
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier: Xve0P7Swn/1Gubl7cjg7NhMVlPbf7c6+1WsXuCHdKUY=
Subject key identifier: 09:8D:69:1F:5D:9F:C7:6D:18:FA:44:18:F0:C0:50:20:7A:8E:5F:D8
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial: 3FB88A74D84791F6861FDEEEFA2B8E46E054317D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number: B9
Signing time: Fri 18 Sep 2026 00:49:10 +0000
Manifest this update: Fri 18 Sep 2026 00:44:10 +0000
Manifest next update: Sat 19 Sep 2026 04:31:10 +0000
Files and hashes: 1: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: 3Yx7YHUIu88ydM1uiSDJXC1NRIb8whTVNTG/extbFJU=)
2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 04:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b8:8a:74:d8:47:91:f6:86:1f:de:ee:fa:2b:8e:46:e0:54:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Validity
Not Before: Sep 18 00:44:10 2026 GMT
Not After : Sep 19 04:31:10 2026 GMT
Subject: CN=098D691F5D9FC76D18FA4418F0C050207A8E5FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fb:d2:c3:9e:ee:f3:0e:22:20:5d:93:83:52:
b1:4c:c2:c4:92:74:a9:3a:24:ca:3e:03:c9:05:ff:
40:57:4a:e3:ea:15:bd:75:bd:90:9d:b0:35:3a:48:
53:f3:29:7a:4a:37:2a:e9:f3:7c:7e:25:bc:38:02:
f0:20:88:bd:a7:53:1a:ff:37:2c:7d:da:3f:94:b8:
b6:7f:a2:f8:45:a9:ba:1f:86:12:83:e4:04:b9:b3:
f3:4c:54:cb:a5:00:08:b6:fa:46:80:fe:35:4f:55:
cf:6c:8d:9c:cc:d8:4b:3e:7e:a7:d0:6f:62:ed:1a:
de:bc:72:bc:2a:4a:7f:19:bb:3d:30:4c:e1:9b:58:
e4:19:07:73:c5:c1:3e:2d:3f:54:be:7b:a4:92:1b:
a7:d3:05:e4:eb:dd:56:3c:b0:e9:4a:75:61:d7:39:
b0:f2:0d:b2:51:d9:3f:2e:a2:5f:39:9f:bf:c5:93:
4e:1d:a5:91:49:de:6e:05:8c:27:68:ce:c3:e5:53:
84:71:6f:03:59:1f:e3:6b:4f:ac:da:c8:74:bb:ef:
ba:e0:23:0b:8e:56:33:2a:cc:6d:64:40:58:93:36:
ca:d3:38:cb:8c:59:ea:89:2b:3f:94:ee:06:6c:29:
af:df:52:80:f1:ed:6f:54:b8:58:a1:09:90:3c:cf:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:69:1F:5D:9F:C7:6D:18:FA:44:18:F0:C0:50:20:7A:8E:5F:D8
X509v3 Authority Key Identifier:
keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bf:36:2b:8d:ff:75:85:5b:93:a6:27:fa:d6:a8:e4:84:07:
7f:90:7c:9a:c9:84:b9:73:d2:8a:6a:0d:fb:db:ec:ea:0f:a2:
d0:a5:1a:c7:af:42:d3:6f:5e:e9:9f:14:f3:cf:14:12:1a:26:
06:26:91:69:97:3a:14:72:00:de:36:ac:03:38:86:ac:dd:b0:
89:e9:3a:8a:f6:ed:2d:a1:58:0d:65:6d:ec:73:ab:8c:a6:22:
ea:fa:ed:ee:e3:1d:45:c0:79:08:b7:f7:50:fb:be:e3:91:74:
9c:c0:c3:ba:97:a6:66:cf:8f:be:70:ff:b4:ce:41:8c:c1:4d:
4f:79:1c:ae:f2:01:3c:2a:ff:22:dd:d8:90:5c:26:f3:d2:f8:
fe:8f:4b:2b:68:6e:ea:07:06:2d:0f:71:1c:79:f2:36:70:a8:
1c:27:af:05:84:4c:ff:ab:ef:dd:ac:ef:cc:e4:e7:4a:8a:b3:
59:bb:30:6b:f8:40:a6:5f:1c:b3:24:4e:66:9f:71:7c:88:6f:
39:b4:58:5f:aa:55:8f:17:f2:58:bd:dd:cc:62:fd:fa:3e:d9:
50:8d:18:27:b0:d1:bd:e7:8d:78:49:78:8a:d3:6d:53:ab:36:
90:24:dc:fc:28:a0:c8:1d:1a:fb:c9:fb:e1:cc:c2:35:4c:bb:
b4:84:a7:2f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP7iKdNhHkfaGH97u+iuORuBUMX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZF
MDY5QUY2QzAeFw0yNjA5MTgwMDQ0MTBaFw0yNjA5MTkwNDMxMTBaMDMxMTAvBgNV
BAMTKDA5OEQ2OTFGNUQ5RkM3NkQxOEZBNDQxOEYwQzA1MDIwN0E4RTVGRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH+9LDnu7zDiIgXZODUrFMwsSS
dKk6JMo+A8kF/0BXSuPqFb11vZCdsDU6SFPzKXpKNyrp83x+Jbw4AvAgiL2nUxr/
Nyx92j+UuLZ/ovhFqbofhhKD5AS5s/NMVMulAAi2+kaA/jVPVc9sjZzM2Es+fqfQ
b2LtGt68crwqSn8Zuz0wTOGbWOQZB3PFwT4tP1S+e6SSG6fTBeTr3VY8sOlKdWHX
ObDyDbJR2T8uol85n7/Fk04dpZFJ3m4FjCdozsPlU4RxbwNZH+NrT6zayHS777rg
IwuOVjMqzG1kQFiTNsrTOMuMWeqJKz+U7gZsKa/fUoDx7W9UuFihCZA8z6K7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCY1pH12fx20Y+kQY8MBQIHqOX9gwHwYDVR0j
BBgwFoAUBXCImSPD73Ah1hmyTzo8xuBpr2wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTEwYmUzNTMtNGFiOC00Yjc3LTk4OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTky
M0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZFMDY5QUY2Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNTcwODg5OTIzQzNFRjcwMjFENjE5QjI0RjNBM0NDNkUwNjlB
RjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4
OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTND
QzZFMDY5QUY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIS/NiuN/3WFW5OmJ/rWqOSEB3+QfJrJhLlz
0opqDfvb7OoPotClGsevQtNvXumfFPPPFBIaJgYmkWmXOhRyAN42rAM4hqzdsInp
Oor27S2hWA1lbexzq4ymIur67e7jHUXAeQi391D7vuORdJzAw7qXpmbPj75w/7TO
QYzBTU95HK7yATwq/yLd2JBcJvPS+P6PSytobuoHBi0PcRx58jZwqBwnrwWETP+r
792s78zk50qKs1m7MGv4QKZfHLMkTmafcXyIbzm0WF+qVY8X8li93cxi/fo+2VCN
GCew0b3njXhJeIrTbVOrNpAk3PwooMgdGvvJ++HMwjVMu7SEpy8=
-----END CERTIFICATE-----
Generated at Fri Sep 18 14:05:38 2026 by rpki-client