
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json)
Hash identifier: KAJ73yGjsqL9AQFB0qrm210nK0teS6meKRWjoE+EMkI=
Subject key identifier: BA:B3:5A:E4:1A:BC:EB:F8:F5:BB:ED:DA:B5:06:DA:CB:7C:1F:C4:F1
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial: 4EB903B38B722104A96B825F2C6B878FA004E3B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
Manifest number: F6
Signing time: Wed 04 Nov 2026 10:46:36 +0000
Manifest this update: Wed 04 Nov 2026 10:41:36 +0000
Manifest next update: Thu 05 Nov 2026 13:07:36 +0000
Files and hashes: 1: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=)
2: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=)
3: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: SC5qZBIaoLFtlnvqd/nfalb0kYNfwNuxsXwqQB+1Hoc=)
4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 13:07:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b9:03:b3:8b:72:21:04:a9:6b:82:5f:2c:6b:87:8f:a0:04:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Validity
Not Before: Nov 4 10:41:36 2026 GMT
Not After : Nov 5 13:07:36 2026 GMT
Subject: CN=BAB35AE41ABCEBF8F5BBEDDAB506DACB7C1FC4F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:42:8c:7a:a8:6c:ac:fc:8d:32:6d:3d:b9:
14:20:57:4a:ee:6f:16:76:eb:fe:50:14:58:9c:84:
27:7f:59:e6:38:41:67:cb:eb:56:40:04:5f:53:3d:
cb:ef:67:14:17:23:c1:b3:b6:74:f2:01:61:a7:d5:
45:79:f8:bd:6c:ae:5c:7f:cf:0b:cd:68:ec:a9:ea:
27:36:9d:f3:e6:1a:c6:e6:6c:78:53:26:22:83:7f:
c8:be:a4:b4:0f:00:ac:22:29:d9:6b:92:ea:f6:3f:
9d:f5:59:11:c7:aa:2c:a2:42:f8:d2:b3:1d:10:4f:
6a:8c:d1:20:6e:8c:29:5a:23:09:16:72:cf:76:2e:
ea:23:a7:b3:33:51:c0:9d:19:61:9b:e2:b0:57:46:
53:01:87:94:4d:a2:3a:19:5b:58:79:c9:cd:f8:1f:
d1:ff:31:5b:c8:c5:6b:44:6d:6c:c1:ad:38:50:af:
b2:ba:68:ce:f8:9f:fd:94:8a:68:63:56:e2:69:ac:
2e:9a:3f:c7:86:78:86:84:4b:6a:19:85:a2:6f:85:
a5:79:46:29:0e:64:96:e8:fe:37:54:47:f7:7e:b0:
39:c6:c2:ff:c7:21:c5:f3:f1:d3:72:e3:69:02:57:
a3:26:c1:e8:51:ad:ce:60:a1:b9:24:f4:de:e3:45:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:5A:E4:1A:BC:EB:F8:F5:BB:ED:DA:B5:06:DA:CB:7C:1F:C4:F1
X509v3 Authority Key Identifier:
keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9c:c6:af:74:19:2f:89:2b:26:1b:1c:86:7c:54:b5:0b:aa:
a3:f6:d1:29:63:ef:c9:eb:a2:ed:39:9e:a8:f2:d2:80:10:03:
f4:0a:a3:eb:26:cb:65:b6:f3:04:1a:07:1d:5b:a6:26:26:b1:
9c:0d:9a:d1:69:b6:98:e6:58:cb:3c:9b:02:4d:d3:cb:ff:1a:
11:c4:3d:21:68:89:c0:f8:34:a9:87:30:bf:3c:f4:fe:93:e4:
17:ed:a3:a8:e1:b4:91:e5:f0:38:b3:19:31:69:a3:15:92:5d:
db:54:f8:8e:4c:04:da:97:1d:fe:c0:3a:c0:1d:5f:21:41:f1:
15:5a:41:2b:0b:51:65:25:2b:d5:ba:3c:3e:01:3f:7a:83:4c:
3a:60:8a:80:b0:2b:9d:b6:90:35:e4:07:64:2f:eb:96:45:84:
3a:31:f9:f6:fa:58:65:5a:5f:83:5a:9a:cc:bd:c3:3b:a1:89:
3e:68:e0:a8:e0:6d:f8:75:73:0b:12:32:88:1a:12:21:f0:82:
4f:65:ba:46:99:29:ad:a6:bc:16:49:28:26:54:88:12:56:bc:
09:e1:34:09:72:da:57:fe:46:f2:e7:1d:31:7c:66:82:38:19:
77:57:74:0b:2f:1b:e7:94:52:3d:d2:94:df:2f:e1:65:1e:32:
c0:f9:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:47:55 2026 by rpki-client