$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft File: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft (raw, json) Hash identifier: NpQoIEdJU8S4+aK/iGcpBS5YkJ5z024StCe7jIMF7IQ= Subject key identifier: D2:5F:DF:B5:9C:97:05:AA:10:66:E4:97:7A:69:56:84:6E:93:CC:EA Authority key identifier: 54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 Certificate issuer: /CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Certificate serial: 7CC1106DE43F5122973A097803055E757FEA0DBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 01:53:28 +0000 Manifest this update: Wed 23 Sep 2026 01:48:28 +0000 Manifest next update: Thu 24 Sep 2026 01:56:28 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: OebTseoVB0ZNUnkGTm7RpHNzeV5/zFx7NUgoswqD6v0=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 9nekhVOc7teYQg+f5BrgTI0vhAp7sKaA+38UO3o1S14=) 3: 54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl (hash: XP7sE3VhQ3FCP5boAx102NP8ubAxixZQx1fAbctBz4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c1:10:6d:e4:3f:51:22:97:3a:09:78:03:05:5e:75:7f:ea:0d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5 Validity Not Before: Sep 23 01:48:28 2026 GMT Not After : Sep 24 01:56:28 2026 GMT Subject: CN=D25FDFB59C9705AA1066E4977A6956846E93CCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:8d:9c:c6:dd:16:bc:f7:34:0c:06:a4:f5: 7a:d8:e9:af:62:37:91:10:43:8a:c8:4f:26:c6:b8: eb:2f:bc:11:63:45:b6:34:90:01:5e:d4:73:f0:99: bd:6e:fb:a3:72:4f:f3:2d:ce:3b:2f:3a:00:48:39: 3a:f1:18:50:2e:83:cf:d1:6d:b1:a0:11:d3:fc:16: d5:b7:6b:43:eb:5d:fa:28:00:db:13:ba:d5:e5:d2: 84:52:b8:39:1f:24:a7:92:08:73:69:ee:3e:95:c1: 61:ab:04:db:4e:73:6a:6c:ab:27:6c:3a:68:ed:93: 21:c9:a1:26:30:51:0e:60:6d:9b:26:7e:a3:8e:24: 31:c3:cf:ed:b4:ec:c5:eb:c1:3c:97:5e:7b:97:ba: b5:d5:b0:94:0f:3a:39:7f:62:8a:67:f7:7c:cd:78: ce:5e:50:cc:da:78:2d:56:96:a2:18:7d:c5:23:02: 95:4f:2d:71:08:31:d1:82:0f:de:41:4d:1c:ac:e8: 5b:d0:78:f8:8f:1d:1d:28:fb:68:f4:60:7c:1e:9e: 50:e6:e1:75:78:64:a0:9c:93:cb:94:41:12:f3:3a: 83:06:37:65:39:df:f8:9e:2b:05:37:0e:26:11:e0: ff:3b:fe:8e:b3:00:f2:13:33:b3:4c:73:5d:72:20: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:DF:B5:9C:97:05:AA:10:66:E4:97:7A:69:56:84:6E:93:CC:EA X509v3 Authority Key Identifier: keyid:54:AA:A1:CA:EA:4D:EB:FC:7C:80:5B:C8:2C:9E:23:8D:F3:38:F2:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/54AAA1CAEA4DEBFC7C805BC82C9E238DF338F2A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b7:b7:12:27:69:9d:5b:39:2e:b8:1c:57:85:3b:be:95:3b: e7:32:c6:29:97:20:1a:fd:0e:66:ac:05:e8:3a:b0:47:c9:cd: 87:fd:1e:01:33:56:cf:02:6b:f1:18:c0:81:09:96:6e:6c:c4: 30:49:fb:63:fa:8d:e8:7a:cb:ae:d9:ce:1f:71:b4:21:f9:44: 27:39:b2:fe:04:22:53:9a:5b:a3:23:71:fc:c4:ff:d1:f4:6a: c0:23:f7:e8:33:db:2e:11:72:0d:4d:19:5f:f3:94:71:9e:e5: d5:33:26:48:87:9d:01:ca:81:c2:f0:3d:e0:af:cb:a3:b3:27: 08:1a:ff:b8:59:c2:d4:4c:7b:2c:70:97:8e:37:79:a3:8c:74: 12:ce:91:b0:0b:fd:96:1b:d9:72:c7:81:cf:ef:ea:4f:aa:19: 0a:11:e7:9f:d4:85:ad:f0:5b:61:86:80:d4:c5:d1:10:fe:ae: 4b:b8:7a:3f:60:50:ff:f0:de:0f:2a:9f:22:e8:00:e5:9f:42: 32:58:2c:1a:b6:89:99:42:62:75:e9:45:f7:56:76:d3:16:79: cb:e7:9f:fb:7b:27:64:0b:ce:7b:d9:c9:d2:cf:ee:ec:60:7a: 7a:c4:2a:f5:40:d0:89:d8:d5:40:99:c8:5c:cd:20:9e:90:97: 4b:0b:8b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMEQbeQ/USKXOgl4AwVedX/qDbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIzOERG MzM4RjJBNTAeFw0yNjA5MjMwMTQ4MjhaFw0yNjA5MjQwMTU2MjhaMDMxMTAvBgNV BAMTKEQyNUZERkI1OUM5NzA1QUExMDY2RTQ5NzdBNjk1Njg0NkU5M0NDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgY2cxt0WvPc0DAak9XrY6a9i N5EQQ4rITybGuOsvvBFjRbY0kAFe1HPwmb1u+6NyT/MtzjsvOgBIOTrxGFAug8/R bbGgEdP8FtW3a0PrXfooANsTutXl0oRSuDkfJKeSCHNp7j6VwWGrBNtOc2psqyds OmjtkyHJoSYwUQ5gbZsmfqOOJDHDz+207MXrwTyXXnuXurXVsJQPOjl/Yopn93zN eM5eUMzaeC1WlqIYfcUjApVPLXEIMdGCD95BTRys6FvQePiPHR0o+2j0YHwenlDm 4XV4ZKCck8uUQRLzOoMGN2U53/ieKwU3DiYR4P87/o6zAPITM7NMc11yIBvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0l/ftZyXBaoQZuSXemlWhG6TzOowHwYDVR0j BBgwFoAUVKqhyupN6/x8gFvILJ4jjfM48qUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2ZDhmOTctYzgwNi00Nzk5LTg1ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FF QTRERUJGQzdDODA1QkM4MkM5RTIzOERGMzM4RjJBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NEFBQTFDQUVBNERFQkZDN0M4MDVCQzgyQzlFMjM4REYzMzhG MkE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvNTRBQUExQ0FFQTRERUJGQzdDODA1QkM4MkM5RTIz OERGMzM4RjJBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe3txInaZ1bOS64HFeFO76VO+cyximXIBr9 DmasBeg6sEfJzYf9HgEzVs8Ca/EYwIEJlm5sxDBJ+2P6jeh6y67Zzh9xtCH5RCc5 sv4EIlOaW6MjcfzE/9H0asAj9+gz2y4Rcg1NGV/zlHGe5dUzJkiHnQHKgcLwPeCv y6OzJwga/7hZwtRMeyxwl443eaOMdBLOkbAL/ZYb2XLHgc/v6k+qGQoR55/Uha3w W2GGgNTF0RD+rku4ej9gUP/w3g8qnyLoAOWfQjJYLBq2iZlCYnXpRfdWdtMWecvn n/t7J2QLznvZydLP7uxgenrEKvVA0InY1UCZyFzNIJ6Ql0sLi18= -----END CERTIFICATE-----Generated at Wed Sep 23 05:14:49 2026 by rpki-client