
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
File: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft (raw, json)
Hash identifier: RvP8OFoIn+Z2qIDlnYWvVMXyELxAfiAfodk0OBvzV3M=
Subject key identifier: 7D:B3:94:7D:5F:EE:41:25:BA:BD:0D:B8:41:FD:04:E7:A6:10:81:D1
Authority key identifier: 54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F
Certificate issuer: /CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
Certificate serial: 709EC94AC056E0F04E5B59F17946BDDEC510D72B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:41:50 +0000
Manifest this update: Mon 20 Jul 2026 20:36:50 +0000
Manifest next update: Tue 21 Jul 2026 22:18:50 +0000
Files and hashes: 1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: CZxoOJt1mcB0J5ge1VFKiB1idehPYzARJVthkXF0WVg=)
2: 54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl (hash: IJbtyjLWfQosogkde7viPVIJsC/qfyITfIDw9D7N3Ys=)
3: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: MProqR3+IjMWS7se961mZj4ZxnK4O4igfKtOCECcphc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl
rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9e:c9:4a:c0:56:e0:f0:4e:5b:59:f1:79:46:bd:de:c5:10:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C2B096ABA577840E8CFF28A45F9E0B066F361F
Validity
Not Before: Jul 20 20:36:50 2026 GMT
Not After : Jul 21 22:18:50 2026 GMT
Subject: CN=7DB3947D5FEE4125BABD0DB841FD04E7A61081D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:71:57:a0:11:6a:12:a0:06:d4:90:bb:b9:
54:83:8b:aa:d7:ad:94:c5:e6:30:15:5b:be:fa:db:
ad:51:2a:e7:72:e2:1f:51:c1:24:52:d5:69:ab:17:
c4:dd:12:bb:b4:02:09:a3:ba:5c:82:44:02:74:75:
d6:06:fb:a6:8c:6c:9a:ea:d7:69:f2:ef:fd:fa:95:
17:9b:fc:3c:5c:b3:f9:c9:8d:9a:e2:e4:c5:37:d7:
35:f6:17:50:17:ce:52:1b:73:c7:23:f7:7a:34:49:
74:7b:88:de:78:c9:81:63:44:37:d0:e3:6d:ae:43:
22:08:45:a2:1b:da:71:3f:f0:4f:e6:c7:67:e4:a3:
04:31:37:7f:c5:b3:fa:cb:14:80:51:b6:41:21:8c:
35:41:2b:49:db:29:2a:58:1b:70:c9:65:f7:09:8e:
bc:47:89:f8:8d:b3:da:f8:54:ba:3a:b3:03:ff:6c:
35:7c:4d:8f:02:d1:e0:89:86:53:91:8f:9a:3b:bd:
55:81:2e:53:ff:00:29:fc:fd:b2:7c:c6:49:00:fd:
aa:92:85:e9:42:dd:dc:a1:e0:45:b1:48:db:19:fe:
22:2b:c6:16:ab:2f:0c:6c:8c:bc:02:2c:66:69:a1:
08:ee:1d:70:19:51:68:b8:cb:ed:f8:92:ab:e2:8d:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:94:7D:5F:EE:41:25:BA:BD:0D:B8:41:FD:04:E7:A6:10:81:D1
X509v3 Authority Key Identifier:
keyid:54:C2:B0:96:AB:A5:77:84:0E:8C:FF:28:A4:5F:9E:0B:06:6F:36:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54C2B096ABA577840E8CFF28A45F9E0B066F361F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/54C2B096ABA577840E8CFF28A45F9E0B066F361F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:79:63:68:ae:91:c6:76:8c:b9:ad:37:57:2a:ac:b2:35:
0b:17:88:bd:7d:5a:f9:c7:4b:bf:19:35:0f:4d:f0:75:37:4b:
64:60:4c:ec:4f:29:1f:d3:0e:ca:20:f6:50:44:b6:6a:37:24:
b2:99:61:19:e3:1e:a3:85:70:ce:b6:09:8f:1f:d6:34:f7:b4:
0d:ab:44:b8:f1:14:8d:e2:5f:53:31:83:8f:f5:0f:99:78:9f:
e9:1b:f7:68:af:c8:f0:e2:0a:28:f0:99:b7:84:ae:f2:f5:3f:
7e:7e:6e:3d:91:60:5c:0b:a5:12:b2:e1:b9:64:a0:99:c7:97:
7b:19:9e:39:9d:6b:23:c0:21:a5:93:50:cf:c0:b6:27:26:2b:
36:4d:b0:83:6c:0b:f4:43:49:00:88:91:b9:f5:86:85:a4:36:
24:7b:f2:6f:55:28:17:c1:c2:43:96:36:16:ff:45:ab:16:e8:
0f:e0:28:a7:56:f2:3e:97:1e:76:d4:5a:c5:82:ac:38:6f:95:
4a:94:00:f0:b0:4b:07:37:f3:55:bc:b1:ca:14:eb:c8:4b:a0:
73:e1:94:c9:94:bf:95:c4:1d:48:b0:f6:54:d8:7e:1e:e1:8d:
01:a3:3a:ba:bd:d2:ae:e9:27:1c:33:f3:95:f1:be:03:da:83:
33:fb:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:52:31 2026 by rpki-client