$ rpki-client -vvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft File: 54C92083A9323650229F71CD77020E900DBD4472.mft (raw, json) Hash identifier: 5P978GeFae6MyEJJCh0EIB9ZZo0V/rnbpgCrOGZCuiE= Subject key identifier: 87:39:53:B2:97:AA:20:42:20:D8:A4:91:99:48:82:9E:7E:5D:EF:80 Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72 Certificate issuer: /CN=54C92083A9323650229F71CD77020E900DBD4472 Certificate serial: 0E15C1D050CF80559E7B38C245F9C00CA4B10712 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 03:05:36 +0000 Manifest this update: Thu 18 Jun 2026 03:00:36 +0000 Manifest next update: Fri 19 Jun 2026 05:52:36 +0000 Files and hashes: 1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=) 2: 54C92083A9323650229F71CD77020E900DBD4472.crl (hash: J7xpYEbbFCtIbLqWKjW66QoS07O9+fOewznqXfDaiD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:15:c1:d0:50:cf:80:55:9e:7b:38:c2:45:f9:c0:0c:a4:b1:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472 Validity Not Before: Jun 18 03:00:36 2026 GMT Not After : Jun 19 05:52:36 2026 GMT Subject: CN=873953B297AA204220D8A4919948829E7E5DEF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:11:51:57:c7:a5:52:26:dd:96:12:1e:ce:8e: d8:43:b3:d5:32:74:b6:e3:81:04:b4:44:c6:67:86: 93:db:f7:26:a2:9b:a9:55:95:a6:d0:07:03:24:27: 4d:7f:ff:66:62:49:df:ba:39:44:81:e3:ae:3a:fa: 45:da:40:5f:d7:76:4f:c1:40:54:60:ff:89:b7:c2: c7:c3:be:12:92:ee:b3:4d:4c:9a:f3:50:6e:e2:71: f6:a3:0f:74:3a:8d:03:0b:05:db:5a:99:2e:16:f7: 07:32:f0:c6:79:50:30:8e:b4:a9:fd:0d:cd:cc:1e: 94:dd:1a:81:a5:0d:74:64:a9:21:f2:02:da:25:37: 32:f8:b7:fe:8f:30:e5:b4:bb:f6:93:9d:c1:dc:d7: 57:2c:35:2c:e7:da:8f:9b:42:a7:a6:1f:65:af:48: 7c:3f:72:0b:3b:69:2b:ef:e5:8a:38:f9:10:c3:c3: 98:0c:a2:fd:c4:43:ce:56:52:26:9c:03:c9:22:41: dd:bc:b8:92:02:4a:4c:92:45:37:cf:d4:f6:ed:30: 01:16:88:6c:bc:df:a5:4a:e5:e3:5f:91:dc:05:f9: 36:18:7f:70:c1:84:d7:d9:ec:77:35:f7:89:7e:dc: f9:4f:7d:27:07:3d:b6:65:cb:68:1e:a8:87:a6:80: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:53:B2:97:AA:20:42:20:D8:A4:91:99:48:82:9E:7E:5D:EF:80 X509v3 Authority Key Identifier: keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e4:66:81:23:21:47:1f:eb:d4:49:01:e6:62:ff:40:1c:56: 7a:4b:0f:51:33:22:2d:f8:d8:5c:05:69:3e:35:8d:8d:52:29: 53:ea:79:da:81:8b:6c:04:06:eb:72:2a:81:c8:d1:b7:c5:f9: b5:a4:f8:47:06:8e:b0:04:83:76:94:3b:5a:8d:e1:00:3a:f7: 7f:60:e2:ef:fc:70:c5:c5:46:bb:81:55:c2:d1:92:3c:86:10: 6a:21:70:67:ee:96:50:db:66:98:f0:e1:59:27:dc:4f:bd:5f: 97:db:95:25:56:09:cc:73:60:1f:a2:cc:ee:1f:2a:49:c5:98: bc:34:a9:2d:91:7c:b8:0d:99:43:e6:26:95:7a:01:31:3b:3a: 4a:65:27:4e:8f:b5:12:fd:a1:07:b7:e9:23:1b:64:61:b5:0b: b4:b4:f7:a7:d8:63:db:32:cc:a7:c9:ac:32:7f:f0:8d:a5:46: 48:26:ea:27:cd:8f:7a:4b:d4:92:b9:67:df:a0:b1:cb:9d:73: 45:52:8b:12:c6:60:4e:bf:77:81:9c:21:98:50:44:74:18:f0: ca:7a:d3:cf:ae:0a:69:f3:b9:2f:81:07:b1:6c:cf:4f:27:c1: bd:ec:66:a2:f7:86:6a:5f:95:dd:7a:11:df:75:60:30:83:33: fc:f6:1c:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhXB0FDPgFWeezjCRfnADKSxBxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRDOTIwODNBOTMyMzY1MDIyOUY3MUNENzcwMjBFOTAw REJENDQ3MjAeFw0yNjA2MTgwMzAwMzZaFw0yNjA2MTkwNTUyMzZaMDMxMTAvBgNV BAMTKDg3Mzk1M0IyOTdBQTIwNDIyMEQ4QTQ5MTk5NDg4MjlFN0U1REVGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXEVFXx6VSJt2WEh7OjthDs9Uy dLbjgQS0RMZnhpPb9yaim6lVlabQBwMkJ01//2ZiSd+6OUSB4646+kXaQF/Xdk/B QFRg/4m3wsfDvhKS7rNNTJrzUG7icfajD3Q6jQMLBdtamS4W9wcy8MZ5UDCOtKn9 Dc3MHpTdGoGlDXRkqSHyAtolNzL4t/6PMOW0u/aTncHc11csNSzn2o+bQqemH2Wv SHw/cgs7aSvv5Yo4+RDDw5gMov3EQ85WUiacA8kiQd28uJICSkySRTfP1PbtMAEW iGy836VK5eNfkdwF+TYYf3DBhNfZ7Hc194l+3PlPfScHPbZly2geqIemgGhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhzlTspeqIEIg2KSRmUiCnn5d74AwHwYDVR0j BBgwFoAUVMkgg6kyNlAin3HNdwIOkA29RHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDk3MGU5MzQtODc1MS00YTYxLTk5NTAtZDRmYTQ4MGNkYTQxLzAvNTRDOTIwODNB OTMyMzY1MDIyOUY3MUNENzcwMjBFOTAwREJENDQ3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NEM5MjA4M0E5MzIzNjUwMjI5RjcxQ0Q3NzAyMEU5MDBEQkQ0 NDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDk3MGU5MzQtODc1MS00YTYxLTk5 NTAtZDRmYTQ4MGNkYTQxLzAvNTRDOTIwODNBOTMyMzY1MDIyOUY3MUNENzcwMjBF OTAwREJENDQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7kZoEjIUcf69RJAeZi/0AcVnpLD1EzIi34 2FwFaT41jY1SKVPqedqBi2wEButyKoHI0bfF+bWk+EcGjrAEg3aUO1qN4QA6939g 4u/8cMXFRruBVcLRkjyGEGohcGfullDbZpjw4Vkn3E+9X5fblSVWCcxzYB+izO4f KknFmLw0qS2RfLgNmUPmJpV6ATE7OkplJ06PtRL9oQe36SMbZGG1C7S096fYY9sy zKfJrDJ/8I2lRkgm6ifNj3pL1JK5Z9+gscudc0VSixLGYE6/d4GcIZhQRHQY8Mp6 08+uCmnzuS+BB7Fsz08nwb3sZqL3hmpfld16Ed91YDCDM/z2HG0= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:42 2026 by rpki-client