
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
File: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft (raw, json)
Hash identifier: TTcy0yZWy6iDmP8WxF768FG9lzskAs4LfcES8n4UECY=
Subject key identifier: A5:DA:2D:7C:15:01:AD:F9:AE:D2:97:73:02:39:B8:B4:DE:50:33:A2
Authority key identifier: 57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85
Certificate issuer: /CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
Certificate serial: 5ECEC4061EEC8636627E5BAE16293209E76EEA23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:05:15 +0000
Manifest this update: Wed 17 Jun 2026 02:00:15 +0000
Manifest next update: Thu 18 Jun 2026 02:57:15 +0000
Files and hashes: 1: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl (hash: 9h+QpNgamV/R8cxgu0vl0jicnse83amrhSUVPSj0BYI=)
2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: q/Jj/zrp2NwM8IIT1jpznDIyeMNRphvyuUe6dMIZGio=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl
rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ce:c4:06:1e:ec:86:36:62:7e:5b:ae:16:29:32:09:e7:6e:ea:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
Validity
Not Before: Jun 17 02:00:15 2026 GMT
Not After : Jun 18 02:57:15 2026 GMT
Subject: CN=A5DA2D7C1501ADF9AED297730239B8B4DE5033A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:7a:9b:b4:05:df:e7:e5:eb:38:c0:38:54:
d7:81:08:d4:60:69:9f:e7:3a:71:2c:b2:79:7f:85:
5c:a5:23:0e:ac:b5:66:96:15:fa:bf:5f:9d:3e:1b:
f9:59:76:cc:3c:ef:ae:f4:a1:0b:a9:8a:24:20:91:
0a:49:08:c6:ce:ae:0a:24:fc:0c:99:ad:32:fd:af:
1f:c7:bb:f4:48:99:82:1f:8a:27:63:ac:44:03:74:
7b:98:1b:7c:3d:ee:88:ac:3d:2b:20:33:9e:b3:22:
3f:37:82:34:71:24:84:46:0e:44:46:0d:f4:98:fc:
11:2d:89:34:1a:97:55:97:ef:9e:1d:99:f4:a1:66:
6e:87:3e:65:3b:b8:ae:a5:10:d7:4e:cb:6e:ba:0a:
b6:03:f5:6f:2b:e7:db:0e:6d:c1:32:ff:ab:e6:67:
01:4a:4d:f5:a3:48:b4:51:22:5a:57:fe:3d:c3:e3:
01:1e:84:e4:1b:50:f0:6f:39:53:f0:e5:97:58:ca:
d8:0b:17:9f:d5:7c:72:61:c5:ea:bc:44:1a:91:61:
a9:15:3c:95:51:45:0d:f3:2d:8c:5c:ba:32:99:9e:
90:d5:45:97:b2:a7:af:b5:dd:bc:87:0d:63:45:c9:
de:89:74:05:57:2e:cb:91:56:8c:47:55:ac:f6:ef:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:2D:7C:15:01:AD:F9:AE:D2:97:73:02:39:B8:B4:DE:50:33:A2
X509v3 Authority Key Identifier:
keyid:57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2c:e3:ff:0e:f3:e8:82:41:b4:98:6f:a6:38:76:47:0e:2f:
55:b5:29:a3:b0:ad:0d:21:94:ba:31:bf:b4:b3:39:ce:d2:1e:
00:37:7c:19:b1:bd:0c:c1:e6:88:97:84:c4:e2:ed:fa:52:37:
d9:22:44:36:12:6f:59:1d:6a:ac:e0:5f:db:48:07:87:55:df:
0c:ee:23:0f:69:cb:82:87:b1:c0:40:8d:03:23:62:ae:56:5c:
db:dc:5b:e7:5f:e9:6f:2f:70:e9:02:78:60:a7:08:fa:82:05:
5d:e0:1f:06:e4:f1:9d:8c:ad:76:88:44:87:3d:a4:ac:2d:48:
cd:bb:1f:60:17:86:27:19:f0:ea:94:5d:fc:45:7f:b8:0d:00:
d7:37:ab:fd:62:0e:5a:ea:1f:3f:77:68:e7:8a:08:7f:f4:ec:
b8:7a:5a:d4:3f:a9:43:e0:98:3e:31:65:54:d8:a0:06:54:0f:
80:cd:9c:f4:2c:44:98:ba:e3:65:3f:a1:82:e9:8b:b1:83:63:
95:11:e1:9f:b0:98:de:09:0b:5c:4a:30:7c:e3:74:6e:e8:2b:
ce:da:aa:64:77:97:ba:ee:da:1a:44:06:49:e4:73:53:3d:1e:
d6:30:3e:78:bf:f6:b4:ed:73:65:08:f1:e0:fa:a1:35:05:fc:
e6:e0:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:41:33 2026 by rpki-client