
$ rpki-client -vvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json)
Hash identifier: p1OoY9xr9SxUZ8NdyDi1cSMjmYBnkqwPfU40dbpVSH8=
Subject key identifier: 21:F9:97:50:0F:B6:B9:C1:86:77:CD:E0:E3:C3:10:C2:BD:0E:89:7D
Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Certificate serial: 724FEBEF68811E8E341E9D9390AF2A9ABC21F688
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 05:59:02 +0000
Manifest this update: Wed 13 May 2026 05:54:02 +0000
Manifest next update: Thu 14 May 2026 06:54:02 +0000
Files and hashes: 1: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=)
2: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: shdY/aMbpRxf856cBJeN1TafCSwazA1gf7XMBekJ68g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4f:eb:ef:68:81:1e:8e:34:1e:9d:93:90:af:2a:9a:bc:21:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C
Validity
Not Before: May 13 05:54:02 2026 GMT
Not After : May 14 06:54:02 2026 GMT
Subject: CN=21F997500FB6B9C18677CDE0E3C310C2BD0E897D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:91:11:3d:5d:15:74:ea:39:3e:0d:f5:61:
d1:01:c2:15:3f:2e:19:34:fb:a6:b9:25:3b:68:88:
e5:a0:8f:10:2f:cb:28:07:da:16:f3:5c:af:77:c7:
ea:64:d9:09:c1:06:c5:01:e8:12:f5:7a:0e:c1:20:
23:c5:bd:6b:ac:fa:ac:81:71:5a:bf:24:56:f3:8a:
7a:e1:b5:d8:7f:47:39:a4:11:7e:14:21:f6:1c:85:
86:0d:5f:99:47:f8:45:67:6a:a8:b9:d9:12:67:87:
9d:16:39:7c:4d:a6:2c:bc:d9:02:e1:23:30:75:ca:
50:58:6e:5d:9e:60:41:57:59:a5:be:06:e7:25:2d:
fb:2f:d8:33:43:e7:76:ef:d2:5f:1f:36:c5:98:73:
d3:20:56:fb:68:db:42:00:82:93:e7:37:ed:f5:7c:
11:f9:42:51:a2:35:9f:da:20:ac:42:5a:ae:37:43:
48:e8:51:28:36:35:f1:61:d6:02:ed:71:bb:72:7b:
bb:b8:12:02:5f:2c:b9:8d:fd:42:56:43:1e:de:24:
de:bf:ea:3e:d0:1b:34:58:e4:82:1a:5b:9a:38:40:
40:cb:86:59:4c:cb:ed:78:20:9e:f0:ae:41:ae:41:
89:25:6f:37:87:83:f0:37:63:88:70:e2:3c:16:a9:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:97:50:0F:B6:B9:C1:86:77:CD:E0:E3:C3:10:C2:BD:0E:89:7D
X509v3 Authority Key Identifier:
keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:81:0e:49:37:cf:55:e5:b2:00:e9:cb:c8:55:d3:75:e4:b9:
7b:6e:e8:86:8f:09:c3:83:82:8d:2f:e5:37:47:01:a7:02:04:
68:35:16:b2:58:03:3a:3a:47:3f:57:04:99:cd:03:47:11:cf:
52:48:d5:20:a7:38:35:94:35:d1:79:01:09:d5:12:10:5a:7c:
e6:ce:a1:3c:4b:58:fb:11:09:4f:d5:32:78:90:bf:45:64:94:
31:28:83:63:af:f4:87:18:a7:1b:4c:e5:12:88:46:8d:4f:b8:
f4:5c:e5:92:c1:b4:f7:0b:ac:0a:99:2c:95:f5:1c:34:b5:82:
72:85:d2:0e:c1:70:2b:c7:b3:75:2e:45:dc:81:32:62:8e:23:
79:44:d0:d3:32:7d:b8:ed:d6:45:3b:99:73:89:81:ec:ac:4e:
48:f1:06:63:fd:73:2a:f0:fc:87:6c:fa:44:22:b7:0c:a9:27:
f3:8c:4c:67:e0:3a:56:04:df:6c:46:30:7c:0a:d3:29:99:ea:
78:1c:f8:00:ab:ce:b3:c0:d2:cf:88:76:69:56:37:9d:9f:92:
c6:59:fd:39:87:f2:44:28:42:79:22:83:17:9f:b6:69:b5:93:
0d:54:3c:ba:4c:b6:3d:ed:fa:eb:b8:50:9c:33:35:83:49:47:
0e:24:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:09 2026 by rpki-client