
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
File: 566E09CA4830024428EFAB32BD4C5C0588342F87.mft (raw, json)
Hash identifier: +rZs9yBV2HoDLJlrYQRXFePpIOnOMQkgYRO/MB7azNk=
Subject key identifier: 42:90:07:D7:8E:08:A7:90:D7:58:0D:E0:B5:D7:59:5E:9A:25:E5:73
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Certificate issuer: /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial: A2A9AB728832ABFCF5469F058616983768DF18
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
Manifest number: BD
Signing time: Wed 16 Sep 2026 22:52:09 +0000
Manifest this update: Wed 16 Sep 2026 22:47:09 +0000
Manifest next update: Fri 18 Sep 2026 01:30:09 +0000
Files and hashes: 1: 3130332e3130352e3235342e302f32342d3234203d3e20313336383835.roa (hash: kjns1P/9YtFZsQtwjo+slrRL21VSAsBZN0FYYz0ZfBc=)
2: 3130332e3130352e3235322e302f32342d3234203d3e20313336383835.roa (hash: ghxBTEX+6jxYsJHob/rRu053sMMi/T0aLpNH4JSYM9E=)
3: 3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa (hash: /1rF0PKS/fc9zIsV+HmvJCLuPMTuSv+M8S12SwS/eEY=)
4: 566E09CA4830024428EFAB32BD4C5C0588342F87.crl (hash: WRZA3c4vq6mruFuc6VxbUYF2MKzZjdDu6AStWQPNWTU=)
5: 3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa (hash: SaD8e6GIVRQQpU4CT4qZc563tb2DJTmlzJS/OsFb3w8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a2:a9:ab:72:88:32:ab:fc:f5:46:9f:05:86:16:98:37:68:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Validity
Not Before: Sep 16 22:47:09 2026 GMT
Not After : Sep 18 01:30:09 2026 GMT
Subject: CN=429007D78E08A790D7580DE0B5D7595E9A25E573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:b4:69:0b:45:28:70:42:f0:23:40:8b:9d:
75:91:bc:ff:3b:46:b1:12:fe:14:a4:05:bb:71:79:
2a:2c:8d:59:b4:30:7b:3b:23:4e:3e:41:37:39:f4:
a9:51:43:1d:d9:fb:5a:1b:28:a2:9e:f8:db:b7:e3:
69:7a:30:c5:73:01:1a:3a:9c:91:a2:28:d6:11:a9:
38:f6:c9:f9:78:83:3e:4f:2a:0c:59:d1:ff:1f:39:
9a:4e:c1:de:b1:8d:f4:eb:d4:78:56:a4:3f:f2:72:
e9:29:68:e7:c4:ad:07:31:16:41:dd:19:03:3a:58:
db:c2:7d:93:6b:d4:1b:c6:00:ff:36:0d:72:90:a6:
ee:bd:e4:a7:6b:5e:c5:90:2b:10:1e:89:51:b0:bc:
32:a8:af:a1:06:62:24:34:d3:ce:7f:e7:04:08:f9:
f3:d7:60:d1:db:2d:1b:99:6d:51:5e:7b:e1:06:82:
7c:78:bc:91:f2:29:45:d9:f0:c0:35:ac:07:7f:76:
ce:07:ad:b4:85:5f:4c:82:41:82:db:4b:87:53:3a:
ea:8a:89:12:29:72:93:50:54:19:48:d2:c7:ae:8f:
07:1c:fe:63:f6:a0:47:aa:1d:60:97:eb:b9:6a:1c:
68:f6:ce:09:8c:09:61:76:9a:7e:4b:08:a4:87:fe:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:90:07:D7:8E:08:A7:90:D7:58:0D:E0:B5:D7:59:5E:9A:25:E5:73
X509v3 Authority Key Identifier:
keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:5b:01:a7:32:26:2b:ac:c7:b6:ae:0c:fb:9f:72:65:9f:
f5:8e:42:08:1c:d6:32:16:b5:38:2b:9a:56:83:ae:2d:3b:27:
e3:3c:76:15:55:90:8f:51:d6:76:44:ff:f7:41:98:48:31:5f:
c8:3a:c5:94:89:6b:f2:59:ca:2b:10:f8:47:d6:31:d3:28:92:
22:0c:84:d6:ea:66:1d:7a:40:ae:85:b8:a8:11:31:a8:93:fa:
85:c9:06:12:ec:f2:14:df:06:37:a8:07:40:e8:ad:8f:03:3e:
be:bf:ec:25:4a:ac:c5:a2:07:5a:c2:41:64:01:57:6f:c6:e6:
7c:17:7e:90:f8:1a:55:e3:de:17:ec:07:ea:e6:1f:2b:3f:1f:
3c:4f:22:d6:64:62:92:9f:d1:22:46:04:82:b3:82:c0:55:65:
e0:f2:31:41:d1:19:32:b6:01:fa:14:8c:7c:d7:90:68:81:1c:
1f:08:42:aa:5e:f7:a0:24:14:37:62:cc:07:d5:5b:98:f0:e1:
5c:32:ce:2d:95:19:a3:dc:2c:d3:fd:4b:56:56:59:fb:d6:a7:
c5:96:27:e8:b6:07:3f:68:1f:e9:de:2a:5d:8d:ef:e5:b6:4b:
d8:5e:51:f0:25:a6:1f:13:df:47:00:c5:35:84:d2:98:12:e5:
a0:60:1e:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAKKpq3KIMqv89UafBYYWmDdo3xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4
ODM0MkY4NzAeFw0yNjA5MTYyMjQ3MDlaFw0yNjA5MTgwMTMwMDlaMDMxMTAvBgNV
BAMTKDQyOTAwN0Q3OEUwOEE3OTBENzU4MERFMEI1RDc1OTVFOUEyNUU1NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtLRpC0UocELwI0CLnXWRvP87
RrES/hSkBbtxeSosjVm0MHs7I04+QTc59KlRQx3Z+1obKKKe+Nu342l6MMVzARo6
nJGiKNYRqTj2yfl4gz5PKgxZ0f8fOZpOwd6xjfTr1HhWpD/ycukpaOfErQcxFkHd
GQM6WNvCfZNr1BvGAP82DXKQpu695KdrXsWQKxAeiVGwvDKor6EGYiQ0085/5wQI
+fPXYNHbLRuZbVFee+EGgnx4vJHyKUXZ8MA1rAd/ds4HrbSFX0yCQYLbS4dTOuqK
iRIpcpNQVBlI0seujwcc/mP2oEeqHWCX67lqHGj2zgmMCWF2mn5LCKSH/uf/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQpAH144Ip5DXWA3gtddZXpol5XMwHwYDVR0j
BBgwFoAUVm4JykgwAkQo76syvUxcBYg0L4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzE2YWE1NGYtNzE1OC00M2FmLWIzMzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0
ODMwMDI0NDI4RUZBQjMyQkQ0QzVDMDU4ODM0MkY4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NjZFMDlDQTQ4MzAwMjQ0MjhFRkFCMzJCRDRDNUMwNTg4MzQy
Rjg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz
MzYtYmU0NzE0ODE2ZmFkLzAvNTY2RTA5Q0E0ODMwMDI0NDI4RUZBQjMyQkQ0QzVD
MDU4ODM0MkY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHuNWwGnMiYrrMe2rgz7n3Jln/WOQggc1jIW
tTgrmlaDri07J+M8dhVVkI9R1nZE//dBmEgxX8g6xZSJa/JZyisQ+EfWMdMokiIM
hNbqZh16QK6FuKgRMaiT+oXJBhLs8hTfBjeoB0DorY8DPr6/7CVKrMWiB1rCQWQB
V2/G5nwXfpD4GlXj3hfsB+rmHys/HzxPItZkYpKf0SJGBIKzgsBVZeDyMUHRGTK2
AfoUjHzXkGiBHB8IQqpe96AkFDdizAfVW5jw4Vwyzi2VGaPcLNP9S1ZWWfvWp8WW
J+i2Bz9oH+neKl2N7+W2S9heUfAlph8T30cAxTWE0pgS5aBgHv4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 06:40:16 2026 by rpki-client