
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json)
Hash identifier: 0IQnn/N8W2gKxURmiGR+Rx3OuH283EfeoOM7MwGLLgU=
Subject key identifier: 83:B8:22:EC:9B:7B:89:70:BA:1D:57:17:42:02:8F:09:0A:30:A6:00
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial: 25F1067FE322EEE955831F95AB8D788988425E9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
Manifest number: 6A
Signing time: Tue 21 Jul 2026 05:58:17 +0000
Manifest this update: Tue 21 Jul 2026 05:53:17 +0000
Manifest next update: Wed 22 Jul 2026 06:27:17 +0000
Files and hashes: 1: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: DJoyNggdJHiWcyEKBZwMO67UqJ6qYmtRcvCKcN4LHk4=)
2: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=)
3: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=)
4: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f1:06:7f:e3:22:ee:e9:55:83:1f:95:ab:8d:78:89:88:42:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Validity
Not Before: Jul 21 05:53:17 2026 GMT
Not After : Jul 22 06:27:17 2026 GMT
Subject: CN=83B822EC9B7B8970BA1D571742028F090A30A600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:3b:4f:0a:ec:47:e9:44:86:51:bd:b4:72:
2a:35:b8:ed:2b:85:4d:aa:31:f5:54:75:9e:6d:ef:
53:1f:1f:3e:95:e0:3c:f5:f5:65:c7:69:9d:08:dc:
ec:73:87:01:46:e0:75:bd:01:f5:e8:76:fa:1f:3b:
b9:b8:b7:55:8d:05:99:2b:e3:6d:91:f1:5f:49:87:
51:5c:6a:ab:a5:0f:c9:96:ac:86:f2:f0:f9:e2:06:
9c:97:02:21:2c:9d:44:d1:08:13:16:7f:bf:a2:8d:
b8:ac:51:06:ce:eb:d2:21:d9:02:3a:55:6a:57:e3:
09:31:66:91:2d:70:16:a5:e4:00:86:ec:cd:e6:52:
31:5e:b5:56:ed:3a:6a:47:90:e6:88:0f:39:9d:6f:
aa:fe:11:98:09:fb:86:7f:83:8b:ed:24:b0:6b:3f:
ff:7b:03:99:de:1e:c0:3d:96:e6:64:55:eb:bc:59:
8c:22:3f:59:18:5b:96:e1:3c:e5:76:af:a4:43:5a:
a4:10:f7:a4:f9:94:3d:1e:9b:33:3c:39:37:fc:0e:
d4:4c:47:26:e1:0b:70:26:1f:2c:8c:ef:1a:56:ee:
93:e7:1e:c3:5e:7e:57:05:3f:aa:69:70:3a:08:93:
80:e0:f8:49:46:eb:83:35:26:d5:83:73:96:b2:83:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B8:22:EC:9B:7B:89:70:BA:1D:57:17:42:02:8F:09:0A:30:A6:00
X509v3 Authority Key Identifier:
keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:b9:ed:d8:40:4a:fd:f9:e9:9b:7f:21:a8:1a:28:ea:41:
7f:9c:88:19:12:3a:66:e1:55:8e:51:78:e8:c9:5d:eb:09:35:
5f:26:48:6a:8e:92:cc:02:e7:f3:13:bd:99:f4:83:e6:f2:3b:
cd:8a:2b:3d:f6:8a:bc:9b:b1:ec:62:a2:65:3a:2a:3b:f7:18:
a3:15:32:e6:14:2a:e0:eb:6a:2b:5b:06:ab:ba:2d:0b:85:1f:
b7:f2:d8:13:93:52:be:e5:56:fa:36:60:ff:49:b4:c9:0f:df:
e2:f7:2c:e7:ac:bd:f9:51:9c:e7:b5:78:1e:8a:d5:48:35:dc:
f2:c4:34:4d:a9:f1:5b:2c:6c:ca:73:ce:e4:51:bd:e7:34:37:
7b:81:02:ba:09:89:e0:cf:45:fd:85:0a:e1:96:cf:50:f8:ca:
5a:d6:6e:3d:2d:a9:83:f8:7f:7d:ad:78:2f:16:85:23:e3:c3:
bb:04:d9:46:0d:f9:85:9c:e5:0a:d3:75:3a:ce:d4:f0:1a:ad:
25:39:e0:c8:38:8e:19:01:3a:be:58:8e:4f:9c:d0:55:94:1c:
a4:2e:54:b1:04:3e:f0:50:c8:64:c8:c9:bd:9b:e4:0d:33:9c:
b8:09:8d:b0:0b:61:63:97:b9:21:3d:ad:07:c0:d4:bc:b6:e3:
4e:ce:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:30:25 2026 by rpki-client