$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: 5ouyoFlz6oetWLmaMNQPvD/4KWE0whi8O/srXBE0Hoc= Subject key identifier: 77:38:CF:B4:77:10:E0:46:84:8D:56:35:1E:FD:BC:E9:1E:28:46:A4 Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 742D056895EF9F8AD0A225CBCDBBC81AD2FF77D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:12:25 +0000 Manifest this update: Thu 17 Sep 2026 03:07:25 +0000 Manifest next update: Fri 18 Sep 2026 05:27:25 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 2: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: tNZxmzxxDC95cSftTRY1edDQ2KQx7pFZ7mi9D3sANtY=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2d:05:68:95:ef:9f:8a:d0:a2:25:cb:cd:bb:c8:1a:d2:ff:77:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Sep 17 03:07:25 2026 GMT Not After : Sep 18 05:27:25 2026 GMT Subject: CN=7738CFB47710E046848D56351EFDBCE91E2846A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:2e:24:8b:a6:b9:61:fe:eb:9d:b6:76:8c: f3:be:b1:58:81:33:86:42:c4:73:15:24:b6:62:13: 98:12:31:a6:f4:97:ec:61:61:d1:5d:e8:fa:d3:16: 51:c3:3a:10:a3:3d:8f:e3:29:5b:14:f9:46:5f:44: 7f:65:96:f7:9a:1d:c2:13:39:e2:8f:fb:67:81:80: fd:45:c6:71:d4:6d:7b:82:8c:5d:c4:67:6e:8d:e6: 2c:f8:f8:b8:05:56:26:6a:22:9d:73:a0:41:73:f9: ae:1a:26:af:19:56:ce:80:63:28:65:22:e9:b3:0e: d7:1a:7b:86:f6:99:c3:cf:38:92:e6:85:51:ad:1b: 92:7e:7e:9c:dc:c1:97:f1:38:17:df:42:f0:ec:a3: 78:fb:80:eb:b3:99:e5:e7:32:f6:d7:4b:86:77:a3: 8a:dc:a3:ec:3b:17:91:d5:d1:da:cc:87:77:6f:ae: b8:d6:35:5d:5e:20:5e:48:bc:3b:85:35:dc:4e:b2: 5a:82:5d:94:2e:6d:e0:45:d9:68:67:02:cb:31:1d: 70:7b:3f:ab:e8:49:92:35:4b:67:01:c3:be:38:13: e3:75:77:98:75:6e:cc:f8:a9:f1:7d:02:a9:a6:5b: 78:0b:09:1f:72:e8:cd:cc:78:9c:ae:93:da:9d:e4: 61:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:38:CF:B4:77:10:E0:46:84:8D:56:35:1E:FD:BC:E9:1E:28:46:A4 X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:31:8d:35:df:39:91:de:69:23:43:29:b4:8a:a0:57:d9:69: e2:4b:3e:da:cc:ba:44:8b:2b:26:68:b6:df:9c:80:f1:50:ac: f3:8b:18:53:c5:fc:28:56:61:5f:4b:92:09:77:c5:91:7c:c4: 00:0c:84:e7:68:3b:df:7e:0e:55:cb:e2:7d:7c:5d:15:fb:8c: 54:18:70:72:57:03:07:cd:af:9a:c6:61:62:90:6c:0d:da:b1: 25:29:5a:ad:2e:87:70:3e:ed:33:74:0a:f1:3b:c5:c0:c9:90: e3:af:8d:14:93:20:d0:63:d0:c2:3c:ec:4f:36:ef:0c:c0:67: 13:16:dd:fa:5e:1d:f6:6e:73:e4:47:3e:9a:4d:42:54:2f:53: 8a:52:21:35:57:b5:1e:74:10:fa:fc:a0:70:bd:9a:9b:ac:67: 30:bb:53:5f:e3:18:93:53:1e:6c:7b:05:b7:0e:2c:1f:38:1b: ab:ae:3a:bf:0c:2a:b8:53:e8:f5:e8:6e:39:fc:0e:76:65:1b: 12:47:f9:06:59:9a:b3:40:12:18:7d:71:34:37:14:5e:53:76: 7f:58:2c:b1:50:8f:73:1c:65:a8:5c:35:a2:46:34:b7:55:cf: 99:11:ea:6b:47:58:1b:d9:2f:17:ed:f7:9c:ca:76:24:ba:a2: 88:06:23:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC0FaJXvn4rQoiXLzbvIGtL/d9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA5MTcwMzA3MjVaFw0yNjA5MTgwNTI3MjVaMDMxMTAvBgNV BAMTKDc3MzhDRkI0NzcxMEUwNDY4NDhENTYzNTFFRkRCQ0U5MUUyODQ2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsC4ki6a5Yf7rnbZ2jPO+sViB M4ZCxHMVJLZiE5gSMab0l+xhYdFd6PrTFlHDOhCjPY/jKVsU+UZfRH9llveaHcIT OeKP+2eBgP1FxnHUbXuCjF3EZ26N5iz4+LgFViZqIp1zoEFz+a4aJq8ZVs6AYyhl IumzDtcae4b2mcPPOJLmhVGtG5J+fpzcwZfxOBffQvDso3j7gOuzmeXnMvbXS4Z3 o4rco+w7F5HV0drMh3dvrrjWNV1eIF5IvDuFNdxOslqCXZQubeBF2WhnAssxHXB7 P6voSZI1S2cBw744E+N1d5h1bsz4qfF9AqmmW3gLCR9y6M3MeJyuk9qd5GEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdzjPtHcQ4EaEjVY1Hv286R4oRqQwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0xjTXfOZHeaSNDKbSKoFfZaeJLPtrMukSL KyZott+cgPFQrPOLGFPF/ChWYV9Lkgl3xZF8xAAMhOdoO99+DlXL4n18XRX7jFQY cHJXAwfNr5rGYWKQbA3asSUpWq0uh3A+7TN0CvE7xcDJkOOvjRSTINBj0MI87E82 7wzAZxMW3fpeHfZuc+RHPppNQlQvU4pSITVXtR50EPr8oHC9mpusZzC7U1/jGJNT Hmx7BbcOLB84G6uuOr8MKrhT6PXobjn8DnZlGxJH+QZZmrNAEhh9cTQ3FF5Tdn9Y LLFQj3McZahcNaJGNLdVz5kR6mtHWBvZLxft95zKdiS6oogGI64= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:36 2026 by rpki-client