$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: +MiY2qHtHGkM+n651MHdHPhGQwIEHRA3jE4EDYBlWmM= Subject key identifier: 84:5D:DF:F4:F5:D5:8C:53:6F:F1:3A:C9:4B:5D:E5:6C:26:A5:C4:27 Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 21EB7DF71989B2145AA05EE62D5E326E7F0C87CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 17:58:07 +0000 Manifest this update: Wed 23 Sep 2026 17:53:07 +0000 Manifest next update: Thu 24 Sep 2026 18:45:07 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 3: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: 0cd/vLrR0R8NSLl5zWH2w+aQhf0YEnYi9RONMib2UBo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:eb:7d:f7:19:89:b2:14:5a:a0:5e:e6:2d:5e:32:6e:7f:0c:87:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Sep 23 17:53:07 2026 GMT Not After : Sep 24 18:45:07 2026 GMT Subject: CN=845DDFF4F5D58C536FF13AC94B5DE56C26A5C427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:dc:32:7b:98:b1:b1:8e:c6:e7:fa:ce:39: 39:5d:bb:1a:ba:b2:c6:64:9f:d8:3d:87:c3:1b:30: 15:a1:c5:0b:61:94:9c:94:82:97:86:38:38:25:ea: 1a:1e:e4:98:31:f4:9a:ff:1e:08:2a:1e:cc:37:dd: 07:7f:29:d3:fe:9b:c1:d2:bd:63:fb:2e:7a:f9:ec: 6d:74:8b:c9:75:f4:80:cc:29:66:b3:24:68:1f:ff: 0e:eb:c7:0e:b2:aa:5a:de:da:19:98:6e:e7:fe:b6: 65:73:63:9b:a6:50:54:fb:3b:c5:42:b1:0c:12:1d: 69:a5:c0:14:ba:36:54:b1:77:e3:60:3e:80:3d:e0: 65:f0:ca:47:98:39:31:ea:e1:06:2f:7c:c5:5c:0a: 3c:66:57:bc:24:63:4b:6d:ca:fc:6d:b6:b8:98:0f: a0:4d:e7:a2:2f:7e:ef:2d:6f:70:55:4a:e7:7a:d9: ea:bc:29:6e:1a:43:f0:ca:e6:67:42:81:5b:ec:31: 13:fd:06:9e:d7:c6:39:10:b8:57:38:f8:b8:18:41: 75:78:33:88:2d:da:43:96:64:b8:e6:cf:db:b0:10: ca:f1:37:0c:52:d1:29:14:c0:a9:a8:38:1c:85:33: 19:d0:48:57:ba:2b:c9:ea:66:30:14:c3:fa:1b:95: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:DF:F4:F5:D5:8C:53:6F:F1:3A:C9:4B:5D:E5:6C:26:A5:C4:27 X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a7:91:94:21:2a:62:df:c8:8e:57:40:d4:75:81:f0:ba:4b: 9f:fb:e2:0a:fa:05:4a:f4:12:ce:07:5b:c9:9e:39:f1:52:cb: 0d:be:c6:b2:f9:30:22:43:77:57:4d:b9:66:c8:ba:6f:6d:7d: 5b:2e:fb:bf:ac:69:54:f8:d0:10:38:b5:28:ab:df:17:58:2b: 9c:c7:52:98:68:10:2e:ad:c4:65:3e:11:58:70:b9:9c:b1:2e: d3:90:8f:9c:e0:1a:81:d9:fa:b8:60:50:f5:d9:b9:1b:71:62: 8f:37:a0:69:1b:ed:97:f1:95:a0:37:fe:dc:82:50:50:07:dc: cd:e4:b3:aa:19:c5:dd:14:5d:c7:d0:53:0a:8d:4d:e6:e6:e7: 71:9d:ef:17:6f:1e:a5:28:8e:9a:46:1f:56:e9:05:e0:3f:c2: 20:03:0d:63:47:8f:66:c7:45:9a:9d:52:af:52:46:3b:b1:bd: d2:32:fd:89:54:19:0f:dc:11:eb:71:db:73:b3:05:7e:26:7f: 37:27:e9:5d:8c:87:6a:cc:d0:50:1c:65:18:6d:de:01:19:51: 8b:9c:0d:32:29:8d:43:0b:64:4e:0f:1f:8f:48:d4:58:7c:f3: 6e:03:54:76:a6:0c:16:91:3b:70:a7:16:42:e4:7d:d4:64:dd: 9f:c9:c8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIet99xmJshRaoF7mLV4ybn8Mh88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA5MjMxNzUzMDdaFw0yNjA5MjQxODQ1MDdaMDMxMTAvBgNV BAMTKDg0NURERkY0RjVENThDNTM2RkYxM0FDOTRCNURFNTZDMjZBNUM0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgdwye5ixsY7G5/rOOTlduxq6 ssZkn9g9h8MbMBWhxQthlJyUgpeGODgl6hoe5Jgx9Jr/HggqHsw33Qd/KdP+m8HS vWP7Lnr57G10i8l19IDMKWazJGgf/w7rxw6yqlre2hmYbuf+tmVzY5umUFT7O8VC sQwSHWmlwBS6NlSxd+NgPoA94GXwykeYOTHq4QYvfMVcCjxmV7wkY0ttyvxttriY D6BN56Ivfu8tb3BVSud62eq8KW4aQ/DK5mdCgVvsMRP9Bp7XxjkQuFc4+LgYQXV4 M4gt2kOWZLjmz9uwEMrxNwxS0SkUwKmoOByFMxnQSFe6K8nqZjAUw/oblXlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhF3f9PXVjFNv8TrJS13lbCalxCcwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCnkZQhKmLfyI5XQNR1gfC6S5/74gr6BUr0 Es4HW8meOfFSyw2+xrL5MCJDd1dNuWbIum9tfVsu+7+saVT40BA4tSir3xdYK5zH UphoEC6txGU+EVhwuZyxLtOQj5zgGoHZ+rhgUPXZuRtxYo83oGkb7ZfxlaA3/tyC UFAH3M3ks6oZxd0UXcfQUwqNTebm53Gd7xdvHqUojppGH1bpBeA/wiADDWNHj2bH RZqdUq9SRjuxvdIy/YlUGQ/cEetx23OzBX4mfzcn6V2Mh2rM0FAcZRht3gEZUYuc DTIpjUMLZE4PH49I1Fh8824DVHamDBaRO3CnFkLkfdRk3Z/JyCg= -----END CERTIFICATE-----Generated at Thu Sep 24 02:38:42 2026 by rpki-client