
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
File: 54026028AD87AC49BD097621095F68B69F4EF6DB.mft (raw, json)
Hash identifier: 3UQQz+8rstoP0vlVoeJl5TCmjGkmZy74nSsqB45MDDA=
Subject key identifier: C4:CA:49:B2:0F:D8:7A:63:EA:B1:54:5C:91:EE:F1:69:66:3D:4C:24
Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
Certificate issuer: /CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Certificate serial: 51FF573E1C2EAD49B19FB039911AB2E02D697F19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 00:37:13 +0000
Manifest this update: Tue 22 Sep 2026 00:32:13 +0000
Manifest next update: Wed 23 Sep 2026 00:54:13 +0000
Files and hashes: 1: 54026028AD87AC49BD097621095F68B69F4EF6DB.crl (hash: Rq2vuxwNCoCA1YE/64Z/hmo6DDIT3n2ca25TSUROsK0=)
2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ff:57:3e:1c:2e:ad:49:b1:9f:b0:39:91:1a:b2:e0:2d:69:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Validity
Not Before: Sep 22 00:32:13 2026 GMT
Not After : Sep 23 00:54:13 2026 GMT
Subject: CN=C4CA49B20FD87A63EAB1545C91EEF169663D4C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:fb:32:2d:f7:dc:ac:83:a5:74:80:f3:c5:
09:29:01:1c:eb:bb:12:01:52:cc:ac:46:3a:17:5a:
04:da:ce:ed:82:7d:17:e0:a9:79:c0:bc:ce:e9:48:
ec:38:60:60:41:91:7e:6a:f7:f0:eb:9c:b2:41:80:
54:7d:84:d5:35:b8:e7:8c:68:e0:a0:22:73:ac:6e:
da:c5:10:a6:9a:43:dc:55:f6:62:a5:50:87:6d:b2:
b4:82:4c:f5:a9:fd:e6:f7:66:4a:8a:a9:ac:d1:f7:
d2:40:ac:b7:df:3a:39:c3:e3:e6:bb:36:02:57:5e:
2d:3f:33:e4:ef:cc:4a:19:ac:81:f7:6b:35:48:4d:
2e:77:ad:55:c0:ca:84:a0:26:59:a7:a6:d3:47:32:
6f:27:ca:c5:8e:65:d7:cb:94:be:99:fc:87:31:e6:
b9:be:25:31:ee:3e:1b:79:7f:a0:87:c2:f2:88:73:
3f:bf:76:a4:23:af:aa:e7:10:70:ee:43:18:cb:d3:
90:1a:16:c3:a9:be:05:98:de:87:7e:fd:84:a9:b4:
0d:7a:2b:80:61:06:a6:91:c8:f4:ab:4f:39:72:d8:
89:e6:be:c7:b7:51:fe:73:ef:80:30:be:4c:11:e7:
b4:cf:53:3c:03:ef:c0:01:12:82:83:08:4d:fa:a5:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:49:B2:0F:D8:7A:63:EA:B1:54:5C:91:EE:F1:69:66:3D:4C:24
X509v3 Authority Key Identifier:
keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7b:a9:1e:97:92:de:24:99:87:04:b6:8a:0d:68:69:b3:a8:
73:09:dd:8d:2e:84:df:c5:c5:c9:a9:a4:4a:50:ad:74:9c:02:
7e:b5:41:2d:6e:72:ad:68:1a:66:5b:16:69:cb:a9:46:89:48:
d4:5b:a6:e5:b1:fa:a0:16:80:c7:74:3e:7f:27:b1:e9:91:54:
d6:3e:4f:b8:62:aa:d0:34:2d:18:6d:e6:a2:68:ac:f3:46:a2:
04:a4:f5:34:c9:96:6b:42:24:0b:81:9c:76:0c:d3:f3:e1:9b:
6c:74:18:81:02:37:27:b1:14:6c:fb:9a:31:02:c9:5a:79:39:
22:80:83:cf:d8:12:aa:ac:f8:84:1e:5d:58:3a:38:a7:9c:47:
95:32:c5:4a:40:35:5d:0b:a2:f4:35:0e:dc:9d:4f:c8:cd:f8:
2b:32:da:92:99:97:01:25:f1:a0:13:7e:db:33:fb:8b:8e:55:
e7:e6:1e:2c:82:75:c6:1c:40:81:7d:10:37:d1:32:9e:99:d7:
11:75:06:89:2b:f9:48:d2:ef:b2:2d:69:81:a6:a0:bc:b8:f7:
d4:3b:67:16:0e:9f:d6:21:45:b8:bf:c2:22:a9:21:67:0d:05:
f6:fe:3a:b1:8c:ce:aa:91:2e:d0:c6:a2:7b:1f:15:97:88:7c:
3c:3c:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:59:34 2026 by rpki-client