
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json)
Hash identifier: hzKuwQzk/vQ+VODxVDOhGwm+JfINDcskOm+1+27ZdsE=
Subject key identifier: 5C:A7:3A:66:8A:6E:4B:A0:A4:63:D3:AF:89:A5:A7:27:3B:6E:F2:1C
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial: 3D9602481AAAB3F0D3E7DCB7FA95FD93988624CA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:49:50 +0000
Manifest this update: Tue 12 May 2026 04:44:50 +0000
Manifest next update: Wed 13 May 2026 08:12:50 +0000
Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=)
2: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: KNi8thQtckasuEHy7vSPq4lWp55/fbCmlU6UV/g9ry0=)
3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:96:02:48:1a:aa:b3:f0:d3:e7:dc:b7:fa:95:fd:93:98:86:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Validity
Not Before: May 12 04:44:50 2026 GMT
Not After : May 13 08:12:50 2026 GMT
Subject: CN=5CA73A668A6E4BA0A463D3AF89A5A7273B6EF21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:a5:8e:31:cc:7e:ff:1e:13:2b:92:7e:d3:
dd:dc:4a:84:4d:1c:4b:c8:0c:40:61:2c:4b:39:70:
50:47:26:79:3a:6a:59:59:22:91:50:b8:e0:44:ff:
ac:8d:84:8f:7a:bf:5a:c3:66:47:5c:b4:54:c7:e0:
6e:f7:73:36:51:52:ca:8c:59:0c:6a:51:a5:78:ba:
ed:db:6e:5a:bb:c3:d5:ed:7b:b5:22:c1:aa:10:00:
60:fe:d2:c2:af:48:67:f6:b4:b0:53:a8:aa:2b:5e:
1f:1d:d6:8a:36:aa:7f:a0:dc:54:b1:23:19:52:d3:
03:ea:69:84:e6:61:42:4b:fb:71:02:ea:36:95:94:
31:32:1d:70:31:fb:fd:e3:86:19:5b:fd:55:b6:d7:
8c:27:3e:c0:d6:38:6a:9f:43:b1:c5:11:35:48:b1:
f0:f8:16:34:1e:ed:08:14:8e:73:58:73:11:84:21:
2d:24:05:9e:c9:bd:25:92:7f:33:0c:6d:4e:c7:49:
c4:73:40:86:bc:8d:e9:4c:61:40:c8:8d:cd:c0:1e:
9b:a6:1d:bc:df:2d:8b:92:9c:78:6f:fe:86:06:79:
e2:1b:49:8e:3b:95:b7:ff:1a:3d:50:8b:82:c7:81:
87:3f:96:a5:5e:3a:24:ca:c4:42:21:2f:f3:a2:fc:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:3A:66:8A:6E:4B:A0:A4:63:D3:AF:89:A5:A7:27:3B:6E:F2:1C
X509v3 Authority Key Identifier:
keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:9a:35:cb:f3:89:c9:0e:c2:60:66:58:13:3b:f2:b1:24:
35:50:ed:4e:75:8a:83:30:38:63:41:75:2b:42:52:88:c3:64:
07:03:86:0a:fd:da:64:fc:a2:95:ec:eb:f5:c8:56:7d:6a:cd:
65:61:c9:42:50:9b:b1:33:2d:1f:c7:02:ba:c9:5d:1b:ef:b1:
90:9d:96:1f:2b:64:39:f6:8b:35:88:62:0c:31:9b:7f:82:c8:
dd:42:19:3a:e5:84:70:cd:96:af:90:be:b3:e2:76:46:c9:b5:
2a:fc:b2:d9:07:13:ac:4b:fe:4c:d9:87:7e:68:ca:55:6b:ed:
65:36:b8:a2:7d:13:5f:f5:ad:83:72:55:16:d8:7e:81:99:20:
ce:3c:5e:14:9f:d6:af:44:9f:a0:87:74:be:41:35:dc:81:a2:
4f:9f:38:c2:f3:54:19:f8:fa:7a:2f:f0:5a:19:5f:67:4c:74:
d2:2b:70:ba:cf:3d:0f:07:b1:67:e0:c4:2d:93:03:3c:d8:66:
35:41:96:35:ac:09:e1:cf:b1:27:cf:4b:8b:79:7a:8f:6e:52:
32:7b:f1:06:c1:e8:84:b1:c0:e3:57:c0:b3:44:50:d5:e6:23:
83:52:99:8f:0b:fb:94:cb:fc:92:a8:88:6a:58:4d:fb:a4:eb:
b7:12:ec:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:23 2026 by rpki-client