$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: FQCCOgp37WkrH/kyqYjWIIye9DcCaajBvrrhqJ9qvA0= Subject key identifier: CA:73:95:69:EC:3E:E3:A0:23:7E:18:82:19:D6:86:70:46:11:DE:A4 Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 693480DA3E2914F266D8683E3E41EA4388C7FDCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:14:32 +0000 Manifest this update: Tue 02 Jun 2026 16:09:32 +0000 Manifest next update: Wed 03 Jun 2026 20:00:32 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 2: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: +sy4t9rGl7/bhPO+mFH6esiJFMwLoE6wS5Y9um1FG9A=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:34:80:da:3e:29:14:f2:66:d8:68:3e:3e:41:ea:43:88:c7:fd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Jun 2 16:09:32 2026 GMT Not After : Jun 3 20:00:32 2026 GMT Subject: CN=CA739569EC3EE3A0237E188219D686704611DEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:b5:76:a9:20:75:c4:dd:36:35:5d:5d:5b: bd:62:49:64:bd:0b:2e:d2:dd:02:8d:6f:ee:a2:58: 3e:5d:c8:b9:cc:7c:3c:c0:00:18:dc:bf:65:ac:fa: 49:4e:e9:67:81:10:f4:99:47:86:d3:70:8d:85:fc: 4a:18:76:e9:be:d0:67:42:e8:ff:bb:75:84:d4:a0: f6:9d:3d:af:05:ed:ec:f1:14:cc:d0:ab:4b:13:b6: d5:cc:ac:b7:bf:13:f1:37:ea:22:ac:59:fc:3b:c9: ed:d3:b5:0b:de:3f:67:59:4e:e4:ea:f8:97:43:7f: 86:18:38:6f:06:ce:65:45:28:90:48:b7:a2:7f:fe: e3:69:f7:da:27:09:3c:6a:39:89:09:2a:c0:55:ae: cf:0f:48:99:80:9e:a3:81:c7:17:46:3b:a2:55:d4: 3c:8e:94:2a:92:61:bf:d9:80:00:7b:6f:4d:57:27: 04:b7:67:f3:57:a4:93:16:da:ef:99:c3:fb:52:57: d6:68:60:44:41:58:28:12:3a:59:8f:33:ce:e7:ff: 2b:94:50:a6:37:2d:92:39:a7:76:40:4c:5f:d1:08: c9:54:29:55:9b:26:8c:ac:19:4d:32:94:2b:37:a4: b1:14:67:40:33:b8:6e:04:d1:58:01:5a:0e:c1:0b: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:95:69:EC:3E:E3:A0:23:7E:18:82:19:D6:86:70:46:11:DE:A4 X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:87:10:39:d2:2f:e2:7d:78:e9:bf:bc:95:ed:ef:d1:a6:63: b9:72:82:e1:90:0e:ec:b7:90:c2:f1:67:1b:2b:4b:e4:14:20: d2:c6:1f:7b:57:b1:7f:6f:b0:10:13:93:64:88:5e:64:1f:4d: 5a:d9:03:8b:da:c4:70:9b:d1:09:d3:3c:f7:3e:5e:40:d7:fc: aa:45:69:c8:e0:85:43:6d:34:97:84:93:d6:52:9d:46:49:56: d5:0e:90:42:94:dc:8a:1a:bf:23:9b:63:4f:a9:23:2d:5c:28: 5e:47:d2:1b:f3:a8:b1:3a:04:9c:18:9a:f9:d7:ed:54:36:b1: 20:59:d8:5d:96:35:3b:8c:6b:84:61:f3:12:12:6d:22:0e:9a: bb:8f:08:ce:c7:1e:13:c9:0b:5d:62:19:ea:c7:4c:10:6e:1b: 30:94:1d:61:5f:06:76:34:53:b9:1e:17:38:46:f6:ba:a0:5f: 51:91:bc:11:1c:0b:50:9d:76:25:82:20:66:4b:2f:e4:90:43: d1:c4:10:2a:f1:cb:4b:6e:97:16:5d:62:01:3c:55:87:88:71: 6c:e8:ce:81:04:53:5a:e2:af:cf:f2:7c:48:1e:15:d3:c0:94: 8e:1a:be:55:e1:11:84:f6:9f:1d:2b:6d:7c:2c:23:8b:1a:0f: 48:70:35:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTSA2j4pFPJm2Gg+PkHqQ4jH/c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA2MDIxNjA5MzJaFw0yNjA2MDMyMDAwMzJaMDMxMTAvBgNV BAMTKENBNzM5NTY5RUMzRUUzQTAyMzdFMTg4MjE5RDY4NjcwNDYxMURFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCORrV2qSB1xN02NV1dW71iSWS9 Cy7S3QKNb+6iWD5dyLnMfDzAABjcv2Ws+klO6WeBEPSZR4bTcI2F/EoYdum+0GdC 6P+7dYTUoPadPa8F7ezxFMzQq0sTttXMrLe/E/E36iKsWfw7ye3TtQveP2dZTuTq +JdDf4YYOG8GzmVFKJBIt6J//uNp99onCTxqOYkJKsBVrs8PSJmAnqOBxxdGO6JV 1DyOlCqSYb/ZgAB7b01XJwS3Z/NXpJMW2u+Zw/tSV9ZoYERBWCgSOlmPM87n/yuU UKY3LZI5p3ZATF/RCMlUKVWbJoysGU0ylCs3pLEUZ0AzuG4E0VgBWg7BC0M5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynOVaew+46AjfhiCGdaGcEYR3qQwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqHEDnSL+J9eOm/vJXt79GmY7lyguGQDuy3 kMLxZxsrS+QUINLGH3tXsX9vsBATk2SIXmQfTVrZA4vaxHCb0QnTPPc+XkDX/KpF acjghUNtNJeEk9ZSnUZJVtUOkEKU3IoavyObY0+pIy1cKF5H0hvzqLE6BJwYmvnX 7VQ2sSBZ2F2WNTuMa4Rh8xISbSIOmruPCM7HHhPJC11iGerHTBBuGzCUHWFfBnY0 U7keFzhG9rqgX1GRvBEcC1CddiWCIGZLL+SQQ9HEECrxy0tulxZdYgE8VYeIcWzo zoEEU1rir8/yfEgeFdPAlI4avlXhEYT2nx0rbXwsI4saD0hwNQI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:42 2026 by rpki-client