$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: fHwIQTsJZg8pr6uNnHm4Ub65325RHBJLEoahjo5T+tY= Subject key identifier: 3E:CD:CB:13:86:B7:50:96:73:CF:10:7F:C2:67:29:51:E5:C6:0A:70 Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 7549A426A292DFF68780F71F8A9364430F400E68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 07:21:45 +0000 Manifest this update: Wed 17 Jun 2026 07:16:45 +0000 Manifest next update: Thu 18 Jun 2026 07:21:45 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 3: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: ikcW6qe/2dAXqZbD0Mfk6EMaZPRi1qmbw7//qx9jRQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:a4:26:a2:92:df:f6:87:80:f7:1f:8a:93:64:43:0f:40:0e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Jun 17 07:16:45 2026 GMT Not After : Jun 18 07:21:45 2026 GMT Subject: CN=3ECDCB1386B7509673CF107FC2672951E5C60A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:8b:05:21:09:58:26:8d:ef:42:94:50:b3: 1e:be:ec:33:2f:5a:b6:5b:8c:37:28:b5:df:33:e8: 0b:bd:01:0b:68:df:48:1c:be:da:48:6f:c7:59:0c: a4:d1:b4:7b:4d:f8:c7:c9:d8:95:c9:36:c4:c6:9c: ed:5c:c1:03:57:41:1a:87:a4:c9:ee:bf:0f:89:fa: 78:de:d8:f6:ce:0a:fd:10:22:6a:8e:2c:1d:af:63: 9b:4e:58:7e:0f:f7:fd:f9:e8:09:ab:8d:d9:27:98: c6:fd:46:1b:56:26:66:b2:cd:8a:de:8a:01:86:b8: 6f:a0:5d:ff:46:81:96:d9:51:a1:d5:bd:41:d3:29: 81:7e:32:1d:29:7a:47:3f:f1:d6:59:4b:23:94:ad: 06:13:99:2b:38:73:9c:83:3f:97:35:f5:10:36:43: f5:84:29:16:98:d9:2e:69:3a:b7:0e:07:d6:e5:4c: b1:ef:1e:4b:3e:07:94:b8:59:ee:74:67:ef:63:0f: d8:e6:fb:37:3a:c6:73:71:8e:46:14:f4:8e:66:ff: d0:77:5e:69:49:60:1a:e3:d7:af:34:4a:a6:1b:50: 3a:69:11:10:af:b3:72:f2:dd:84:83:15:f5:8d:2c: fe:89:5b:4c:9c:44:fa:2c:26:ea:41:4e:fb:d1:13: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CD:CB:13:86:B7:50:96:73:CF:10:7F:C2:67:29:51:E5:C6:0A:70 X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:50:fb:57:87:39:fc:ef:64:a5:db:06:9f:c0:f7:49:da:bb: d0:a3:35:94:e1:02:5a:90:24:3d:37:2e:63:52:e0:b1:00:df: 5e:33:8a:3b:07:24:13:13:8e:15:7b:b1:ce:10:26:69:f3:35: cc:b0:53:18:63:f8:47:b1:9e:af:55:d6:f6:4a:4e:fe:89:ec: fa:3a:83:ef:c4:c4:b9:4c:d7:9d:4b:ff:f7:66:4e:ea:49:4c: 0d:21:24:ca:86:49:93:68:41:1e:d1:f5:e8:0b:02:1a:4f:7b: 43:c7:30:a7:40:c7:5f:03:06:68:f4:91:22:60:14:1c:de:1f: 96:51:e0:bd:60:03:ef:7d:77:ed:2d:64:fb:09:71:15:36:89: 55:12:b6:01:23:a3:de:3c:d2:4f:a1:35:61:ae:a2:5b:77:19: a7:55:2c:fe:36:64:a8:ed:e5:c0:88:e7:7c:a1:4b:ed:b9:cf: 52:93:fa:68:91:42:64:40:48:0a:4c:e7:21:25:1d:5e:ad:85: 27:27:9a:6c:29:8a:08:88:96:48:51:e2:7b:3c:f6:61:e7:b2: cd:5d:81:15:2a:48:a3:13:39:6c:3b:01:95:72:46:f4:ee:e3: 04:7d:06:a7:a2:7c:b6:e2:39:76:aa:5e:36:56:f6:95:f3:1e: 21:4f:dd:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUmkJqKS3/aHgPcfipNkQw9ADmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA2MTcwNzE2NDVaFw0yNjA2MTgwNzIxNDVaMDMxMTAvBgNV BAMTKDNFQ0RDQjEzODZCNzUwOTY3M0NGMTA3RkMyNjcyOTUxRTVDNjBBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU4sFIQlYJo3vQpRQsx6+7DMv WrZbjDcotd8z6Au9AQto30gcvtpIb8dZDKTRtHtN+MfJ2JXJNsTGnO1cwQNXQRqH pMnuvw+J+nje2PbOCv0QImqOLB2vY5tOWH4P9/356AmrjdknmMb9RhtWJmayzYre igGGuG+gXf9GgZbZUaHVvUHTKYF+Mh0pekc/8dZZSyOUrQYTmSs4c5yDP5c19RA2 Q/WEKRaY2S5pOrcOB9blTLHvHks+B5S4We50Z+9jD9jm+zc6xnNxjkYU9I5m/9B3 XmlJYBrj1680SqYbUDppERCvs3Ly3YSDFfWNLP6JW0ycRPosJupBTvvRExejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPs3LE4a3UJZzzxB/wmcpUeXGCnAwHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9Q+1eHOfzvZKXbBp/A90nau9CjNZThAlqQ JD03LmNS4LEA314zijsHJBMTjhV7sc4QJmnzNcywUxhj+Eexnq9V1vZKTv6J7Po6 g+/ExLlM151L//dmTupJTA0hJMqGSZNoQR7R9egLAhpPe0PHMKdAx18DBmj0kSJg FBzeH5ZR4L1gA+99d+0tZPsJcRU2iVUStgEjo9480k+hNWGuolt3GadVLP42ZKjt 5cCI53yhS+25z1KT+miRQmRASApM5yElHV6thScnmmwpigiIlkhR4ns89mHnss1d gRUqSKMTOWw7AZVyRvTu4wR9BqeifLbiOXaqXjZW9pXzHiFP3dw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:15 2026 by rpki-client