
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
File: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft (raw, json)
Hash identifier: BAPHV6lwf7u+mojF158cnyLl84+nnSjdF9Xtz5pC1BA=
Subject key identifier: 6A:9D:B3:60:DB:42:A6:B6:CE:57:F9:7C:C6:40:D8:B1:40:D1:DC:8C
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 5D39AA0DA8D3186C9F76C41C0EC9C15FCD837C10
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 09:07:26 +0000
Manifest this update: Fri 04 Sep 2026 09:02:26 +0000
Manifest next update: Sat 05 Sep 2026 09:53:26 +0000
Files and hashes: 1: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: ZqLtX6oxF7GFvkV0mRmheNcCMqhAtfEhCP1VWKOSD+0=)
2: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=)
3: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: WQR96xVbOR8YHfuDPH4pCwZMpccOELsvadx46Qaje3c=)
4: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=)
5: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: 8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=)
6: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=)
7: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA=)
8: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: mazZEIAiOuG4KpGr5hwlPA5N57EIEV/LQkQcu7NU8cw=)
9: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=)
10: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: fGfLj2m8zzv2gBVrxG8woEOuvLb7BQto8QhIvETUk+0=)
11: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=)
12: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl (hash: ZLt6H+YdwvRuiYfgk5XAHXSzB4FvjiVxGUwU9r6AkGQ=)
13: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU=)
14: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: yoLJQ2p5oc/N+ycEQpkidwthgAJPdn46896MAVru/hM=)
15: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=)
16: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 09:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:39:aa:0d:a8:d3:18:6c:9f:76:c4:1c:0e:c9:c1:5f:cd:83:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: Sep 4 09:02:26 2026 GMT
Not After : Sep 5 09:53:26 2026 GMT
Subject: CN=6A9DB360DB42A6B6CE57F97CC640D8B140D1DC8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:9c:35:06:a7:37:0c:b7:fa:09:1d:4c:f5:
15:d3:a6:3f:19:98:e1:cb:aa:af:51:2e:9c:08:3c:
24:95:3b:6b:f5:1f:9c:43:71:ae:e3:ff:c1:a3:34:
81:a2:1e:1a:e9:c1:76:c0:56:a7:1a:08:74:09:6e:
19:d5:b2:46:46:9e:18:b8:5a:95:37:23:44:e1:c7:
b2:1b:6b:dc:e4:ca:ff:e7:8e:72:d0:e0:38:8d:38:
8a:77:a5:d9:52:95:60:5e:c4:8a:ef:9c:6e:7e:0a:
a0:09:6a:4c:f9:b0:54:1e:73:23:f3:80:82:31:5b:
d7:23:86:62:db:68:39:a0:3f:c1:a6:dc:a8:3c:83:
77:56:c1:86:1b:2e:6d:2a:dd:24:e4:bc:f3:b0:ca:
03:8d:5c:a6:ca:7a:1a:18:97:fc:0f:aa:f2:59:e8:
98:c0:65:2d:e1:17:26:fd:77:0c:44:74:10:1f:4d:
f2:87:09:b3:29:e9:61:6b:6b:ca:7e:7b:be:ea:b9:
37:fe:34:e2:7e:12:fc:39:4e:db:25:cd:e7:1d:9a:
ac:56:a2:46:b2:63:ef:17:ad:fc:4d:e4:62:4d:02:
e8:d4:93:72:c5:3b:ae:12:4f:02:c5:21:c1:9f:e5:
5f:f8:e2:10:1b:9f:27:f5:86:89:47:6c:43:64:10:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9D:B3:60:DB:42:A6:B6:CE:57:F9:7C:C6:40:D8:B1:40:D1:DC:8C
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a1:d7:d5:1f:b0:51:51:3a:11:3c:03:77:29:ed:f2:d0:4f:
83:c4:cc:46:77:13:d0:ac:52:da:ad:0d:ca:f4:0e:1d:60:7e:
06:b1:ab:bb:17:da:29:1c:89:97:d2:e0:01:09:12:a7:9f:df:
dd:96:e3:ec:8f:5f:74:c6:1e:49:cc:10:12:74:f6:f7:a3:86:
57:f5:b8:90:72:8c:29:40:83:1e:fd:4d:c3:00:99:b2:71:fa:
14:5d:58:8e:c2:39:56:79:fc:b9:a0:25:f1:30:11:eb:3a:4a:
54:45:46:ab:42:02:8e:70:7c:c4:07:d5:37:41:b7:2e:e1:a1:
26:b6:3a:3c:83:30:74:56:1f:b9:09:7c:d1:5a:5d:d5:cc:77:
40:51:f6:58:4e:b8:7f:b8:05:da:3e:b4:55:ec:64:fe:ff:f0:
5d:9e:16:bd:3d:91:e3:04:5d:fb:21:2e:91:ba:26:90:cc:a6:
90:08:ff:3f:f7:a7:1c:a4:d6:22:bd:f4:ec:8d:76:09:81:d0:
8a:d7:5c:22:e1:b9:6e:a4:52:8b:34:1e:3d:c7:f1:5c:aa:87:
d3:62:ea:22:4a:59:77:0f:87:cc:3a:67:2b:cb:36:7e:94:f7:
cd:e5:60:90:c9:61:fd:dc:f3:4f:62:33:17:23:21:26:4b:8f:
93:f5:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:35 2026 by rpki-client