
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier: wp8AtqdRsx93O739s357bOqZYVb+dahnaWi7H8XZeoI=
Subject key identifier: 2E:74:20:09:CE:F5:42:4E:35:D6:40:10:02:23:09:93:F5:18:78:B4
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial: 2CC833F60A52771F9F93B06763C7573AF0CC9C43
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 03:45:17 +0000
Manifest this update: Thu 24 Sep 2026 03:40:17 +0000
Manifest next update: Fri 25 Sep 2026 06:39:17 +0000
Files and hashes: 1: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: jmaAGUR4Zp8dzyDr8+e8tQN4VdaYOw5R02xTF48HN7I=)
2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c8:33:f6:0a:52:77:1f:9f:93:b0:67:63:c7:57:3a:f0:cc:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Validity
Not Before: Sep 24 03:40:17 2026 GMT
Not After : Sep 25 06:39:17 2026 GMT
Subject: CN=2E742009CEF5424E35D6401002230993F51878B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:89:12:6f:78:ba:44:5f:75:63:e6:ac:67:
75:39:96:a3:dc:7d:42:0f:04:f0:1a:f1:d4:b2:4f:
79:91:b4:48:d3:3c:b8:ff:21:6d:c2:2c:f6:6e:e8:
30:ee:86:fc:1d:58:ae:bf:74:a8:d0:db:cd:a6:b8:
1f:fd:53:bb:2f:5e:b8:9e:75:5e:43:3d:8e:30:af:
6a:c3:57:e5:8e:3b:5b:8d:45:8e:c9:c5:9d:15:d2:
1b:a9:28:1c:ce:44:c6:f0:2f:69:1b:d4:e0:cd:9f:
71:18:99:92:be:86:0d:78:81:b5:40:3b:63:67:f6:
8b:3d:f0:ce:f6:9e:ab:d3:48:9f:12:e1:91:be:47:
5e:22:a5:75:e8:68:8b:b6:d4:50:ff:66:9f:f1:62:
d7:a4:b7:05:1e:70:46:0d:7b:1a:55:6d:7c:da:4b:
c8:20:00:d3:d2:1b:ee:31:32:ca:0f:9d:db:6a:94:
14:a9:e3:3c:51:80:31:ff:f5:be:b2:00:2c:82:6c:
86:94:0c:d0:71:82:44:f9:ee:df:d8:24:cf:07:55:
5a:08:8c:ee:2c:d8:c9:f1:e6:eb:c4:b7:ff:1c:f6:
64:69:82:0f:b2:17:54:09:44:9b:6c:97:d2:f3:d7:
d3:a2:71:fc:2c:a1:fb:9e:7a:b9:af:a5:a5:0f:25:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:20:09:CE:F5:42:4E:35:D6:40:10:02:23:09:93:F5:18:78:B4
X509v3 Authority Key Identifier:
keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:98:4f:3e:1a:cd:cc:a7:af:29:a1:9d:8c:30:1c:de:2a:
18:53:cb:e1:31:f7:1e:3e:64:39:40:b9:6d:51:db:bc:65:d3:
f7:f0:41:6d:1f:1d:39:d1:33:c4:5a:d8:2a:c6:63:9a:a3:75:
4b:1b:b2:27:80:5a:b7:03:26:14:4a:fb:b6:cb:5d:3f:68:22:
1d:67:63:ac:1a:9f:67:7e:b5:69:c5:62:ba:72:ee:64:27:79:
35:81:46:24:5b:8b:99:9d:9d:54:f5:59:f6:25:d1:fb:96:54:
99:e3:b2:47:00:79:91:8f:fb:19:ad:bc:64:46:d1:ac:40:f0:
32:ed:c6:e6:76:d6:6d:2c:b0:b6:49:4b:05:95:d4:ba:97:45:
7a:2c:b2:a3:5c:de:cb:3c:3b:8e:43:65:4f:bc:a1:c0:f2:31:
8d:cd:3f:6d:f1:e7:14:63:28:56:aa:67:4d:31:d2:e8:68:b8:
bd:63:6b:73:9f:e1:26:89:9c:17:59:96:a0:fb:65:d3:b5:4f:
ec:58:57:c2:ab:95:25:78:74:80:89:6c:ce:c3:e1:e2:44:e0:
4b:cb:ac:ec:db:82:0b:06:c2:3b:45:76:d4:cc:a8:48:91:e2:
1d:05:ce:9d:9b:13:22:88:f9:4a:e1:84:25:6e:38:5b:86:41:
fe:57:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:56 2026 by rpki-client