
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
File: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft (raw, json)
Hash identifier: ZU1oPsR7inUaUIMsgbUO8pV9HIeICTf83ciqb29XBwY=
Subject key identifier: 8B:DE:18:A4:92:B0:77:34:1E:D0:FC:17:34:75:A1:C1:EE:56:A6:0A
Authority key identifier: 54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
Certificate issuer: /CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Certificate serial: 4D859FDE5B7A88303F2F1F71ECEAF775DC63712C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
Manifest number: 0100
Signing time: Tue 10 Nov 2026 04:52:02 +0000
Manifest this update: Tue 10 Nov 2026 04:47:02 +0000
Manifest next update: Wed 11 Nov 2026 06:16:02 +0000
Files and hashes: 1: 323430373a366163303a343a3a2f34382d3438203d3e20313431393638.roa (hash: MT+AOCbI8EQY8s6DvYU6udC4xfhzZzx/R2M7EBN7Qko=)
2: 323430373a366163303a333a3a2f34382d3438203d3e20313431393638.roa (hash: 9cJ++u24FggknXR65ZUDZ3U3axJ3PPfSK2AE5AdFGp4=)
3: 323430373a366163303a31323a3a2f34382d3438203d3e20313431393638.roa (hash: wXdu5uchlM7aR4PAhUVPmODhH7DS4bnAhG9G5Y038v8=)
4: 54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl (hash: hou+mla7yjvrzcWAaKyOll59DkZJ5BXRXCZrEP8Ulds=)
5: 3130332e3136372e33352e302f32342d3234203d3e20313431393638.roa (hash: Rzam6PvLZ+xrmgagrwXwqhMp9MJWOtcAhOVQGce0u+k=)
6: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (hash: qdE4RD/HR1xmhOawh5oWfClbtd44Y844JZUMBrK1XCU=)
7: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (hash: yoLJQ2p5oc/N+ycEQpkidwthgAJPdn46896MAVru/hM=)
8: 323430373a366163303a363a3a2f34382d3438203d3e20313431393638.roa (hash: ZqLtX6oxF7GFvkV0mRmheNcCMqhAtfEhCP1VWKOSD+0=)
9: 323430373a366163303a3a2f33322d3332203d3e20313431393638.roa (hash: WQR96xVbOR8YHfuDPH4pCwZMpccOELsvadx46Qaje3c=)
10: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (hash: mazZEIAiOuG4KpGr5hwlPA5N57EIEV/LQkQcu7NU8cw=)
11: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (hash: Xd7kvB2d5pV98w0bGGy07hPiu9BB3biQaz9ZRgtaGiA=)
12: 323430373a366163303a353a3a2f34382d3438203d3e20313431393638.roa (hash: OgMvJFpeHT/hH4IqJm59WR5oH0vQUNaIBbI9r2tk5VE=)
13: 323430373a366163303a373a3a2f34382d3438203d3e20313431393638.roa (hash: fGfLj2m8zzv2gBVrxG8woEOuvLb7BQto8QhIvETUk+0=)
14: 323430373a366163303a313a3a2f34382d3438203d3e20313431393638.roa (hash: 8/WtzvalY+UjdRN/awqnO7En0ObKFVi4IQgF1lJZ4J0=)
15: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (hash: TYeKvyyE7tAq8MrpNee2w5v+sScpqs071es7y7huqR4=)
16: 323430373a366163303a31313a3a2f34382d3438203d3e20313431393638.roa (hash: IcB4hGK3v9ZmrWAht51ow3fFRasuFAdj4nAaGG7o+CM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 06:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:85:9f:de:5b:7a:88:30:3f:2f:1f:71:ec:ea:f7:75:dc:63:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54F7A008D9BBE9D5D539336425D4B8FD368DBB22
Validity
Not Before: Nov 10 04:47:02 2026 GMT
Not After : Nov 11 06:16:02 2026 GMT
Subject: CN=8BDE18A492B077341ED0FC173475A1C1EE56A60A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:8a:87:0c:83:1a:37:1d:24:0b:2d:7e:d3:
fb:25:3c:ea:a9:d9:84:42:b2:5d:9f:03:2c:c1:85:
fb:ad:ff:c1:f2:5c:25:df:53:6d:0f:f2:86:a0:64:
92:2a:e0:b6:58:95:ce:19:8e:62:b0:60:ee:2c:54:
dc:fc:50:51:56:f2:41:5b:c5:c2:59:64:79:07:6f:
27:69:9d:30:8f:50:5f:41:76:3c:9b:0a:b7:88:36:
c0:40:0d:e4:89:c5:fb:b6:8a:fd:46:94:9b:de:72:
c3:3e:ca:7e:13:e8:f4:49:25:46:61:37:c7:38:94:
5c:44:84:f6:8d:7d:46:55:00:5b:dd:9c:2d:78:59:
3d:e2:86:e3:43:47:ef:3f:c7:d3:26:8a:d5:e3:20:
3f:49:f3:aa:68:ff:d2:9b:a3:37:9e:9a:95:48:d8:
1c:cd:c2:54:e8:03:c7:a3:f6:96:51:5f:43:5a:70:
0d:22:67:42:d2:34:53:a8:fc:75:90:7d:97:52:1a:
0e:01:a0:f1:21:8a:d1:63:84:55:bb:3c:5a:8b:eb:
d7:0c:fe:9d:3e:68:19:b2:c1:e9:3e:1d:31:83:0e:
c2:d4:fb:4d:e2:a9:26:d1:c6:b5:2c:94:bc:f1:d0:
3a:39:4b:50:ad:d9:e1:58:70:b3:dd:85:df:c8:47:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DE:18:A4:92:B0:77:34:1E:D0:FC:17:34:75:A1:C1:EE:56:A6:0A
X509v3 Authority Key Identifier:
keyid:54:F7:A0:08:D9:BB:E9:D5:D5:39:33:64:25:D4:B8:FD:36:8D:BB:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/54F7A008D9BBE9D5D539336425D4B8FD368DBB22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:ed:ce:a7:aa:7e:09:57:8c:5c:6e:16:f6:30:ac:c4:13:
dc:93:19:f1:a8:97:79:ef:09:17:b8:02:c0:0b:5a:e4:70:2e:
83:37:a0:6d:7f:88:58:81:8d:46:3f:5d:8b:f7:6b:2b:bc:67:
d3:e2:30:26:d1:56:da:ba:ef:eb:0d:17:9d:0d:14:07:96:4f:
1b:71:f6:32:01:ab:ef:1a:64:ba:ac:e7:ee:b7:54:c4:f0:58:
33:cf:8a:7c:88:0d:4b:2e:a3:f0:db:2a:1d:09:83:e6:76:73:
cb:67:05:ba:55:4f:ad:68:05:70:c5:18:2c:0c:00:11:d1:9d:
f7:83:43:87:b6:c7:82:72:86:b9:d2:87:e8:4e:d1:3f:16:4c:
77:a3:38:54:25:24:7d:06:b8:dc:b6:23:44:1f:e3:ca:f3:04:
bf:cc:a9:bf:3c:30:08:51:b0:52:c5:7a:b3:08:29:78:89:ac:
32:62:7b:41:4d:c6:27:e0:bb:9c:f3:4f:73:6d:27:17:58:1c:
bd:62:f6:88:58:f5:2d:cb:fd:94:22:27:e5:f4:bd:bb:3c:9c:
e3:c3:f7:55:11:89:96:b1:61:fa:20:aa:e2:4d:60:b4:92:47:
76:e3:fe:63:90:c0:cf:14:ee:75:4c:e3:68:e7:6f:42:43:57:
1d:2b:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:35:54 2026 by rpki-client