
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft
File: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft (raw, json)
Hash identifier: UrpbGtTscHX/Af9mITaA95F3OeeLWeWEQF9exnLkyQ4=
Subject key identifier: 33:AC:D9:5E:85:DB:CF:A7:ED:83:F9:AE:73:A8:A0:7F:02:61:5D:38
Authority key identifier: 57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14
Certificate issuer: /CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014
Certificate serial: 69B884B68799A3F634276A0448A584E7D988CB21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft
Manifest number: EC
Signing time: Mon 26 Oct 2026 01:38:47 +0000
Manifest this update: Mon 26 Oct 2026 01:33:47 +0000
Manifest next update: Tue 27 Oct 2026 04:13:47 +0000
Files and hashes: 1: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl (hash: 4jWgklsARerqS8/qGNgABL0wIZKrPVQpEAtCqwnu3dM=)
2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: 98Zyj+fTMsxtD+mvmsmI4mvcK/mVqZbbqGkLKnUzRb8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl
rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b8:84:b6:87:99:a3:f6:34:27:6a:04:48:a5:84:e7:d9:88:cb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014
Validity
Not Before: Oct 26 01:33:47 2026 GMT
Not After : Oct 27 04:13:47 2026 GMT
Subject: CN=33ACD95E85DBCFA7ED83F9AE73A8A07F02615D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:7d:ae:a3:b2:bd:52:f0:7e:fb:31:f7:b1:
cf:4a:9d:37:d7:c4:8a:76:45:84:41:c3:8b:11:0c:
78:8e:0d:43:89:9b:4a:e9:ca:2b:ed:89:45:f1:a4:
6a:26:a9:54:93:4d:1d:b7:9a:2b:13:3b:3c:69:6a:
f4:24:74:77:7c:43:f8:97:d9:47:8c:66:75:9e:e4:
a7:6b:7b:b4:ff:3e:1a:1d:2b:0a:ba:d2:52:89:75:
86:b9:ad:8a:67:f9:6b:12:3a:67:f3:bd:94:ec:1f:
0b:50:8d:de:05:a6:9b:1e:ef:06:dc:4e:f6:ef:9a:
e3:0c:a9:2f:d3:05:a4:7c:08:f9:5f:91:39:c4:ad:
ca:a0:31:31:e0:eb:ef:3e:9e:8a:f1:70:61:17:89:
51:42:1c:e4:89:d4:50:29:da:45:e0:01:35:02:17:
93:1a:2b:81:16:7c:f1:67:c5:23:92:48:92:89:0d:
d5:88:55:6c:f3:40:3d:bd:4a:a9:69:8f:42:58:51:
e5:09:b7:69:7b:e0:32:36:f7:57:40:d8:93:a8:fa:
c0:e7:47:91:4b:f7:16:19:2d:e1:b0:6d:92:f7:7b:
38:93:f4:96:8f:0d:76:d4:40:00:01:60:3a:7e:78:
e6:ee:3e:65:04:b0:f8:77:79:c8:0d:c0:3e:01:51:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:D9:5E:85:DB:CF:A7:ED:83:F9:AE:73:A8:A0:7F:02:61:5D:38
X509v3 Authority Key Identifier:
keyid:57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:e3:72:46:be:5d:0e:f9:4e:3f:2c:2c:01:71:23:37:96:
18:73:3b:81:a4:c8:91:ba:ba:52:8d:32:2b:f5:ab:4f:84:4d:
95:7a:0d:45:d8:6e:2f:37:06:d1:81:54:c2:7e:0d:72:ab:0e:
6f:30:8f:d3:00:89:eb:07:62:ca:68:ca:38:8e:ff:a7:2e:4f:
15:6d:dd:9e:13:68:4b:e6:83:03:c8:40:28:7b:39:9a:2f:26:
cd:7a:60:34:87:55:8c:84:02:d0:32:05:35:85:8b:fc:85:73:
c7:91:7c:e3:68:6e:f9:8d:4a:09:9b:73:16:d0:f2:78:b0:e9:
c5:fe:63:e1:bc:16:79:2c:01:ba:db:d3:a3:97:22:c6:4c:ee:
3d:26:b1:40:ba:52:9b:8f:45:d1:80:16:b7:29:59:e0:1b:17:
95:a7:85:3b:fe:d3:7b:1f:d8:5a:96:cd:3d:a1:85:71:0b:f4:
e2:7b:0e:7e:1c:07:26:73:a7:84:09:b7:08:d5:ce:54:70:c2:
c8:97:71:a8:56:94:d2:6d:98:62:bb:2f:8f:f4:09:dd:61:91:
2a:27:c8:f3:36:fd:54:55:ca:4a:a2:e1:55:48:80:be:3a:ab:
f5:4c:a1:2d:e5:49:8a:d0:19:4a:38:7c:06:64:94:2f:4d:d1:
f5:a5:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:20 2026 by rpki-client