
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier: qSmxEtqr7gaqr1q/kaeHcJbYbEqIaH5BtxBLZV4X7Sg=
Subject key identifier: C7:8E:47:0A:56:9B:F8:F9:5E:2C:01:AD:5F:0E:B3:F0:46:11:60:8A
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial: 20D45F36EAB9D09ADF18D75DE7DBD709E09E6E6F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 15:48:00 +0000
Manifest this update: Wed 19 Aug 2026 15:43:00 +0000
Manifest next update: Thu 20 Aug 2026 17:33:00 +0000
Files and hashes: 1: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
2: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: o5O2VFlhlrUxCuQV7/Zur6ZVscQE2Imyibx/C7VElE4=)
3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 17:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d4:5f:36:ea:b9:d0:9a:df:18:d7:5d:e7:db:d7:09:e0:9e:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Validity
Not Before: Aug 19 15:43:00 2026 GMT
Not After : Aug 20 17:33:00 2026 GMT
Subject: CN=C78E470A569BF8F95E2C01AD5F0EB3F04611608A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:ab:41:09:de:3b:ca:b2:f8:19:cc:a2:6b:
cf:38:61:a4:14:73:c8:25:1c:e8:b1:33:1d:b1:0d:
d1:51:80:19:f3:02:59:7d:b9:6a:96:ec:b6:d2:64:
3b:b3:84:58:20:45:14:96:ab:fb:76:00:7c:73:5b:
cb:1a:cc:02:e2:ae:07:2a:a5:05:e2:25:e1:81:e3:
b8:c8:f7:97:44:6d:71:51:43:88:89:11:41:eb:e9:
38:59:a7:e5:17:56:76:eb:3b:4c:89:33:11:79:cf:
28:7e:0f:11:f9:8c:64:dd:b1:b5:53:29:f0:be:13:
d3:07:23:8f:a1:d7:62:76:0c:65:58:7e:61:d8:c5:
8f:c3:02:db:31:44:d8:39:87:92:57:5a:50:24:5c:
98:35:7a:96:f8:d3:cd:ac:1b:28:12:8c:b9:1e:2f:
93:ad:8e:7f:45:9d:fd:5a:78:4e:56:f3:d2:d6:36:
87:9d:4f:f5:ba:23:84:07:34:fa:5a:99:b9:be:e4:
b7:9b:1c:07:6b:3c:ac:7e:6a:71:31:34:97:db:b8:
00:bb:79:dc:64:40:69:d4:7a:fd:7c:ff:f7:14:93:
66:7b:4b:ee:29:3b:f5:ce:d6:14:b7:c4:f7:ec:73:
dd:57:16:64:97:cf:ea:9f:53:9e:11:e3:87:ae:5b:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:47:0A:56:9B:F8:F9:5E:2C:01:AD:5F:0E:B3:F0:46:11:60:8A
X509v3 Authority Key Identifier:
keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:42:30:2e:82:97:d9:8a:0f:2b:53:20:38:1a:be:c5:54:d1:
42:9e:04:ba:f8:9d:58:23:50:51:9b:88:e8:a7:20:24:b9:72:
71:fa:3f:6a:ed:d4:8b:1a:74:ac:1b:9a:e1:ac:ca:23:e9:12:
9f:ce:0c:59:5d:2a:7b:e0:ae:77:6f:b6:31:57:9c:53:0a:f1:
11:aa:eb:4f:f9:de:1c:51:f6:6c:17:8e:3c:75:05:1c:f0:05:
6d:a9:83:71:ab:db:7b:c0:3d:40:fc:55:f5:8f:b2:51:56:b9:
ca:3f:6e:43:6f:d1:69:10:25:42:fb:3c:e2:36:a7:92:2d:a5:
10:d9:a3:3d:c4:4d:58:97:a6:32:61:94:3e:27:07:5d:45:3e:
1c:29:71:b5:db:f1:8e:1d:18:e6:3f:08:a7:d5:bf:9d:8b:c3:
3e:65:c4:b6:ce:c0:43:89:9a:82:1a:59:9c:5d:ea:d5:b9:a7:
7d:8f:a7:2d:3a:0a:b5:3c:d8:5d:1a:4e:77:24:73:90:bd:48:
69:e5:1e:8a:83:23:d9:28:8f:1b:c2:ad:85:4b:13:65:cf:76:
c9:c4:2c:e9:33:1e:91:d4:08:67:88:ce:a1:e4:cf:14:e9:f4:
79:7a:11:52:aa:18:e4:62:5d:49:fb:65:29:13:2b:bd:48:8c:
e8:0e:a1:b7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUINRfNuq50JrfGNdd59vXCeCebm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAzNDFFQTE3QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRG
NkM2NEQ1MTAeFw0yNjA4MTkxNTQzMDBaFw0yNjA4MjAxNzMzMDBaMDMxMTAvBgNV
BAMTKEM3OEU0NzBBNTY5QkY4Rjk1RTJDMDFBRDVGMEVCM0YwNDYxMTYwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D6tBCd47yrL4Gcyia884YaQU
c8glHOixMx2xDdFRgBnzAll9uWqW7LbSZDuzhFggRRSWq/t2AHxzW8sazALirgcq
pQXiJeGB47jI95dEbXFRQ4iJEUHr6ThZp+UXVnbrO0yJMxF5zyh+DxH5jGTdsbVT
KfC+E9MHI4+h12J2DGVYfmHYxY/DAtsxRNg5h5JXWlAkXJg1epb4082sGygSjLke
L5Otjn9Fnf1aeE5W89LWNoedT/W6I4QHNPpambm+5LebHAdrPKx+anExNJfbuAC7
edxkQGnUev18//cUk2Z7S+4pO/XO1hS3xPfsc91XFmSXz+qfU54R44euW501AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUx45HClab+PleLAGtXw6z8EYRYIowHwYDVR0j
BBgwFoAUUDQeoXps7pObLN+oMtwDJPbGTVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWFhNDg5YTYtNTQ4NS00ODdmLWI1ZGQtOGY0ZWRlYjQ2YmNiLzAvNTAzNDFFQTE3
QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRGNkM2NEQ1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MDM0MUVBMTdBNkNFRTkzOUIyQ0RGQTgzMkRDMDMyNEY2QzY0
RDUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1
ZGQtOGY0ZWRlYjQ2YmNiLzAvNTAzNDFFQTE3QTZDRUU5MzlCMkNERkE4MzJEQzAz
MjRGNkM2NEQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAElCMC6Cl9mKDytTIDgavsVU0UKeBLr4nVgj
UFGbiOinICS5cnH6P2rt1IsadKwbmuGsyiPpEp/ODFldKnvgrndvtjFXnFMK8RGq
60/53hxR9mwXjjx1BRzwBW2pg3Gr23vAPUD8VfWPslFWuco/bkNv0WkQJUL7POI2
p5ItpRDZoz3ETViXpjJhlD4nB11FPhwpcbXb8Y4dGOY/CKfVv52Lwz5lxLbOwEOJ
moIaWZxd6tW5p32Ppy06CrU82F0aTnckc5C9SGnlHoqDI9kojxvCrYVLE2XPdsnE
LOkzHpHUCGeIzqHkzxTp9Hl6EVKqGORiXUn7ZSkTK71IjOgOobc=
-----END CERTIFICATE-----
Generated at Thu Aug 20 07:02:00 2026 by rpki-client