
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
File: A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft (raw, json)
Hash identifier: 8HnD9d56lBBGzH6tXjnWKP6AZ8rUUV/AN71kY6uhSKA=
Subject key identifier: B7:CE:C9:E3:9C:9A:8A:3A:85:05:D5:F9:3E:D0:42:31:90:4B:1A:74
Authority key identifier: A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6
Certificate issuer: /CN=A50D32CA0D9319C53EE2322DBFEE1584842AB3A6
Certificate serial: 172A0F04195E480755C5A047527E3791AF3012A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 06:43:08 +0000
Manifest this update: Sat 26 Sep 2026 06:38:08 +0000
Manifest next update: Sun 27 Sep 2026 08:09:08 +0000
Files and hashes: 1: A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl (hash: 8ObDnPXgXFWvmHsWcv0iXOGZPOkjyrRcUWyKu4l1PRY=)
2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: ELulKvfOkTiYaS+HRynT4fKXT1Jquc95r71+eT2JPyQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl
rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2a:0f:04:19:5e:48:07:55:c5:a0:47:52:7e:37:91:af:30:12:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A50D32CA0D9319C53EE2322DBFEE1584842AB3A6
Validity
Not Before: Sep 26 06:38:08 2026 GMT
Not After : Sep 27 08:09:08 2026 GMT
Subject: CN=B7CEC9E39C9A8A3A8505D5F93ED04231904B1A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:44:a9:d1:bb:73:9a:b2:09:66:3b:4e:12:
54:91:8f:38:08:bc:03:3a:5e:73:dd:f4:ef:f0:8c:
09:24:7e:06:bc:a3:f0:b8:a0:44:f8:e1:59:a2:95:
f0:b2:d2:dd:c9:bb:d2:0d:da:e8:03:87:31:6f:7d:
ba:02:d8:f7:d3:21:d1:09:ca:9b:55:33:f7:3d:a2:
5d:f6:d8:61:d8:be:d3:dc:2b:a6:f8:5c:46:c3:09:
44:99:98:d7:ed:f2:bc:a3:09:de:c8:a2:55:b2:7f:
35:8b:8c:e7:1b:46:d6:31:95:1f:a8:25:a6:77:5e:
11:50:8c:56:d6:37:96:cb:24:26:20:ce:1b:f6:1f:
b8:21:9c:35:09:b5:f5:40:9e:7b:3e:d4:e2:62:9f:
be:e4:15:ce:13:f1:03:76:a0:10:5c:ec:18:d8:56:
43:c0:6a:1f:40:b3:65:6e:16:22:a2:f4:17:c9:7d:
1c:68:be:0d:e9:fd:cc:58:1e:3d:ce:95:aa:22:73:
65:4d:e6:c9:11:b5:d9:27:e6:2b:1a:8e:f5:69:88:
fb:38:15:8a:7d:00:62:51:86:e0:20:47:24:06:df:
b9:d8:48:c9:05:3d:df:63:89:c4:35:b8:e7:24:55:
3e:6b:cf:a3:0c:09:83:4e:7d:dd:31:07:a3:54:28:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:C9:E3:9C:9A:8A:3A:85:05:D5:F9:3E:D0:42:31:90:4B:1A:74
X509v3 Authority Key Identifier:
keyid:A5:0D:32:CA:0D:93:19:C5:3E:E2:32:2D:BF:EE:15:84:84:2A:B3:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/A50D32CA0D9319C53EE2322DBFEE1584842AB3A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:9a:41:54:1d:c7:f6:26:83:20:03:a4:8d:0c:d0:a0:18:
a1:76:a2:7b:e7:ed:ab:aa:29:02:1c:b5:a9:46:39:f4:a2:0f:
fe:0f:a6:46:43:91:84:44:3b:f9:64:0c:ae:d8:01:c7:d8:dc:
a0:29:83:1f:47:ec:ac:7f:b7:65:6b:d7:a2:0e:c5:e0:60:75:
3c:07:23:4f:04:07:54:77:6e:e4:ba:28:b4:ab:af:5d:d5:6d:
f5:22:a8:47:13:95:2c:4a:c4:e5:50:57:c3:d0:0a:a4:7d:7a:
01:4e:92:cd:c3:75:fc:ca:8e:14:29:58:4e:dd:fb:c6:99:d1:
f0:2e:ce:91:89:19:59:05:f6:ff:94:0d:1d:7d:5c:08:77:8c:
18:92:7d:9a:b8:9a:ec:7a:8b:18:4f:c4:0b:c9:f8:08:9a:ea:
47:3b:6a:1e:6e:45:a3:c9:0d:e5:1c:55:9b:21:10:8c:ca:14:
33:47:f7:f5:71:6b:45:a4:a1:46:14:21:24:a1:3d:ca:60:71:
ab:24:c4:a0:9d:78:82:e7:33:c5:98:b2:df:4f:82:51:0a:e8:
3a:10:57:36:83:96:92:f7:a6:f9:ff:54:e9:7a:bc:70:31:b2:
5f:6d:96:c0:7a:90:94:c6:1b:11:18:f2:e7:b6:cb:b0:b5:d8:
0a:38:ba:10
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFyoPBBleSAdVxaBHUn43ka8wEqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUwRDMyQ0EwRDkzMTlDNTNFRTIzMjJEQkZFRTE1ODQ4
NDJBQjNBNjAeFw0yNjA5MjYwNjM4MDhaFw0yNjA5MjcwODA5MDhaMDMxMTAvBgNV
BAMTKEI3Q0VDOUUzOUM5QThBM0E4NTA1RDVGOTNFRDA0MjMxOTA0QjFBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pkSp0btzmrIJZjtOElSRjzgI
vAM6XnPd9O/wjAkkfga8o/C4oET44VmilfCy0t3Ju9IN2ugDhzFvfboC2PfTIdEJ
yptVM/c9ol322GHYvtPcK6b4XEbDCUSZmNft8ryjCd7IolWyfzWLjOcbRtYxlR+o
JaZ3XhFQjFbWN5bLJCYgzhv2H7ghnDUJtfVAnns+1OJin77kFc4T8QN2oBBc7BjY
VkPAah9As2VuFiKi9BfJfRxovg3p/cxYHj3Olaoic2VN5skRtdkn5isajvVpiPs4
FYp9AGJRhuAgRyQG37nYSMkFPd9jicQ1uOckVT5rz6MMCYNOfd0xB6NUKMfpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUt87J45yaijqFBdX5PtBCMZBLGnQwHwYDVR0j
BBgwFoAUpQ0yyg2TGcU+4jItv+4VhIQqs6YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjRhMDJkMzctM2I5ZC00NTNhLThjODEtMzI4ZTU0MDE0MWZkLzAvQTUwRDMyQ0Ew
RDkzMTlDNTNFRTIzMjJEQkZFRTE1ODQ4NDJBQjNBNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNTBEMzJDQTBEOTMxOUM1M0VFMjMyMkRCRkVFMTU4NDg0MkFC
M0E2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj
ODEtMzI4ZTU0MDE0MWZkLzAvQTUwRDMyQ0EwRDkzMTlDNTNFRTIzMjJEQkZFRTE1
ODQ4NDJBQjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGvhmkFUHcf2JoMgA6SNDNCgGKF2onvn7auq
KQIctalGOfSiD/4PpkZDkYREO/lkDK7YAcfY3KApgx9H7Kx/t2Vr16IOxeBgdTwH
I08EB1R3buS6KLSrr13VbfUiqEcTlSxKxOVQV8PQCqR9egFOks3DdfzKjhQpWE7d
+8aZ0fAuzpGJGVkF9v+UDR19XAh3jBiSfZq4mux6ixhPxAvJ+Aia6kc7ah5uRaPJ
DeUcVZshEIzKFDNH9/Vxa0WkoUYUISShPcpgcaskxKCdeILnM8WYst9PglEK6DoQ
VzaDlpL3pvn/VOl6vHAxsl9tlsB6kJTGGxEY8ue2y7C12Ao4uhA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:49 2026 by rpki-client