$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: 4d/hqbB9vzn/qb6KnDkbR/7hF/qKl3e73L094/xNFFs= Subject key identifier: 1C:40:A9:1F:A8:5A:0C:C1:4E:F9:85:2C:FF:37:40:A4:E6:7A:05:9C Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 2BCD0CEE38FC067D730A819BDC1A7570B3719B51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:17:46 +0000 Manifest this update: Mon 20 Jul 2026 17:12:46 +0000 Manifest next update: Tue 21 Jul 2026 18:31:46 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 3: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: /YobdqXqDvxaFHKT/HCWxkrVL1fkteMMVAHgzWHHutY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:cd:0c:ee:38:fc:06:7d:73:0a:81:9b:dc:1a:75:70:b3:71:9b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Jul 20 17:12:46 2026 GMT Not After : Jul 21 18:31:46 2026 GMT Subject: CN=1C40A91FA85A0CC14EF9852CFF3740A4E67A059C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:ca:e5:64:4d:2c:06:c9:e8:3a:78:f4:c0: 48:10:e3:0c:83:a9:c2:01:78:34:c7:94:ca:3c:e5: 6f:ac:98:88:a9:bd:e7:d6:67:48:9c:d6:0e:dd:78: fc:af:84:3f:5c:73:f4:1b:de:a1:54:38:29:ea:65: f6:02:2a:6b:cb:90:04:4a:f0:84:04:84:0d:02:90: 76:da:d2:4e:77:80:49:76:cf:f8:24:cd:8f:95:b7: f2:1e:cb:50:8c:04:27:f1:57:d1:67:7d:7b:0d:bf: 0b:16:2d:7b:c2:12:59:85:a3:e0:79:92:5a:87:f2: 12:e4:eb:9a:06:0c:8a:46:b9:3a:1a:18:65:ff:c3: 02:9e:0a:28:0a:cd:a9:31:41:4f:f7:82:ae:5a:be: 6e:58:b8:8b:14:85:00:56:97:69:be:4b:55:91:66: 1d:76:35:ac:e5:5e:e8:e3:ab:26:1c:7f:9b:99:f0: f0:51:f4:26:fe:35:a1:10:71:3b:67:20:c3:f9:6a: ff:70:9b:be:71:75:75:de:17:9c:3a:8a:63:d1:49: 05:16:ba:bd:31:9b:da:6b:fc:73:47:54:f8:3f:aa: 88:53:54:83:f6:87:b0:52:49:a6:2c:24:b6:bc:6e: 4c:cc:94:86:ff:99:47:02:dd:4b:51:ea:3a:f5:25: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:A9:1F:A8:5A:0C:C1:4E:F9:85:2C:FF:37:40:A4:E6:7A:05:9C X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:de:96:d4:0e:ca:f9:a5:b8:79:ab:e3:63:ad:a5:64:a0: 5f:84:c8:d8:bd:b3:af:9b:2e:9f:28:56:56:30:7a:55:b0:d9: 3a:90:08:4d:46:97:18:e7:7c:7a:01:a5:9c:1f:1c:38:eb:5e: c1:db:1c:53:2b:c0:db:d5:2c:9e:d7:05:4a:e4:02:6e:47:77: 36:4e:09:aa:63:75:a8:b4:3b:6a:ad:58:4f:d5:e6:0b:4e:ff: f1:42:ff:61:e9:56:91:71:18:bb:67:9d:d4:7b:22:c6:f8:a3: fa:41:d1:53:fb:bd:e2:2a:01:d1:f0:db:53:68:b8:9d:74:ab: fd:ee:93:9b:cf:29:ed:7a:22:f2:eb:e2:55:61:63:e6:d4:98: 91:73:56:fa:5d:6b:9e:a9:1a:e2:4f:d3:51:b6:27:42:48:20: 51:79:a1:3a:b5:81:da:7e:6d:ec:7d:3a:4d:fe:c5:0b:dd:c2: de:b8:69:63:cd:1a:df:35:53:dc:a4:f0:f1:ec:58:ae:0b:bc: 0c:ba:3c:bf:ce:b2:a4:70:d5:d5:31:42:e1:c4:d2:1e:1f:f6: 32:2c:b5:c8:a0:b7:22:44:b0:dc:14:49:bf:3c:eb:2f:67:e7: 98:dd:03:1d:ad:90:80:8c:a3:6b:74:a5:09:b3:0b:ad:04:d1: 4d:22:03:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK80M7jj8Bn1zCoGb3Bp1cLNxm1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA3MjAxNzEyNDZaFw0yNjA3MjExODMxNDZaMDMxMTAvBgNV BAMTKDFDNDBBOTFGQTg1QTBDQzE0RUY5ODUyQ0ZGMzc0MEE0RTY3QTA1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlsrlZE0sBsnoOnj0wEgQ4wyD qcIBeDTHlMo85W+smIipvefWZ0ic1g7dePyvhD9cc/Qb3qFUOCnqZfYCKmvLkARK 8IQEhA0CkHba0k53gEl2z/gkzY+Vt/Iey1CMBCfxV9FnfXsNvwsWLXvCElmFo+B5 klqH8hLk65oGDIpGuToaGGX/wwKeCigKzakxQU/3gq5avm5YuIsUhQBWl2m+S1WR Zh12NazlXujjqyYcf5uZ8PBR9Cb+NaEQcTtnIMP5av9wm75xdXXeF5w6imPRSQUW ur0xm9pr/HNHVPg/qohTVIP2h7BSSaYsJLa8bkzMlIb/mUcC3UtR6jr1JcL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHECpH6haDMFO+YUs/zdApOZ6BZwwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF+3pbUDsr5pbh5q+NjraVkoF+EyNi9s6+b Lp8oVlYwelWw2TqQCE1GlxjnfHoBpZwfHDjrXsHbHFMrwNvVLJ7XBUrkAm5HdzZO Capjdai0O2qtWE/V5gtO//FC/2HpVpFxGLtnndR7Isb4o/pB0VP7veIqAdHw21No uJ10q/3uk5vPKe16IvLr4lVhY+bUmJFzVvpda56pGuJP01G2J0JIIFF5oTq1gdp+ bex9Ok3+xQvdwt64aWPNGt81U9yk8PHsWK4LvAy6PL/OsqRw1dUxQuHE0h4f9jIs tcigtyJEsNwUSb886y9n55jdAx2tkICMo2t0pQmzC60E0U0iA+s= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:02 2026 by rpki-client