$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: Y1yXzoGlpj3qAtmeIMuLe8srxDM0GSgENOtBm5qecO8= Subject key identifier: 6F:E4:66:9B:1A:10:6E:57:2A:C7:EC:F5:BB:07:F9:D6:1C:1D:C2:E8 Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 7B3A6238B1270301285B3E4B04CA785AFCFC2E6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 18:45:59 +0000 Manifest this update: Tue 03 Nov 2026 18:40:59 +0000 Manifest next update: Wed 04 Nov 2026 21:02:59 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 2: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: aaVcCbC+NTKD+XjOiAECi0giKyCJ0tgqsGWPMX7fT28=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3a:62:38:b1:27:03:01:28:5b:3e:4b:04:ca:78:5a:fc:fc:2e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Nov 3 18:40:59 2026 GMT Not After : Nov 4 21:02:59 2026 GMT Subject: CN=6FE4669B1A106E572AC7ECF5BB07F9D61C1DC2E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:88:1e:51:5d:34:76:ec:33:8d:c5:89:98: b2:a6:af:87:c8:45:00:72:ed:c8:ab:d0:d6:8e:a9: 32:3d:23:1e:34:15:42:dd:fa:f0:5e:60:b6:f4:2d: c4:a0:25:b9:80:64:4a:64:55:2a:7b:c0:d3:75:e2: 40:0e:1d:e7:be:e3:89:32:db:9f:97:ed:1b:4a:45: 90:d3:12:84:1c:5a:4b:4d:b4:dd:13:63:49:15:9d: cd:7c:cd:52:8a:32:21:28:75:c2:7a:84:89:4e:df: 38:8c:11:79:6a:f4:8c:5a:38:1e:06:07:09:a9:21: fc:8d:06:1d:e0:69:cf:42:66:0c:ca:39:88:7a:fb: 6a:c7:92:1e:4d:40:50:a1:5d:bc:cc:56:12:34:98: 61:6e:e0:f1:bc:09:ba:92:37:57:41:66:18:ad:1d: 31:1a:88:22:bf:7d:c4:64:b7:28:5b:41:84:c5:c0: ee:c6:39:54:48:4b:2f:85:f4:3c:73:4b:22:fe:ce: 29:af:9b:3f:ba:86:19:38:ce:6e:21:a9:89:e9:89: de:d8:de:d8:eb:64:76:a0:7d:91:96:e3:0f:1a:34: 07:73:d8:55:a2:78:90:6c:0b:de:e4:0c:8a:47:8a: 11:de:bc:ba:85:5b:45:7d:e9:d7:78:b9:f9:ee:40: 66:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E4:66:9B:1A:10:6E:57:2A:C7:EC:F5:BB:07:F9:D6:1C:1D:C2:E8 X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b1:4b:bc:04:d4:e5:33:db:d0:72:ee:63:25:aa:26:03:52: a0:9e:46:53:6c:13:d6:04:75:fb:3a:dc:8f:80:e0:f8:a1:9a: 1d:f0:3c:2a:30:17:f8:db:6d:4c:99:16:7a:82:c9:90:92:89: c1:32:c2:ce:ad:ee:56:67:58:b0:fd:e9:e6:16:a0:4a:02:cf: 3c:07:b3:96:b1:02:54:a2:cc:b6:d9:e8:06:c3:ea:00:fd:ec: 31:70:1f:5d:87:a7:99:a6:62:a7:c2:c0:60:a3:57:b3:cd:df: 4e:43:0d:ba:2b:b6:62:f5:70:7a:c5:32:17:50:13:f8:39:01: da:6a:c7:3a:ad:3b:95:b7:d9:34:50:8b:a1:50:3d:57:a9:c6: 8f:c9:5d:23:11:09:c1:12:5c:01:0e:ae:3b:36:92:b5:ce:23: 13:16:87:89:80:da:1b:b5:65:1f:0c:63:c2:4b:c3:f0:39:53: 8d:9e:55:75:7c:7c:2f:8c:21:56:89:36:4f:ea:7f:87:c0:70: ea:3f:aa:e4:9c:b0:38:1c:97:64:75:47:b4:db:94:f1:79:b0: 73:a2:8d:24:2c:24:b8:15:c9:7d:d9:2e:05:c3:09:91:15:b7: 12:98:dc:f7:b9:d1:a4:62:c7:89:bd:f1:21:2e:fe:f4:ba:a1: e8:05:72:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezpiOLEnAwEoWz5LBMp4Wvz8LmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjExMDMxODQwNTlaFw0yNjExMDQyMTAyNTlaMDMxMTAvBgNV BAMTKDZGRTQ2NjlCMUExMDZFNTcyQUM3RUNGNUJCMDdGOUQ2MUMxREMyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9IgeUV00duwzjcWJmLKmr4fI RQBy7cir0NaOqTI9Ix40FULd+vBeYLb0LcSgJbmAZEpkVSp7wNN14kAOHee+44ky 25+X7RtKRZDTEoQcWktNtN0TY0kVnc18zVKKMiEodcJ6hIlO3ziMEXlq9IxaOB4G BwmpIfyNBh3gac9CZgzKOYh6+2rHkh5NQFChXbzMVhI0mGFu4PG8CbqSN1dBZhit HTEaiCK/fcRktyhbQYTFwO7GOVRISy+F9DxzSyL+zimvmz+6hhk4zm4hqYnpid7Y 3tjrZHagfZGW4w8aNAdz2FWieJBsC97kDIpHihHevLqFW0V96dd4ufnuQGZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+RmmxoQblcqx+z1uwf51hwdwugwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyxS7wE1OUz29By7mMlqiYDUqCeRlNsE9YE dfs63I+A4Pihmh3wPCowF/jbbUyZFnqCyZCSicEyws6t7lZnWLD96eYWoEoCzzwH s5axAlSizLbZ6AbD6gD97DFwH12Hp5mmYqfCwGCjV7PN305DDbortmL1cHrFMhdQ E/g5AdpqxzqtO5W32TRQi6FQPVepxo/JXSMRCcESXAEOrjs2krXOIxMWh4mA2hu1 ZR8MY8JLw/A5U42eVXV8fC+MIVaJNk/qf4fAcOo/quScsDgcl2R1R7TblPF5sHOi jSQsJLgVyX3ZLgXDCZEVtxKY3Pe50aRix4m98SEu/vS6oegFciw= -----END CERTIFICATE-----Generated at Wed Nov 4 05:30:21 2026 by rpki-client