
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
File: 54026028AD87AC49BD097621095F68B69F4EF6DB.mft (raw, json)
Hash identifier: sPA0pY01+1SZvUxrjTNvXgZutHINDD7GV7ZY8yLN/BA=
Subject key identifier: F9:18:CD:A1:09:03:C9:07:77:9A:3E:BF:EA:8E:10:5E:F6:35:6C:D5
Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
Certificate issuer: /CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Certificate serial: 06574203E9365C2DE041B6E0C8D4425002FDFE56
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 07:46:36 +0000
Manifest this update: Thu 18 Jun 2026 07:41:36 +0000
Manifest next update: Fri 19 Jun 2026 10:04:36 +0000
Files and hashes: 1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=)
2: 54026028AD87AC49BD097621095F68B69F4EF6DB.crl (hash: DhoCxCID5nbwz7sSK+TsPCpP0Xh3Gs21tM99CJMb8IY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:57:42:03:e9:36:5c:2d:e0:41:b6:e0:c8:d4:42:50:02:fd:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Validity
Not Before: Jun 18 07:41:36 2026 GMT
Not After : Jun 19 10:04:36 2026 GMT
Subject: CN=F918CDA10903C907779A3EBFEA8E105EF6356CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:bd:4c:4e:ac:4a:12:87:42:02:d8:a2:1d:
38:7f:5c:7d:d7:ef:46:87:86:5d:89:03:81:d2:80:
0d:93:8f:f3:f3:d7:2f:8e:34:ba:7d:90:bf:fc:6a:
70:85:7c:7a:19:85:36:5a:d3:66:63:d9:45:e6:f8:
24:06:80:ab:96:6c:59:c2:8c:60:21:ff:59:e4:d2:
74:2f:19:ca:fa:3b:91:85:46:a9:0b:f1:17:89:e3:
1a:28:af:4a:c1:45:27:50:8c:1d:20:91:4f:2f:c6:
65:d8:52:c7:f8:48:2e:6a:35:47:0f:1a:d1:31:4e:
8d:74:4d:40:70:d4:40:06:dd:65:30:7b:25:1c:05:
37:80:2b:56:5f:89:8a:ab:f9:8e:f9:8c:3d:25:1c:
8e:67:67:2c:5b:a9:8d:58:ca:d7:75:f5:89:cf:a7:
ed:6f:b9:18:1b:b3:6c:0c:ab:27:45:ce:53:38:39:
3a:c1:92:7d:8d:aa:20:1a:9c:b3:03:c5:96:7c:bb:
cf:61:22:de:2c:05:c9:e8:d5:c2:cb:28:0e:3b:d1:
3b:0f:26:c4:f2:c6:a1:7e:78:fd:65:c3:dd:19:67:
3d:e4:11:89:3c:c8:bd:cf:39:a8:4b:9b:95:bb:10:
24:60:1f:6a:7c:69:50:ce:44:45:d7:eb:84:ea:d4:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:CD:A1:09:03:C9:07:77:9A:3E:BF:EA:8E:10:5E:F6:35:6C:D5
X509v3 Authority Key Identifier:
keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:dc:45:5e:ea:6b:26:13:2b:2d:28:9f:be:b8:2c:36:e7:
79:e4:3a:75:28:fd:25:5a:8a:de:2d:b0:49:9a:7b:3f:13:a2:
4f:85:01:cf:b6:c5:53:89:23:6b:cf:6f:19:e4:ed:f6:20:2d:
2f:34:f5:35:3e:6a:42:5e:1f:84:a5:0e:61:88:28:9e:6e:37:
5b:d2:74:5a:c8:45:ec:83:47:9e:48:06:02:1d:ad:e1:46:64:
f2:b5:c6:32:2c:a1:27:35:ad:3f:e4:6c:0b:30:13:e1:ca:bc:
20:d4:e4:8f:60:8d:c0:9b:93:f7:3d:b0:ca:c9:7e:f9:e5:ea:
44:c4:3b:4c:91:d5:f4:27:5b:8e:89:4f:dd:a2:ae:b6:5d:0e:
a3:32:62:08:ec:6a:97:34:43:2c:2c:49:19:f0:54:0e:9e:91:
92:bc:8c:f7:98:14:77:d0:15:ec:1c:22:f0:e5:65:58:b1:ce:
49:7d:64:5c:d9:95:79:bc:36:cf:dd:19:97:8b:30:c8:cd:3f:
10:33:25:f5:a4:c2:b2:44:8a:6f:0c:e5:4e:73:1b:78:8b:dc:
e6:14:07:01:96:e3:9e:5e:43:dc:3b:02:8a:82:5e:b1:71:41:
2c:ae:21:b2:37:f7:d1:c9:6a:20:07:a0:07:40:6a:86:62:00:
b4:d5:77:4b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBldCA+k2XC3gQbbgyNRCUAL9/lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQwMjYwMjhBRDg3QUM0OUJEMDk3NjIxMDk1RjY4QjY5
RjRFRjZEQjAeFw0yNjA2MTgwNzQxMzZaFw0yNjA2MTkxMDA0MzZaMDMxMTAvBgNV
BAMTKEY5MThDREExMDkwM0M5MDc3NzlBM0VCRkVBOEUxMDVFRjYzNTZDRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9u71MTqxKEodCAtiiHTh/XH3X
70aHhl2JA4HSgA2Tj/Pz1y+ONLp9kL/8anCFfHoZhTZa02Zj2UXm+CQGgKuWbFnC
jGAh/1nk0nQvGcr6O5GFRqkL8ReJ4xoor0rBRSdQjB0gkU8vxmXYUsf4SC5qNUcP
GtExTo10TUBw1EAG3WUweyUcBTeAK1ZfiYqr+Y75jD0lHI5nZyxbqY1Yytd19YnP
p+1vuRgbs2wMqydFzlM4OTrBkn2NqiAanLMDxZZ8u89hIt4sBcno1cLLKA470TsP
JsTyxqF+eP1lw90ZZz3kEYk8yL3POahLm5W7ECRgH2p8aVDOREXX64Tq1IAzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+RjNoQkDyQd3mj6/6o4QXvY1bNUwHwYDVR0j
BBgwFoAUVAJgKK2HrEm9CXYhCV9otp9O9tswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODQ3NTMzOGQtN2FjYi00YWE3LWJlZGMtZDY0NTlmZDEzNTA0LzAvNTQwMjYwMjhB
RDg3QUM0OUJEMDk3NjIxMDk1RjY4QjY5RjRFRjZEQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81NDAyNjAyOEFEODdBQzQ5QkQwOTc2MjEwOTVGNjhCNjlGNEVG
NkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzAvNTQwMjYwMjhBRDg3QUM0OUJEMDk3NjIxMDk1RjY4
QjY5RjRFRjZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGkR3EVe6msmEystKJ++uCw253nkOnUo/SVa
it4tsEmaez8Tok+FAc+2xVOJI2vPbxnk7fYgLS809TU+akJeH4SlDmGIKJ5uN1vS
dFrIReyDR55IBgIdreFGZPK1xjIsoSc1rT/kbAswE+HKvCDU5I9gjcCbk/c9sMrJ
fvnl6kTEO0yR1fQnW46JT92irrZdDqMyYgjsapc0QywsSRnwVA6ekZK8jPeYFHfQ
FewcIvDlZVixzkl9ZFzZlXm8Ns/dGZeLMMjNPxAzJfWkwrJEim8M5U5zG3iL3OYU
BwGW455eQ9w7AoqCXrFxQSyuIbI399HJaiAHoAdAaoZiALTVd0s=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:15 2026 by rpki-client