$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft File: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft (raw, json) Hash identifier: ScuRD+i9G8tqagOfcUNUskxycWB3/O8UEPlMP4nC1Dg= Subject key identifier: 7E:D3:63:75:0C:68:9C:A7:F2:FB:53:B3:83:67:4A:3A:CE:E2:D1:9A Authority key identifier: 57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85 Certificate issuer: /CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885 Certificate serial: 019720419778577A53780CF70405001823E13FE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:51:18 +0000 Manifest this update: Thu 24 Sep 2026 20:46:18 +0000 Manifest next update: Sat 26 Sep 2026 00:18:18 +0000 Files and hashes: 1: 57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl (hash: qqhFsy4bSsCEvFfPRmDVQdYBmzce3g+Ct2CwcrTkV1g=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: q/Jj/zrp2NwM8IIT1jpznDIyeMNRphvyuUe6dMIZGio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:20:41:97:78:57:7a:53:78:0c:f7:04:05:00:18:23:e1:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57444F1BEEDF846BC1D17397D3B43CD4D4BAD885 Validity Not Before: Sep 24 20:46:18 2026 GMT Not After : Sep 26 00:18:18 2026 GMT Subject: CN=7ED363750C689CA7F2FB53B383674A3ACEE2D19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:90:d6:08:e0:66:7f:24:a7:36:8c:97:fc: c9:77:21:0b:42:74:63:ed:f6:11:11:3e:50:8d:49: 84:f5:8c:9d:44:a8:87:2a:06:2e:2f:7a:57:ae:59: 47:90:cc:1c:28:d8:d9:cc:45:25:56:93:7f:bc:fc: 82:a9:09:ba:09:55:42:af:4f:40:eb:57:3c:68:8b: 47:18:f1:62:20:88:6b:44:0b:fe:1a:57:65:2f:48: 62:f9:58:37:1f:c4:7b:70:c2:46:c7:f6:e6:90:7c: d2:4e:06:b5:eb:94:20:b2:5a:e8:d7:dc:31:ff:b7: 25:9e:94:7c:df:71:9c:99:41:45:e3:9c:37:73:38: 55:eb:ee:b6:cb:a7:00:6a:f8:19:fe:6e:a6:d0:ef: 0a:97:43:21:7e:fd:3a:e1:ae:a9:8b:c4:09:fd:fc: f0:33:43:49:54:ee:3f:72:f2:3f:2b:ba:16:1f:ed: d7:bf:80:b5:13:62:fa:7f:51:77:29:74:1e:c6:a1: 8f:b0:d3:95:a9:0e:3a:29:65:ce:d6:97:ab:d7:8e: bd:28:fb:d2:4e:f1:eb:ff:30:a8:08:60:74:99:fd: 9a:c8:6f:97:35:79:ec:97:f6:55:06:94:75:f5:ee: 5c:05:eb:66:45:6a:19:f8:22:17:67:e8:a8:af:66: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D3:63:75:0C:68:9C:A7:F2:FB:53:B3:83:67:4A:3A:CE:E2:D1:9A X509v3 Authority Key Identifier: keyid:57:44:4F:1B:EE:DF:84:6B:C1:D1:73:97:D3:B4:3C:D4:D4:BA:D8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/57444F1BEEDF846BC1D17397D3B43CD4D4BAD885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:90:64:28:7a:c5:e8:f3:03:dc:55:40:72:ce:64:fa:2c:2e: ba:13:8b:81:45:f0:60:6a:ae:29:9d:ac:70:70:d2:c8:a7:44: a2:98:38:63:b6:2a:fd:a4:bc:18:cc:ca:b4:df:12:02:12:06: f4:40:25:a7:9f:a6:53:82:62:ba:32:5f:7b:c2:d3:27:04:74: 9c:65:48:fd:ae:31:d7:fa:3c:5c:7e:24:b5:e9:37:ff:c9:35: c1:58:d0:fb:9a:1f:54:3b:00:9c:3e:fe:93:08:b7:f1:0b:46: b5:fc:78:d4:9a:ab:6d:0f:ca:dc:ab:f5:ea:16:c1:8f:24:40: 09:fd:bc:3e:0b:e7:f4:a4:33:f6:55:e3:12:01:c4:b5:20:a1: 64:33:6b:85:f2:9b:ca:8f:04:f4:47:93:c2:4e:b9:8e:95:00: c7:cc:de:45:43:89:f0:fe:2e:c2:00:43:ed:03:89:8d:95:28: a0:6d:d0:1d:3c:51:57:69:fd:b0:de:3c:b6:18:70:1a:74:5f: a2:6b:cb:13:cb:fa:4a:e6:eb:12:66:d9:a5:e2:4a:9e:f9:bf: 14:88:94:fe:fb:7a:82:a6:68:7a:1d:fd:8b:d0:79:b4:e8:7b: b1:ba:be:59:07:22:48:85:41:f0:69:d9:d3:1d:94:2c:80:13: 67:74:95:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZcgQZd4V3pTeAz3BAUAGCPhP+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc0NDRGMUJFRURGODQ2QkMxRDE3Mzk3RDNCNDNDRDRE NEJBRDg4NTAeFw0yNjA5MjQyMDQ2MThaFw0yNjA5MjYwMDE4MThaMDMxMTAvBgNV BAMTKDdFRDM2Mzc1MEM2ODlDQTdGMkZCNTNCMzgzNjc0QTNBQ0VFMkQxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD95DWCOBmfySnNoyX/Ml3IQtC dGPt9hERPlCNSYT1jJ1EqIcqBi4veleuWUeQzBwo2NnMRSVWk3+8/IKpCboJVUKv T0DrVzxoi0cY8WIgiGtEC/4aV2UvSGL5WDcfxHtwwkbH9uaQfNJOBrXrlCCyWujX 3DH/tyWelHzfcZyZQUXjnDdzOFXr7rbLpwBq+Bn+bqbQ7wqXQyF+/TrhrqmLxAn9 /PAzQ0lU7j9y8j8ruhYf7de/gLUTYvp/UXcpdB7GoY+w05WpDjopZc7Wl6vXjr0o +9JO8ev/MKgIYHSZ/ZrIb5c1eeyX9lUGlHX17lwF62ZFahn4Ihdn6KivZnxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftNjdQxonKfy+1Ozg2dKOs7i0ZowHwYDVR0j BBgwFoAUV0RPG+7fhGvB0XOX07Q81NS62IUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY0ZTI2YzUtYjU2NC00NzRlLTkyZGMtYmQ5YzEzOTc3Y2Q1LzAvNTc0NDRGMUJF RURGODQ2QkMxRDE3Mzk3RDNCNDNDRDRENEJBRDg4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81NzQ0NEYxQkVFREY4NDZCQzFEMTczOTdEM0I0M0NENEQ0QkFE ODg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvNTc0NDRGMUJFRURGODQ2QkMxRDE3Mzk3RDNCNDND RDRENEJBRDg4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuQZCh6xejzA9xVQHLOZPosLroTi4FF8GBq rimdrHBw0sinRKKYOGO2Kv2kvBjMyrTfEgISBvRAJaefplOCYroyX3vC0ycEdJxl SP2uMdf6PFx+JLXpN//JNcFY0PuaH1Q7AJw+/pMIt/ELRrX8eNSaq20Pytyr9eoW wY8kQAn9vD4L5/SkM/ZV4xIBxLUgoWQza4Xym8qPBPRHk8JOuY6VAMfM3kVDifD+ LsIAQ+0DiY2VKKBt0B08UVdp/bDePLYYcBp0X6JryxPL+krm6xJm2aXiSp75vxSI lP77eoKmaHod/YvQebToe7G6vlkHIkiFQfBp2dMdlCyAE2d0lZA= -----END CERTIFICATE-----Generated at Fri Sep 25 04:46:33 2026 by rpki-client