
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier: MLR9Haca8MEFf+EmK7bfnRcUUSuecydCZWh7ObVWWYQ=
Subject key identifier: D0:97:1F:74:FD:07:19:A1:35:B1:12:5F:62:FA:84:E8:24:30:EA:E5
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial: 4E8276E2E4497AE385C1BFE2B7535B0F295E5759
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number: DB
Signing time: Tue 13 Oct 2026 23:34:51 +0000
Manifest this update: Tue 13 Oct 2026 23:29:51 +0000
Manifest next update: Thu 15 Oct 2026 02:27:51 +0000
Files and hashes: 1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
2: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: LxcDzK1l2dEljei0oMN7QQ+z4j71RKtVLJD7+m5ozQA=)
3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 02:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:82:76:e2:e4:49:7a:e3:85:c1:bf:e2:b7:53:5b:0f:29:5e:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Validity
Not Before: Oct 13 23:29:51 2026 GMT
Not After : Oct 15 02:27:51 2026 GMT
Subject: CN=D0971F74FD0719A135B1125F62FA84E82430EAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:17:d6:88:a9:34:b8:9b:d5:71:02:06:a8:
09:bd:47:06:fc:07:a9:eb:98:56:39:6d:f5:46:ca:
e4:00:8c:49:9f:74:5a:f4:f8:84:ee:a0:62:f4:52:
0e:81:fa:47:11:30:58:b1:58:3a:f7:5e:03:94:ac:
30:d3:71:10:e9:d6:de:cc:fb:60:8d:4c:51:4b:5c:
18:82:2a:bf:35:28:1a:74:6c:f3:e1:e2:f3:32:bd:
47:d5:d7:fc:60:c8:4b:80:9d:af:ba:5f:96:52:18:
2b:41:a0:d1:a5:7f:e7:30:c1:53:44:48:b7:44:b0:
83:27:f4:57:00:d5:b0:66:31:63:f3:cc:98:5c:14:
4c:4e:77:38:20:6e:b7:88:98:2c:d7:9c:09:7c:d5:
e8:e5:aa:45:6a:13:b1:a7:d5:25:a7:1b:e9:bc:66:
77:b1:8c:80:4d:dc:b5:c3:bd:6e:59:44:e9:c8:c7:
e6:8c:fe:f6:b4:5b:18:62:32:b3:a9:4a:0c:35:ea:
a2:61:b6:75:d8:f9:d9:d2:12:a3:17:61:57:0c:58:
d1:24:c6:0e:5d:06:d2:69:60:7e:9a:d9:a7:90:d8:
f6:4b:0b:6d:8d:9d:f9:2b:a3:05:fa:f4:eb:2d:ed:
0c:fb:cf:40:d9:8a:57:da:3b:f7:f0:12:b2:a8:4b:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:1F:74:FD:07:19:A1:35:B1:12:5F:62:FA:84:E8:24:30:EA:E5
X509v3 Authority Key Identifier:
keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:65:ae:5c:42:a4:fc:6b:e8:f4:aa:58:7c:68:ff:03:8f:
3c:7c:2a:ec:ef:12:81:88:bc:01:8a:67:97:56:21:ff:e1:97:
21:76:5a:f8:83:98:7d:10:c8:11:83:b8:dc:34:da:06:9c:10:
02:e4:b0:de:4a:c6:df:46:5c:35:dc:ef:26:fa:ee:fc:4d:3d:
d0:ed:e7:7b:75:e0:bd:ad:66:05:c8:16:18:0e:aa:dd:2f:eb:
19:a4:d2:ae:32:8e:da:12:c3:86:ba:c2:72:c2:a8:26:74:b9:
59:e4:df:0f:d7:b2:25:b6:df:4f:f4:09:52:41:50:d9:53:d8:
8c:0b:76:c5:95:60:d9:af:6b:5c:6f:58:b5:3d:ed:d1:d8:7e:
7f:5b:f0:c5:fa:72:b5:bd:b3:8a:6c:09:e6:ec:44:bb:4b:02:
3f:a8:6b:ef:af:66:ad:21:f4:d7:24:d5:f7:41:f1:03:73:e3:
c6:ef:d5:4e:f5:cc:69:b0:01:37:b2:3b:0c:e5:78:8b:6a:69:
b4:e0:10:06:0e:b2:f4:30:dd:17:f2:04:9a:ea:4b:c0:86:b7:
5a:d2:87:47:a9:90:6a:c6:bd:14:64:ee:d5:03:74:f5:4c:78:
af:97:7d:47:c5:dc:2a:65:a7:95:a0:fb:2f:ea:54:ec:fe:48:
50:3c:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:45:20 2026 by rpki-client