
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
File: 2C54A4433C48711637614DBB101ACAC627FB4444.mft (raw, json)
Hash identifier: 2sMRK6BpFHxGK9yWiV2CSQoqY2oIlkJT6zVWoFosLMk=
Subject key identifier: 94:0C:07:A2:53:3C:DF:41:E3:F9:CE:66:24:CB:60:3C:0E:D2:56:9D
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Certificate issuer: /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial: 20E8F0D2D66CE9CD042DAE652F135E7701ADD3A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 15:03:55 +0000
Manifest this update: Fri 19 Jun 2026 14:58:55 +0000
Manifest next update: Sat 20 Jun 2026 17:19:55 +0000
Files and hashes: 1: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=)
2: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=)
3: 2C54A4433C48711637614DBB101ACAC627FB4444.crl (hash: txWAK0iOgr9OtLqRUvs/Kam8kGzRdyxZ7o87UunkNgM=)
4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e8:f0:d2:d6:6c:e9:cd:04:2d:ae:65:2f:13:5e:77:01:ad:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
Validity
Not Before: Jun 19 14:58:55 2026 GMT
Not After : Jun 20 17:19:55 2026 GMT
Subject: CN=940C07A2533CDF41E3F9CE6624CB603C0ED2569D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:61:48:bf:ec:ed:5c:8b:e2:71:e1:1e:f5:
a9:f8:1d:17:83:80:fd:56:ee:12:59:20:df:67:c4:
0a:4c:9e:37:9a:93:e6:fa:fb:f5:d1:b1:40:68:c4:
f7:34:d0:9d:a5:df:a0:33:6f:15:7a:f5:a5:91:df:
41:68:8c:ac:58:3f:0a:d8:1d:3e:5f:a8:c7:29:10:
a9:09:e3:25:a7:b7:15:10:10:fb:b9:29:8a:cb:aa:
23:78:b5:af:77:4f:eb:b7:3d:9a:7b:6f:f0:d7:39:
9d:17:54:68:92:0f:28:11:88:dc:93:bb:20:41:3c:
55:93:72:b8:e3:a3:ac:50:fe:45:03:34:b1:c0:7d:
3c:ba:ea:a6:96:65:dc:52:04:5e:86:4f:ce:28:b6:
8c:29:e7:22:a7:74:3f:04:d1:9b:32:20:d8:a1:97:
16:2b:d1:c8:b6:a1:d6:6b:d4:1b:de:4b:6f:e6:b1:
91:a3:81:2b:3b:d1:02:90:64:66:e7:fa:5f:e9:18:
54:94:f6:06:06:3f:c9:4e:64:69:b5:84:85:02:48:
73:17:6e:4e:4c:99:12:e7:c6:eb:92:43:af:49:8a:
06:9a:cf:2e:ee:72:e2:b4:2b:e5:b2:9e:ed:b1:6b:
0d:4d:34:58:11:01:5b:4c:1f:c1:fb:d5:f3:e9:61:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:07:A2:53:3C:DF:41:E3:F9:CE:66:24:CB:60:3C:0E:D2:56:9D
X509v3 Authority Key Identifier:
keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:55:2e:fe:df:4b:c4:60:58:42:34:22:37:74:a0:d0:bd:
6e:86:d3:3a:6c:4c:a4:29:20:ce:bc:0f:71:22:b2:ed:0c:80:
79:a3:57:f4:3e:9f:9e:20:2a:d0:2b:27:0f:65:84:d0:8a:06:
4b:a3:20:5f:35:bf:21:96:bf:b4:d6:10:f8:19:81:e3:a4:b3:
63:00:7a:59:40:20:7a:75:d6:f2:e6:4a:f2:17:49:40:79:df:
f8:bc:2f:90:14:dc:30:f9:b1:ce:aa:29:45:d9:5d:d2:74:26:
b1:6f:23:21:ca:8c:ee:9f:1d:3f:52:e2:15:bc:f6:65:2b:cd:
29:de:01:b2:ba:98:ab:9f:33:1b:b2:c5:97:1e:fe:23:32:46:
e1:94:73:2c:35:0f:22:49:5f:05:9f:1f:93:16:83:8b:5b:ce:
27:ed:c0:bf:38:ac:f1:2e:98:82:36:86:8f:1a:01:75:7b:a1:
05:dd:dc:ba:1c:18:bc:d6:fb:73:37:c7:f2:7b:36:6f:bc:b0:
5e:15:05:71:78:11:86:30:37:99:39:5e:5e:6e:6b:e2:4a:6e:
08:d2:20:04:6f:4d:40:01:35:0b:8e:10:96:5c:a4:24:cc:52:
02:e9:1a:2f:e9:8d:47:9e:82:19:d0:61:6e:ff:20:1a:84:c0:
90:ce:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:16:53 2026 by rpki-client