
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
File: D54419983140D3CB73E625681538225CB12E5424.mft (raw, json)
Hash identifier: FUSkAMcm7za/p9GLZIbinybRe//H6sd4MGRc4b/nF9I=
Subject key identifier: CB:E3:84:AA:DA:45:1A:81:FF:D2:4B:1B:AE:FD:69:FD:B5:A4:98:06
Authority key identifier: D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
Certificate issuer: /CN=D54419983140D3CB73E625681538225CB12E5424
Certificate serial: 611C2182488819D1F4C60BA4D6219104A7E1D0F4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 03:27:24 +0000
Manifest this update: Wed 04 Nov 2026 03:22:24 +0000
Manifest next update: Thu 05 Nov 2026 07:19:24 +0000
Files and hashes: 1: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: SzOCWedu7Qhh9QrHie1gNK2ZtR2GDQm9yZncMipwLrI=)
2: D54419983140D3CB73E625681538225CB12E5424.crl (hash: Rm+IkdBXdg+ubr3gnDM0Zqi/m64uwf+xwdk4un6RKHE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 05:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1c:21:82:48:88:19:d1:f4:c6:0b:a4:d6:21:91:04:a7:e1:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54419983140D3CB73E625681538225CB12E5424
Validity
Not Before: Nov 4 03:22:24 2026 GMT
Not After : Nov 5 07:19:24 2026 GMT
Subject: CN=CBE384AADA451A81FFD24B1BAEFD69FDB5A49806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:02:91:1a:53:59:da:23:b7:4d:12:e2:58:be:
98:82:e4:e7:03:ab:59:57:e8:a7:41:f0:36:bd:c3:
e7:71:b7:3c:7f:f2:91:f6:d3:51:8b:dd:8e:39:e4:
3f:11:f0:7c:a9:76:67:34:78:86:11:d2:61:0f:8a:
45:25:06:c9:b8:39:db:54:eb:8e:71:17:b5:c1:57:
b5:1b:61:ee:f8:89:6d:02:3b:ba:45:77:1c:74:2b:
82:f9:97:e7:8f:71:7b:3a:6e:59:74:35:58:27:d0:
6c:00:82:fa:8b:20:56:04:13:61:17:8c:61:b9:24:
4e:8d:e3:37:f4:66:70:a3:a5:06:08:81:80:a9:f2:
85:b1:42:6a:ae:a1:1a:f5:dc:bd:57:92:01:f6:f4:
6d:b2:73:51:70:44:32:71:b7:27:03:ac:df:23:c9:
50:3d:4b:54:89:89:10:16:11:ad:c3:55:d4:3c:dd:
5d:b3:47:9e:1f:58:d6:d6:46:02:94:87:a4:fa:a4:
7b:0d:8c:43:7b:d8:d7:b1:03:32:3b:b0:d4:cc:5f:
51:7d:2a:13:f6:57:8c:64:e9:9f:e7:65:c9:b3:e2:
84:32:63:d7:63:7a:29:95:08:c1:14:26:13:03:0e:
d6:09:35:32:4e:c2:d6:fd:39:d4:4a:7c:6c:e3:6f:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:84:AA:DA:45:1A:81:FF:D2:4B:1B:AE:FD:69:FD:B5:A4:98:06
X509v3 Authority Key Identifier:
keyid:D5:44:19:98:31:40:D3:CB:73:E6:25:68:15:38:22:5C:B1:2E:54:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D54419983140D3CB73E625681538225CB12E5424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/D54419983140D3CB73E625681538225CB12E5424.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:e6:1b:d7:ad:ab:c0:bd:56:06:9b:d9:23:a2:33:1d:30:
a6:34:45:62:dc:ee:1d:b4:3d:9d:87:ad:f8:67:4c:e9:3b:74:
46:c9:84:d4:20:58:3c:dc:ab:d0:48:c7:aa:c8:f3:f6:65:0e:
1c:23:29:26:31:a5:ad:47:08:0a:a9:5b:15:64:59:a5:fc:a5:
a3:1e:94:66:03:cf:02:e2:4c:3a:3f:da:90:ff:56:07:84:78:
e8:57:07:f5:aa:f6:b5:07:e0:8b:8a:41:0a:45:d8:21:3d:56:
c2:7a:01:b8:87:42:8d:b7:cb:e8:bb:91:2d:c0:ce:a8:b9:07:
f0:6e:e3:e9:26:81:68:b6:91:15:fd:4b:e3:95:66:0a:a7:cd:
25:47:56:2f:b3:8c:52:fe:fd:6f:0a:45:7f:ee:7b:1f:04:fc:
05:20:fb:26:87:cc:f9:c2:ee:72:12:50:e8:7d:13:71:fd:bf:
7d:a9:8c:5a:7b:8a:04:46:63:d5:05:83:bc:b0:13:ca:9e:d2:
d2:dc:fe:05:de:5a:60:d4:3f:c3:a5:5e:f5:af:91:56:34:2d:
4e:bb:b6:bc:99:bc:2c:82:6c:6d:68:4e:33:3b:29:57:1d:2f:
d0:91:53:6c:ad:2d:17:a4:46:6d:ab:c8:0a:fd:20:3d:c9:ae:
5e:b1:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:31:28 2026 by rpki-client