
$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier: hXFop4VWt0V+6LlVIBpfDZ20EEWDKeQF7Ancy4oKKuM=
Subject key identifier: 69:F6:57:92:F0:5D:37:3D:21:25:51:B6:B5:92:83:16:05:1F:71:18
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial: 04B391D6D534F0525247A9D108C1B14DA5922FFF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 09:26:42 +0000
Manifest this update: Tue 02 Jun 2026 09:21:42 +0000
Manifest next update: Wed 03 Jun 2026 12:45:42 +0000
Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
2: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: XBrxCrGJofXCJ3ByTDXTf2H3lunWdsgjkOjRuWIBqL0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 12:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b3:91:d6:d5:34:f0:52:52:47:a9:d1:08:c1:b1:4d:a5:92:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Validity
Not Before: Jun 2 09:21:42 2026 GMT
Not After : Jun 3 12:45:42 2026 GMT
Subject: CN=69F65792F05D373D212551B6B5928316051F7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:26:0e:16:a8:80:5b:30:11:42:93:4e:d8:
64:ad:58:c5:a3:7a:1e:a7:1a:db:2d:cc:89:97:58:
66:c3:f2:9c:e5:99:9b:82:51:43:3d:f4:35:f4:68:
1c:e6:3d:98:52:da:59:73:c5:af:55:5a:75:42:ff:
8b:98:dd:51:a6:c5:dc:f5:54:52:51:44:58:bf:6e:
04:5b:5c:6c:8a:61:93:72:bd:29:06:37:40:8a:f6:
f7:7a:ce:16:06:8c:ad:49:90:8d:88:3a:64:79:b6:
1d:bd:98:ba:24:4b:7b:ba:cd:82:e2:8d:93:bb:71:
41:da:8f:20:c0:ee:b0:79:f3:55:e3:2f:16:cf:89:
e8:79:e7:d4:3f:34:dd:ef:27:cd:42:4a:18:cf:da:
ad:1f:2f:74:20:db:14:f2:e2:b1:00:6e:ad:04:be:
8b:22:8e:96:ad:8d:98:b3:d5:9d:74:04:ae:d5:99:
11:67:ae:2f:da:b6:c6:35:cb:ec:83:bc:e7:bb:8d:
b8:ca:20:6b:23:cf:1a:0b:db:b2:90:79:6e:fe:8d:
7a:95:d9:50:94:5a:36:5d:0d:d6:a9:2f:3a:aa:89:
c2:4c:e7:ac:f0:97:51:7c:6c:e1:71:67:69:77:48:
0d:ee:df:4a:9a:d9:d1:52:6b:93:af:76:b0:27:9f:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:57:92:F0:5D:37:3D:21:25:51:B6:B5:92:83:16:05:1F:71:18
X509v3 Authority Key Identifier:
keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:51:9c:80:77:1c:e5:91:e6:06:45:e9:6e:84:a8:b3:22:
1a:6e:99:fe:bb:c1:55:c1:79:e0:77:86:29:a5:0b:aa:50:af:
eb:7d:a6:4a:32:06:53:bd:c4:e7:f8:8a:be:d0:58:ab:b4:bc:
98:a7:cf:8b:68:0a:77:ae:23:a3:73:a7:70:52:67:3b:9e:32:
ef:c0:40:14:2a:a1:82:8d:67:03:59:80:81:6b:00:a0:10:2e:
7c:d4:2a:86:25:66:47:2b:81:58:5f:ae:53:81:80:25:10:e6:
4f:2b:f1:9a:72:49:95:2f:b3:59:76:f9:d7:1f:de:23:3d:40:
0e:c1:31:18:a1:ca:3f:e5:1a:9b:45:53:70:a7:c2:4e:4c:7e:
4e:cc:5d:73:e5:ba:53:b7:d0:64:12:35:ee:67:c7:84:1f:aa:
01:fe:f5:d1:4c:6a:a2:90:3b:ee:f0:f8:22:25:ae:f4:fb:11:
cf:6c:8e:2b:3d:9b:62:d1:b6:61:fc:45:c1:d0:83:a5:07:70:
c6:1b:c0:ad:41:61:03:b7:ba:d1:86:e2:1d:9a:bf:ea:3e:71:
75:03:08:6e:f4:cf:cf:93:f0:52:23:ee:43:7e:fd:41:af:10:
a3:da:66:16:d9:2d:a1:10:51:ca:51:a3:37:e7:cd:5e:b7:27:
9a:5f:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:38:28 2026 by rpki-client