
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json)
Hash identifier: tD04OoZd/P7BvYWg5mjjIb4mru/oDYpaL6KVTrasbqU=
Subject key identifier: C4:31:A5:97:FF:6D:00:22:1F:59:38:43:A5:CA:0A:83:89:FE:B1:07
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial: 50A831D7EFFFFF358C860DB7FE642B9075B2049C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 16:46:47 +0000
Manifest this update: Wed 23 Sep 2026 16:41:47 +0000
Manifest next update: Thu 24 Sep 2026 18:24:47 +0000
Files and hashes: 1: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: 2FjcXHyjVrT0iJgAJDs26PfRoU63zUBtoPyIl51R6sc=)
2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=)
3: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a8:31:d7:ef:ff:ff:35:8c:86:0d:b7:fe:64:2b:90:75:b2:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Validity
Not Before: Sep 23 16:41:47 2026 GMT
Not After : Sep 24 18:24:47 2026 GMT
Subject: CN=C431A597FF6D00221F593843A5CA0A8389FEB107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:14:ab:b4:47:df:b5:74:22:0f:41:2e:d5:
a9:7f:6f:53:3a:b3:69:57:75:45:f0:3d:1e:e9:39:
ff:ee:28:40:0e:b8:7f:a2:e9:01:4f:ed:f0:36:0b:
13:2a:30:1e:fb:81:95:d5:18:c1:5b:0c:9e:ca:9d:
35:38:f1:9a:79:f4:6e:fd:c6:8d:55:aa:92:1c:2a:
01:39:cc:28:6b:a0:29:5a:43:9c:83:8e:82:23:3c:
1f:01:ca:63:76:1a:40:62:29:f8:5f:f5:45:f5:13:
4c:8f:c4:05:dc:84:59:33:0c:fb:26:ed:41:bb:c9:
b5:8d:39:aa:a0:7a:69:7b:88:ed:d7:0b:ec:a2:28:
42:1a:71:22:16:6a:2c:fc:41:5e:4a:57:da:00:0b:
b6:8f:40:f0:51:79:a3:40:c6:ef:94:f2:f7:5d:45:
e9:29:91:7e:d1:f4:4b:e9:8b:bf:5b:ae:20:f6:81:
62:d6:37:f4:1d:ce:6f:6e:5f:3a:cc:9c:08:6d:d9:
a0:63:ee:fb:20:f3:4c:0d:86:03:4b:d4:16:e6:81:
bf:65:6b:7a:06:4a:7d:19:bf:66:e9:bb:28:d5:c7:
34:4a:d1:8a:44:83:00:b4:fb:df:a6:9d:4d:ce:38:
80:bc:d8:6f:8b:6e:ba:75:63:ab:0d:e0:88:6a:0e:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:A5:97:FF:6D:00:22:1F:59:38:43:A5:CA:0A:83:89:FE:B1:07
X509v3 Authority Key Identifier:
keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:85:b5:be:6b:56:02:9c:68:01:fe:67:9e:82:8a:9a:f6:52:
f5:23:90:6d:1e:47:d4:a3:5e:ad:f3:e6:ef:ea:8d:ad:2d:c8:
90:c7:cf:98:f6:de:52:44:c3:a5:4e:b5:68:4d:3e:17:60:f8:
cf:30:2e:aa:42:a7:2a:d3:7a:6a:1d:78:9a:6f:04:c7:5a:64:
c6:42:f2:ef:43:fb:9b:9e:dc:52:54:5f:34:1e:38:90:c7:b5:
b4:6b:d3:02:48:79:c0:83:2e:a9:88:08:79:b2:f6:24:da:50:
a1:91:97:72:55:68:40:e4:da:83:1b:b6:26:67:ab:d9:ca:b4:
85:e3:53:86:d2:44:f6:0d:dc:6d:e8:49:b5:6e:41:90:c1:f6:
f9:aa:fb:3f:61:6e:d9:01:2d:b5:90:1d:b4:68:da:ae:f8:16:
50:96:6e:d3:e4:0b:47:2e:6b:c7:98:16:58:e5:05:d1:77:1c:
c8:22:bc:8f:89:14:fb:00:2e:bd:73:de:c8:b2:7f:85:39:5b:
ca:a6:bd:53:e9:fc:71:9c:aa:1f:da:9b:1c:36:33:07:a0:b9:
02:70:c1:e7:74:84:ad:09:9a:26:a6:f7:56:ca:af:a9:6d:5e:
f7:7e:39:d5:7c:85:92:e2:7d:1b:63:7c:04:bc:3a:2a:e0:fa:
3a:54:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:09:53 2026 by rpki-client