$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft File: 57E460937137B652DFB7C6EB8A5BA887C395741C.mft (raw, json) Hash identifier: 1NXUaLYSYPIEUQxSbVL6xzAZC9d6Fzl5eTf9zd+uwBM= Subject key identifier: 28:94:A7:C2:C7:9F:B9:66:26:C8:20:9C:BB:4D:7C:C9:71:F0:FF:B2 Authority key identifier: 57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C Certificate issuer: /CN=57E460937137B652DFB7C6EB8A5BA887C395741C Certificate serial: 68A4D1EE303835702200B31AD4EE72CF83AF0DF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:53:03 +0000 Manifest this update: Thu 24 Sep 2026 01:48:03 +0000 Manifest next update: Fri 25 Sep 2026 02:55:03 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: WQnLXXfXQahSkhJIevnL949Xfgw8fPIR5kTo/AbuQac=) 2: 57E460937137B652DFB7C6EB8A5BA887C395741C.crl (hash: ntq2UUQkmwkiJ3rT00BoaxyKD7XocCfL76N2rqa6bYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a4:d1:ee:30:38:35:70:22:00:b3:1a:d4:ee:72:cf:83:af:0d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57E460937137B652DFB7C6EB8A5BA887C395741C Validity Not Before: Sep 24 01:48:03 2026 GMT Not After : Sep 25 02:55:03 2026 GMT Subject: CN=2894A7C2C79FB96626C8209CBB4D7CC971F0FFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:46:a0:98:9b:09:9a:d7:23:41:1c:8c:63: 87:e1:57:5e:6c:19:0b:a6:de:ae:99:ce:de:c4:a0: 3e:f7:dc:0d:64:d6:ac:88:c6:99:ef:cd:f3:88:0a: 41:a4:c0:7f:fd:61:f2:91:2f:8c:b7:b8:b2:6e:4c: a7:16:a6:65:1b:09:12:74:d6:f1:06:c2:62:17:cc: 05:ba:a1:7c:42:af:9b:0c:0e:ff:ab:08:a6:44:3d: f6:9a:eb:aa:c5:6f:fa:9c:11:d3:ed:66:6e:28:d1: 32:ea:f8:cc:2a:28:d3:e3:3e:b7:92:b4:5c:6e:60: 4e:7b:c0:19:5f:10:1a:1b:4a:bb:de:5c:e7:91:30: 6a:26:f1:aa:95:a3:31:00:54:dd:05:cc:f5:fb:79: 4f:83:a5:da:04:3a:5b:e9:fe:ba:fd:fb:d5:3a:8a: 63:70:5b:57:8f:78:79:ce:54:d2:cf:b9:b9:df:c4: bb:c6:17:e4:70:15:8d:27:b0:3a:b3:38:3d:b5:84: e7:eb:58:60:3f:bd:8f:05:7b:e8:5e:85:6b:ee:17: ad:2f:3b:9f:2b:9b:f7:24:53:24:78:de:1c:db:bf: e1:05:1c:af:2b:b2:ab:13:70:96:e4:43:ea:d6:24: d3:67:1f:83:a0:54:22:73:4c:5e:73:be:43:07:46: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:A7:C2:C7:9F:B9:66:26:C8:20:9C:BB:4D:7C:C9:71:F0:FF:B2 X509v3 Authority Key Identifier: keyid:57:E4:60:93:71:37:B6:52:DF:B7:C6:EB:8A:5B:A8:87:C3:95:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/57E460937137B652DFB7C6EB8A5BA887C395741C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/57E460937137B652DFB7C6EB8A5BA887C395741C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:dd:28:30:ba:5b:18:60:3f:04:8a:b6:43:24:34:de:89: a4:90:9c:b5:c0:b8:c4:5a:31:65:ad:e9:44:a0:fa:23:49:70: fc:90:8d:08:28:fd:43:4f:77:50:d3:2f:fc:56:5b:ff:2a:23: 68:c4:32:ab:c4:52:6f:5c:28:1c:7c:2f:be:38:68:e6:c6:f1: 45:41:a5:52:be:95:a5:c6:c5:96:24:32:42:a3:b1:de:68:dd: 3e:a1:c3:1a:b6:9a:49:71:0a:63:c6:a9:83:a9:b2:c0:90:a9: a1:9a:5b:94:23:a7:bf:b0:e8:ae:5b:4a:f3:17:64:ad:ea:0c: a8:19:d9:a2:a7:63:53:34:2e:ef:2a:16:d5:bc:cc:31:8b:0b: 87:07:56:0b:3e:4f:0a:c9:f1:5c:2e:77:3e:c7:42:7a:e3:52: 0c:99:9d:a7:ea:0e:f7:ce:3c:0b:3e:9c:42:55:49:4c:2c:a3: d3:89:41:f4:2c:cc:f9:c2:be:c7:ab:ff:fc:e9:45:56:60:9c: c8:75:6e:7d:88:c5:48:a2:62:54:de:e4:20:92:67:7c:f9:3b: 0f:8e:82:0d:0b:4a:82:2a:8c:9c:9b:29:81:72:38:65:a3:92: 6c:0c:e8:9e:57:de:f3:13:17:ae:86:91:51:e1:3d:03:6b:31: 61:9f:40:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKTR7jA4NXAiALMa1O5yz4OvDfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdFNDYwOTM3MTM3QjY1MkRGQjdDNkVCOEE1QkE4ODdD Mzk1NzQxQzAeFw0yNjA5MjQwMTQ4MDNaFw0yNjA5MjUwMjU1MDNaMDMxMTAvBgNV BAMTKDI4OTRBN0MyQzc5RkI5NjYyNkM4MjA5Q0JCNEQ3Q0M5NzFGMEZGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXfkagmJsJmtcjQRyMY4fhV15s GQum3q6Zzt7EoD733A1k1qyIxpnvzfOICkGkwH/9YfKRL4y3uLJuTKcWpmUbCRJ0 1vEGwmIXzAW6oXxCr5sMDv+rCKZEPfaa66rFb/qcEdPtZm4o0TLq+MwqKNPjPreS tFxuYE57wBlfEBobSrveXOeRMGom8aqVozEAVN0FzPX7eU+DpdoEOlvp/rr9+9U6 imNwW1ePeHnOVNLPubnfxLvGF+RwFY0nsDqzOD21hOfrWGA/vY8Fe+hehWvuF60v O58rm/ckUyR43hzbv+EFHK8rsqsTcJbkQ+rWJNNnH4OgVCJzTF5zvkMHRuqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJSnwsefuWYmyCCcu018yXHw/7IwHwYDVR0j BBgwFoAUV+Rgk3E3tlLft8briluoh8OVdBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQ2MTM3YWUtMmVmYi00M2MwLWJkYjctNDNmNWQ5MzljZjBjLzAvNTdFNDYwOTM3 MTM3QjY1MkRGQjdDNkVCOEE1QkE4ODdDMzk1NzQxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81N0U0NjA5MzcxMzdCNjUyREZCN0M2RUI4QTVCQTg4N0MzOTU3 NDFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvNTdFNDYwOTM3MTM3QjY1MkRGQjdDNkVCOEE1QkE4 ODdDMzk1NzQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHT3SgwulsYYD8EirZDJDTeiaSQnLXAuMRa MWWt6USg+iNJcPyQjQgo/UNPd1DTL/xWW/8qI2jEMqvEUm9cKBx8L744aObG8UVB pVK+laXGxZYkMkKjsd5o3T6hwxq2mklxCmPGqYOpssCQqaGaW5Qjp7+w6K5bSvMX ZK3qDKgZ2aKnY1M0Lu8qFtW8zDGLC4cHVgs+TwrJ8Vwudz7HQnrjUgyZnafqDvfO PAs+nEJVSUwso9OJQfQszPnCvser//zpRVZgnMh1bn2IxUiiYlTe5CCSZ3z5Ow+O gg0LSoIqjJybKYFyOGWjkmwM6J5X3vMTF66GkVHhPQNrMWGfQFM= -----END CERTIFICATE-----Generated at Thu Sep 24 04:19:47 2026 by rpki-client