
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
File: 54AF61D322823AA9528CD145C400C58C1FA4526E.mft (raw, json)
Hash identifier: VGSawRCdZn+/4xjZpcl9sdDIqq5C1yvvH3IDhqLfLWI=
Subject key identifier: B3:C1:12:11:53:C2:8F:9E:BC:B2:8A:05:21:D8:C0:75:D9:74:A8:78
Authority key identifier: 54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E
Certificate issuer: /CN=54AF61D322823AA9528CD145C400C58C1FA4526E
Certificate serial: 4F0EF6C8FC0FC3F439570991231AEFD89444C04A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 03:53:17 +0000
Manifest this update: Thu 17 Sep 2026 03:48:17 +0000
Manifest next update: Fri 18 Sep 2026 06:05:17 +0000
Files and hashes: 1: 54AF61D322823AA9528CD145C400C58C1FA4526E.crl (hash: rMut4+on8yRnwkQ9zJbGBvTI0MZCT8c44p053ad/4EA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl
rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0e:f6:c8:fc:0f:c3:f4:39:57:09:91:23:1a:ef:d8:94:44:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54AF61D322823AA9528CD145C400C58C1FA4526E
Validity
Not Before: Sep 17 03:48:17 2026 GMT
Not After : Sep 18 06:05:17 2026 GMT
Subject: CN=B3C1121153C28F9EBCB28A0521D8C075D974A878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:e3:01:ec:42:88:f3:5a:e7:f9:af:f1:ca:
3f:c1:11:68:b3:15:fc:74:94:7f:ae:45:b7:b4:65:
75:ba:2f:6d:08:a2:01:1b:8a:2a:75:c7:ac:4b:ba:
ed:9a:d1:7e:c6:13:06:17:5e:ee:b2:15:d9:4f:4e:
b1:5f:32:43:02:96:18:a8:90:73:c7:66:5b:5e:36:
21:db:6c:f9:7f:ae:34:0d:80:42:6d:16:0b:37:08:
5b:b1:37:25:2c:97:ff:ee:1e:a4:85:f7:31:30:5d:
dc:0a:40:1c:bd:99:90:bf:e4:6b:1d:bd:56:90:7f:
5e:b6:21:4b:85:75:69:8b:a5:a2:a1:06:41:45:33:
e8:ec:ae:a1:65:9a:b5:d0:4e:d7:cb:1e:e1:2f:3b:
92:77:9a:5d:f7:bd:3c:6f:df:e8:e5:2b:e6:4d:f5:
ee:50:73:1e:69:6b:a3:de:5c:f3:1b:b7:20:07:d6:
fd:5e:88:6a:c3:d4:79:c9:c5:2f:a1:43:4a:02:c8:
91:42:aa:4b:ac:4f:af:dd:61:5f:45:ed:c7:13:88:
18:50:d6:3b:00:5c:ce:1d:94:42:d7:dd:36:7c:92:
ed:43:15:b0:92:a6:fe:67:9b:d6:2f:85:7e:e8:2d:
2a:62:36:f6:d6:7f:bf:1e:f7:f9:91:f1:7a:62:dd:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:12:11:53:C2:8F:9E:BC:B2:8A:05:21:D8:C0:75:D9:74:A8:78
X509v3 Authority Key Identifier:
keyid:54:AF:61:D3:22:82:3A:A9:52:8C:D1:45:C4:00:C5:8C:1F:A4:52:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AF61D322823AA9528CD145C400C58C1FA4526E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/54AF61D322823AA9528CD145C400C58C1FA4526E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:55:76:e7:00:64:e1:78:c0:2a:91:35:a1:97:07:3e:68:a0:
f4:6c:3c:b2:70:b6:12:4a:90:06:70:05:fa:4c:e5:86:80:00:
5c:4b:70:d3:78:88:fd:bb:6e:5a:cb:c0:bf:87:f0:b1:98:53:
70:a2:3d:51:ca:bc:74:de:25:ca:b4:63:d7:23:5a:16:2c:b9:
a3:a9:46:37:1b:bb:0a:ec:98:54:0b:21:83:b0:55:e5:77:d2:
03:43:61:d1:6a:20:2b:30:a0:f3:88:20:c2:46:d1:b2:31:c4:
68:bb:72:29:ef:5f:66:ce:f9:87:bb:96:76:6f:6e:ff:5f:27:
7d:1b:3c:ea:ca:e1:88:56:b3:96:4b:ef:4d:03:17:7b:4f:5c:
b5:82:ea:3f:f6:b4:c2:9d:96:f9:cb:7d:e4:8d:6f:cd:35:39:
60:7e:fc:85:93:d2:64:9f:b6:e0:a9:67:88:43:ff:38:00:90:
4f:9c:7d:7e:10:a5:4a:f6:59:cf:94:3a:e6:5a:57:94:d0:87:
56:81:1f:eb:09:28:ea:ee:14:bb:c5:d0:e8:48:74:2b:b4:c5:
9d:a3:9c:97:20:a1:62:92:fa:2e:cf:1b:bf:a5:97:32:6e:23:
42:93:73:bb:31:ed:e4:9a:f4:1a:2e:24:f0:62:5d:9e:5d:24:
7c:5d:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:19 2026 by rpki-client