
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
File: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft (raw, json)
Hash identifier: rzHunT7xGJ6mh9V05O3yoAwX3hLqO4K9bK/CZxItN6A=
Subject key identifier: D9:7E:90:E2:0C:25:22:C8:9D:56:22:AC:A8:78:84:FD:ED:FA:40:F2
Authority key identifier: 54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F
Certificate issuer: /CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
Certificate serial: 2254FFED38AE21EC0A2D315E3B63C2B6131398BF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:47:48 +0000
Manifest this update: Tue 12 May 2026 06:42:48 +0000
Manifest next update: Wed 13 May 2026 07:46:48 +0000
Files and hashes: 1: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: MProqR3+IjMWS7se961mZj4ZxnK4O4igfKtOCECcphc=)
2: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl (hash: bzwe5Jw5w+0UTZV2Dp76nIPWo9plUznM2I2Zmyf55+c=)
3: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: CZxoOJt1mcB0J5ge1VFKiB1idehPYzARJVthkXF0WVg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl
rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:54:ff:ed:38:ae:21:ec:0a:2d:31:5e:3b:63:c2:b6:13:13:98:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
Validity
Not Before: May 12 06:42:48 2026 GMT
Not After : May 13 07:46:48 2026 GMT
Subject: CN=D97E90E20C2522C89D5622ACA87884FDEDFA40F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:4e:1c:c8:a2:22:bb:48:15:3b:8b:3c:b0:
a0:88:13:40:c1:5b:8f:08:50:3e:c3:08:04:8f:d0:
ca:67:4a:61:53:7e:73:e5:f4:1a:77:f8:74:32:7a:
d5:a8:18:87:4f:e8:48:9f:88:b1:3c:be:ac:17:58:
80:17:01:cd:e9:ef:11:0e:6f:58:20:65:01:3b:01:
1b:b6:e4:93:e9:5f:a5:64:37:c8:a7:9f:ff:2a:82:
a1:c0:b3:95:7b:d8:1f:dc:11:ea:b6:0b:d1:26:22:
eb:cf:87:4d:ba:f1:c9:ca:e2:e7:bd:8f:b3:2d:d7:
62:5a:bd:ad:b0:12:9f:b8:15:2b:52:2f:38:7d:80:
a8:7c:a4:cc:61:29:cd:4d:dc:41:03:e3:86:01:88:
3e:53:78:6e:10:38:2e:a8:16:5b:01:84:ff:cd:e0:
c5:3e:f7:01:18:a7:ca:2a:9e:41:83:c7:af:3d:53:
96:e0:65:61:2e:64:ab:24:17:86:08:c2:67:36:82:
b1:fc:70:b5:a1:d9:73:bb:8d:ed:e5:d4:7a:58:17:
48:81:30:a6:20:a2:93:03:95:99:80:bf:14:52:29:
ce:80:ba:08:28:47:1b:83:ec:13:6b:e2:06:5f:74:
f7:8a:1f:f8:17:aa:0e:61:20:e3:63:13:13:76:96:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:90:E2:0C:25:22:C8:9D:56:22:AC:A8:78:84:FD:ED:FA:40:F2
X509v3 Authority Key Identifier:
keyid:54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b0:5f:21:e5:63:40:d5:1c:f8:39:dd:a0:70:57:9d:a4:66:
c0:1a:1d:69:69:21:65:5f:5f:3f:ec:55:de:5d:db:6a:3b:3c:
cd:6a:e7:f4:49:db:bf:45:22:12:e8:d5:df:34:88:94:fb:05:
19:d7:01:be:23:e8:86:83:06:b8:c0:79:72:de:e7:49:ce:65:
24:85:54:e5:3c:2a:59:be:05:95:21:bb:bf:79:29:fa:9b:93:
3f:0b:b1:89:ae:58:6e:6e:77:74:34:30:e9:60:3c:71:75:7f:
72:42:89:a9:7b:c8:bb:a5:4d:5a:e6:ac:77:b3:8f:06:6e:b4:
1a:15:31:e2:80:31:8e:8b:70:fb:bc:09:03:d3:55:46:f2:0b:
52:1b:87:f0:b7:53:ba:90:50:dc:6b:8c:d7:93:7e:16:cb:49:
b0:50:02:44:1e:63:e3:83:96:4f:f0:3f:dd:d3:aa:2a:cd:c9:
c3:51:45:c4:47:8d:a2:05:77:f9:e8:2d:ff:de:d4:db:d9:29:
f4:d3:75:55:25:c4:45:be:f4:b4:02:96:72:31:e6:fa:b8:62:
27:f3:9e:c7:a2:b5:be:ff:79:03:d3:48:b4:36:b4:9e:02:64:
4a:6f:7c:b1:ba:be:ff:48:2e:64:31:17:98:60:1c:2f:ed:68:
9d:6d:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:48 2026 by rpki-client