$ rpki-client -vvf rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft File: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft (raw, json) Hash identifier: D642gCW04OIoQU3zTuHjsjVmXHt/uiw/S/3HWt+U5F0= Subject key identifier: 6B:BB:93:DF:4E:9F:90:BC:1A:4E:7D:F0:2F:55:E0:97:2B:8A:53:61 Authority key identifier: 57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 Certificate issuer: /CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Certificate serial: 7F333A04964617E4485062FB0463AF4FC1E6BFAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft Manifest number: 60 Signing time: Mon 13 Jul 2026 04:34:24 +0000 Manifest this update: Mon 13 Jul 2026 04:29:24 +0000 Manifest next update: Tue 14 Jul 2026 05:22:24 +0000 Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: 98Zyj+fTMsxtD+mvmsmI4mvcK/mVqZbbqGkLKnUzRb8=) 2: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl (hash: Hh8HAGHGKxZEdQ5CNs7iv49pRQLC/Qig2TJZvE37Pfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:33:3a:04:96:46:17:e4:48:50:62:fb:04:63:af:4f:c1:e6:bf:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Validity Not Before: Jul 13 04:29:24 2026 GMT Not After : Jul 14 05:22:24 2026 GMT Subject: CN=6BBB93DF4E9F90BC1A4E7DF02F55E0972B8A5361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:5f:03:a7:64:bb:ce:b4:8a:5d:85:cd:fd: 4b:80:6c:ab:eb:bf:a6:62:c0:d7:a9:d2:90:ed:33: ec:29:44:5b:db:c0:7d:6a:16:45:4c:c5:98:22:07: eb:80:ad:1d:05:c7:2e:d7:b4:08:bc:3c:fc:34:1a: 5b:09:19:7a:98:82:23:3e:be:42:14:c1:a9:96:09: 1f:38:14:43:a1:30:5e:e2:49:27:54:76:0c:46:ba: 21:9f:fd:d3:b5:47:16:e4:c6:52:1a:6b:2b:3b:98: 0c:af:ec:2f:00:da:5e:87:15:d6:b3:99:d1:89:bb: 25:2a:ef:39:5a:fb:aa:e3:18:b9:27:33:fc:ce:6b: ec:0e:22:73:43:22:f9:89:5c:0b:c2:bc:92:04:2a: 7f:6a:17:39:20:15:39:67:f9:c0:9f:4c:6e:99:aa: 1a:cf:a5:85:a7:6b:dc:bd:c0:85:0d:43:3f:99:f5: 26:61:5c:5c:f9:c9:32:4c:84:c0:eb:3f:a8:d7:a1: 17:5a:5a:7b:9c:b2:0a:eb:f9:1f:cc:c5:35:29:e7: c8:95:fe:c6:0d:86:b1:71:31:64:7b:c9:bd:0d:9f: 7b:f3:b2:d3:43:c5:bf:16:a4:39:d2:c3:91:f0:06: fc:65:49:8f:1e:5f:cf:b9:1c:be:ce:80:43:8c:1b: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:93:DF:4E:9F:90:BC:1A:4E:7D:F0:2F:55:E0:97:2B:8A:53:61 X509v3 Authority Key Identifier: keyid:57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:43:f3:6f:54:0a:01:b4:86:80:0f:8d:df:42:0e:23:e1: db:50:39:19:03:84:c9:d0:ab:bd:42:ea:5e:5f:bf:02:d9:dd: 1a:56:4a:9d:99:a6:60:69:56:57:e5:7b:dc:74:bd:69:ad:f2: 6e:91:88:1d:f4:9c:e3:f7:ed:d0:75:8d:cf:ba:66:a1:eb:6f: 0c:14:e1:ff:ef:ce:f7:24:92:63:21:c1:ca:56:45:6f:fd:12: ce:8e:4c:ba:3c:15:24:fa:c5:08:6c:3e:52:82:1d:88:73:a9: 84:a0:d7:b2:55:58:0a:e9:99:f5:75:b7:6f:52:1e:5d:cc:8e: 86:35:22:18:08:35:c4:e2:04:5d:05:12:a9:36:09:8c:0d:8c: 2a:cb:fc:c7:0e:e2:53:6a:e3:57:b2:86:c4:02:fc:7a:b2:0d: 04:2e:5f:78:14:47:79:f3:46:63:9c:3c:f2:b8:00:37:44:44: 7d:85:8e:fd:a1:0d:4e:2b:0d:c3:0e:8b:49:e0:3b:a3:e8:cc: cc:b3:67:db:48:9d:c4:4c:bd:04:9e:4a:9d:da:4c:57:d0:6c: f3:df:cb:75:c5:ae:94:39:02:e5:14:26:b6:a0:79:7b:18:93: 4b:2f:1e:59:11:85:71:a2:56:6e:53:e5:24:9b:12:08:ea:15: a9:aa:19:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzM6BJZGF+RIUGL7BGOvT8Hmv6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5 NDNGOTAxNDAeFw0yNjA3MTMwNDI5MjRaFw0yNjA3MTQwNTIyMjRaMDMxMTAvBgNV BAMTKDZCQkI5M0RGNEU5RjkwQkMxQTRFN0RGMDJGNTVFMDk3MkI4QTUzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5b18Dp2S7zrSKXYXN/UuAbKvr v6ZiwNep0pDtM+wpRFvbwH1qFkVMxZgiB+uArR0Fxy7XtAi8PPw0GlsJGXqYgiM+ vkIUwamWCR84FEOhMF7iSSdUdgxGuiGf/dO1RxbkxlIaays7mAyv7C8A2l6HFdaz mdGJuyUq7zla+6rjGLknM/zOa+wOInNDIvmJXAvCvJIEKn9qFzkgFTln+cCfTG6Z qhrPpYWna9y9wIUNQz+Z9SZhXFz5yTJMhMDrP6jXoRdaWnucsgrr+R/MxTUp58iV /sYNhrFxMWR7yb0Nn3vzstNDxb8WpDnSw5HwBvxlSY8eX8+5HL7OgEOMG62dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa7uT306fkLwaTn3wL1XglyuKU2EwHwYDVR0j BBgwFoAUV6HDfCBU+0n7EsbsffILd5Q/kBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhNTIwNDUtYTZmYy00NWIxLWJlNTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0My MDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5NDNGOTAxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81N0ExQzM3QzIwNTRGQjQ5RkIxMkM2RUM3REYyMEI3Nzk0M0Y5 MDE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBC Nzc5NDNGOTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdFQ/NvVAoBtIaAD43fQg4j4dtQORkDhMnQ q71C6l5fvwLZ3RpWSp2ZpmBpVlfle9x0vWmt8m6RiB30nOP37dB1jc+6ZqHrbwwU 4f/vzvckkmMhwcpWRW/9Es6OTLo8FST6xQhsPlKCHYhzqYSg17JVWArpmfV1t29S Hl3MjoY1IhgINcTiBF0FEqk2CYwNjCrL/McO4lNq41eyhsQC/HqyDQQuX3gUR3nz RmOcPPK4ADdERH2Fjv2hDU4rDcMOi0ngO6PozMyzZ9tIncRMvQSeSp3aTFfQbPPf y3XFrpQ5AuUUJrageXsYk0svHlkRhXGiVm5T5SSbEgjqFamqGX0= -----END CERTIFICATE-----Generated at Mon Jul 13 11:35:47 2026 by rpki-client