
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json)
Hash identifier: 5x2JWNI/s+dnN7xCYgO0qiusMSUw4igbzLG342+02a4=
Subject key identifier: 2B:2E:5A:63:B1:4F:96:87:17:A7:04:BB:11:90:E4:D6:7A:C5:D9:17
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial: 20446B0FED4AA684E6084A5B539473E178E173B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
Manifest number: 057E
Signing time: Wed 15 Apr 2026 17:22:35 +0000
Manifest this update: Wed 15 Apr 2026 17:17:35 +0000
Manifest next update: Sat 18 Apr 2026 22:30:35 +0000
Files and hashes: 1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: GPJbhF7f6kshS9cfvaypALJ/DHJPQNdPSdfbjUu/i4I=)
2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: heGyyo+ETT8V3dgjREKU/fLp6uNkHbiH2GVik5PI5cY=)
3: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=)
4: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: 2WIOYX46p74zIiYunJq4TWtX4WOqlO2yPDX3Ww98WUc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:44:6b:0f:ed:4a:a6:84:e6:08:4a:5b:53:94:73:e1:78:e1:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
Validity
Not Before: Apr 15 17:17:35 2026 GMT
Not After : Apr 18 22:30:35 2026 GMT
Subject: CN=2B2E5A63B14F968717A704BB1190E4D67AC5D917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:a1:6f:bb:a6:09:80:55:11:18:2f:c9:07:
89:df:bb:cc:b1:03:e0:80:03:b9:87:79:73:c6:79:
80:b7:57:be:3b:6d:74:fc:42:66:3d:df:bf:89:39:
3c:23:72:51:66:d0:cd:11:a8:25:2e:25:d0:17:23:
81:89:39:6e:78:fc:ff:f8:81:62:22:79:4b:c0:5e:
c5:80:5d:fd:ba:b9:e9:0e:02:b4:b1:77:d1:8c:de:
36:98:41:af:d5:83:e7:dd:de:d7:be:f4:ed:58:3f:
b8:fb:c4:ba:21:f1:15:ab:86:38:90:40:f3:df:56:
a7:17:6c:5e:38:3c:9b:a8:cd:1d:9b:14:65:33:ac:
15:26:75:64:21:1b:c0:12:5b:64:dd:2f:09:d1:2b:
d3:ea:8c:ce:98:f0:55:58:ed:a9:4e:0d:9b:19:20:
b4:6b:bb:63:44:09:ee:9f:75:c9:0d:5c:90:fd:e3:
6e:cd:d8:d1:54:f1:75:3d:21:e8:a0:da:3d:8a:b5:
08:8b:aa:35:97:4c:db:f4:59:ea:06:a1:5a:c6:b9:
83:ea:36:f1:9a:ce:c3:9d:e4:5d:c4:e9:81:29:f2:
11:7f:fd:da:2f:7f:87:b8:72:f5:89:02:5d:18:d6:
03:14:b6:59:37:0c:61:97:7c:89:a4:c1:a7:81:03:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2E:5A:63:B1:4F:96:87:17:A7:04:BB:11:90:E4:D6:7A:C5:D9:17
X509v3 Authority Key Identifier:
keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:89:bf:0f:17:65:80:6e:8f:e0:99:e3:cb:75:94:87:5c:
06:18:17:26:f4:ce:b2:5c:bc:27:ff:59:8d:30:42:3e:2b:2b:
8d:69:e2:95:de:83:fa:57:bd:aa:eb:15:7c:35:7e:78:4f:24:
47:03:13:b2:63:2a:06:cc:14:a3:2a:6f:4a:ed:fa:e7:c9:ac:
10:55:fc:95:27:22:0c:5b:27:27:a4:9d:d6:94:e9:bf:6d:dd:
2a:be:e7:ed:25:fc:3f:c8:1e:08:4e:9a:36:13:3e:eb:15:50:
7e:56:2b:81:7e:ae:54:d4:2d:04:c5:ad:b8:ff:fa:64:16:15:
fd:dd:70:8c:ec:a4:c5:88:ba:53:36:07:5f:5e:d1:dd:29:66:
3b:e2:c0:74:9c:e7:bc:42:e4:e5:f1:41:54:4b:b8:c4:45:72:
bd:98:cd:0a:ce:6f:93:e3:6e:10:8e:ce:c7:bf:43:97:0e:11:
15:07:28:62:72:46:4a:01:27:a7:c4:a3:4a:fa:bf:71:5e:72:
df:22:2f:eb:ce:72:53:fc:e4:d4:19:ea:33:11:c8:44:7a:51:
49:12:f8:51:a5:52:c0:54:36:1a:10:a6:6c:d3:71:76:9f:d3:
a0:66:5f:e8:3b:b2:a6:b4:97:91:11:ea:3b:e5:41:2d:55:c4:
91:88:c5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:05 2026 by rpki-client