
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
File: 545EA992851AF2726DCE8FE1F2938BE936777BC9.mft (raw, json)
Hash identifier: VMHMjHl+xB5N1slzecReXTKouxX2qMcdBsezGsXAzAY=
Subject key identifier: 94:A2:40:72:DC:B6:AB:65:43:DE:E9:55:EF:BC:A9:8B:DB:C8:17:EF
Authority key identifier: 54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
Certificate issuer: /CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Certificate serial: 7BB8DD655CE50057D8A5D7112ED4D1445DDB7047
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 12:20:17 +0000
Manifest this update: Tue 02 Jun 2026 12:15:17 +0000
Manifest next update: Wed 03 Jun 2026 12:29:17 +0000
Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: CF93x0CUSZc9nwaPIf94Rg3qFl8JOdqJteM1vot6/7Q=)
2: 545EA992851AF2726DCE8FE1F2938BE936777BC9.crl (hash: A5Gh6ah5pu2BDfFJuQeHzS92N8iobi246wTJK0jEw8o=)
3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: vaJ2Jnx34d5ViQhIOJO1KUl8K4Z1siF9VMxKO/oKGPo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 12:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b8:dd:65:5c:e5:00:57:d8:a5:d7:11:2e:d4:d1:44:5d:db:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545EA992851AF2726DCE8FE1F2938BE936777BC9
Validity
Not Before: Jun 2 12:15:17 2026 GMT
Not After : Jun 3 12:29:17 2026 GMT
Subject: CN=94A24072DCB6AB6543DEE955EFBCA98BDBC817EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:bc:3d:74:46:5b:0a:3b:81:31:f2:53:8b:
06:bb:85:ee:f7:84:d0:5d:8a:d8:01:76:de:4f:e5:
25:37:b5:42:c2:d7:11:fc:9d:65:e1:bf:98:46:96:
94:68:cb:f6:b6:0e:11:f0:f7:76:ee:67:eb:8f:a4:
d9:71:1f:d5:2a:a6:9e:ac:6c:dd:ba:b0:f5:15:1b:
55:ec:8c:22:22:8a:aa:e5:18:4b:a3:84:2d:11:54:
9b:eb:55:32:72:30:92:55:f4:1b:77:e1:5d:ec:a3:
b7:ab:f1:bc:8e:b4:9f:7e:ee:f5:1a:f8:19:92:f3:
eb:1a:ee:96:d9:55:61:c1:18:6f:bb:6b:b2:ce:c1:
b3:1a:0d:ae:f5:8d:72:dc:65:5a:7b:84:80:f6:f5:
f5:87:44:20:9c:cf:e4:b5:bf:ee:34:83:70:ff:ad:
8b:0e:ce:02:ac:54:ba:09:03:30:98:a5:63:ac:48:
40:7e:20:17:e4:f0:d1:47:5a:c3:08:3a:fb:1b:61:
60:62:a2:ad:59:26:cd:44:fe:8b:55:8a:91:bc:2a:
60:37:8a:fc:f0:09:d3:4b:b5:32:54:2a:a0:10:87:
f9:4a:f5:ec:5c:35:dd:f5:db:1f:ef:3e:fb:49:72:
e0:93:1d:e8:04:36:34:df:64:1a:f6:a8:10:0a:c5:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:40:72:DC:B6:AB:65:43:DE:E9:55:EF:BC:A9:8B:DB:C8:17:EF
X509v3 Authority Key Identifier:
keyid:54:5E:A9:92:85:1A:F2:72:6D:CE:8F:E1:F2:93:8B:E9:36:77:7B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/545EA992851AF2726DCE8FE1F2938BE936777BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/545EA992851AF2726DCE8FE1F2938BE936777BC9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fc:e0:b5:7e:7b:23:0d:7e:68:14:1c:4e:4c:37:5e:41:8d:
57:1e:cf:0d:45:b4:a3:6e:e1:ac:82:6b:87:a3:9c:46:bc:fd:
87:75:56:c1:a7:92:48:e4:09:c6:42:63:55:9c:00:28:62:f0:
0a:3b:5b:d7:ab:3b:9c:e1:e5:8b:7d:50:ef:4b:9d:be:be:b2:
95:58:cf:8d:97:3f:da:69:a6:8a:e5:3c:51:2a:56:e0:33:18:
e3:c5:5c:75:10:9b:01:17:2f:15:e7:8f:b2:61:92:48:f1:16:
1c:0b:96:6b:94:65:55:64:b3:02:6f:58:1a:29:34:a5:d9:8c:
c5:d9:8d:18:20:59:98:d1:9b:1d:27:eb:1c:c1:34:15:bc:8a:
14:d1:a0:8c:4a:26:64:ba:50:9b:b1:32:d7:13:a1:18:a0:70:
68:c5:95:a2:2d:7f:35:01:3f:63:7e:52:00:c8:a4:ab:9d:f6:
8c:ea:07:d0:16:14:eb:36:3c:ce:79:17:70:3d:5c:74:a9:11:
33:41:97:41:d7:56:89:68:62:2d:be:22:7f:cf:9a:c9:3e:47:
51:4a:e7:4e:78:65:a0:4f:80:89:5c:3b:79:85:b0:1d:9a:c2:
47:21:38:0a:0c:d2:bd:25:e1:ab:00:66:64:e4:f0:3c:41:87:
b3:aa:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:44:15 2026 by rpki-client