
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
File: A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft (raw, json)
Hash identifier: tTXtDUSio2oA8wMsqhRf9PMAU0eq9sTQgoXVHfm1vT0=
Subject key identifier: B1:65:51:83:44:40:6F:9E:68:3E:B5:34:EE:1B:57:B7:8E:50:FA:A2
Authority key identifier: A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6
Certificate issuer: /CN=A50D32CA0D9319C53EE2322DBFEE1584842AB3A6
Certificate serial: 1A7051E1E084337807D90046FED075175A4F5E57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
Manifest number: EB
Signing time: Sat 24 Oct 2026 20:34:47 +0000
Manifest this update: Sat 24 Oct 2026 20:29:47 +0000
Manifest next update: Sun 25 Oct 2026 22:04:47 +0000
Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: ELulKvfOkTiYaS+HRynT4fKXT1Jquc95r71+eT2JPyQ=)
2: A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl (hash: W9kv1VHf6N/Zao7MzL7VKSlM9m99SRfE4kXPe2YKYfU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl
rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:70:51:e1:e0:84:33:78:07:d9:00:46:fe:d0:75:17:5a:4f:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A50D32CA0D9319C53EE2322DBFEE1584842AB3A6
Validity
Not Before: Oct 24 20:29:47 2026 GMT
Not After : Oct 25 22:04:47 2026 GMT
Subject: CN=B165518344406F9E683EB534EE1B57B78E50FAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:c0:ee:e6:2c:7e:b8:ae:0a:51:28:49:94:
51:1e:e3:7b:5f:ea:55:fb:38:b5:e6:59:dd:46:66:
d1:99:7e:63:75:55:6b:c6:83:19:6f:bf:dd:0e:cb:
18:cf:34:6c:d8:11:1f:4d:4a:08:7a:e9:a7:0d:e4:
ec:34:85:85:23:ba:a9:a2:95:e4:76:eb:92:1b:a1:
0e:22:74:4d:a0:8a:83:98:0c:68:e1:f9:e0:9d:b7:
ac:7a:7b:4a:6b:e0:c6:3a:3a:94:06:06:80:d4:7d:
5a:95:4c:f3:38:6d:06:57:bc:43:ec:ca:00:c6:57:
ce:09:38:7c:0d:9c:12:5e:b9:e2:9e:4a:34:60:3e:
89:9a:41:9b:12:e2:39:75:0e:03:76:cc:82:94:99:
f2:c2:e5:e0:81:42:98:e1:75:e5:15:d5:d3:2f:1b:
2b:4b:b0:de:ac:0a:29:46:f7:79:76:5e:f5:6c:07:
0b:7c:8d:6a:48:c4:42:94:b8:42:42:87:a1:38:21:
81:7b:5f:6e:2a:16:ce:5e:bf:c5:5f:2b:75:01:47:
94:05:98:96:37:c2:a2:30:e9:ae:37:e9:0d:64:3a:
b5:da:6f:d9:eb:70:5f:9f:e7:56:d9:fc:4c:29:30:
5d:63:b5:4d:46:27:3c:e1:6c:b9:6c:20:cd:4b:15:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:51:83:44:40:6F:9E:68:3E:B5:34:EE:1B:57:B7:8E:50:FA:A2
X509v3 Authority Key Identifier:
keyid:A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:75:2f:cc:df:33:0a:4b:37:30:2c:14:ca:b8:2b:f8:66:
69:53:4d:37:69:2e:77:14:87:b1:6e:c2:28:2c:0e:ac:b4:8d:
2a:00:f4:01:a8:1a:43:9e:6d:33:42:e6:32:c0:96:eb:09:92:
e5:6d:ff:c6:e9:cc:ca:d8:5d:4c:8c:85:05:11:12:aa:2e:c2:
2a:63:88:8e:c5:e1:cb:ac:76:83:19:30:f8:78:cb:16:75:ee:
ff:e6:c6:a3:fd:a0:1e:ab:d1:6a:ef:f3:8f:8c:d2:0b:a7:7f:
47:3a:66:1c:01:29:26:4f:d8:18:12:a5:ac:fb:c3:be:c7:16:
a6:ec:cf:a9:8e:a1:f7:6d:77:c7:bb:8a:ee:bd:2c:22:b7:fe:
e6:65:83:6a:64:08:08:9b:c6:f7:28:7f:d4:00:1d:a1:2c:90:
cf:7f:70:82:d1:b5:b9:a7:85:01:36:75:88:94:6d:9a:df:2e:
de:11:a3:20:44:d2:4f:3b:3e:3d:3a:80:49:99:5b:c7:08:63:
1f:e8:ed:57:24:2a:ed:10:fb:16:4d:46:af:6f:f7:44:ec:91:
0f:5d:19:bd:96:69:0b:fd:5c:dc:75:ec:ec:44:1a:d6:23:19:
e8:f6:37:6e:4a:b6:d3:ac:5e:86:63:f7:80:87:9b:79:79:fb:
9d:91:bd:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGnBR4eCEM3gH2QBG/tB1F1pPXlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUwRDMyQ0EwRDkzMTlDNTNFRTIzMjJEQkZFRTE1ODQ4
NDJBQjNBNjAeFw0yNjEwMjQyMDI5NDdaFw0yNjEwMjUyMjA0NDdaMDMxMTAvBgNV
BAMTKEIxNjU1MTgzNDQ0MDZGOUU2ODNFQjUzNEVFMUI1N0I3OEU1MEZBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBq8Du5ix+uK4KUShJlFEe43tf
6lX7OLXmWd1GZtGZfmN1VWvGgxlvv90OyxjPNGzYER9NSgh66acN5Ow0hYUjuqmi
leR265IboQ4idE2gioOYDGjh+eCdt6x6e0pr4MY6OpQGBoDUfVqVTPM4bQZXvEPs
ygDGV84JOHwNnBJeueKeSjRgPomaQZsS4jl1DgN2zIKUmfLC5eCBQpjhdeUV1dMv
GytLsN6sCilG93l2XvVsBwt8jWpIxEKUuEJCh6E4IYF7X24qFs5ev8VfK3UBR5QF
mJY3wqIw6a436Q1kOrXab9nrcF+f51bZ/EwpMF1jtU1GJzzhbLlsIM1LFeXdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsWVRg0RAb55oPrU07htXt45Q+qIwHwYDVR0j
BBgwFoAUpQ0yyg2TGcU+4jItv+4VhIQqs6YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjRhMDJkMzctM2I5ZC00NTNhLThjODEtMzI4ZTU0MDE0MWZkLzAvQTUwRDMyQ0Ew
RDkzMTlDNTNFRTIzMjJEQkZFRTE1ODQ4NDJBQjNBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNTBEMzJDQTBEOTMxOUM1M0VFMjMyMkRCRkVFMTU4NDg0MkFC
M0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj
ODEtMzI4ZTU0MDE0MWZkLzAvQTUwRDMyQ0EwRDkzMTlDNTNFRTIzMjJEQkZFRTE1
ODQ4NDJBQjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD48dS/M3zMKSzcwLBTKuCv4ZmlTTTdpLncU
h7FuwigsDqy0jSoA9AGoGkOebTNC5jLAlusJkuVt/8bpzMrYXUyMhQUREqouwipj
iI7F4cusdoMZMPh4yxZ17v/mxqP9oB6r0Wrv84+M0gunf0c6ZhwBKSZP2BgSpaz7
w77HFqbsz6mOofdtd8e7iu69LCK3/uZlg2pkCAibxvcof9QAHaEskM9/cILRtbmn
hQE2dYiUbZrfLt4RoyBE0k87Pj06gEmZW8cIYx/o7VckKu0Q+xZNRq9v90TskQ9d
Gb2WaQv9XNx17OxEGtYjGej2N25KttOsXoZj94CHm3l5+52RvQw=
-----END CERTIFICATE-----
Generated at Sun Oct 25 10:45:21 2026 by rpki-client