
$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier: L0lHxQbIgOSzxnwyey5SMUX0cWfEfZXRYYeYJzUog2Y=
Subject key identifier: AD:E3:5A:86:93:1F:0B:CC:8C:22:07:01:9E:9A:88:71:C7:CB:96:02
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial: 5921CCA6C7BB34620E9F9905B523F1CBCC99212D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 13:20:22 +0000
Manifest this update: Tue 16 Jun 2026 13:15:22 +0000
Manifest next update: Wed 17 Jun 2026 17:09:22 +0000
Files and hashes: 1: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: XpHzETTxQvsWgqWdr/ZTJab/oPEaEeEJ2O13BB65Rng=)
2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:21:cc:a6:c7:bb:34:62:0e:9f:99:05:b5:23:f1:cb:cc:99:21:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Validity
Not Before: Jun 16 13:15:22 2026 GMT
Not After : Jun 17 17:09:22 2026 GMT
Subject: CN=ADE35A86931F0BCC8C2207019E9A8871C7CB9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:9e:ac:5b:32:61:b7:80:65:df:41:51:84:
0a:b3:c8:62:88:51:9c:c5:f9:ea:c6:1d:d7:b3:88:
c9:a4:1a:88:c9:4f:47:dd:63:4f:e5:ff:ae:9f:b5:
56:b9:de:1b:05:3b:34:e6:b1:47:46:a6:f2:25:aa:
06:d1:7d:a5:c1:46:ec:5a:7b:65:df:5d:3a:02:bf:
8e:21:c8:80:99:c4:6b:a0:35:00:57:3e:ac:9b:ff:
f8:a5:47:f3:64:d6:05:ef:62:e1:a0:43:26:e0:43:
0d:8e:50:f3:df:c3:4d:0c:aa:57:24:cf:1e:3b:67:
9b:f5:91:57:f5:32:d9:b0:36:75:92:c9:61:d7:af:
ce:79:47:3c:71:37:95:87:5a:23:73:68:3e:c4:b9:
cb:8f:7e:5f:58:88:49:c8:3e:e3:f5:6c:bc:ff:1b:
5f:5c:78:a7:0a:41:97:ee:99:6c:a5:9f:63:cd:b3:
37:ff:f9:6c:41:72:03:c6:f8:13:a2:c7:cd:2c:1c:
e0:6d:59:81:27:45:a2:89:3a:56:0b:1b:d4:ae:3a:
b5:52:2e:11:ab:43:78:b7:de:02:84:d6:3c:ca:63:
c8:de:3d:83:11:8e:9e:08:95:73:a2:2a:72:aa:52:
13:3b:e6:8a:b9:1b:a1:a2:aa:3d:53:07:3e:09:29:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:5A:86:93:1F:0B:CC:8C:22:07:01:9E:9A:88:71:C7:CB:96:02
X509v3 Authority Key Identifier:
keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3a:0a:94:81:55:0f:ca:7f:21:bb:b9:ee:ad:78:b2:c5:1e:
ec:66:09:55:ac:9d:29:c8:53:0d:f1:e2:cf:2d:f1:6b:c0:ef:
04:75:53:a9:ba:b3:50:54:b8:cf:84:16:ee:2c:cb:2f:b7:88:
ee:2c:06:59:22:9b:b6:6c:a8:51:87:0b:76:08:9f:58:18:97:
65:16:6f:de:c5:8e:af:1a:b5:0b:74:96:94:4b:19:8a:4c:eb:
88:08:4a:1d:8f:6e:e0:15:8e:6e:26:0b:84:76:47:fe:68:ac:
60:5f:04:fd:13:c6:b4:08:8d:c3:2b:1d:7f:c6:3f:d3:4a:9e:
f5:6f:7f:92:cc:d3:24:78:69:65:db:34:b5:2e:44:a8:0c:2f:
44:8c:a1:0f:9f:20:27:11:2e:e2:2d:f5:aa:02:5c:20:b6:53:
10:9d:9e:28:e3:e8:ae:de:1e:7c:4f:9f:cb:75:9b:30:50:87:
8f:aa:12:bb:10:10:ff:dd:1e:3c:26:ed:80:f8:76:b5:dc:6b:
b1:3d:c8:12:cc:e2:06:1b:41:e6:0e:c6:e2:e2:ca:22:89:0a:
62:05:fe:69:91:3e:08:f7:c3:9f:57:fa:36:86:c2:f9:44:c9:
ab:e3:00:80:1c:65:84:ed:5d:35:44:ab:10:ca:bf:43:a7:ee:
b5:d6:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:25 2026 by rpki-client