$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json) Hash identifier: /tLzzLlq9W7GKA9FLRoYsHD+sEMQa8b+zRKgUvXWxwk= Subject key identifier: AA:8B:67:38:11:E9:CE:C1:17:FB:12:45:F8:0D:14:10:C3:F8:30:6D Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Certificate serial: 260BA19054748CC96AB8A84A8F22A5F930CDE3E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:04:36 +0000 Manifest this update: Wed 23 Sep 2026 18:59:36 +0000 Manifest next update: Thu 24 Sep 2026 21:22:36 +0000 Files and hashes: 1: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=) 2: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=) 3: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: CA3BnPEF5OB+Aq+OXY34unsuRQCkkhBKhlS+CvwZV2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0b:a1:90:54:74:8c:c9:6a:b8:a8:4a:8f:22:a5:f9:30:cd:e3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7 Validity Not Before: Sep 23 18:59:36 2026 GMT Not After : Sep 24 21:22:36 2026 GMT Subject: CN=AA8B673811E9CEC117FB1245F80D1410C3F8306D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:90:b5:6f:38:6c:93:cf:58:ba:f1:54:8a: 4e:f4:9a:de:85:28:07:d4:45:bc:7e:46:48:13:3d: 4b:7d:3d:3d:0f:b0:bb:33:c0:e2:1c:5b:17:c6:73: 9f:2b:78:c7:b2:a7:cb:92:84:bb:17:5c:a2:9b:80: d1:d2:64:df:1f:53:59:d3:ad:2e:5e:58:29:b6:5c: 84:1b:63:68:b8:60:52:37:1c:7a:32:2a:2e:56:4d: 71:ee:d3:52:cc:ab:0e:37:67:ca:be:f6:84:d0:aa: 9b:45:89:8e:51:c5:a8:91:e9:8d:00:c1:0c:66:a8: 9b:81:f4:cd:5b:8c:75:52:5d:2a:d2:fb:e8:2b:0a: b0:55:f8:6d:34:1c:de:ba:ba:9c:f7:28:37:42:d2: cb:5a:d5:5c:a9:fe:e2:3a:c5:f4:b7:5f:c4:8a:41: f2:76:e6:2b:86:b7:20:0e:35:99:74:2a:21:6b:f7: 8c:ff:65:cb:eb:95:ad:25:6c:53:58:7c:9b:b4:a4: cd:b8:5b:4c:d5:00:da:d9:60:33:d4:d3:3c:7a:cb: eb:4f:0d:df:d0:73:76:76:50:b3:84:07:c5:04:4f: 8a:53:4e:f6:1c:6b:0f:e6:25:6e:c4:bc:ce:a0:ae: fb:c8:c8:6b:84:ba:a5:d1:66:a4:50:0d:d0:48:0e: e2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8B:67:38:11:E9:CE:C1:17:FB:12:45:F8:0D:14:10:C3:F8:30:6D X509v3 Authority Key Identifier: keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6b:4c:4c:80:d6:05:00:9e:00:67:f2:92:41:3e:47:50:fe: 73:3f:ec:17:06:5c:70:8d:17:2b:97:f6:4f:9e:32:53:7d:0c: a8:dd:ba:cc:88:e4:e2:ed:0d:e0:10:e7:ba:ad:47:5a:20:90: 45:01:0c:b0:aa:da:cd:11:68:96:d6:f2:1a:ba:38:63:f3:07: af:33:33:a3:a2:13:d4:d0:64:58:5d:b3:bc:c5:be:24:fd:bd: d5:ca:11:6e:0a:be:17:25:5f:74:18:e8:2e:7f:fb:c4:1a:d7: d9:c7:97:d2:2c:2d:80:a6:a2:5b:02:81:79:b0:5f:79:77:92: b7:8d:28:db:af:76:e6:dd:a0:96:a6:0c:c2:df:86:11:68:0f: 36:6f:6e:d0:31:d9:12:44:2e:c3:e0:24:6c:d6:99:3f:81:4b: 24:19:95:f0:bf:27:ba:19:65:c1:b8:9a:f7:3c:da:ac:3d:45: 73:73:e9:69:71:fe:8a:ff:b8:38:1d:ee:23:82:eb:9a:5e:6e: 9d:a7:20:5b:f2:1f:19:d6:ce:4f:ed:ee:f6:90:d2:e5:10:a7: 89:0a:4d:3f:57:fd:24:45:82:df:21:6f:83:94:00:85:7e:84: 9b:78:77:d7:6a:02:f6:4f:93:4c:db:7f:cb:25:4b:82:2e:00: 19:da:0f:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJguhkFR0jMlquKhKjyKl+TDN4+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE QzkyOUJCNzAeFw0yNjA5MjMxODU5MzZaFw0yNjA5MjQyMTIyMzZaMDMxMTAvBgNV BAMTKEFBOEI2NzM4MTFFOUNFQzExN0ZCMTI0NUY4MEQxNDEwQzNGODMwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsn5C1bzhsk89YuvFUik70mt6F KAfURbx+RkgTPUt9PT0PsLszwOIcWxfGc58reMeyp8uShLsXXKKbgNHSZN8fU1nT rS5eWCm2XIQbY2i4YFI3HHoyKi5WTXHu01LMqw43Z8q+9oTQqptFiY5RxaiR6Y0A wQxmqJuB9M1bjHVSXSrS++grCrBV+G00HN66upz3KDdC0sta1Vyp/uI6xfS3X8SK QfJ25iuGtyAONZl0KiFr94z/Zcvrla0lbFNYfJu0pM24W0zVANrZYDPU0zx6y+tP Dd/Qc3Z2ULOEB8UET4pTTvYcaw/mJW7EvM6grvvIyGuEuqXRZqRQDdBIDuKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqotnOBHpzsEX+xJF+A0UEMP4MG0wHwYDVR0j BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5 QkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh OTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQx RUJEQzkyOUJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhrTEyA1gUAngBn8pJBPkdQ/nM/7BcGXHCN FyuX9k+eMlN9DKjdusyI5OLtDeAQ57qtR1ogkEUBDLCq2s0RaJbW8hq6OGPzB68z M6OiE9TQZFhds7zFviT9vdXKEW4KvhclX3QY6C5/+8Qa19nHl9IsLYCmolsCgXmw X3l3kreNKNuvdubdoJamDMLfhhFoDzZvbtAx2RJELsPgJGzWmT+BSyQZlfC/J7oZ ZcG4mvc82qw9RXNz6Wlx/or/uDgd7iOC65pebp2nIFvyHxnWzk/t7vaQ0uUQp4kK TT9X/SRFgt8hb4OUAIV+hJt4d9dqAvZPk0zbf8slS4IuABnaDwc= -----END CERTIFICATE-----Generated at Thu Sep 24 04:57:59 2026 by rpki-client