
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft
File: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft (raw, json)
Hash identifier: kR6zySa/vT0G5wEsZ3MVKPHdsEoaCyGYKDM3xcGRRyk=
Subject key identifier: 5B:F9:0E:A5:56:62:62:2D:9A:A8:17:65:D0:36:A8:3A:FF:D5:15:3D
Authority key identifier: 1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6
Certificate issuer: /CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6
Certificate serial: 35B4F9C5123D6AF0705C782C59EA764728CD3EA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 17:30:39 +0000
Manifest this update: Sat 13 Jun 2026 17:25:39 +0000
Manifest next update: Sun 14 Jun 2026 21:12:39 +0000
Files and hashes: 1: 1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl (hash: fVSu3VXWAuk2Cl6ziq7s5pftKZ1/Mxe9c3LBoq1HivY=)
2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: /gkps6YmjETNnD4xTy2XTErh7Br1EnrDL/N1FLVMik4=)
3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: JrEW/30RO3gUW1ByazsB4J+UwUtCgvPKBe7wSHvmciQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl
rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b4:f9:c5:12:3d:6a:f0:70:5c:78:2c:59:ea:76:47:28:cd:3e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A50ED9A6966DACB0903F705DF03BB286581F4A6
Validity
Not Before: Jun 13 17:25:39 2026 GMT
Not After : Jun 14 21:12:39 2026 GMT
Subject: CN=5BF90EA55662622D9AA81765D036A83AFFD5153D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:bb:5a:89:fd:10:c3:45:d1:2f:63:a2:b6:
60:69:3f:e2:d5:c5:d2:30:fb:bd:99:f1:c1:96:e8:
41:79:36:15:b8:f5:02:17:ff:bf:aa:ff:06:79:84:
b0:ba:57:1f:01:77:d2:c6:d4:1a:19:00:31:b6:41:
9d:e4:ca:61:21:77:db:88:42:09:60:72:77:ce:34:
9e:c1:72:f5:8e:ad:72:a0:53:d1:15:ec:70:a4:8c:
05:01:23:45:f0:e6:b0:d2:8f:d8:f8:b7:76:99:68:
6e:1f:e7:f0:bc:27:c2:6f:c1:c7:ca:6c:43:a8:c6:
ba:dc:1e:3c:80:83:c4:2b:43:19:91:f8:40:4e:71:
b0:3b:06:16:8b:40:15:c6:1d:82:67:52:9c:86:bf:
69:8e:31:9a:21:9d:93:ad:d4:91:42:38:3b:71:e3:
70:7b:84:5e:35:79:ef:cd:1e:a2:1d:cb:b3:e3:ed:
9a:49:23:9f:89:75:2f:d6:24:8a:c6:61:c0:aa:f8:
c2:d5:15:7f:c3:a2:b9:ce:fc:b1:ca:ee:16:b7:8d:
42:60:d0:aa:ac:a0:fa:e5:4a:90:78:ee:de:5d:46:
17:92:92:56:fe:45:b8:c8:8f:2b:51:cc:b3:e4:20:
0f:73:9d:c9:d8:7f:9b:ba:47:74:08:a7:4d:cf:14:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:0E:A5:56:62:62:2D:9A:A8:17:65:D0:36:A8:3A:FF:D5:15:3D
X509v3 Authority Key Identifier:
keyid:1A:50:ED:9A:69:66:DA:CB:09:03:F7:05:DF:03:BB:28:65:81:F4:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A50ED9A6966DACB0903F705DF03BB286581F4A6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/1A50ED9A6966DACB0903F705DF03BB286581F4A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:77:a5:11:0f:b6:c1:17:ea:23:c8:54:ff:49:7a:eb:34:4c:
10:88:82:ca:4a:8d:98:0d:03:3b:c3:32:8f:d1:cb:e2:b7:b6:
2e:e9:d0:59:29:14:cc:11:3d:93:c1:e5:7b:ec:cb:ca:9c:4e:
60:15:9a:67:f0:fb:36:fc:0a:5e:69:b8:ca:5d:93:27:34:23:
07:f4:25:6c:e8:62:3d:4b:2b:91:a7:7e:59:09:54:67:b6:76:
a4:c6:8d:a2:56:08:cf:a1:6e:ef:09:1d:c8:73:63:a3:34:58:
29:04:1a:14:a5:16:fe:6b:df:ab:8c:6d:65:2a:77:69:c7:90:
ff:bf:dc:13:49:6a:42:7c:d5:7f:76:4b:19:03:86:72:b7:63:
49:a1:20:61:65:63:7f:e6:0f:a9:b2:9e:69:d1:e3:c7:6e:07:
83:e4:40:8f:3b:eb:c6:22:78:2c:7f:d8:db:09:7b:25:b9:34:
eb:ed:5d:02:09:de:f4:bf:07:eb:2a:f1:fd:4a:3c:f4:15:4d:
a1:a0:69:f6:23:5e:f3:46:69:8e:0d:4d:d1:9a:89:60:d7:95:
0b:a4:ef:90:7c:86:dd:25:9c:22:4a:1e:d6:84:1d:91:62:46:
0b:66:55:a6:d1:2b:ae:38:6e:29:82:72:08:48:0d:f7:cf:5b:
dd:35:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:29 2026 by rpki-client