$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: cw1Oj0w/u6pCST65aKI9SShl+DEwjjeIlDiy6UdRFcM= Subject key identifier: 69:67:23:AA:FF:0D:72:13:18:4C:49:DB:90:EF:59:DB:17:81:2A:8C Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 1EFBB2F24CF0B44FBC95CC3C372296806142D3C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:25:16 +0000 Manifest this update: Thu 23 Jul 2026 12:20:16 +0000 Manifest next update: Fri 24 Jul 2026 13:08:16 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 2: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: 8EFbwSir3b3haxpCPtkG1rsKs8IHtK+inhF2H+BHS6Y=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fb:b2:f2:4c:f0:b4:4f:bc:95:cc:3c:37:22:96:80:61:42:d3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Jul 23 12:20:16 2026 GMT Not After : Jul 24 13:08:16 2026 GMT Subject: CN=696723AAFF0D7213184C49DB90EF59DB17812A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:5c:3d:69:ec:d1:b9:85:65:14:26:8d:0d: f9:a7:59:70:55:cb:64:a4:e7:de:85:2a:15:3f:d3: ca:e7:58:a8:3f:03:b9:75:bc:96:40:e2:06:6b:66: c8:16:2b:43:2d:da:ad:c3:1a:66:e4:25:c4:75:86: ee:2d:05:55:b1:1f:d9:49:c5:43:7f:38:8d:ae:8a: 92:5e:78:f1:7e:d8:6a:e9:0a:3d:d6:06:15:1f:88: 26:87:2d:cf:f7:14:da:5c:c4:d4:76:87:2c:b5:59: af:70:09:40:36:54:71:75:b1:78:df:62:fd:b8:ce: ec:46:9d:97:80:61:ff:07:1f:40:ff:4e:2b:3a:0e: f7:56:8e:34:e9:6a:97:65:40:c6:da:87:bc:b4:83: 04:f1:38:63:d1:fa:6c:63:c4:0f:d9:6a:e6:d8:a7: 1e:96:c3:a9:12:47:3e:25:1c:21:81:72:a8:f0:23: d0:ee:6b:00:64:13:20:c7:20:40:52:2c:fd:54:f2: ae:a3:9c:14:84:a1:c3:74:0b:d1:02:1b:5b:30:e8: 2c:21:db:ea:d9:ff:96:01:67:8c:a9:44:45:4e:f9: 50:4f:04:0f:bb:cb:45:13:58:18:9a:ab:e8:8f:a6: 00:47:63:de:11:5a:64:e3:b6:1a:d0:86:ad:23:50: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:67:23:AA:FF:0D:72:13:18:4C:49:DB:90:EF:59:DB:17:81:2A:8C X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:27:47:e3:d4:72:3b:c0:68:f3:28:fb:89:8a:a8:91:03:d2: c1:ce:b9:c3:38:4f:83:c8:0b:14:9a:0f:b7:9c:bb:b3:b7:bc: 2c:9b:1a:45:8d:38:fb:8c:f4:93:e4:d9:6d:26:75:26:8e:32: c8:82:cc:53:e0:2c:11:ad:7e:a9:eb:06:a6:0d:28:80:25:ce: fe:55:4c:2a:3b:90:ea:c4:0d:e6:16:43:bd:22:da:30:c4:39: e8:90:12:6a:9a:2c:6e:c1:0a:9e:23:87:2e:ae:f3:f0:34:fb: 9f:f0:82:87:4b:93:8f:96:a9:d9:02:68:b5:3d:dc:a1:97:3d: 7b:49:4a:c7:85:b9:6f:11:7f:83:bb:2c:20:8a:83:90:99:47: c8:e6:4b:c4:56:ea:72:5f:ae:97:b9:39:68:27:86:57:78:b0: 08:4b:69:ec:06:0d:b0:33:92:e3:91:63:e0:06:f8:f3:94:4d: 56:bc:f1:26:35:08:69:dd:05:f8:6f:fd:7f:62:e9:19:81:e4: b6:06:a0:c6:c1:94:c9:87:d9:92:3a:61:4d:71:7f:3e:67:52: 64:5b:89:c9:ef:5d:6d:7a:84:ff:de:98:69:6c:07:13:04:fe: 56:af:92:58:88:68:73:80:d0:89:1c:ca:7c:87:80:3f:2c:9a: 85:c7:61:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvuy8kzwtE+8lcw8NyKWgGFC08EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA3MjMxMjIwMTZaFw0yNjA3MjQxMzA4MTZaMDMxMTAvBgNV BAMTKDY5NjcyM0FBRkYwRDcyMTMxODRDNDlEQjkwRUY1OURCMTc4MTJBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbVw9aezRuYVlFCaNDfmnWXBV y2Sk596FKhU/08rnWKg/A7l1vJZA4gZrZsgWK0Mt2q3DGmbkJcR1hu4tBVWxH9lJ xUN/OI2uipJeePF+2GrpCj3WBhUfiCaHLc/3FNpcxNR2hyy1Wa9wCUA2VHF1sXjf Yv24zuxGnZeAYf8HH0D/Tis6DvdWjjTpapdlQMbah7y0gwTxOGPR+mxjxA/ZaubY px6Ww6kSRz4lHCGBcqjwI9DuawBkEyDHIEBSLP1U8q6jnBSEocN0C9ECG1sw6Cwh 2+rZ/5YBZ4ypREVO+VBPBA+7y0UTWBiaq+iPpgBHY94RWmTjthrQhq0jUIEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWcjqv8NchMYTEnbkO9Z2xeBKowwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4nR+PUcjvAaPMo+4mKqJED0sHOucM4T4PI CxSaD7ecu7O3vCybGkWNOPuM9JPk2W0mdSaOMsiCzFPgLBGtfqnrBqYNKIAlzv5V TCo7kOrEDeYWQ70i2jDEOeiQEmqaLG7BCp4jhy6u8/A0+5/wgodLk4+WqdkCaLU9 3KGXPXtJSseFuW8Rf4O7LCCKg5CZR8jmS8RW6nJfrpe5OWgnhld4sAhLaewGDbAz kuORY+AG+POUTVa88SY1CGndBfhv/X9i6RmB5LYGoMbBlMmH2ZI6YU1xfz5nUmRb icnvXW16hP/emGlsBxME/lavkliIaHOA0IkcynyHgD8smoXHYc8= -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:11 2026 by rpki-client