
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
File: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft (raw, json)
Hash identifier: J6FEZlCuTQJ/vmQEOAgHTVQlWInLgcirg8FcMOTNpzY=
Subject key identifier: 09:3C:76:0A:7C:FE:28:D1:DE:6A:49:37:E5:79:CE:EB:8B:67:87:DE
Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Certificate serial: 52201C3D0A188022C489AF212AF323AAC23CEF41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 02:37:34 +0000
Manifest this update: Fri 24 Jul 2026 02:32:34 +0000
Manifest next update: Sat 25 Jul 2026 06:33:34 +0000
Files and hashes: 1: 548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl (hash: cENCErtV9fOBaGd7J2pqkFS06qiIAGbvarUw0NywBmo=)
2: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: z7b5wYvP0ol8wMsB+eUBC4JsGZJCfnyyWM+aWZV2US0=)
3: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:1c:3d:0a:18:80:22:c4:89:af:21:2a:f3:23:aa:c2:3c:ef:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Validity
Not Before: Jul 24 02:32:34 2026 GMT
Not After : Jul 25 06:33:34 2026 GMT
Subject: CN=093C760A7CFE28D1DE6A4937E579CEEB8B6787DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:dd:97:71:04:ca:16:3e:0d:85:17:1f:de:
f4:16:2d:c3:54:9f:ce:0f:81:74:7b:a0:8b:07:d6:
20:3a:1f:e7:32:43:b6:ec:aa:e9:50:9b:fe:a1:be:
70:94:59:5b:58:49:2e:14:ea:10:c9:aa:0b:16:12:
b8:ca:7f:92:d5:d8:49:87:b0:e8:11:bf:cf:65:77:
ab:96:21:1a:be:8a:ee:25:90:99:66:a9:1a:a8:cf:
f0:fc:55:81:47:67:ee:de:88:e5:12:c2:ba:10:52:
5e:ec:f5:85:04:57:15:5a:56:93:4f:6b:7f:6d:c7:
f5:3a:78:46:15:3e:86:19:0f:ac:05:ff:8c:d5:d7:
0c:d2:e5:17:20:47:64:33:aa:57:92:99:6c:4a:c0:
16:82:b6:ba:fe:13:d8:c0:6d:21:03:6e:34:31:d9:
84:2e:6a:c4:a1:a1:3d:11:0e:19:d6:14:25:1d:a8:
d5:05:1a:42:92:b0:03:53:c5:75:81:c0:25:42:4b:
06:48:03:98:61:80:29:ba:b5:e0:bd:a7:0c:14:f3:
cf:a8:cf:09:50:02:6c:cd:db:1c:0f:1b:34:82:ae:
60:fd:49:3f:fd:81:7d:99:5c:29:0f:33:3b:e3:d4:
0a:58:bd:ce:16:65:d3:27:32:96:54:56:4e:c6:d4:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:76:0A:7C:FE:28:D1:DE:6A:49:37:E5:79:CE:EB:8B:67:87:DE
X509v3 Authority Key Identifier:
keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dc:b2:13:16:e9:1d:82:b0:c8:c3:37:06:6a:66:2d:79:66:
28:85:da:af:7c:bd:b3:4a:f1:a1:d3:42:51:c2:bf:eb:9c:6a:
0d:6d:cd:cd:d8:4d:db:b0:ad:47:ef:01:09:9c:de:89:fe:4d:
df:e9:fc:ac:19:70:86:bd:60:f4:75:65:9d:1a:90:72:27:c8:
b0:4a:db:21:60:f4:6e:a9:e2:32:b5:12:05:6a:e4:94:cb:35:
b3:0c:17:e4:3a:f8:03:3e:67:53:ed:ec:89:87:a5:3b:d4:b2:
99:a6:4d:80:50:9b:5e:d6:c9:59:97:25:e1:c0:79:ee:c8:8a:
4b:a7:fc:f1:4c:c5:a0:72:96:97:8e:ef:6e:0e:21:8c:56:0d:
52:47:18:1a:cc:ef:c7:94:a6:ad:db:9c:86:95:22:a7:c8:57:
7c:98:44:14:33:f5:33:63:a6:cd:57:12:e3:f5:e9:b4:71:34:
15:95:8b:3d:bd:80:09:3b:ff:68:1d:ee:3c:33:17:54:20:4c:
ce:77:59:a2:15:d1:83:bf:71:ae:91:9b:95:7b:f2:96:81:c3:
20:71:c4:22:14:ee:0e:03:8a:56:ae:25:b8:26:1f:4f:99:21:
3f:76:8b:bd:5a:16:a2:17:8c:71:dd:19:36:56:e4:4e:61:77:
76:cd:00:80
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUiAcPQoYgCLEia8hKvMjqsI870EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcw
NDJDMzI1RTAeFw0yNjA3MjQwMjMyMzRaFw0yNjA3MjUwNjMzMzRaMDMxMTAvBgNV
BAMTKDA5M0M3NjBBN0NGRTI4RDFERTZBNDkzN0U1NzlDRUVCOEI2Nzg3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjd2XcQTKFj4NhRcf3vQWLcNU
n84PgXR7oIsH1iA6H+cyQ7bsqulQm/6hvnCUWVtYSS4U6hDJqgsWErjKf5LV2EmH
sOgRv89ld6uWIRq+iu4lkJlmqRqoz/D8VYFHZ+7eiOUSwroQUl7s9YUEVxVaVpNP
a39tx/U6eEYVPoYZD6wF/4zV1wzS5RcgR2QzqleSmWxKwBaCtrr+E9jAbSEDbjQx
2YQuasShoT0RDhnWFCUdqNUFGkKSsANTxXWBwCVCSwZIA5hhgCm6teC9pwwU88+o
zwlQAmzN2xwPGzSCrmD9ST/9gX2ZXCkPMzvj1ApYvc4WZdMnMpZUVk7G1GtBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCTx2Cnz+KNHeakk35XnO64tnh94wHwYDVR0j
BBgwFoAUVI0ba2upoWXnet7v4oQkhwQsMl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmY3YTdkOTgtMjMzOC00ZDc3LTk2NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2
QkE5QTE2NUU3N0FERUVGRTI4NDI0ODcwNDJDMzI1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDhEMUI2QjZCQTlBMTY1RTc3QURFRUZFMjg0MjQ4NzA0MkMz
MjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2
NjItZjMzZWE2OGM4NmYyLzAvNTQ4RDFCNkI2QkE5QTE2NUU3N0FERUVGRTI4NDI0
ODcwNDJDMzI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB/cshMW6R2CsMjDNwZqZi15ZiiF2q98vbNK
8aHTQlHCv+ucag1tzc3YTduwrUfvAQmc3on+Td/p/KwZcIa9YPR1ZZ0akHInyLBK
2yFg9G6p4jK1EgVq5JTLNbMMF+Q6+AM+Z1Pt7ImHpTvUspmmTYBQm17WyVmXJeHA
ee7Iikun/PFMxaBylpeO724OIYxWDVJHGBrM78eUpq3bnIaVIqfIV3yYRBQz9TNj
ps1XEuP16bRxNBWViz29gAk7/2gd7jwzF1QgTM53WaIV0YO/ca6Rm5V78paBwyBx
xCIU7g4DilauJbgmH0+ZIT92i71aFqIXjHHdGTZW5E5hd3bNAIA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:00 2026 by rpki-client