
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json)
Hash identifier: +W548emWz3d/MHuFevwEeUAQctdZDazPp66OO0xo3vI=
Subject key identifier: FD:0B:8A:72:BA:1A:2D:19:60:23:C3:79:DB:66:41:DC:6F:21:48:E8
Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Certificate serial: 2B85A7B6BB29437C4831482A0FA3C484C436B18E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 00:59:12 +0000
Manifest this update: Wed 17 Jun 2026 00:54:12 +0000
Manifest next update: Thu 18 Jun 2026 03:39:12 +0000
Files and hashes: 1: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=)
2: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: qMkXvf2FDnXirC5WRRbG3+R+6JgywtE+tL6L+xtZnkM=)
3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=)
4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:85:a7:b6:bb:29:43:7c:48:31:48:2a:0f:a3:c4:84:c4:36:b1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751
Validity
Not Before: Jun 17 00:54:12 2026 GMT
Not After : Jun 18 03:39:12 2026 GMT
Subject: CN=FD0B8A72BA1A2D196023C379DB6641DC6F2148E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:bd:da:6b:e2:82:0e:dc:5b:44:c1:fc:e6:
f9:73:bf:72:4c:ed:06:f4:b5:f4:4a:ce:48:3f:ed:
79:c0:9e:ed:a6:35:63:09:97:8e:82:18:c5:2c:c5:
4e:97:50:c4:97:1b:19:46:4a:35:c3:1f:62:7e:31:
ab:7b:58:7d:85:2c:ca:49:55:6f:05:60:75:d5:0c:
68:5c:95:64:e2:ee:b1:a6:2b:06:74:05:06:7d:cf:
4a:dd:78:42:c9:4a:46:b5:3b:48:ae:1e:2e:6f:ee:
39:32:0d:7c:dc:d7:bc:48:61:8a:52:38:49:2f:4f:
c3:37:05:7a:c8:cb:6d:d7:4a:f0:86:11:bf:9a:b4:
8d:14:78:8e:8f:60:73:9f:97:ac:c7:7b:74:50:2e:
45:9f:42:00:e7:1e:24:4a:13:f4:a5:9f:4c:be:84:
af:d9:d5:e4:84:f2:8e:a2:1f:db:1e:6b:bd:ef:ca:
d6:69:55:87:34:52:09:da:de:f2:e5:8f:3f:80:21:
05:c6:bc:62:69:a6:10:7b:a2:be:ec:ea:3b:7e:a5:
b0:53:43:07:6c:95:91:0d:01:ae:e3:28:a3:ef:24:
de:26:c8:8c:58:3d:d6:f5:0f:16:6f:09:8e:f6:ac:
75:3d:7f:ea:ec:80:3d:f2:21:41:4e:81:48:5e:02:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:8A:72:BA:1A:2D:19:60:23:C3:79:DB:66:41:DC:6F:21:48:E8
X509v3 Authority Key Identifier:
keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:ea:9a:71:c7:7a:13:96:85:67:5a:34:d9:38:ab:60:af:
7e:90:25:dc:c5:b5:88:e8:ea:cd:80:24:ae:4e:07:6c:d4:1a:
af:1a:2a:96:f8:c4:ed:8e:fe:5c:6b:ad:12:14:43:e1:b3:3e:
cf:1f:2f:6f:00:6d:58:49:3a:5d:08:0e:ed:38:72:b6:f2:b9:
d2:eb:57:9d:20:d5:ef:b9:4b:e8:f4:8f:49:ce:6f:b4:ed:e0:
15:f3:2a:e1:52:a2:07:f7:ed:77:40:7c:5d:f7:10:8c:3b:1f:
89:ad:7d:f6:f0:cf:a3:61:8d:5e:a4:8a:f0:13:1b:d6:1d:68:
71:f4:04:9b:bf:ea:c2:d0:e7:51:33:fc:eb:6b:1a:1d:ea:0c:
0d:e4:c8:78:54:44:16:47:b7:e8:be:55:b1:32:43:95:82:67:
15:46:51:2e:fa:5d:95:fe:1b:de:f7:75:4b:b3:8d:08:dd:0f:
09:49:e0:04:41:d0:f7:18:e7:8a:e4:b0:31:fa:63:93:da:77:
6c:07:6a:2c:39:05:a4:93:52:c0:5a:33:86:55:fa:6e:a8:90:
6e:8e:cd:a2:84:67:aa:73:24:86:ac:dd:8a:40:fc:8b:eb:2b:
09:dc:0a:f0:7c:b9:77:11:2a:64:6c:30:99:c4:a9:c4:e8:15:
26:18:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:41 2026 by rpki-client