$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft File: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json) Hash identifier: oDyh2XF1g7VFG6v9K8V1zIVTGUp/JglnvDVSFAofjyk= Subject key identifier: 42:69:21:18:00:D2:C0:F5:47:40:86:45:65:A4:51:EE:40:EE:8E:FC Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51 Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51 Certificate serial: 2B4F8A0BD95084C7D133F2D887040CCB147714EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 13:26:16 +0000 Manifest this update: Sat 14 Nov 2026 13:21:16 +0000 Manifest next update: Sun 15 Nov 2026 14:05:16 +0000 Files and hashes: 1: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=) 2: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: oTUeAsnfDpG5rQAmTSWOP2BEy7HIECtbj/YNvTX/nJk=) 3: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=) 4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:8a:0b:d9:50:84:c7:d1:33:f2:d8:87:04:0c:cb:14:77:14:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51 Validity Not Before: Nov 14 13:21:16 2026 GMT Not After : Nov 15 14:05:16 2026 GMT Subject: CN=4269211800D2C0F54740864565A451EE40EE8EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:c3:ed:69:b2:22:d8:9b:aa:b7:31:c8:b3: 9d:5e:72:72:8c:81:7c:22:6c:94:ba:b4:4d:63:5e: 91:ec:f0:ed:3b:4e:fb:f7:d1:eb:64:0c:ce:a8:73: 61:e4:a2:65:2e:82:5e:fc:56:3e:a1:81:11:d9:06: f7:c9:bb:df:3c:e3:fc:61:42:14:05:2e:8d:80:fa: 67:39:8d:18:6f:3d:b5:ef:72:85:87:a1:ba:aa:4f: 57:0c:8b:6d:08:78:06:f1:69:c1:49:c1:08:2f:11: 23:94:14:b9:16:02:fe:75:f0:29:9e:51:2c:20:ea: eb:16:be:e7:bb:d5:8d:16:e4:da:82:48:bf:94:e0: 63:2e:bd:d3:ba:fb:04:69:74:79:a3:2d:e6:6c:48: 2f:8e:44:b9:f4:12:37:5d:01:a3:37:8c:11:0e:63: 87:5d:a3:cd:5f:a8:32:bc:c1:4b:49:e2:af:c3:03: 30:af:d8:e4:50:48:f2:ce:9c:24:72:1e:61:cb:36: a3:56:5b:bb:2d:6a:bb:48:0e:f3:b1:19:dc:48:9e: 36:2c:43:df:16:02:a6:9d:4d:ea:23:c6:0d:8c:61: 78:a8:9b:90:b6:d5:7f:bf:85:0a:48:41:48:50:5d: 76:92:c2:5f:c1:ba:69:7e:94:f0:5e:96:ef:8a:35: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:21:18:00:D2:C0:F5:47:40:86:45:65:A4:51:EE:40:EE:8E:FC X509v3 Authority Key Identifier: keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c9:d6:4b:c4:e7:8a:b5:84:56:29:88:62:83:94:15:2a:5d: fc:4a:6d:78:1a:9a:b4:ff:a8:7b:e0:57:f9:b7:92:46:43:93: c4:2b:d3:a2:09:31:a4:35:29:0c:f8:42:db:e5:dd:8d:49:c3: cc:29:cf:9a:a9:ee:9c:ff:f0:62:c5:24:19:db:84:83:c6:6b: dd:98:8d:c2:2a:7d:8d:d8:29:86:a7:0e:b7:6b:35:2a:8a:08: 30:3f:0d:db:dc:47:e4:f3:28:1c:8e:e2:92:f5:46:16:72:81: 1b:f0:17:37:bf:38:5b:86:38:e0:71:d4:ae:32:3e:1b:ce:67: 19:20:e1:0d:71:e4:28:69:72:3d:3e:62:2b:43:f8:22:7e:4f: 41:b9:2a:95:a3:6a:f2:64:e8:02:76:b7:e5:a7:d5:40:25:12: 24:5a:9a:7e:78:91:24:58:e7:c7:a7:58:66:34:0f:0e:a0:08: e7:5c:6d:c9:c9:ce:a7:26:0f:d6:44:32:a9:18:75:5b:52:a9: b4:59:5e:0b:a8:a3:fb:14:2d:ed:47:bf:d2:e0:5b:06:32:8c: 0d:48:11:92:43:9c:e5:71:4f:a8:79:03:9b:f5:e4:b0:51:55: 4c:12:c6:8a:bc:b7:77:28:fa:85:ab:66:88:b1:46:3b:c8:f8: c5:f9:bd:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0+KC9lQhMfRM/LYhwQMyxR3FOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAzNDFFQTE3QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRG NkM2NEQ1MTAeFw0yNjExMTQxMzIxMTZaFw0yNjExMTUxNDA1MTZaMDMxMTAvBgNV BAMTKDQyNjkyMTE4MDBEMkMwRjU0NzQwODY0NTY1QTQ1MUVFNDBFRThFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2cPtabIi2JuqtzHIs51ecnKM gXwibJS6tE1jXpHs8O07Tvv30etkDM6oc2HkomUugl78Vj6hgRHZBvfJu9884/xh QhQFLo2A+mc5jRhvPbXvcoWHobqqT1cMi20IeAbxacFJwQgvESOUFLkWAv518Cme USwg6usWvue71Y0W5NqCSL+U4GMuvdO6+wRpdHmjLeZsSC+ORLn0EjddAaM3jBEO Y4ddo81fqDK8wUtJ4q/DAzCv2ORQSPLOnCRyHmHLNqNWW7startIDvOxGdxInjYs Q98WAqadTeojxg2MYXiom5C21X+/hQpIQUhQXXaSwl/Buml+lPBelu+KNbwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmkhGADSwPVHQIZFZaRR7kDujvwwHwYDVR0j BBgwFoAUUDQeoXps7pObLN+oMtwDJPbGTVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFhNDg5YTYtNTQ4NS00ODdmLWI1ZGQtOGY0ZWRlYjQ2YmNiLzAvNTAzNDFFQTE3 QTZDRUU5MzlCMkNERkE4MzJEQzAzMjRGNkM2NEQ1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MDM0MUVBMTdBNkNFRTkzOUIyQ0RGQTgzMkRDMDMyNEY2QzY0 RDUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvNTAzNDFFQTE3QTZDRUU5MzlCMkNERkE4MzJEQzAz MjRGNkM2NEQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLJ1kvE54q1hFYpiGKDlBUqXfxKbXgamrT/ qHvgV/m3kkZDk8Qr06IJMaQ1KQz4Qtvl3Y1Jw8wpz5qp7pz/8GLFJBnbhIPGa92Y jcIqfY3YKYanDrdrNSqKCDA/DdvcR+TzKByO4pL1RhZygRvwFze/OFuGOOBx1K4y PhvOZxkg4Q1x5Chpcj0+YitD+CJ+T0G5KpWjavJk6AJ2t+Wn1UAlEiRamn54kSRY 58enWGY0Dw6gCOdcbcnJzqcmD9ZEMqkYdVtSqbRZXguoo/sULe1Hv9LgWwYyjA1I EZJDnOVxT6h5A5v15LBRVUwSxoq8t3co+oWrZoixRjvI+MX5vcs= -----END CERTIFICATE-----Generated at Sun Nov 15 01:24:20 2026 by rpki-client