
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
File: D54419983140D3CB73E625681538225CB12E5424.mft (raw, json)
Hash identifier: p2ex2nfsU/D9pZr9m6b0V097fKgX8+S/Em+DhGVLEao=
Subject key identifier: 07:65:6C:D4:89:08:B5:08:68:18:28:E2:55:30:A8:FD:C1:89:08:1E
Authority key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
Certificate issuer: /CN=D54419983140D3CB73E625681538225CB12E5424
Certificate serial: 3412723F9942D3BB3934F60BA7174858D7493F76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 13:12:11 +0000
Manifest this update: Thu 24 Sep 2026 13:07:11 +0000
Manifest next update: Fri 25 Sep 2026 16:00:11 +0000
Files and hashes: 1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: SzOCWedu7Qhh9QrHie1gNK2ZtR2GDQm9yZncMipwLrI=)
2: D54419983140D3CB73E625681538225CB12E5424.crl (hash: HC3gG108ijV1Fy1pbtwVMsqcXx7ZgWl6QV8RCNXNHeI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:12:72:3f:99:42:d3:bb:39:34:f6:0b:a7:17:48:58:d7:49:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54419983140D3CB73E625681538225CB12E5424
Validity
Not Before: Sep 24 13:07:11 2026 GMT
Not After : Sep 25 16:00:11 2026 GMT
Subject: CN=07656CD48908B508681828E25530A8FDC189081E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:5c:f9:b1:ed:5b:02:4d:75:19:6d:fd:e5:
55:75:86:9f:11:91:a4:80:9d:5a:26:9f:a5:5c:ff:
08:6a:d3:77:87:fa:f7:00:2b:22:00:b5:31:d6:70:
fc:d1:83:6d:7d:c6:d1:1e:ab:e0:5e:bc:6f:e8:2b:
a0:ed:43:eb:4c:d9:be:c0:2d:be:5a:75:10:00:bc:
c2:ae:48:ae:e3:5c:83:b9:7b:cf:f0:de:3a:1b:3e:
42:a6:ee:e6:47:07:10:35:99:1b:5d:86:c1:7d:37:
4f:ba:47:85:92:a3:4b:58:8f:19:84:c9:c4:e6:4c:
f7:4f:d1:6b:7b:63:9b:d5:04:ec:93:25:59:ab:7b:
c5:74:2a:9f:12:b4:ed:75:0c:0a:17:9c:42:68:3e:
0e:b5:3c:03:e6:1e:15:92:7e:7a:d0:d9:a4:bc:3a:
a4:36:53:d6:b6:5c:a7:e1:68:36:e0:d5:37:7b:13:
e4:2f:b4:0a:e6:9b:5c:ca:58:f9:c0:e8:bc:d9:b5:
5a:82:ba:69:86:d7:85:02:f2:2e:10:69:68:93:22:
25:62:e9:e1:b4:fb:fb:1b:20:e8:77:04:ef:52:45:
e6:ae:e8:0f:12:1d:5b:d0:1c:bc:53:8e:44:43:79:
1a:10:17:e9:c4:ef:85:ee:01:26:3a:bd:bc:13:a1:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:6C:D4:89:08:B5:08:68:18:28:E2:55:30:A8:FD:C1:89:08:1E
X509v3 Authority Key Identifier:
keyid:D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:74:11:8e:43:6f:c2:e6:95:95:8d:34:ea:f8:e1:f7:5b:50:
a5:4c:83:d5:f8:18:a1:9e:03:44:f7:e8:b6:44:7a:4b:cc:65:
ea:e8:20:4a:cf:47:5f:10:8d:8d:5b:3a:a1:f2:b8:01:6e:5c:
ff:9b:ef:78:8e:85:80:c2:9d:3e:a4:62:fb:84:44:c7:39:d7:
0f:fc:ab:40:06:6c:c5:c9:bf:57:88:99:1e:52:01:1e:73:85:
e4:cd:45:25:ed:f2:fd:dc:3a:d4:c9:20:b5:11:2e:90:8f:5c:
60:ef:70:1f:dc:50:05:62:55:b7:8e:e2:28:61:59:4a:3a:6f:
c0:6c:77:89:e7:5b:41:5d:d1:09:db:a1:d8:e9:ac:db:b0:84:
f0:6f:6e:62:6b:32:31:17:87:43:31:17:83:bf:4e:93:5f:b4:
ff:85:dd:9a:71:52:37:48:17:c8:74:2f:ce:29:c4:71:60:74:
ce:b7:46:e2:87:a9:a4:50:a5:27:6e:83:5e:70:c6:ae:3b:89:
3f:b2:82:8e:79:bc:23:64:18:d0:bd:26:70:03:79:e5:59:b1:
70:9a:9a:87:62:05:57:ed:19:4a:44:ec:3f:e1:f7:af:42:3b:
8b:84:7e:88:09:ec:7b:3d:6e:74:81:0a:58:54:b4:2c:18:7a:
5f:1b:d2:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNBJyP5lC07s5NPYLpxdIWNdJP3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0NDE5OTgzMTQwRDNDQjczRTYyNTY4MTUzODIyNUNC
MTJFNTQyNDAeFw0yNjA5MjQxMzA3MTFaFw0yNjA5MjUxNjAwMTFaMDMxMTAvBgNV
BAMTKDA3NjU2Q0Q0ODkwOEI1MDg2ODE4MjhFMjU1MzBBOEZEQzE4OTA4MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComVz5se1bAk11GW395VV1hp8R
kaSAnVomn6Vc/whq03eH+vcAKyIAtTHWcPzRg219xtEeq+BevG/oK6DtQ+tM2b7A
Lb5adRAAvMKuSK7jXIO5e8/w3jobPkKm7uZHBxA1mRtdhsF9N0+6R4WSo0tYjxmE
ycTmTPdP0Wt7Y5vVBOyTJVmre8V0Kp8StO11DAoXnEJoPg61PAPmHhWSfnrQ2aS8
OqQ2U9a2XKfhaDbg1Td7E+QvtArmm1zKWPnA6LzZtVqCummG14UC8i4QaWiTIiVi
6eG0+/sbIOh3BO9SReau6A8SHVvQHLxTjkRDeRoQF+nE74XuASY6vbwToVZBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUB2Vs1IkItQhoGCjiVTCo/cGJCB4wHwYDVR0j
BBgwFoAU1UQZmDFA08tz5iVoFTgiXLEuVCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWI4OGQyY2EtMjI5Yi00YWFjLTliNWMtNDJjMTUxMDViYjgyLzAvRDU0NDE5OTgz
MTQwRDNDQjczRTYyNTY4MTUzODIyNUNCMTJFNTQyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9ENTQ0MTk5ODMxNDBEM0NCNzNFNjI1NjgxNTM4MjI1Q0IxMkU1
NDI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli
NWMtNDJjMTUxMDViYjgyLzAvRDU0NDE5OTgzMTQwRDNDQjczRTYyNTY4MTUzODIy
NUNCMTJFNTQyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADd0EY5Db8LmlZWNNOr44fdbUKVMg9X4GKGe
A0T36LZEekvMZeroIErPR18QjY1bOqHyuAFuXP+b73iOhYDCnT6kYvuERMc51w/8
q0AGbMXJv1eImR5SAR5zheTNRSXt8v3cOtTJILURLpCPXGDvcB/cUAViVbeO4ihh
WUo6b8Bsd4nnW0Fd0QnbodjprNuwhPBvbmJrMjEXh0MxF4O/TpNftP+F3ZpxUjdI
F8h0L84pxHFgdM63RuKHqaRQpSdug15wxq47iT+ygo55vCNkGNC9JnADeeVZsXCa
modiBVftGUpE7D/h969CO4uEfogJ7Hs9bnSBClhUtCwYel8b0mA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:13 2026 by rpki-client