
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
File: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft (raw, json)
Hash identifier: WH9Z+z2GW8SRnUEvi6uNlLXEJz1wkXxxQS7KUHLeFHQ=
Subject key identifier: 10:66:FC:87:CA:99:DE:1E:F6:F3:A9:28:84:D7:56:59:05:4F:C3:46
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 3BD5FA3367514BA9A560EAD6806841661F9621B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 21:17:49 +0000
Manifest this update: Tue 22 Sep 2026 21:12:49 +0000
Manifest next update: Thu 24 Sep 2026 00:31:49 +0000
Files and hashes: 1: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=)
2: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: WQR96xVbOR8YHfuDPH4pCwZMpccOELsvadx46Qaje3c=)
3: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: mazZEIAiOuG4KpGr5hwlPA5N57EIEV/LQkQcu7NU8cw=)
4: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: ZqLtX6oxF7GFvkV0mRmheNcCMqhAtfEhCP1VWKOSD+0=)
5: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: 8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=)
6: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=)
7: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl (hash: sbFQtFKMFaI3jPRNKE2MsM7Bkbjuxh9U6G2IohdsxFc=)
8: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: yoLJQ2p5oc/N+ycEQpkidwthgAJPdn46896MAVru/hM=)
9: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: fGfLj2m8zzv2gBVrxG8woEOuvLb7BQto8QhIvETUk+0=)
10: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU=)
11: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=)
12: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=)
13: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=)
14: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=)
15: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA=)
16: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d5:fa:33:67:51:4b:a9:a5:60:ea:d6:80:68:41:66:1f:96:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: Sep 22 21:12:49 2026 GMT
Not After : Sep 24 00:31:49 2026 GMT
Subject: CN=1066FC87CA99DE1EF6F3A92884D75659054FC346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:25:59:2d:32:85:ca:4e:6c:82:fc:fb:08:
14:c6:d3:ab:02:bb:50:b3:0d:94:2d:15:44:e8:92:
02:4a:8e:ef:1c:34:fb:91:c5:a8:79:26:8e:f3:89:
6a:44:24:c1:93:6d:5e:9f:79:23:90:8c:77:f5:09:
7d:33:51:be:32:6b:ef:cd:f5:e9:6d:23:aa:0b:1d:
78:04:ad:db:95:bb:6b:66:02:f2:07:a8:fb:f2:a5:
67:30:38:f0:de:db:0e:3a:e5:c4:ca:50:fd:8b:9d:
46:09:61:8f:d6:b1:00:f0:ed:cd:c6:e5:d0:ac:04:
fc:8b:50:2e:6d:62:e7:aa:c1:aa:31:79:e8:a0:f5:
53:22:49:29:ab:3f:e7:e2:f6:f8:9f:ea:36:4a:92:
08:91:2f:12:4e:8c:f8:66:f6:cb:de:7f:bf:1e:cb:
a5:01:1f:89:9b:69:c1:cc:c5:c4:ed:97:3e:20:20:
69:81:ba:54:59:26:62:53:40:32:b6:0c:3a:30:e7:
c7:3c:a8:8a:9a:f0:0e:78:a3:a9:77:b0:ce:f0:41:
8b:28:f2:02:4e:1e:a3:cd:ca:24:a8:0c:9c:33:15:
b7:d0:60:ee:00:fd:d5:1c:f6:74:49:28:6d:77:87:
73:35:ba:e7:c4:46:07:c0:2b:71:56:f5:a6:71:ed:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:FC:87:CA:99:DE:1E:F6:F3:A9:28:84:D7:56:59:05:4F:C3:46
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2d:a9:15:09:7b:1a:ad:5e:5f:33:e4:d4:02:89:76:70:97:
9f:b3:a3:c2:29:51:c6:eb:d6:57:a8:c7:eb:da:7c:33:2b:50:
75:5a:ff:48:00:23:db:71:d9:73:05:5a:bd:12:58:8a:b3:cd:
be:23:16:32:3a:7c:d2:bc:18:e6:2c:52:f5:cb:e7:20:bb:21:
c2:f4:c7:d7:2d:a3:3a:ca:0b:c4:1f:2e:2a:f0:3a:01:5a:0b:
09:40:08:12:95:82:5f:3b:22:a1:52:f0:69:1f:88:9e:1d:3f:
35:a1:1b:3b:6a:fe:4c:fb:b1:0e:52:ce:2e:55:bd:1b:1f:f2:
9f:fd:78:a6:ad:dd:29:f5:64:39:e9:3a:97:47:59:d7:73:32:
93:6e:1d:69:41:8a:03:d9:fa:95:73:20:03:b8:b3:fd:3e:1f:
21:da:3a:e7:e2:36:17:db:ac:20:07:4a:a8:00:45:28:d6:20:
83:7f:5e:2e:a3:43:da:55:71:f8:b9:71:91:f9:fd:ba:9c:59:
da:ab:29:22:86:80:ea:32:52:c7:97:f4:f6:08:6f:5f:0f:c2:
88:bc:6a:08:19:31:09:02:5e:53:4e:9f:72:d9:e8:26:74:95:
b4:91:16:97:12:50:5c:1a:b5:32:60:e8:aa:b6:23:2f:2d:0a:
b2:57:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:25:59 2026 by rpki-client