
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json)
Hash identifier: sgOoc7ELqOk/Asf8vxVMzBkEndeIWKdxdCf1adkln+A=
Subject key identifier: FF:83:AE:C0:2D:04:28:F8:E1:1F:2F:33:FC:6F:55:A3:C3:8E:15:FF
Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Certificate serial: 3AE77457CE91094044677B04510DEA0349D2DAE1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 00:26:25 +0000
Manifest this update: Tue 21 Jul 2026 00:21:25 +0000
Manifest next update: Wed 22 Jul 2026 02:16:25 +0000
Files and hashes: 1: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: Mx4UxRCkANtkCBMvfDxKYi6/yi2fSwXBQLJUQCATp+E=)
2: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=)
3: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e7:74:57:ce:91:09:40:44:67:7b:04:51:0d:ea:03:49:d2:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Validity
Not Before: Jul 21 00:21:25 2026 GMT
Not After : Jul 22 02:16:25 2026 GMT
Subject: CN=FF83AEC02D0428F8E11F2F33FC6F55A3C38E15FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:a8:93:7d:4e:58:ab:3a:5e:4c:15:f1:37:
97:ae:9a:62:83:ff:6b:0c:ad:93:c1:f9:55:49:41:
15:bc:58:b6:40:26:66:7b:2e:d3:f8:00:09:2f:f2:
f4:bd:87:81:a8:57:88:7f:ac:89:da:42:df:02:d9:
92:c7:44:5a:af:6c:06:7c:6e:2b:38:3d:c9:2d:23:
cd:23:4c:cc:51:a2:bb:ce:bc:0a:20:2f:a8:7f:cb:
79:59:78:88:1f:c4:ce:44:af:59:73:0d:34:dd:e5:
3f:83:0d:e0:14:cd:51:19:91:34:13:2c:44:ce:bf:
87:ee:b0:6b:5d:cf:2a:a9:6a:11:c1:87:96:10:0e:
fb:8e:aa:bc:96:75:08:66:0f:0d:ff:e6:09:fb:b0:
2e:33:6d:b9:4f:ba:8b:7b:b6:f1:39:82:b0:1e:8b:
22:91:e5:3d:83:d3:5d:ee:ef:4a:8e:9c:e3:52:72:
76:23:fb:36:d0:22:6d:a5:b3:81:b8:a2:3f:b9:c4:
90:df:89:2f:07:8f:66:84:0e:cf:76:44:63:89:3f:
7b:14:03:0a:50:6a:a4:cb:e8:84:8f:ce:da:df:1e:
4c:d9:05:36:36:fa:73:6e:02:77:22:ca:dd:3d:d2:
a5:e5:ed:a5:9b:48:28:7f:8e:ca:69:73:7b:44:ac:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:AE:C0:2D:04:28:F8:E1:1F:2F:33:FC:6F:55:A3:C3:8E:15:FF
X509v3 Authority Key Identifier:
keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:e3:bf:a1:ec:0f:90:27:b4:09:b2:4c:70:31:ba:3a:22:
92:de:3d:25:86:f6:4c:3e:4b:ff:de:e0:82:1d:ce:0b:64:21:
90:c5:78:1f:b0:c9:5c:69:eb:de:4b:83:a7:e4:88:27:23:3e:
dc:94:4a:60:9f:ee:8a:60:8a:1e:c0:71:d1:bf:55:3e:56:8c:
d1:44:5a:6c:fa:90:59:01:21:57:a9:05:34:30:13:cb:cd:92:
44:6c:6b:0f:1a:67:52:d2:e3:8a:67:2f:4d:b6:a8:94:a7:67:
c5:b2:61:c3:79:28:12:00:01:b3:02:ce:fe:e3:12:74:a6:1a:
c2:1c:a6:13:43:32:a5:89:be:14:5e:0a:c9:59:90:ce:bb:e8:
89:9b:79:de:41:20:25:0a:64:07:6e:47:b7:30:60:bf:29:07:
3a:d7:79:d4:b0:84:2d:9b:08:22:62:b7:56:8e:e4:c7:b1:bf:
71:02:a1:e5:e7:be:11:00:af:ed:90:9a:1b:07:e4:1d:7f:0e:
ba:3d:62:f2:91:e7:70:72:33:3d:4d:ec:38:b8:a1:25:69:36:
09:a5:88:c9:fc:06:a1:43:6e:98:03:b4:e4:9f:63:b3:00:ae:
ee:a8:37:d7:82:81:ab:70:d6:1f:02:0c:9b:73:88:83:b8:d2:
fc:2d:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:27 2026 by rpki-client