
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
File: 2C54A4433C48711637614DBB101ACAC627FB4444.mft (raw, json)
Hash identifier: DXyyZBlLqhvaRNYdj3PY9E/WGm6Fhm44eoWqxr6xSuU=
Subject key identifier: 8F:C6:03:3C:AF:66:1C:BB:8C:64:2C:2A:62:62:3E:02:0B:EC:41:FF
Authority key identifier: 2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
Certificate issuer: /CN=2C54A4433C48711637614DBB101ACAC627FB4444
Certificate serial: 2319C708740E02F682DBD494174ECF4D22EB50D3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:03:44 +0000
Manifest this update: Tue 16 Jun 2026 15:58:44 +0000
Manifest next update: Wed 17 Jun 2026 18:17:44 +0000
Files and hashes: 1: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: tiLkhdsZaOrcZG1DisK5BBKtAsDDLSd1a7ljRi2LuI0=)
2: 2C54A4433C48711637614DBB101ACAC627FB4444.crl (hash: bqWwf3fuQWm7gs63QJ8vwqAS0lPuNPl2xSUnxiD1Ul4=)
3: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: Z5Se0ZyJ7MpGnb/9is2oDoz8gpk4WBt/gi9IC5o2uZ8=)
4: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: WB2X6Qgdpit+yQSWxUcjxbLeviD7P5xB5Bfdmss/apw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:19:c7:08:74:0e:02:f6:82:db:d4:94:17:4e:cf:4d:22:eb:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C54A4433C48711637614DBB101ACAC627FB4444
Validity
Not Before: Jun 16 15:58:44 2026 GMT
Not After : Jun 17 18:17:44 2026 GMT
Subject: CN=8FC6033CAF661CBB8C642C2A62623E020BEC41FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:64:96:26:99:39:de:d9:df:a1:d4:c1:4f:
f3:0e:b9:2f:0b:d9:2c:39:fb:fb:50:46:fe:7a:f9:
42:88:97:25:40:ff:16:8a:87:f7:b8:5b:b5:a4:81:
15:0f:b2:88:dc:e8:db:11:3e:9b:ca:61:28:cf:35:
4b:e0:c7:9c:52:95:46:c1:2e:35:bb:ac:63:db:83:
35:28:34:9c:31:26:e4:19:23:d9:b4:45:61:74:d7:
04:68:bf:8a:f7:28:f1:0c:79:9d:a8:b1:61:b1:b5:
d2:c9:ac:0e:97:10:ba:cb:e3:17:04:20:a4:c7:57:
fa:9a:dd:56:d7:98:74:20:f0:39:bd:1b:e9:c5:14:
58:0a:ff:b7:69:57:6d:c8:22:8f:3e:78:e4:9f:9a:
a4:d1:c6:e3:46:62:ad:4b:9f:03:29:d3:9b:bc:ef:
92:e8:b1:14:9b:9e:2a:c0:bd:39:28:91:43:1d:50:
46:e9:86:e8:6a:8d:c2:6d:4c:24:ba:50:b0:cc:33:
00:0b:69:c1:ed:40:d1:19:d0:8e:35:12:a6:5b:98:
4c:08:ce:d0:2c:8c:61:b4:ee:06:a5:e4:4d:3a:f0:
2c:ff:00:bf:f9:1e:bc:0a:a0:a5:a8:b6:37:be:0b:
ff:17:5c:45:f9:fa:bd:36:ab:7f:e2:44:7f:3e:a4:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:03:3C:AF:66:1C:BB:8C:64:2C:2A:62:62:3E:02:0B:EC:41:FF
X509v3 Authority Key Identifier:
keyid:2C:54:A4:43:3C:48:71:16:37:61:4D:BB:10:1A:CA:C6:27:FB:44:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C54A4433C48711637614DBB101ACAC627FB4444.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/2C54A4433C48711637614DBB101ACAC627FB4444.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:82:71:c6:fd:23:9f:da:08:37:b9:47:f5:c9:3a:13:8d:d7:
2d:f4:69:a5:ff:3c:95:bc:df:fa:7f:c4:02:b8:5c:dc:17:4c:
ee:b0:01:3a:85:fb:bd:9e:30:cc:70:fb:bd:53:aa:98:82:ad:
aa:cd:b9:54:a2:63:2a:c4:32:e2:d7:7e:59:90:ac:34:3b:a0:
c4:dd:43:af:fb:f9:59:4c:97:ac:6c:9f:8d:df:72:fb:c5:22:
bd:93:4e:14:c7:a2:71:c7:75:b6:38:7c:d3:8a:76:59:0d:9a:
50:38:66:52:7e:cb:e3:d1:da:e9:5a:98:1f:0f:ae:38:02:69:
d0:13:55:30:42:aa:39:6c:89:bc:fb:c2:46:00:56:d4:8b:37:
64:f1:83:9d:4b:70:2a:d4:12:e9:14:75:55:37:db:99:d1:cc:
15:f0:93:28:cd:1b:c2:27:93:73:bd:9c:8b:14:35:33:54:7d:
a1:8b:52:54:99:96:70:36:97:36:5d:db:2f:69:c4:43:52:bd:
6b:4c:c2:0c:69:4c:9b:82:7c:e5:9f:db:06:cf:9e:67:3e:7f:
2b:e1:7c:49:27:c3:bc:8e:14:dc:af:1d:ff:ff:02:1a:ba:f2:
d5:7f:26:10:4d:93:1c:1a:60:79:68:6c:07:ed:d1:d5:a3:4b:
5c:71:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:40:16 2026 by rpki-client