
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json)
Hash identifier: h5PXPYwbJCRPsOGqsih7tVaB6BP9JFzcNWYMXG7iZNE=
Subject key identifier: 6B:0B:C1:47:A1:21:5F:C5:7C:A9:F6:2D:C0:89:61:8F:39:4A:07:4F
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 5D4485493485C683FA1C03BC265ADF9F5AF6C080
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
Manifest number: 03FB
Signing time: Thu 16 Apr 2026 17:51:56 +0000
Manifest this update: Thu 16 Apr 2026 17:46:56 +0000
Manifest next update: Mon 20 Apr 2026 02:32:56 +0000
Files and hashes: 1: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: I5lMCHW/0VM2snh5gMHMreCjKGcwb2psDVtNsfQ2Q0o=)
2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: e9V4m2ucXWkBgsbtcZj+8qtw+zIJo4I1mCGc3VUYNcU=)
3: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: i/wE9/DDpdlCjm0NM2UFIdi5f16OPBgnoC1WNngZprI=)
4: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: 8uslDq+EkJlCY+MtyQFy4AEhhci2PaD2xXMS8hJIQuw=)
5: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: 24/NhCGBGOt7WZwcmBT+s4GINfQM7GC17qrWB072MSU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:44:85:49:34:85:c6:83:fa:1c:03:bc:26:5a:df:9f:5a:f6:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Apr 16 17:46:56 2026 GMT
Not After : Apr 20 02:32:56 2026 GMT
Subject: CN=6B0BC147A1215FC57CA9F62DC089618F394A074F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:b3:21:87:bc:b5:9d:9f:d7:4a:57:a7:aa:
e4:4e:ca:3e:12:50:7c:a8:e3:26:95:3f:25:e4:a0:
a5:bc:fc:d1:f9:76:02:2f:45:0a:11:2b:49:1f:41:
f6:e8:d5:5f:1d:85:27:e8:3e:4a:00:9e:c4:4d:f3:
04:76:27:5f:4c:bb:dc:cc:29:f4:b5:4a:c1:ce:4c:
a8:bc:c6:13:60:4e:c3:42:fb:3f:97:98:12:8c:d3:
5b:51:fd:92:5d:ce:f8:ef:c0:6c:54:5c:4d:7c:6e:
68:e1:b6:0d:a9:b1:53:20:a9:e0:51:d8:ca:5f:dc:
aa:65:89:1f:2e:52:06:9f:9c:0e:12:cf:e8:64:53:
af:22:c8:92:58:1f:68:06:1d:1f:e2:a4:1e:8f:5e:
43:bf:d8:44:2a:ce:52:d9:f9:87:eb:a0:88:7f:7b:
ad:d2:8a:05:be:28:c5:51:e1:37:a2:ab:43:a2:d7:
00:21:d5:cd:11:a3:ef:cd:d1:31:d2:f8:bf:20:69:
17:9f:c9:c3:fb:41:6f:b3:7f:79:1f:17:75:63:9f:
ae:b4:8b:c1:dc:84:ef:ef:b0:6d:ad:7c:bf:c6:4f:
d1:22:98:43:b2:85:bc:19:58:c1:86:be:e9:66:f7:
b6:1c:68:36:03:e1:61:ad:32:88:88:21:6b:7b:76:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:C1:47:A1:21:5F:C5:7C:A9:F6:2D:C0:89:61:8F:39:4A:07:4F
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:99:99:3b:d5:24:c8:52:fb:04:32:fe:4b:52:c0:df:94:27:
0e:a8:e3:3a:11:6e:16:38:94:d8:36:ed:b5:52:a7:bc:e3:f5:
02:d1:ff:84:41:e3:84:87:d2:4c:94:33:af:ce:45:f0:5f:a7:
01:bf:c9:9a:d6:1d:29:7c:63:1e:69:ab:54:ac:26:cd:fd:61:
f9:cd:c7:08:43:89:7c:87:10:81:05:be:c1:a2:19:24:54:10:
9e:a0:7c:1b:94:89:8c:54:cb:0b:6c:4a:58:dc:4a:22:5d:d8:
f7:b4:16:ec:9e:99:0e:a6:50:0b:56:4f:35:57:93:b9:8c:93:
4f:c7:ef:30:21:30:52:65:9a:29:af:f3:a3:70:4e:75:1e:fc:
ca:65:73:e6:85:03:93:28:61:95:d2:cd:4e:a0:ad:54:3f:ae:
c3:f4:82:40:d4:db:e7:a4:ef:ae:d3:0c:d9:ff:b6:3f:25:61:
76:16:c0:5c:ba:72:cf:ba:aa:5f:a1:4d:e5:6b:f6:4d:7f:99:
70:4e:e6:6a:90:37:77:ab:bc:75:58:1a:fa:37:28:ff:24:13:
20:d2:d7:ce:12:5c:17:df:00:de:58:0b:11:d4:2e:8e:77:55:
9a:5d:00:b8:42:e8:03:b9:86:cf:cd:58:a5:0f:ba:39:7a:bc:
cb:6f:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:24 2026 by rpki-client