
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
File: 2C54A4433C48711637614DBB101ACAC627FB4444.mft (raw, json)
Hash identifier: +qfHOzE0N4baBfGMEOZw+aWeKsO2QY5XhzB4r12Po/A=
Subject key identifier: 7E:ED:8C:2B:48:87:20:80:8B:26:80:45:AD:35:F3:43:7A:1F:67:CE
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Certificate issuer: /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial: 761C5207F1D179F65B7691C18E92CC4F421A2614
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:19:27 +0000
Manifest this update: Fri 24 Jul 2026 00:14:27 +0000
Manifest next update: Sat 25 Jul 2026 01:06:27 +0000
Files and hashes: 1: 2C54A4433C48711637614DBB101ACAC627FB4444.crl (hash: LVqTZzOF049kqOEZTmC+N2MO+0UPMX+TVmc/tANSUUw=)
2: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=)
3: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=)
4: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1c:52:07:f1:d1:79:f6:5b:76:91:c1:8e:92:cc:4f:42:1a:26:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
Validity
Not Before: Jul 24 00:14:27 2026 GMT
Not After : Jul 25 01:06:27 2026 GMT
Subject: CN=7EED8C2B488720808B268045AD35F3437A1F67CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:2a:2f:37:3d:3f:31:66:3a:da:7e:37:ab:
e2:50:57:7a:a7:c2:19:00:b0:65:b6:2c:16:ba:ae:
5e:2a:57:da:8a:24:4d:75:8a:4f:03:71:9f:a0:4f:
c2:d9:59:2f:71:a7:93:09:79:f6:8f:66:ac:99:f9:
18:70:53:d4:1a:33:51:76:3b:f9:88:0e:36:95:03:
97:04:67:bc:7e:1e:d8:58:64:78:5c:86:4a:b4:6d:
1e:24:08:72:e0:4c:35:e3:72:82:ef:06:d6:8e:f2:
7b:59:bd:54:af:fb:60:bd:3f:38:4c:a1:0e:be:a2:
9a:b2:df:38:44:ef:b1:46:e0:04:09:d2:d0:23:1a:
05:d0:f3:a6:a5:b9:a9:5d:db:30:df:3b:97:ae:01:
bf:a7:ee:08:df:f8:78:8a:d9:a7:48:57:b7:85:c1:
43:36:29:19:3c:4d:38:c7:cd:36:39:73:bc:29:f2:
52:b8:9c:42:dc:f7:64:e6:e5:d0:b6:72:23:08:2d:
82:55:7a:19:c9:7b:63:23:12:06:92:14:c4:c1:7a:
04:0d:6d:20:8b:11:2c:c7:e4:bf:25:18:cd:f9:25:
07:71:9a:51:59:ff:45:e8:7b:f4:78:ec:e9:5f:41:
32:21:f4:d5:eb:c9:40:eb:5c:a8:10:d2:d0:86:4e:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:8C:2B:48:87:20:80:8B:26:80:45:AD:35:F3:43:7A:1F:67:CE
X509v3 Authority Key Identifier:
keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:82:cd:dc:5d:ec:38:19:31:50:e6:ab:ba:0f:42:91:4c:33:
43:86:53:7b:0f:4c:ad:a5:85:cc:fd:79:aa:39:15:9d:8b:fd:
21:87:07:04:70:96:a8:8a:7f:3b:26:60:6e:a4:77:ca:3c:a3:
ea:05:16:d7:12:a9:47:7c:fe:18:e9:70:4a:a3:59:a2:be:1f:
d8:1f:47:06:56:31:3d:21:68:17:32:c0:f2:32:ad:35:e6:38:
a9:cc:6a:96:33:bc:ef:0f:c8:b7:32:98:9d:6a:46:be:b6:60:
07:05:3b:69:24:19:e6:9c:f0:24:04:f2:9b:7c:bd:ed:d4:da:
aa:e4:ac:2f:aa:91:c7:8c:23:47:bd:95:1c:55:06:65:27:4c:
56:e2:73:9b:35:d3:bc:93:a8:d1:fa:30:22:ea:fc:16:be:d9:
c5:90:c9:78:93:48:28:b2:c2:98:f1:d7:90:66:bc:08:fd:44:
92:0d:ac:21:7c:36:a1:43:b1:4f:b1:25:f0:22:52:94:08:23:
1d:36:69:2d:10:52:05:29:de:a6:35:6d:38:36:9a:51:cb:68:
76:6c:98:d6:cb:dc:f3:ef:35:26:e2:81:a9:76:ef:63:6d:90:
b1:4f:30:39:44:e4:5e:d6:43:a2:82:3f:34:4e:86:66:38:99:
ba:83:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:39 2026 by rpki-client