
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json)
Hash identifier: j8/7tWzdxeH4t+qvNAsZNJnOYiXOy9P7j4Y43DM14P4=
Subject key identifier: BE:38:75:6C:2F:F8:43:10:2A:59:FF:64:D8:B8:AC:50:A0:E8:72:C2
Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB
Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB
Certificate serial: 09349655A47DA734BD6044D463686D914BC8AB53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
Manifest number: 050D
Signing time: Tue 24 Mar 2026 16:21:37 +0000
Manifest this update: Tue 24 Mar 2026 16:16:37 +0000
Manifest next update: Fri 27 Mar 2026 17:34:37 +0000
Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=)
2: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: BXqGOKr/RjpmJ2ErNheynBfJli6dGIuY5QxmcLHbrDg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl
rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:34:96:55:a4:7d:a7:34:bd:60:44:d4:63:68:6d:91:4b:c8:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB
Validity
Not Before: Mar 24 16:16:37 2026 GMT
Not After : Mar 27 17:34:37 2026 GMT
Subject: CN=BE38756C2FF843102A59FF64D8B8AC50A0E872C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:8b:f1:65:4f:bf:bb:20:57:89:78:f8:d9:
72:73:e9:57:9c:1d:0d:67:d5:ab:0b:0b:ab:ef:0d:
e9:f3:6d:c9:23:c5:57:6d:0f:d0:9f:f2:a5:20:1d:
6e:11:93:24:63:18:d3:9f:30:54:bf:2a:9d:90:eb:
fd:50:c0:d3:4c:2c:30:36:92:e3:8b:42:6e:c3:22:
78:4b:73:3c:ca:81:a5:1e:56:b7:43:4a:61:59:11:
b6:f9:b9:a2:1d:bc:8b:7e:99:20:5f:31:3c:c1:71:
1a:79:69:42:95:95:ab:00:d3:37:22:92:01:ff:e3:
14:54:99:6d:a6:2f:39:53:3d:9a:b5:73:21:bc:7c:
d8:93:59:c0:14:ba:3f:ae:7d:54:9f:76:1f:37:65:
2d:a9:55:6d:5c:fe:33:b8:83:c0:24:f0:9f:b6:c6:
68:08:8e:af:24:71:d2:8e:08:7e:6e:e2:89:0a:d8:
48:ae:ab:25:90:ae:ec:8e:b8:f3:cd:68:bb:3b:94:
36:be:ab:28:d9:72:41:97:59:c3:2e:38:e2:bf:ad:
f7:7a:6c:f8:88:83:57:49:68:ce:83:c4:11:99:7e:
6e:5f:e1:ba:ba:9d:d8:2d:66:96:a3:9b:cf:de:07:
71:0b:51:60:69:4b:da:09:ef:ed:29:da:d9:1b:42:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:75:6C:2F:F8:43:10:2A:59:FF:64:D8:B8:AC:50:A0:E8:72:C2
X509v3 Authority Key Identifier:
keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:b9:54:73:06:1d:ee:31:7d:e7:e8:00:93:5d:48:2f:31:
83:62:f0:4a:62:77:85:06:44:1e:0e:45:fb:e3:17:ba:56:7e:
48:e1:69:98:5e:0e:3e:7f:9b:7d:79:64:83:bf:cc:95:5b:f9:
78:92:69:b7:63:72:20:4e:00:25:db:66:2e:2e:f2:27:a1:51:
c3:50:09:56:92:59:d6:5a:3d:2b:50:08:66:41:fd:0a:1a:d0:
c4:1d:d0:d9:26:4f:19:42:ca:e7:75:da:ba:17:d0:8f:c1:47:
c9:61:76:80:93:db:ea:f1:8a:0a:e4:df:b2:0c:aa:e8:8a:8f:
ea:5c:66:8d:6a:b8:a9:fc:53:c1:c3:da:e6:a6:ba:2a:f7:7c:
92:7f:d7:ca:0f:4f:a5:4f:65:73:b8:63:16:de:21:82:ca:35:
b0:33:51:33:eb:06:e5:62:83:ac:fb:5e:da:0b:5f:8e:ec:de:
a3:58:a6:af:de:ad:bd:18:36:20:1c:ac:b3:93:ee:f7:5b:1c:
f5:57:b8:68:f6:dc:55:05:6c:e2:97:be:51:4c:00:ba:d7:a7:
68:3d:fc:83:e9:eb:70:dd:f4:ce:a0:44:b8:31:e3:6a:2d:37:
17:b4:b4:bd:c0:ee:c9:50:67:8b:4e:e7:b9:0e:2b:64:6f:21:
62:eb:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:26 2026 by rpki-client