
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
File: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft (raw, json)
Hash identifier: yepHtZ7uwDpo3KMDndwy6xPsNp0b2F54cdZYUqXU00I=
Subject key identifier: E6:D4:2F:F3:7C:DD:D2:F5:8B:34:74:7B:07:C2:45:BE:F2:11:28:45
Authority key identifier: 57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85
Certificate issuer: /CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
Certificate serial: 4FFEE729B87B9DAAA28FF980821009FE33374D88
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 08:18:51 +0000
Manifest this update: Thu 17 Sep 2026 08:13:51 +0000
Manifest next update: Fri 18 Sep 2026 08:53:51 +0000
Files and hashes: 1: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl (hash: lRQeOgZ0whhuhC8BNk+WqNkJtxKVkqPZqNa6kf1Hwsg=)
2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: q/Jj/zrp2NwM8IIT1jpznDIyeMNRphvyuUe6dMIZGio=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl
rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fe:e7:29:b8:7b:9d:aa:a2:8f:f9:80:82:10:09:fe:33:37:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885
Validity
Not Before: Sep 17 08:13:51 2026 GMT
Not After : Sep 18 08:53:51 2026 GMT
Subject: CN=E6D42FF37CDDD2F58B34747B07C245BEF2112845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:ac:0d:5b:1e:cb:f0:6c:29:bf:3c:d6:1a:
3d:20:2e:42:c8:e9:37:35:fd:5c:c2:65:ed:be:ab:
6e:38:8a:88:8d:a4:42:00:f3:3b:7e:79:84:f0:8d:
03:be:7f:f7:13:a5:18:c6:a9:c3:b1:f8:2e:58:11:
ce:15:86:ba:01:0a:3c:83:d7:c9:14:10:49:08:bf:
9f:c8:bd:29:b0:da:70:1e:5a:de:f7:88:c1:a3:5b:
1e:e6:73:4d:4b:60:79:77:82:99:de:5b:49:27:83:
98:22:85:e1:07:14:3b:7b:94:aa:b4:c8:17:77:89:
9c:f9:1c:41:7a:70:a5:f2:11:c3:71:b0:91:92:c2:
70:08:4b:ce:47:fa:4f:60:f7:98:73:9f:38:b1:5c:
f0:7d:ba:46:b9:d9:f1:bb:2b:db:d0:52:87:5a:3a:
8e:44:5b:e2:81:88:9a:66:32:cf:12:e4:b1:3f:9c:
05:66:14:ad:31:87:3c:7e:e7:f6:40:af:df:e6:27:
29:e0:8f:c9:36:7b:b1:eb:ef:1c:04:5b:a1:46:20:
74:3b:26:f5:ee:21:0d:ff:1e:c3:1b:ed:7a:22:55:
07:79:ec:8e:ad:f5:68:79:87:4c:af:7e:f2:1c:ac:
b5:fc:d5:ea:ba:70:51:a8:1d:5e:55:3b:15:c4:3a:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:2F:F3:7C:DD:D2:F5:8B:34:74:7B:07:C2:45:BE:F2:11:28:45
X509v3 Authority Key Identifier:
keyid:57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:df:b4:d5:63:db:79:18:b2:2a:53:ee:58:bb:f1:01:22:ee:
33:a8:38:54:46:f6:25:f3:4f:9e:41:03:85:7e:ea:64:86:20:
6b:33:a4:da:f2:fc:ac:78:b9:bb:c0:ff:15:59:e8:8e:30:df:
66:09:7b:cd:e8:44:c9:78:98:f8:7e:5d:51:1c:4b:59:2f:0a:
c0:ed:70:28:c6:b8:ce:59:df:b2:ed:df:b9:1f:c3:c2:52:f7:
f6:32:07:c2:19:cd:56:af:be:22:87:be:80:a4:2e:5d:d7:2b:
d9:ea:67:80:8c:5b:e0:28:11:61:b1:8d:a6:a6:22:da:b9:e6:
13:ec:c6:dd:0a:79:1e:a5:b4:28:8f:0d:3b:cc:d8:d6:0e:f4:
42:bb:f0:cd:00:72:e3:d6:ec:95:43:28:54:9f:6e:fe:6f:33:
4a:12:ed:98:4a:03:22:77:9c:a4:6a:6b:92:3b:53:8b:e8:e5:
30:51:e2:b4:b2:c1:4e:ec:6d:0a:d8:6d:ea:8c:c6:cb:1e:ec:
0b:6d:8e:d4:b7:43:2b:2d:2c:a2:3c:03:05:ab:b5:33:42:a2:
e3:66:88:5c:99:b7:20:16:e6:a3:11:e1:e8:e2:c6:b6:8f:b4:
dd:7e:46:9a:84:6f:45:d3:af:58:df:87:a1:23:f1:da:50:e8:
c9:a0:69:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:59 2026 by rpki-client