
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
File: 54C92083A9323650229F71CD77020E900DBD4472.mft (raw, json)
Hash identifier: k16YE8QTHZsYe6eNddz7nShH3tcIIIRI0txcCTPbKZM=
Subject key identifier: 9D:D1:40:A3:C4:E3:7A:11:3B:07:F7:F9:12:A8:76:4F:38:22:57:4A
Authority key identifier: 54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
Certificate issuer: /CN=54C92083A9323650229F71CD77020E900DBD4472
Certificate serial: 74E6D5F2BDB671EB1E43E907EAAEFF9FAF30E360
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 15:15:26 +0000
Manifest this update: Mon 21 Sep 2026 15:10:26 +0000
Manifest next update: Tue 22 Sep 2026 15:34:26 +0000
Files and hashes: 1: 3135372e31302e3235322e302f32332d3234203d3e20313336303532.roa (hash: xH/j3P0hNV71yUDTrBLv8LroM8ikwY+gLRmF3/+JErk=)
2: 54C92083A9323650229F71CD77020E900DBD4472.crl (hash: x8uM2dItltaW1LLQwW4ofkOu/L/Twjej5XRbMnq7Okk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e6:d5:f2:bd:b6:71:eb:1e:43:e9:07:ea:ae:ff:9f:af:30:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C92083A9323650229F71CD77020E900DBD4472
Validity
Not Before: Sep 21 15:10:26 2026 GMT
Not After : Sep 22 15:34:26 2026 GMT
Subject: CN=9DD140A3C4E37A113B07F7F912A8764F3822574A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:d6:f2:29:75:58:5a:19:4d:9c:8f:98:5c:
e1:51:db:a1:d9:43:7a:64:82:15:02:45:8e:89:4b:
5a:6d:a1:8c:79:49:a2:9d:3f:a8:db:90:18:f5:91:
e2:5c:73:ea:57:31:48:a9:a7:67:1b:bd:ff:66:d0:
0a:55:14:4d:1f:73:f2:4f:2c:c0:27:ab:26:5e:0c:
24:5e:04:1c:65:b2:d4:ec:a5:ea:f0:0d:c8:5d:8b:
eb:c1:33:f8:5f:63:b5:3b:56:f7:f9:b9:3f:3a:e3:
07:13:1c:6c:83:91:02:d4:c6:0c:0f:07:8c:ed:44:
ce:d9:7e:e1:16:06:43:9c:6d:03:24:68:4b:ec:96:
69:8f:be:75:ab:52:3b:de:e7:52:41:d6:7c:d0:97:
3f:f7:3e:f6:e4:2b:5a:c5:4b:a0:1f:89:c9:86:63:
c0:37:21:ae:4d:94:04:16:7f:a2:a1:2b:a7:25:a1:
cd:5f:e2:c0:83:a3:0a:c2:9f:c2:60:c4:97:5e:3a:
83:24:ac:4c:74:5c:85:58:7a:2a:a0:dc:e3:3b:73:
9d:ba:e8:8a:cc:da:c0:8e:f6:39:91:4e:f0:6d:b0:
fc:49:61:22:c4:b1:89:0d:9d:5f:33:e6:6e:b7:30:
9a:fd:d1:89:fb:c5:fd:6c:c3:e4:d4:52:f4:82:03:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:40:A3:C4:E3:7A:11:3B:07:F7:F9:12:A8:76:4F:38:22:57:4A
X509v3 Authority Key Identifier:
keyid:54:C9:20:83:A9:32:36:50:22:9F:71:CD:77:02:0E:90:0D:BD:44:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54C92083A9323650229F71CD77020E900DBD4472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d970e934-8751-4a61-9950-d4fa480cda41/0/54C92083A9323650229F71CD77020E900DBD4472.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:a9:ca:ce:01:48:b6:34:40:55:99:b9:9b:89:d3:7b:99:
5b:66:ad:91:86:bb:8f:53:93:0b:fd:61:c0:9b:21:69:d8:2a:
3a:d8:bc:28:a7:96:34:c8:e3:8c:96:e9:a4:98:46:55:a2:e9:
a1:30:1b:59:c2:b0:d3:b7:41:64:bc:2f:30:9c:e7:aa:78:cc:
cb:d4:28:8a:bb:ec:db:86:30:c7:06:fd:11:15:57:f0:da:ac:
01:02:fb:33:6c:82:d1:8d:a2:ca:38:30:04:8b:13:b8:5f:0a:
85:3d:02:ff:ea:fe:d5:51:85:d7:29:da:e5:3c:c5:bd:3b:f0:
de:9b:87:a6:62:e2:14:b1:33:8e:a2:a9:be:b5:1e:d9:8d:68:
07:d3:2e:01:4d:29:f0:75:8d:77:fe:8c:5e:9c:ad:4b:c0:b1:
63:48:82:dc:c4:e2:cc:b4:df:8f:56:ed:4e:55:0b:af:6a:9d:
62:35:29:d1:5b:c2:e1:e5:dd:37:27:1c:9b:79:38:f2:40:83:
a6:fe:20:de:97:d7:e5:5c:4b:56:85:89:02:0f:e9:9e:0d:fd:
fd:fd:ba:f7:d1:88:be:5f:fa:a3:4f:5e:47:97:bf:5f:72:b8:
09:1f:5d:db:d0:2f:8d:74:48:c1:d3:bc:86:c2:cd:1b:c5:d0:
66:38:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:54 2026 by rpki-client