$ rpki-client -vvf rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft File: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft (raw, json) Hash identifier: 0w+pBdUzZMqC9psCxyGOAwA4KMEI2XSJONP09Lviek0= Subject key identifier: 31:9F:F3:C6:E4:67:A0:9C:9E:C0:0E:C1:4F:D4:18:06:F0:58:C4:4D Authority key identifier: 57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 Certificate issuer: /CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Certificate serial: 153F21603583C90A6D1B5B59EB397720A96D4A13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:16:24 +0000 Manifest this update: Tue 12 May 2026 10:11:24 +0000 Manifest next update: Wed 13 May 2026 13:24:24 +0000 Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: 98Zyj+fTMsxtD+mvmsmI4mvcK/mVqZbbqGkLKnUzRb8=) 2: 57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl (hash: kzRXe4ZkYNgL06De6RC7170ZooUzK7Xi3Hl5kOSzdAI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3f:21:60:35:83:c9:0a:6d:1b:5b:59:eb:39:77:20:a9:6d:4a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A1C37C2054FB49FB12C6EC7DF20B77943F9014 Validity Not Before: May 12 10:11:24 2026 GMT Not After : May 13 13:24:24 2026 GMT Subject: CN=319FF3C6E467A09C9EC00EC14FD41806F058C44D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:aa:94:7e:4c:d5:83:c2:8e:a8:b5:31:86: 00:21:92:1e:b0:2d:61:b0:c3:fb:76:dd:2c:b5:e3: 33:74:f9:99:fc:78:04:34:a3:2a:21:79:68:12:35: 3d:11:c2:f0:82:82:15:98:a5:eb:7d:f5:02:ec:8d: 8f:c6:db:65:49:07:a7:0a:b2:85:6d:42:21:fa:94: 59:c1:eb:61:2a:b0:d6:31:ac:c2:f8:f6:37:fb:93: 34:fa:c9:01:c0:13:60:2d:c7:71:37:96:ea:fa:a7: 66:a1:1a:79:7f:ce:f3:77:ba:f1:f1:7f:57:30:cb: 17:ad:f0:42:28:4e:9a:fb:9b:34:80:93:a1:e5:d9: ac:2b:21:69:47:21:97:3c:46:2a:30:a0:96:26:3c: 99:58:94:8e:ca:18:3f:26:d9:7f:a9:7d:b9:b0:be: cf:e3:45:14:65:9b:2c:63:6e:f4:9f:fa:06:1a:07: 29:12:28:63:b2:f0:01:e9:9d:32:27:5a:2d:2c:99: ae:72:f9:05:c0:35:25:c0:66:20:18:5a:c4:9d:6b: 41:18:e6:36:89:59:22:1c:c0:b8:dd:f7:5d:06:6e: df:f7:ee:a4:fc:2a:fb:10:7c:5e:e6:08:d4:e9:18: 81:bc:e5:d1:74:ec:52:95:87:93:9a:3f:ad:78:b2: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9F:F3:C6:E4:67:A0:9C:9E:C0:0E:C1:4F:D4:18:06:F0:58:C4:4D X509v3 Authority Key Identifier: keyid:57:A1:C3:7C:20:54:FB:49:FB:12:C6:EC:7D:F2:0B:77:94:3F:90:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/57A1C37C2054FB49FB12C6EC7DF20B77943F9014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7d:34:fd:ea:00:96:0d:89:45:4b:c4:82:ac:d3:2b:d8:07: 53:82:e4:f7:20:22:3b:a7:83:1d:d7:08:40:4c:31:57:a8:37: 75:b0:b7:8c:75:f0:ce:53:6e:cb:08:1d:93:9e:7d:12:87:ca: 73:3a:90:a8:0f:69:80:2a:e0:bb:21:1e:e7:93:64:d7:be:48: db:5e:ee:af:6f:ff:f8:e3:27:dd:dc:0a:a0:38:26:48:3c:59: 57:d2:a0:42:7b:dd:7b:6b:7c:f1:e0:63:85:4a:e8:62:12:ca: 2e:58:af:51:17:f2:c4:22:52:1b:0b:94:83:32:b4:da:ee:f4: f0:c3:42:e8:0c:e8:0c:34:c1:b8:7e:d0:0e:d1:16:31:64:b6: 24:ae:a5:3d:36:2e:80:aa:04:91:a7:90:5e:ce:2b:ff:33:7c: b9:82:b5:58:e0:bf:70:e5:d6:aa:38:a4:44:3c:5d:62:93:49: 5b:d7:10:e3:bf:d8:c6:03:2c:2b:a0:dd:f6:ae:d0:bc:eb:e9: 2b:f3:97:02:a9:32:56:ec:a9:e6:fa:9e:a1:b7:7d:3b:a7:98: 67:a3:a6:36:d6:19:a2:fe:fd:21:66:71:31:42:fd:07:87:a6: c7:be:03:be:af:02:41:9f:68:cf:c4:81:5a:57:d5:98:5b:60: 68:78:ae:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFT8hYDWDyQptG1tZ6zl3IKltShMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5 NDNGOTAxNDAeFw0yNjA1MTIxMDExMjRaFw0yNjA1MTMxMzI0MjRaMDMxMTAvBgNV BAMTKDMxOUZGM0M2RTQ2N0EwOUM5RUMwMEVDMTRGRDQxODA2RjA1OEM0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyqqUfkzVg8KOqLUxhgAhkh6w LWGww/t23Sy14zN0+Zn8eAQ0oyoheWgSNT0RwvCCghWYpet99QLsjY/G22VJB6cK soVtQiH6lFnB62EqsNYxrML49jf7kzT6yQHAE2Atx3E3lur6p2ahGnl/zvN3uvHx f1cwyxet8EIoTpr7mzSAk6Hl2awrIWlHIZc8RiowoJYmPJlYlI7KGD8m2X+pfbmw vs/jRRRlmyxjbvSf+gYaBykSKGOy8AHpnTInWi0sma5y+QXANSXAZiAYWsSda0EY 5jaJWSIcwLjd910Gbt/37qT8KvsQfF7mCNTpGIG85dF07FKVh5OaP614svJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZ/zxuRnoJyewA7BT9QYBvBYxE0wHwYDVR0j BBgwFoAUV6HDfCBU+0n7EsbsffILd5Q/kBQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhNTIwNDUtYTZmYy00NWIxLWJlNTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0My MDU0RkI0OUZCMTJDNkVDN0RGMjBCNzc5NDNGOTAxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81N0ExQzM3QzIwNTRGQjQ5RkIxMkM2RUM3REYyMEI3Nzk0M0Y5 MDE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvNTdBMUMzN0MyMDU0RkI0OUZCMTJDNkVDN0RGMjBC Nzc5NDNGOTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB9NP3qAJYNiUVLxIKs0yvYB1OC5PcgIjun gx3XCEBMMVeoN3Wwt4x18M5TbssIHZOefRKHynM6kKgPaYAq4LshHueTZNe+SNte 7q9v//jjJ93cCqA4Jkg8WVfSoEJ73XtrfPHgY4VK6GISyi5Yr1EX8sQiUhsLlIMy tNru9PDDQugM6Aw0wbh+0A7RFjFktiSupT02LoCqBJGnkF7OK/8zfLmCtVjgv3Dl 1qo4pEQ8XWKTSVvXEOO/2MYDLCug3fau0Lzr6SvzlwKpMlbsqeb6nqG3fTunmGej pjbWGaL+/SFmcTFC/QeHpse+A76vAkGfaM/EgVpX1ZhbYGh4rgw= -----END CERTIFICATE-----Generated at Wed May 13 03:16:18 2026 by rpki-client