
$ rpki-client -vvf repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
File: 50F3718072F17C59233AEA817A04F2D34FEC89FC.mft (raw, json)
Hash identifier: CZdqAWK9/P347LBeEvHxqFaP+knZmew8vtM3VVMAJJE=
Subject key identifier: A3:4B:22:90:0F:4D:AA:21:66:C1:01:B9:82:07:3C:0C:33:CE:CA:FD
Authority key identifier: 50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC
Certificate issuer: /CN=50F3718072F17C59233AEA817A04F2D34FEC89FC
Certificate serial: 44F0E4616A2F5DE4032C669EFB28042AD9436908
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
Manifest number: 022A
Signing time: Sat 28 Feb 2026 01:10:40 +0000
Manifest this update: Sat 28 Feb 2026 01:05:40 +0000
Manifest next update: Tue 03 Mar 2026 05:25:40 +0000
Files and hashes: 1: 50F3718072F17C59233AEA817A04F2D34FEC89FC.crl (hash: wA1NAyKMyFWrrtShrskxdRCNCNGNDNI5PqeUDRWL76k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl
rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 05:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f0:e4:61:6a:2f:5d:e4:03:2c:66:9e:fb:28:04:2a:d9:43:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50F3718072F17C59233AEA817A04F2D34FEC89FC
Validity
Not Before: Feb 28 01:05:40 2026 GMT
Not After : Mar 3 05:25:40 2026 GMT
Subject: CN=A34B22900F4DAA2166C101B982073C0C33CECAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:a5:31:ed:c4:48:b4:d2:3d:1c:58:ab:4b:
db:8b:d7:11:69:c6:9d:d0:48:d9:8c:55:b3:a2:e7:
35:fb:9f:3c:9a:e7:27:e1:22:a8:9c:14:66:fc:c9:
56:0e:cf:ae:28:c1:7b:f6:89:87:3f:bd:8c:57:17:
2f:e0:0d:72:0e:ef:4b:0b:ca:46:45:b1:2f:23:7b:
09:26:70:be:15:8d:d6:9e:70:2b:bc:91:01:59:96:
ad:5b:13:af:1b:af:5e:ce:14:78:8c:56:c4:92:97:
f4:81:73:78:55:59:da:7f:67:d1:e0:4f:1a:74:3a:
d2:71:78:2d:7a:91:ee:62:eb:1c:13:70:ef:f4:9d:
71:f7:1f:89:00:aa:7f:bc:e5:a0:7a:43:96:d1:29:
ed:06:29:1f:5b:30:a1:bb:61:94:41:33:d4:d3:5a:
3c:a7:56:f5:68:d5:cb:c8:57:66:55:bf:4a:4b:42:
e5:11:34:ac:ff:ba:09:66:f3:a9:5b:da:3f:e0:bb:
2c:99:93:47:97:56:0f:32:d3:bc:6f:31:6f:2e:90:
d9:74:3a:36:1b:e8:04:cf:3f:f7:7e:68:60:16:ee:
89:3b:dd:e6:4f:a1:e1:4c:56:ab:de:93:0b:38:91:
e9:9c:5f:07:72:01:cc:b0:bf:96:ad:8c:0d:cd:9d:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:22:90:0F:4D:AA:21:66:C1:01:B9:82:07:3C:0C:33:CE:CA:FD
X509v3 Authority Key Identifier:
keyid:50:F3:71:80:72:F1:7C:59:23:3A:EA:81:7A:04:F2:D3:4F:EC:89:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50F3718072F17C59233AEA817A04F2D34FEC89FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9651997c-9a7c-4e04-af17-dbc63a4a92ee/0/50F3718072F17C59233AEA817A04F2D34FEC89FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:5d:9a:30:7b:00:f5:e4:ef:dc:51:61:98:12:cd:f3:ce:
d0:cf:94:30:7d:25:aa:8e:76:55:7b:fb:35:9e:ec:1e:b1:1b:
9a:cd:0d:a9:2e:85:73:ef:79:e5:d7:f8:d4:4e:c2:59:02:79:
a0:3a:76:c2:11:0e:ce:3b:dd:fe:86:8b:1e:f2:91:27:76:e4:
b0:8c:c1:f4:d6:bb:41:20:ea:3a:f3:01:c1:72:3d:70:9a:60:
84:4e:f0:1d:57:55:15:43:58:66:ce:e2:a4:34:de:be:15:36:
c1:95:cc:54:a2:98:8b:55:fe:d0:2c:6e:dd:5c:45:e3:94:c8:
c7:87:f6:17:65:e4:1d:dc:32:5a:86:96:a5:4b:bb:c1:db:4d:
a0:c8:8b:4e:bc:57:8e:74:3d:ac:5b:04:65:0d:3a:f5:36:70:
f6:f5:ba:8b:c5:cb:46:ac:a6:db:30:ac:a3:06:4d:54:dd:c1:
50:bd:02:a9:fc:ae:d0:d0:f6:5b:a1:71:5a:28:77:39:68:d6:
5c:c4:10:58:e4:e3:fb:12:db:4d:a6:c3:3c:bc:99:5a:1a:95:
d4:a8:58:62:cc:e5:30:ee:6a:19:5d:37:6b:ec:ab:cf:67:59:
76:3c:d5:e0:94:b0:a9:4a:1f:88:49:9d:84:cf:51:f1:38:1f:
a5:a9:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:46 2026 by rpki-client