
$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier: kVm4jgpSFRbnTsMizUS88Oo/MYMkv3v0mcNpNf1pus0=
Subject key identifier: DE:E1:D0:EA:20:EE:DA:0E:8E:27:32:6E:30:F7:53:F3:75:84:FF:3A
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial: 4440734AAB144AA4496B6D1976F7F0A07DC8D534
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 05:07:05 +0000
Manifest this update: Tue 21 Jul 2026 05:02:05 +0000
Manifest next update: Wed 22 Jul 2026 07:20:05 +0000
Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
2: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: Lvw1A/RXRcaRAYiVJTUCAB2SvNz5Faja8vqkdIjg5AY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:40:73:4a:ab:14:4a:a4:49:6b:6d:19:76:f7:f0:a0:7d:c8:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Validity
Not Before: Jul 21 05:02:05 2026 GMT
Not After : Jul 22 07:20:05 2026 GMT
Subject: CN=DEE1D0EA20EEDA0E8E27326E30F753F37584FF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:89:2a:6d:fd:19:44:49:09:ff:ff:5c:67:
bf:87:93:a2:7b:a0:ff:83:bb:e1:b8:38:44:36:01:
fe:d3:7c:f1:a2:46:06:0e:81:df:58:f9:5a:1c:40:
fc:c4:7b:04:6f:90:b3:ef:56:c9:89:48:0d:7e:06:
10:a1:8d:9e:13:14:e7:9d:66:05:af:37:ab:a6:4d:
95:a3:3a:a3:8d:0c:79:dc:c9:40:e8:8c:c9:cc:f7:
8a:38:7d:45:68:58:d0:49:2d:8d:bb:2f:02:39:2e:
75:29:b1:09:7c:cd:56:89:de:09:89:12:b3:7f:c5:
76:5d:1f:3a:bc:88:f2:44:dd:38:a3:8a:1a:f7:14:
45:68:3c:f0:52:bd:18:1f:a4:da:09:c8:60:ef:7a:
ba:90:34:4b:31:b1:67:2b:88:57:8a:2a:49:b9:dc:
98:40:a4:ef:c4:ac:14:b1:b0:2a:b4:6d:d3:2c:2b:
91:78:2f:6b:eb:fa:47:7c:9d:33:8b:6f:8a:27:5d:
6d:2d:6c:a2:1e:24:e9:dc:27:8d:48:b8:9c:92:33:
78:ca:35:19:03:ab:ae:c0:6c:f2:c6:94:2b:54:76:
a9:2b:61:42:c9:ce:df:81:ce:d8:42:33:91:37:7e:
0c:8a:d8:17:12:e3:8d:4a:8c:d6:fa:da:29:08:96:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:D0:EA:20:EE:DA:0E:8E:27:32:6E:30:F7:53:F3:75:84:FF:3A
X509v3 Authority Key Identifier:
keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:55:25:e2:05:7c:25:a8:fb:79:43:b9:6f:c9:f5:86:3a:f1:
7e:d0:7c:a5:78:f6:9e:1a:9c:89:f6:49:05:ef:d9:d1:9a:0b:
15:96:0b:54:13:fc:28:58:33:e1:7a:72:2a:d3:99:e0:56:09:
ec:a8:99:bd:80:b3:f2:c2:31:1c:ba:09:b9:cf:58:1d:7c:a7:
ab:e8:84:49:0f:53:cd:8f:c8:8c:26:66:7d:48:f1:71:05:65:
85:06:d1:ef:62:69:f8:15:ef:22:1f:74:8b:39:1f:03:a5:31:
55:16:ba:a3:da:79:bd:0e:d1:0c:46:de:94:07:7e:94:24:32:
de:37:40:64:c7:de:ea:84:1d:b6:17:19:28:40:18:fd:b8:d8:
75:f4:07:cb:cf:a9:58:94:75:92:7e:be:28:07:67:3a:c9:10:
4e:6a:8a:9f:c6:6a:5e:41:cd:97:d5:a0:c7:15:c8:2c:c8:14:
38:02:9c:3e:a2:36:f4:00:4a:b9:4e:21:75:fa:c4:33:62:54:
81:71:f0:07:2c:a8:12:e2:d3:16:a9:d5:a9:d0:65:7c:0c:90:
88:ee:0a:f4:17:80:00:1e:10:01:43:91:89:0d:d5:71:9b:fa:
31:72:15:7e:4e:f1:8e:99:90:02:a2:9c:5e:a9:79:7b:83:ae:
f2:48:4b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:05 2026 by rpki-client