
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
File: 544C20A6FC634FB65FE9129F38839E35C4A2E951.mft (raw, json)
Hash identifier: lf6s87BsgrT2i8cly6hjJEzXt/VYbXkvep8A3X5Yk3k=
Subject key identifier: FE:FE:5D:57:38:63:C3:B1:32:BF:80:48:83:71:0E:04:1F:63:5F:89
Authority key identifier: 54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51
Certificate issuer: /CN=544C20A6FC634FB65FE9129F38839E35C4A2E951
Certificate serial: 12D02BC15AD7BE200821B1EA3D89E98BE918128C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
Manifest number: 47
Signing time: Tue 23 Jun 2026 19:50:18 +0000
Manifest this update: Tue 23 Jun 2026 19:45:18 +0000
Manifest next update: Wed 24 Jun 2026 23:07:18 +0000
Files and hashes: 1: 544C20A6FC634FB65FE9129F38839E35C4A2E951.crl (hash: kYXJZElYTHhkQcMs/tgCr8SAvTenLe5jH8MrrJ8Vfls=)
2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: Acp8tEk1385vIHHLK7HpaSAdAl0nLE5FcS0yXdmqlJg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl
rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Jun 2026 23:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d0:2b:c1:5a:d7:be:20:08:21:b1:ea:3d:89:e9:8b:e9:18:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544C20A6FC634FB65FE9129F38839E35C4A2E951
Validity
Not Before: Jun 23 19:45:18 2026 GMT
Not After : Jun 24 23:07:18 2026 GMT
Subject: CN=FEFE5D573863C3B132BF804883710E041F635F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:72:36:95:39:fb:f7:0c:75:9c:21:42:41:
89:b0:c4:86:9e:f3:03:ca:fe:70:e7:3e:0b:a4:7a:
ca:d9:a9:e3:1a:e8:f1:b0:bd:fd:00:e8:3b:6d:21:
c1:60:4f:26:e4:9f:9f:76:a0:3f:5d:19:e4:ed:61:
ba:91:c1:69:d4:e4:03:ce:86:e7:f5:29:8f:10:01:
66:92:d5:77:b7:11:02:13:3c:f0:a6:ba:70:fa:d0:
90:b5:48:77:ce:82:de:8f:af:a5:d6:af:54:28:fb:
70:fd:6c:cd:b3:4d:f4:f6:20:4b:b2:16:90:c9:e7:
80:dd:1d:58:f0:e9:08:b9:fc:6e:3f:da:54:2b:dd:
c4:1c:8d:c7:61:79:36:60:6b:6a:45:60:3c:de:34:
39:81:85:b9:b0:23:47:39:67:8e:c2:0a:05:55:ff:
a4:81:21:a7:8c:ed:26:03:13:dd:8b:d2:c9:28:13:
4f:df:5f:1f:38:2c:20:74:e2:06:39:1c:be:69:b2:
19:e3:e0:21:c0:54:c6:04:78:c5:e4:95:07:8b:bb:
ae:91:71:e6:fa:04:42:56:5c:8c:dc:0e:3b:a0:f7:
20:52:c5:0c:25:3b:b8:1b:0b:99:6d:a9:9d:1e:8e:
bc:3f:25:91:f2:43:4e:94:2f:fe:d1:43:4b:eb:48:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FE:5D:57:38:63:C3:B1:32:BF:80:48:83:71:0E:04:1F:63:5F:89
X509v3 Authority Key Identifier:
keyid:54:4C:20:A6:FC:63:4F:B6:5F:E9:12:9F:38:83:9E:35:C4:A2:E9:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/544C20A6FC634FB65FE9129F38839E35C4A2E951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/544C20A6FC634FB65FE9129F38839E35C4A2E951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:98:4c:07:e3:4c:90:24:71:cc:ac:4c:92:8a:50:03:5f:
92:4f:7c:21:d2:d0:84:cf:d6:a1:36:59:f6:ba:9e:d3:a0:f2:
08:7e:28:e6:26:b9:70:79:f9:de:d3:46:77:f2:22:da:83:55:
66:93:ee:ee:f5:7e:ae:52:26:03:33:3e:06:82:e6:9d:05:72:
4a:c8:10:c1:45:da:fa:f7:f7:40:47:5a:4b:87:23:0a:83:02:
f8:5e:1f:91:6a:dc:0f:68:57:e2:01:52:6f:fc:07:c6:77:1c:
79:63:6b:5d:e3:38:fc:aa:bd:97:9e:80:9e:bf:23:ed:68:f2:
73:aa:5d:74:b3:4f:86:5d:29:10:78:24:0c:dd:b9:b0:10:98:
11:3a:23:5f:e1:1e:75:7a:d0:9c:69:53:41:03:89:56:c2:b6:
a7:3b:30:32:09:73:6a:59:3e:dd:9b:ad:4c:8c:46:4c:60:51:
85:06:ed:5d:71:fb:6b:f4:d4:0c:c5:d7:1a:06:80:53:97:d4:
01:52:22:20:e3:96:e2:f8:d9:d2:4e:17:70:0f:ba:ae:69:71:
1c:9c:e0:f5:1f:a9:1a:a1:44:c9:e3:06:ec:46:33:91:f5:53:
3c:8c:bb:12:01:61:26:66:ec:6f:43:b2:a1:f6:a5:e2:58:74:
53:97:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:47:41 2026 by rpki-client