
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json)
Hash identifier: rOT2F3waoo8vV3JEYhWjc+nOlB+HERGSB8pQOglQy+k=
Subject key identifier: D6:BC:0E:7B:CE:BA:05:5B:AA:A3:68:C3:94:8B:03:B0:5F:50:CF:FD
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial: 70471EFF3DC6FB86A04C94385ACAAC0F96BB6DC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:28:58 +0000
Manifest this update: Thu 23 Jul 2026 19:23:58 +0000
Manifest next update: Fri 24 Jul 2026 21:32:58 +0000
Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=)
2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=)
3: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: ckb1YBPJEo+UWjFtu1W3hZTpcZbEV86dT959z+zXJUo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:47:1e:ff:3d:c6:fb:86:a0:4c:94:38:5a:ca:ac:0f:96:bb:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Validity
Not Before: Jul 23 19:23:58 2026 GMT
Not After : Jul 24 21:32:58 2026 GMT
Subject: CN=D6BC0E7BCEBA055BAAA368C3948B03B05F50CFFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:7a:37:94:b1:b3:d0:61:5c:31:2a:34:17:
11:a4:f0:5e:90:da:bf:47:62:4d:54:ec:e6:40:1d:
f7:08:c7:4f:c3:98:9c:aa:9e:03:36:0f:0a:32:b1:
a5:bc:32:30:e3:86:c0:07:9e:cd:80:dc:b7:60:70:
0a:65:65:7d:f6:53:e4:93:ad:29:28:f5:51:7b:2a:
99:bc:85:d7:45:92:35:be:35:74:97:f2:86:8c:97:
62:14:7d:0b:60:ba:74:68:d3:f1:31:ad:77:c2:23:
2b:ad:71:45:c8:4d:17:ea:d9:1b:63:2a:60:9a:36:
81:dd:fe:0d:97:5e:43:0a:98:77:da:70:f0:96:be:
94:82:4c:bd:dc:6a:06:d5:0d:d7:db:d4:68:ad:11:
bb:e7:7a:09:fc:24:4f:77:c6:ed:4e:b5:a2:8c:51:
e1:3f:15:a6:22:ba:26:d3:f2:ee:5e:1a:83:e1:ea:
49:d2:17:83:45:a4:17:96:0a:d7:b4:42:cd:b6:c5:
17:06:a8:3c:10:1e:7d:8d:a9:2e:7d:ac:48:53:58:
6f:89:ab:9c:69:16:c5:a2:b8:1e:93:f0:64:8c:1c:
7d:84:af:b0:73:97:ef:5a:7e:03:72:fb:44:64:f7:
70:85:5f:27:6e:d3:71:67:0c:e3:66:0b:cc:a9:6a:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:0E:7B:CE:BA:05:5B:AA:A3:68:C3:94:8B:03:B0:5F:50:CF:FD
X509v3 Authority Key Identifier:
keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cb:d3:e4:79:70:13:d9:3f:35:cd:18:15:e6:40:74:58:a0:
23:6d:ea:ec:03:72:f5:6e:ad:e8:34:12:25:44:bc:ac:0c:51:
ab:63:04:6b:b2:6d:7b:d2:bd:cc:6a:0f:6c:d6:e1:b8:cf:ab:
ad:56:52:17:f7:73:ed:6c:55:31:14:35:98:e5:63:29:1e:df:
1f:9b:2a:7a:0a:91:77:66:6a:76:bd:a6:11:45:aa:9e:6c:0e:
c7:3e:cc:7d:3a:97:91:97:b6:53:15:42:5e:06:4a:17:29:37:
26:e8:8d:51:38:be:1c:7e:a8:51:51:49:48:1e:60:d0:f9:25:
eb:34:ff:3a:0a:e1:c4:20:5c:3a:82:bd:3d:40:9f:a3:33:bc:
35:09:c1:e6:a0:97:0e:71:35:9e:8a:ad:cf:56:43:f2:8b:12:
7a:4b:8d:2f:c4:cf:74:aa:bf:ae:8d:e5:61:14:f7:64:87:a2:
4e:5b:c9:c7:27:d9:96:aa:71:86:50:0b:e6:7f:e8:f7:76:66:
67:44:a1:8d:cc:ba:1f:19:8b:4b:33:d9:64:5e:1f:a1:ea:ba:
0c:cb:83:5b:1c:62:f2:fb:6f:41:64:03:d9:98:20:d3:98:8a:
b9:86:ce:3d:b8:28:27:bd:fc:2d:ae:57:04:46:36:55:2f:25:
21:fa:83:94
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcEce/z3G+4agTJQ4WsqsD5a7bckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkz
Njc3N0JDOTAeFw0yNjA3MjMxOTIzNThaFw0yNjA3MjQyMTMyNThaMDMxMTAvBgNV
BAMTKEQ2QkMwRTdCQ0VCQTA1NUJBQUEzNjhDMzk0OEIwM0IwNUY1MENGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxno3lLGz0GFcMSo0FxGk8F6Q
2r9HYk1U7OZAHfcIx0/DmJyqngM2DwoysaW8MjDjhsAHns2A3LdgcAplZX32U+ST
rSko9VF7Kpm8hddFkjW+NXSX8oaMl2IUfQtgunRo0/ExrXfCIyutcUXITRfq2Rtj
KmCaNoHd/g2XXkMKmHfacPCWvpSCTL3cagbVDdfb1GitEbvnegn8JE93xu1OtaKM
UeE/FaYiuibT8u5eGoPh6knSF4NFpBeWCte0Qs22xRcGqDwQHn2NqS59rEhTWG+J
q5xpFsWiuB6T8GSMHH2Er7Bzl+9afgNy+0Rk93CFXydu03FnDONmC8yparRpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1rwOe866BVuqo2jDlIsDsF9Qz/0wHwYDVR0j
BBgwFoAUVF6pkoUa8nJtzo/h8pOL6TZ3e8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjNlYWM5YzAtZGUxYi00NmRkLWJmMzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4
NTFBRjI3MjZEQ0U4RkUxRjI5MzhCRTkzNjc3N0JDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDVFQTk5Mjg1MUFGMjcyNkRDRThGRTFGMjkzOEJFOTM2Nzc3
QkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm
MzctMThmZTNhOGQ1ZmJmLzAvNTQ1RUE5OTI4NTFBRjI3MjZEQ0U4RkUxRjI5MzhC
RTkzNjc3N0JDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADvL0+R5cBPZPzXNGBXmQHRYoCNt6uwDcvVu
reg0EiVEvKwMUatjBGuybXvSvcxqD2zW4bjPq61WUhf3c+1sVTEUNZjlYyke3x+b
KnoKkXdmana9phFFqp5sDsc+zH06l5GXtlMVQl4GShcpNybojVE4vhx+qFFRSUge
YND5Jes0/zoK4cQgXDqCvT1An6MzvDUJweaglw5xNZ6Krc9WQ/KLEnpLjS/Ez3Sq
v66N5WEU92SHok5byccn2ZaqcYZQC+Z/6Pd2ZmdEoY3Muh8Zi0sz2WReH6HqugzL
g1scYvL7b0FkA9mYINOYirmGzj24KCe9/C2uVwRGNlUvJSH6g5Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:40 2026 by rpki-client