$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft File: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft (raw, json) Hash identifier: h/o6BIvABVDDptJIF9S8VDIlEDrnXNIxhDOI19Cunpg= Subject key identifier: AC:08:78:EE:AB:89:3E:6D:B6:63:81:68:E0:8B:1A:5D:0E:CA:D2:56 Authority key identifier: 57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 Certificate issuer: /CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Certificate serial: 3B760CD06713999B7E93B1DA3A10F4AB097F42A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 22:29:17 +0000 Manifest this update: Tue 22 Sep 2026 22:24:17 +0000 Manifest next update: Thu 24 Sep 2026 00:37:17 +0000 Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: 98Zyj+fTMsxtD+mvmsmI4mvcK/mVqZbbqGkLKnUzRb8=) 2: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl (hash: N+RkJ5YbNb2PZUEP4dxPEKpqP/Ov1eJO2asVdnxWZ78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:0c:d0:67:13:99:9b:7e:93:b1:da:3a:10:f4:ab:09:7f:42:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Validity Not Before: Sep 22 22:24:17 2026 GMT Not After : Sep 24 00:37:17 2026 GMT Subject: CN=AC0878EEAB893E6DB6638168E08B1A5D0ECAD256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:49:33:e1:88:df:7d:6c:da:56:d4:0d:84: eb:9c:80:b7:7b:a9:b7:7f:41:7d:ca:81:ce:58:3c: 99:72:b1:68:df:b6:84:8e:e8:c2:90:38:b0:d5:12: 85:cc:bf:42:ec:65:16:41:4e:55:88:1d:d5:44:98: da:20:a0:49:59:f7:23:1d:34:9b:cf:22:71:8f:88: d1:9d:43:3e:81:6c:58:41:f0:cb:6a:4d:b3:e6:d3: 5b:c5:85:33:22:ab:46:4e:9a:6a:5c:d9:8d:b3:b7: 0f:0e:6e:94:14:14:eb:9c:ca:0f:27:fd:5d:ae:cf: a8:f5:1e:ca:e7:68:58:bb:e4:95:c3:81:5b:2e:85: e7:9f:f6:44:d5:f8:1e:73:75:40:d9:96:95:be:ba: a3:23:8f:96:a2:d8:48:31:35:8a:98:7c:6d:e3:cb: b6:4d:73:1c:cc:19:52:24:1c:f0:9e:51:cf:32:91: 74:f3:00:6d:12:79:fa:65:1f:62:2d:df:b3:84:bb: 17:48:45:08:b9:3d:0e:d2:12:b8:c4:58:73:17:9a: da:15:bb:2c:bb:f4:a9:30:c4:bf:99:4e:4d:64:e0: 13:1a:59:21:4e:ed:bc:8d:3d:8f:8b:a8:e0:8b:23: 26:f7:a0:cf:8f:7f:ed:27:99:f1:04:f0:74:f6:42: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:78:EE:AB:89:3E:6D:B6:63:81:68:E0:8B:1A:5D:0E:CA:D2:56 X509v3 Authority Key Identifier: keyid:57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:48:34:bd:33:43:a0:34:bf:11:08:41:c2:ab:44:17:de: dd:6a:d7:0e:6f:2b:fe:78:b9:bd:15:16:c4:07:b8:b9:02:bf: f1:ce:fb:54:5e:49:7b:bb:59:74:cc:aa:cf:64:bb:e7:5e:34: 2c:35:5b:1c:39:5b:c3:73:54:90:0c:40:2f:b9:c8:21:c4:18: fc:27:aa:44:0d:e7:f6:f2:32:38:91:9f:6b:e9:d6:ff:13:2e: 8f:7c:a5:da:a5:fa:14:9c:f8:08:e0:8d:3c:a7:5c:ea:02:80: 45:60:0a:bd:04:a6:40:f0:6d:e4:9f:f7:39:43:2d:ee:d2:2d: 22:e5:68:46:ac:22:bf:3b:b2:01:24:06:9f:6c:c5:31:6a:2c: de:86:84:00:f6:d5:23:19:7b:8e:da:26:ac:60:22:cc:5c:18: 6d:42:14:f3:11:a6:72:3a:e5:fe:5e:5e:87:85:df:56:2b:5d: 8d:bc:42:b0:eb:7d:ba:db:6c:6d:57:30:10:73:b2:51:96:a8: 8c:74:fe:6d:6f:e9:d2:69:aa:e3:64:8c:66:9d:92:0c:46:b7: 4f:e0:c0:a7:d2:9e:da:cc:1e:42:1b:d7:f9:a5:c0:a1:b7:fe: 28:6c:de:a9:12:e9:cf:e5:aa:78:09:0a:7f:8f:a9:6c:3b:fc: b7:ae:2b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3YM0GcTmZt+k7HaOhD0qwl/QqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5 NDNGOTAxNDAeFw0yNjA5MjIyMjI0MTdaFw0yNjA5MjQwMDM3MTdaMDMxMTAvBgNV BAMTKEFDMDg3OEVFQUI4OTNFNkRCNjYzODE2OEUwOEIxQTVEMEVDQUQyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCUkz4YjffWzaVtQNhOucgLd7 qbd/QX3Kgc5YPJlysWjftoSO6MKQOLDVEoXMv0LsZRZBTlWIHdVEmNogoElZ9yMd NJvPInGPiNGdQz6BbFhB8MtqTbPm01vFhTMiq0ZOmmpc2Y2ztw8ObpQUFOucyg8n /V2uz6j1HsrnaFi75JXDgVsuheef9kTV+B5zdUDZlpW+uqMjj5ai2EgxNYqYfG3j y7ZNcxzMGVIkHPCeUc8ykXTzAG0SefplH2It37OEuxdIRQi5PQ7SErjEWHMXmtoV uyy79KkwxL+ZTk1k4BMaWSFO7byNPY+LqOCLIyb3oM+Pf+0nmfEE8HT2QqXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAh47quJPm22Y4Fo4IsaXQ7K0lYwHwYDVR0j BBgwFoAUV6HDfCBU+0n7EsbsffILd5Q/kBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhNTIwNDUtYTZmYy00NWIxLWJlNTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0My MDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5NDNGOTAxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81N0ExQzM3QzIwNTRGQjQ5RkIxMkM2RUM3REYyMEI3Nzk0M0Y5 MDE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBC Nzc5NDNGOTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADitSDS9M0OgNL8RCEHCq0QX3t1q1w5vK/54 ub0VFsQHuLkCv/HO+1ReSXu7WXTMqs9ku+deNCw1Wxw5W8NzVJAMQC+5yCHEGPwn qkQN5/byMjiRn2vp1v8TLo98pdql+hSc+AjgjTynXOoCgEVgCr0EpkDwbeSf9zlD Le7SLSLlaEasIr87sgEkBp9sxTFqLN6GhAD21SMZe47aJqxgIsxcGG1CFPMRpnI6 5f5eXoeF31YrXY28QrDrfbrbbG1XMBBzslGWqIx0/m1v6dJpquNkjGadkgxGt0/g wKfSntrMHkIb1/mlwKG3/ihs3qkS6c/lqngJCn+PqWw7/LeuK98= -----END CERTIFICATE-----Generated at Wed Sep 23 03:52:13 2026 by rpki-client