
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
File: E54912D936D5BF778FBB732E7E449916627DA941.mft (raw, json)
Hash identifier: U5hjFs+HkPmpIcgkAdbbhCAKk6ZSZBIl5mKfIZTOQaw=
Subject key identifier: DA:98:0F:B5:A2:40:95:DE:8A:E0:BE:A2:1E:C3:8A:F4:2D:64:F4:0A
Authority key identifier: E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41
Certificate issuer: /CN=E54912D936D5BF778FBB732E7E449916627DA941
Certificate serial: 42C4999BDB769E24E9CEA35914E3A22851114ADF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 17:20:43 +0000
Manifest this update: Wed 16 Sep 2026 17:15:43 +0000
Manifest next update: Thu 17 Sep 2026 19:33:43 +0000
Files and hashes: 1: E54912D936D5BF778FBB732E7E449916627DA941.crl (hash: VqVDb3u4PunELcPD+XkolEq6jH3ImZ3Shb74dT/vaeI=)
2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: afoPHznoH0e131M1W28pnPXY7hbzwID+nPCNXifuAL4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl
rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c4:99:9b:db:76:9e:24:e9:ce:a3:59:14:e3:a2:28:51:11:4a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E54912D936D5BF778FBB732E7E449916627DA941
Validity
Not Before: Sep 16 17:15:43 2026 GMT
Not After : Sep 17 19:33:43 2026 GMT
Subject: CN=DA980FB5A24095DE8AE0BEA21EC38AF42D64F40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:90:f3:3f:38:db:15:d9:90:04:56:0c:dd:
28:70:e0:dd:08:f9:6c:46:59:9e:d8:25:0f:d5:9a:
e5:6f:a9:30:1e:44:0b:b2:1c:80:4b:25:54:c8:16:
29:a5:c8:d1:74:87:41:eb:0f:5f:55:cc:5c:2a:88:
4d:5f:5f:8b:53:44:d2:b5:35:d0:13:ce:ce:81:40:
be:c1:d0:7e:59:98:0f:9b:94:29:91:a8:b2:14:84:
d3:f7:7f:b8:2e:8a:3e:e0:78:41:1f:4c:ec:1b:63:
22:ac:b4:fe:ed:16:6c:f5:51:b5:da:16:6d:55:e2:
be:73:80:3f:b8:12:29:d2:7a:4f:8b:82:ae:ea:e4:
ef:57:67:87:0a:74:89:4a:3b:e8:7d:b1:18:80:02:
f1:56:d3:94:08:61:61:76:05:d4:d8:83:db:8c:0f:
ab:50:d9:0c:4d:15:6e:e1:32:2e:fa:01:97:a7:4a:
56:f1:b3:b3:88:7c:3f:b2:f6:c2:a9:9d:b4:b1:cf:
81:77:e5:e9:4b:41:b7:33:3b:54:c3:10:d7:d3:d1:
2f:c9:a9:5b:1c:d4:d6:38:d6:00:cd:0a:43:25:9d:
fe:4c:cf:bd:41:92:ab:25:a9:7c:5d:6d:dd:15:c7:
a3:97:84:21:ad:8b:e2:bc:22:5e:34:bc:d5:2b:59:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:0F:B5:A2:40:95:DE:8A:E0:BE:A2:1E:C3:8A:F4:2D:64:F4:0A
X509v3 Authority Key Identifier:
keyid:E5:49:12:D9:36:D5:BF:77:8F:BB:73:2E:7E:44:99:16:62:7D:A9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E54912D936D5BF778FBB732E7E449916627DA941.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/E54912D936D5BF778FBB732E7E449916627DA941.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d1:02:a2:e7:5e:58:93:46:19:f4:d0:b3:57:9c:30:4f:4f:
57:e6:6f:d2:ab:3f:32:96:59:f0:97:83:d8:b7:89:da:3f:59:
8e:af:bb:e8:ba:86:b6:a3:ed:0a:43:4c:d8:e5:34:82:c8:c5:
75:9e:4a:53:02:05:55:64:f2:0b:5e:07:5e:1f:a8:fb:14:de:
d8:eb:bf:c7:7a:44:3e:ba:81:b0:d7:58:9f:c3:4a:db:53:00:
42:99:e6:58:9c:ee:4a:f0:95:94:6a:dc:b3:da:82:58:5b:69:
1c:f6:a0:d3:77:02:cf:1d:69:dc:fb:7d:51:61:1f:d8:1b:83:
d0:b0:6b:47:ea:4f:57:50:98:45:c5:f8:f7:28:a5:87:bd:c5:
3e:42:9b:f1:91:9e:71:a7:57:3c:c4:28:42:93:ed:ac:85:ed:
e6:cb:b3:3b:35:9f:dd:43:b3:98:8b:14:95:ae:bf:80:dd:f6:
65:b5:c4:1f:54:0d:5f:cf:f5:0a:07:38:3b:67:93:69:32:f5:
7a:92:67:c5:95:84:b3:ed:e4:1d:5a:77:f3:52:99:38:24:04:
db:5e:d2:eb:d7:cf:85:46:64:a5:d4:11:c8:4b:1d:19:b7:c5:
a8:b7:ca:7a:31:7e:06:47:a2:5f:56:e7:91:dc:fe:af:5a:f4:
d0:81:0f:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQsSZm9t2niTpzqNZFOOiKFERSt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2
MjdEQTk0MTAeFw0yNjA5MTYxNzE1NDNaFw0yNjA5MTcxOTMzNDNaMDMxMTAvBgNV
BAMTKERBOTgwRkI1QTI0MDk1REU4QUUwQkVBMjFFQzM4QUY0MkQ2NEY0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zJDzPzjbFdmQBFYM3Shw4N0I
+WxGWZ7YJQ/VmuVvqTAeRAuyHIBLJVTIFimlyNF0h0HrD19VzFwqiE1fX4tTRNK1
NdATzs6BQL7B0H5ZmA+blCmRqLIUhNP3f7guij7geEEfTOwbYyKstP7tFmz1UbXa
Fm1V4r5zgD+4EinSek+Lgq7q5O9XZ4cKdIlKO+h9sRiAAvFW05QIYWF2BdTYg9uM
D6tQ2QxNFW7hMi76AZenSlbxs7OIfD+y9sKpnbSxz4F35elLQbczO1TDENfT0S/J
qVsc1NY41gDNCkMlnf5Mz71BkqslqXxdbd0Vx6OXhCGti+K8Il40vNUrWfnFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2pgPtaJAld6K4L6iHsOK9C1k9AowHwYDVR0j
BBgwFoAU5UkS2TbVv3ePu3MufkSZFmJ9qUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmJiNWZhNGEtYmVhNi00NjRmLWI0MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkz
NkQ1QkY3NzhGQkI3MzJFN0U0NDk5MTY2MjdEQTk0MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNTQ5MTJEOTM2RDVCRjc3OEZCQjczMkU3RTQ0OTkxNjYyN0RB
OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0
MDktMTFkOWEzNzYxYTZjLzEvRTU0OTEyRDkzNkQ1QkY3NzhGQkI3MzJFN0U0NDk5
MTY2MjdEQTk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADTRAqLnXliTRhn00LNXnDBPT1fmb9KrPzKW
WfCXg9i3ido/WY6vu+i6hraj7QpDTNjlNILIxXWeSlMCBVVk8gteB14fqPsU3tjr
v8d6RD66gbDXWJ/DSttTAEKZ5lic7krwlZRq3LPaglhbaRz2oNN3As8dadz7fVFh
H9gbg9Cwa0fqT1dQmEXF+PcopYe9xT5Cm/GRnnGnVzzEKEKT7ayF7ebLszs1n91D
s5iLFJWuv4Dd9mW1xB9UDV/P9QoHODtnk2ky9XqSZ8WVhLPt5B1ad/NSmTgkBNte
0uvXz4VGZKXUEchLHRm3xai3ynoxfgZHol9W55Hc/q9a9NCBD4Q=
-----END CERTIFICATE-----
Generated at Thu Sep 17 07:32:39 2026 by rpki-client