
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
File: 511F1AA1B492F6794EF165F62B075919F2B16E44.mft (raw, json)
Hash identifier: 483T+4zGUsIueOmeXzZ06EK+B8GDyADE7UzxQSRHkZs=
Subject key identifier: 17:B4:55:FB:D1:AA:DE:31:B7:C9:A1:70:3A:BA:5F:81:51:70:98:AA
Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Certificate serial: 4E6626B34DCBEE34B8F3CD03AC302E9B2711713D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
Manifest number: 50
Signing time: Mon 29 Jun 2026 23:09:19 +0000
Manifest this update: Mon 29 Jun 2026 23:04:19 +0000
Manifest next update: Wed 01 Jul 2026 00:07:19 +0000
Files and hashes: 1: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: FVP2US2KHUP1OZkRW6LNBrYfqVg0Zj0UfccY8UblEsw=)
2: 511F1AA1B492F6794EF165F62B075919F2B16E44.crl (hash: Ohtl/DFrRYfaJWs5tWo7tfeEyOyQb2IhFjNUThD1KEw=)
3: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 23fAd0P4P+mgKNL3oa2CrgF3dqXD3ZtfsTB8p14sYV4=)
4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:26:b3:4d:cb:ee:34:b8:f3:cd:03:ac:30:2e:9b:27:11:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44
Validity
Not Before: Jun 29 23:04:19 2026 GMT
Not After : Jul 1 00:07:19 2026 GMT
Subject: CN=17B455FBD1AADE31B7C9A1703ABA5F81517098AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:b8:c5:e2:b2:4c:10:0b:c9:cf:83:01:b1:
ba:b9:c8:88:71:27:9b:17:57:39:03:91:0f:e6:2e:
1d:f3:8f:e4:8e:d1:27:45:46:c7:fd:c7:be:27:da:
2f:05:65:c5:53:d5:1f:6d:9f:7f:b1:4e:9a:55:c9:
56:df:e0:02:e3:b2:3e:0c:6f:c0:62:c9:a9:48:43:
41:87:07:2d:b6:42:df:54:b6:14:29:2c:bd:45:cc:
c2:e5:e5:dd:2a:eb:f6:bc:ac:1f:2e:60:91:99:bd:
c7:4f:12:3f:b7:fb:01:c2:da:94:92:69:55:81:4d:
d1:f0:df:75:ca:20:4d:b9:04:c8:46:88:ed:3c:61:
18:21:5c:09:1b:3a:d7:e4:dd:5f:cb:17:8e:9b:59:
c2:a1:ac:9e:eb:b7:b4:06:13:fc:85:e6:8b:53:bb:
e9:7d:da:20:59:55:97:ef:17:02:b4:b4:11:3b:39:
5a:64:06:7e:9a:66:f4:71:75:fb:47:33:18:9f:98:
a0:5c:5b:41:8e:3b:2e:28:36:91:de:5f:8e:8f:29:
2e:60:2e:fe:8e:61:ea:d8:22:4e:15:79:f5:af:4e:
fc:92:e2:a8:a3:59:39:3a:c8:e7:88:4a:39:77:29:
de:e9:a6:ad:c3:76:1d:79:a7:12:e1:c4:44:0b:38:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B4:55:FB:D1:AA:DE:31:B7:C9:A1:70:3A:BA:5F:81:51:70:98:AA
X509v3 Authority Key Identifier:
keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:d2:cd:b2:28:c2:76:ef:5b:a8:a1:ba:88:2c:2e:96:f7:
f3:01:5e:2e:c0:2c:8e:d9:0f:6d:47:6f:e0:63:f3:81:13:8a:
7f:ee:e4:77:07:18:f2:1b:1b:6f:90:78:93:68:07:2c:90:7e:
a4:72:82:e0:07:ec:49:01:cc:b9:bf:77:ce:d1:65:74:71:3a:
40:cd:58:d3:ca:d0:91:e8:1e:43:79:3a:e3:c5:64:34:fc:ae:
cd:60:22:4f:e6:7a:09:3a:22:b7:4b:89:4d:de:94:18:59:84:
28:14:0b:01:09:53:8a:23:45:89:b4:16:52:36:d5:66:36:67:
1d:1b:31:2c:86:36:ba:fe:e6:ad:06:d6:63:06:12:54:37:c4:
f9:f0:a2:31:97:e4:f0:e2:08:be:26:79:66:f8:01:0b:9d:d9:
b9:6b:08:68:ae:cd:34:19:e9:68:da:bc:a2:fb:38:4d:69:6f:
9c:04:a1:5a:94:73:b7:73:6a:7f:8c:c5:3b:49:4c:5f:22:ee:
32:50:76:59:b3:e9:d7:24:80:d9:dc:52:0c:47:1c:81:ea:19:
89:f3:09:18:4c:cc:34:57:fe:01:0d:26:9e:c4:eb:c3:40:56:
c4:d4:24:7f:d4:93:1a:d5:bd:17:b7:eb:e4:78:db:20:a1:9a:
54:87:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 08:18:51 2026 by rpki-client