7c:fd:0a:0c:c0:96:be:79:90:12:
7f:24:ea:7d:c2:f9:96:93:2f:ee:4b:9f:58:da:0a:
75:11:d8:97:6d:68:97:dd:df:27:a6:bb:61:fb:48:
b2:e5:ec:54:b9:18:16:32:81:61:0d:ac:de:9b:96:
fd:bc:16:30:c0:e1:13:81:d6:93:ad:12:1f:56:df:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:D0:D5:32:8E:C5:C7:3C:A0:3A:92:5F:35:BB:68:A1:AF:64:17
X509v3 Authority Key Identifier:
keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:90:97:b0:51:8b:f9:5c:89:6d:31:b6:64:84:5a:74:36:73:
aa:f9:10:a5:5d:11:03:ba:5b:07:29:cf:75:d4:5b:81:3a:ce:
81:57:84:35:2b:ee:50:50:48:07:ee:e8:8b:3b:c0:3a:b5:f9:
9d:40:cb:43:cd:0e:73:8a:cd:e3:4d:68:9c:f4:a5:0c:d0:cf:
ab:46:b0:35:77:25:6f:3d:c7:5c:ff:aa:d2:a8:1b:7c:f8:d3:
d1:bf:a1:77:a0:81:25:5e:25:78:2b:b6:7a:51:93:18:e7:79:
e9:93:ea:64:88:19:13:ed:f6:d3:7d:05:e6:d6:a3:51:d0:2f:
50:51:00:b8:37:4f:86:31:df:e3:53:88:0b:ac:8a:8e:e7:3d:
20:ea:dc:15:bb:d6:19:e0:72:22:70:4b:23:e3:9c:03:b9:23:
b8:20:ce:94:f3:33:de:8a:5b:76:b6:cb:82:68:8b:6a:c3:e1:
35:61:2f:92:67:2f:78:f2:21:2b:7b:8b:3d:04:da:f6:2d:82:
d6:85:79:68:2b:fe:82:a1:1e:34:fd:7e:6b:15:01:b3:40:1e:
d1:d7:fd:c6:2a:f1:b5:2b:3f:fd:3f:43:fa:09:e2:65:83:5e:
c5:4d:60:0d:fd:b5:98:05:f3:0c:0e:e8:b3:ce:39:af:fe:ef:
23:10:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:39:48 2026 by rpki-client