
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
File: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft (raw, json)
Hash identifier: ZHHbuhQKlv5Z8EzFOj7054ENtdOqGvBk+HD6uieTqus=
Subject key identifier: 6C:9C:22:FE:8D:A5:86:BE:30:F9:82:48:8D:49:8E:2D:23:4E:F5:52
Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
Certificate issuer: /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Certificate serial: 33D4FCB5C8EF83AA2C08BFD48A1D8CC60B76DEC2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
Manifest number: 0100
Signing time: Tue 10 Nov 2026 03:45:30 +0000
Manifest this update: Tue 10 Nov 2026 03:40:30 +0000
Manifest next update: Wed 11 Nov 2026 04:20:30 +0000
Files and hashes: 1: 54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl (hash: Vvz6t31rWiUfsgYUi3KNLE2rbdlDJmbeZFvoXXS6MMo=)
2: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: wOGa5HDAD18g7s458WGuA2zw20U9eHUQmcNEuznV9cc=)
3: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 04:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d4:fc:b5:c8:ef:83:aa:2c:08:bf:d4:8a:1d:8c:c6:0b:76:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Validity
Not Before: Nov 10 03:40:30 2026 GMT
Not After : Nov 11 04:20:30 2026 GMT
Subject: CN=6C9C22FE8DA586BE30F982488D498E2D234EF552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:6b:b2:da:a4:16:4e:ad:1c:e4:24:3a:bb:
0f:3a:83:e6:12:07:86:7f:d0:f1:69:2c:e6:07:10:
97:71:fa:25:58:ec:56:80:74:e6:6a:ee:0c:ea:01:
8a:44:a5:10:54:1a:90:bc:bd:e8:f9:66:15:78:17:
18:db:a5:6d:2d:ab:5a:18:30:ea:ca:50:09:c3:34:
6f:3e:25:46:eb:97:00:5f:f7:b5:21:fc:58:3b:66:
ff:e7:82:2d:f2:48:23:e7:c7:02:7a:2f:1a:7c:73:
47:41:09:43:4c:5f:58:ba:f5:ce:ee:7c:0d:82:da:
56:af:28:78:33:fb:01:13:54:3d:ff:91:cc:af:ec:
6f:98:33:13:e5:0c:38:98:a5:7e:f2:b0:4c:ff:18:
d8:9b:de:66:12:5f:58:7f:45:54:6f:6c:fb:41:b7:
3d:01:0a:9d:b6:12:48:b6:7b:c0:8f:b9:8a:c8:e6:
af:7a:93:f4:b0:78:3c:a4:bb:8b:cf:a2:d4:1a:51:
c2:94:d6:e6:0c:08:9b:50:33:a2:8f:52:da:1a:2c:
17:70:41:ff:fc:77:46:ef:04:54:6b:d1:2c:25:83:
5f:93:7e:a8:ab:f6:7e:0e:99:65:ae:0a:0c:7b:53:
de:6d:b9:12:3d:40:cc:d5:70:13:8e:5e:ea:95:8e:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:22:FE:8D:A5:86:BE:30:F9:82:48:8D:49:8E:2D:23:4E:F5:52
X509v3 Authority Key Identifier:
keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:10:44:c2:b7:13:87:70:5c:bf:af:48:62:a3:4b:29:51:48:
91:0d:e0:aa:63:3b:04:4c:f4:21:de:0c:96:18:4f:66:f0:4c:
02:c6:1c:2d:6f:ce:2e:9f:ac:e8:b2:13:c7:ba:0c:8f:34:20:
b1:e7:10:9e:2d:5e:33:d6:16:07:dd:75:0f:58:a0:10:22:47:
0f:58:7b:30:5f:9f:68:78:01:74:de:62:a4:04:b6:c8:fc:b3:
54:2d:36:bf:5b:de:5f:53:1f:4d:e7:e6:bd:7a:2d:c5:7d:c0:
d2:02:09:06:e5:79:75:b7:20:82:df:b4:13:b9:e8:2f:bc:4e:
cb:94:fa:17:d9:a4:7f:d5:ea:9f:e8:9d:9e:00:c8:30:cd:f1:
59:00:15:2c:d2:81:34:3f:d6:ea:d2:84:ba:e7:13:c1:93:bb:
14:55:7f:3f:ee:3f:3d:eb:d2:6e:d5:49:76:c8:06:2a:c7:f3:
fc:30:1a:eb:ff:a4:4f:f7:c7:66:8f:49:11:63:c5:fb:53:36:
bb:d9:6b:9d:be:1d:df:26:e3:ae:99:5a:25:42:3c:a7:8f:63:
8a:9c:f3:df:23:b1:d7:f7:91:7d:2e:26:53:05:e2:bc:56:15:
8a:27:5d:8b:57:75:e8:08:32:df:bc:b7:ae:a9:97:83:ea:f3:
f3:e0:1b:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM9T8tcjvg6osCL/Uih2Mxgt23sIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE
QzkyOUJCNzAeFw0yNjExMTAwMzQwMzBaFw0yNjExMTEwNDIwMzBaMDMxMTAvBgNV
BAMTKDZDOUMyMkZFOERBNTg2QkUzMEY5ODI0ODhENDk4RTJEMjM0RUY1NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEh2uy2qQWTq0c5CQ6uw86g+YS
B4Z/0PFpLOYHEJdx+iVY7FaAdOZq7gzqAYpEpRBUGpC8vej5ZhV4FxjbpW0tq1oY
MOrKUAnDNG8+JUbrlwBf97Uh/Fg7Zv/ngi3ySCPnxwJ6Lxp8c0dBCUNMX1i69c7u
fA2C2lavKHgz+wETVD3/kcyv7G+YMxPlDDiYpX7ysEz/GNib3mYSX1h/RVRvbPtB
tz0BCp22Eki2e8CPuYrI5q96k/SweDyku4vPotQaUcKU1uYMCJtQM6KPUtoaLBdw
Qf/8d0bvBFRr0Swlg1+Tfqir9n4OmWWuCgx7U95tuRI9QMzVcBOOXuqVjoPRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbJwi/o2lhr4w+YJIjUmOLSNO9VIwHwYDVR0j
BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB
MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5
QkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh
OTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQx
RUJEQzkyOUJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHUQRMK3E4dwXL+vSGKjSylRSJEN4KpjOwRM
9CHeDJYYT2bwTALGHC1vzi6frOiyE8e6DI80ILHnEJ4tXjPWFgfddQ9YoBAiRw9Y
ezBfn2h4AXTeYqQEtsj8s1QtNr9b3l9TH03n5r16LcV9wNICCQbleXW3IILftBO5
6C+8TsuU+hfZpH/V6p/onZ4AyDDN8VkAFSzSgTQ/1urShLrnE8GTuxRVfz/uPz3r
0m7VSXbIBirH8/wwGuv/pE/3x2aPSRFjxftTNrvZa52+Hd8m466ZWiVCPKePY4qc
898jsdf3kX0uJlMF4rxWFYonXYtXdegIMt+8t66pl4Pq8/PgG44=
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:04:35 2026 by rpki-client