
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json)
Hash identifier: 9FE0EsqIPUyushfeQnEBRaEvU4+sna2TaPumRYpyw9A=
Subject key identifier: 91:61:C0:DD:E9:96:E2:03:EA:DD:D4:6A:14:77:D7:CB:6E:A1:5D:02
Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Certificate serial: 487AB91481E8B28BECF66582319601E6E30DDEAB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:27:19 +0000
Manifest this update: Fri 24 Jul 2026 02:22:19 +0000
Manifest next update: Sat 25 Jul 2026 05:17:19 +0000
Files and hashes: 1: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=)
2: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: zT+QzV8+8VExYn9Hp9KO8mtSANEwf2E3jmP8IeIQtug=)
3: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7a:b9:14:81:e8:b2:8b:ec:f6:65:82:31:96:01:e6:e3:0d:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Validity
Not Before: Jul 24 02:22:19 2026 GMT
Not After : Jul 25 05:17:19 2026 GMT
Subject: CN=9161C0DDE996E203EADDD46A1477D7CB6EA15D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:90:ca:80:cd:9b:25:a7:7b:12:ef:ec:ba:
d8:44:03:b8:a5:a2:00:11:cb:fc:72:2d:b0:c5:33:
8e:86:71:47:ef:60:cc:c0:37:c8:47:98:9b:06:fb:
56:f7:84:db:3d:cf:bf:a0:1a:04:cc:eb:18:24:f3:
ad:45:9d:42:be:9f:25:fc:da:b7:9f:a8:3c:42:4e:
68:43:eb:e3:8a:2f:08:dd:b2:c2:ea:fd:b7:85:c6:
8d:b8:6e:13:78:90:a7:98:43:00:86:51:75:69:b0:
e5:6a:d8:4d:95:70:34:81:97:25:64:fa:b7:82:b4:
a4:05:96:5d:4d:95:c3:cb:8f:18:98:dc:58:ac:53:
e4:4d:ea:d7:33:6a:ac:c9:64:08:f5:f3:da:08:a8:
d5:a5:e3:1e:ff:4a:ab:13:30:4e:6d:6c:81:d6:17:
db:0b:77:06:ab:6c:c6:a9:ec:cc:2b:07:cb:6d:64:
f0:ef:de:1b:a0:a2:ca:51:a3:67:19:ee:51:26:5c:
a3:dc:2c:02:33:f0:62:4b:bc:10:6a:03:0a:38:96:
1d:ad:e1:6b:09:00:2b:d6:1d:9f:42:f8:ee:ef:48:
d5:b7:d5:50:3e:b6:c1:94:3e:23:86:d6:b7:2a:03:
e6:c6:01:bd:96:fd:0c:f1:0c:6d:e7:44:57:c1:c4:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:C0:DD:E9:96:E2:03:EA:DD:D4:6A:14:77:D7:CB:6E:A1:5D:02
X509v3 Authority Key Identifier:
keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:54:94:65:28:ac:1f:e4:e0:b6:6a:e4:c3:92:67:1c:7a:
b5:75:e8:f1:30:da:be:50:8c:23:4f:c9:31:42:3d:58:42:be:
23:dc:96:20:7a:28:0e:5e:a7:ae:d2:08:9a:fd:d6:20:ee:d8:
a5:72:26:cb:4f:de:e9:ed:73:33:f8:c1:af:fb:b0:55:9b:cd:
d7:40:4a:7d:f8:f6:e6:ea:c8:b0:b3:3b:8c:2c:4a:6c:51:6f:
05:c9:e4:36:55:7d:de:1b:d5:40:fa:22:65:df:bf:fd:e0:85:
b1:15:e5:ba:1c:ab:33:cd:c0:0e:5f:77:fd:b9:f3:fe:58:8a:
d3:09:65:07:5d:6a:58:67:3d:7c:21:b1:7e:24:f6:74:65:21:
9d:7b:13:b8:66:64:3b:9d:20:9a:e8:e5:32:9c:ef:42:5c:79:
5a:60:f5:9c:4d:de:10:3e:d0:54:91:41:af:31:67:02:63:f4:
1f:3a:dd:75:25:bd:4c:36:5a:5f:7b:d1:77:43:be:b7:58:43:
bd:a9:a0:d5:34:a7:2c:e9:c6:2f:13:44:dd:30:0e:af:14:57:
7f:5e:68:0c:2c:4b:f7:31:35:04:48:ef:eb:44:c8:4a:51:76:
0e:a7:44:39:f5:2c:fb:a0:55:8f:39:91:5f:68:64:e1:39:a6:
af:94:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:22:35 2026 by rpki-client