
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
File: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft (raw, json)
Hash identifier: KaU/h8IXQ+1ku61YtaWJqWMZ+gVKsu99yfwMDvni3Bc=
Subject key identifier: 94:0D:3D:DD:5B:CC:6A:39:87:3C:3A:E8:65:9A:F0:0E:BD:22:FA:10
Authority key identifier: 50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
Certificate issuer: /CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Certificate serial: 703807DDDE340D86BF57953653202C7E490953DD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
Manifest number: 0106
Signing time: Sun 15 Nov 2026 06:06:42 +0000
Manifest this update: Sun 15 Nov 2026 06:01:42 +0000
Manifest next update: Mon 16 Nov 2026 06:09:42 +0000
Files and hashes: 1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: WGwf4ZheCNstu5sMth6N0foU0qrM+z/FwSG3oFHTVv4=)
2: 50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl (hash: a3b2ywsJZxIIcJtARl2vSjrn0K3/0E6w8ZLswTjTqjI=)
3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: cxf9fFshB4+bhjoui5wSDBBSpnsVcVvhifdGqqzNgz4=)
4: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: QGPTzA7izmVWKWGQGI0Tmi8hRyZZX/Yh7zilSro+/Yc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 06:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:38:07:dd:de:34:0d:86:bf:57:95:36:53:20:2c:7e:49:09:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50341EA17A6CEE939B2CDFA832DC0324F6C64D51
Validity
Not Before: Nov 15 06:01:42 2026 GMT
Not After : Nov 16 06:09:42 2026 GMT
Subject: CN=940D3DDD5BCC6A39873C3AE8659AF00EBD22FA10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:d1:57:33:dd:82:5c:05:6f:45:58:9e:dc:
1f:d0:9a:43:da:a9:97:54:33:46:7f:42:40:ce:c8:
13:51:1a:88:bc:a8:5c:6e:42:2f:a9:16:d0:85:bc:
1b:c5:14:ad:40:60:57:2b:3a:e4:6e:1b:a2:7b:43:
f5:fb:47:dd:53:c9:a6:e7:54:31:fb:c7:3a:61:8a:
ed:60:2b:79:d4:16:0b:c4:a7:df:12:d2:f5:1c:5c:
7e:b3:6a:c4:50:d4:f5:73:21:5a:0d:db:6d:b3:e0:
8d:9a:bc:15:22:43:f2:59:51:bc:60:1f:17:29:76:
05:6a:5e:c0:bc:6f:11:1e:08:a0:7f:3d:2e:63:62:
2b:58:83:b7:f5:ac:77:21:e9:72:75:ef:8e:2e:04:
42:99:c5:82:03:0d:87:59:73:10:e3:d1:88:a8:b1:
3d:f4:cc:82:2e:52:ac:3f:3a:89:6b:5e:0f:12:b5:
b8:ea:f1:4c:ee:63:3a:0f:ca:b5:f9:fa:6f:94:2b:
d6:7e:59:82:3e:b1:f9:a3:5d:c1:ab:cc:e9:39:79:
e1:73:c9:23:fb:43:38:5c:05:57:5b:e3:60:43:9a:
0f:de:dc:f3:57:52:73:ce:e6:11:b4:d8:1f:35:c3:
94:d9:58:69:37:c0:23:8a:62:8c:d0:65:c3:0f:25:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:3D:DD:5B:CC:6A:39:87:3C:3A:E8:65:9A:F0:0E:BD:22:FA:10
X509v3 Authority Key Identifier:
keyid:50:34:1E:A1:7A:6C:EE:93:9B:2C:DF:A8:32:DC:03:24:F6:C6:4D:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/50341EA17A6CEE939B2CDFA832DC0324F6C64D51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:6b:a6:2e:e2:ed:5e:14:db:80:3c:2e:19:3f:08:fd:95:
42:1b:49:3d:66:be:67:d8:09:3c:ad:b0:5a:a1:68:95:dc:19:
d4:89:b8:f6:e7:00:63:07:86:7f:a1:9e:61:a9:89:de:37:2d:
e1:6a:5c:d3:9e:b3:60:63:f0:0e:7f:0c:ab:e6:b1:cb:bc:7a:
bd:9e:7b:ce:ef:ce:0c:61:34:e7:dc:0b:2b:af:36:ff:1e:97:
15:db:df:fc:f1:ea:09:e2:83:ad:71:ec:31:fb:8d:47:27:2e:
65:a4:0c:50:db:9a:70:92:74:b8:76:45:94:b0:4f:9c:56:ce:
44:0a:77:05:71:bc:ae:c6:27:28:49:96:df:84:36:1b:0d:bd:
e1:55:7b:57:b5:11:a4:09:d4:97:27:05:c5:43:07:c0:3d:e6:
40:bb:1d:17:77:ba:13:eb:88:13:a3:e9:d2:59:37:75:3b:c1:
46:da:88:23:ab:97:de:68:ea:22:ad:56:fa:4e:80:7a:29:30:
b9:47:4f:ee:e4:5d:22:d1:6a:45:e5:68:da:2e:06:1e:76:bd:
2f:1e:91:e2:75:d1:9c:61:db:fd:55:47:17:81:19:6b:07:44:
3f:07:e1:12:03:52:37:0a:6c:53:a8:a1:16:7d:92:57:5d:cb:
f2:72:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:43 2026 by rpki-client