
$ rpki-client -vvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
File: E57A1275BA6338436B9AC4AE519D143B5747116B.mft (raw, json)
Hash identifier: ZYe4owXIbMeFWAy1fNkzC+z9rFOZ8RDQTEAkplbT9MY=
Subject key identifier: 33:1E:00:8D:50:87:12:D7:4A:6D:6A:3E:DA:B6:D9:43:5B:7B:18:0D
Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
Certificate issuer: /CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Certificate serial: 20F60FAFD1CBD74A2B38C0DEB7A66D1642E4D5AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 21:05:35 +0000
Manifest this update: Tue 02 Jun 2026 21:00:35 +0000
Manifest next update: Thu 04 Jun 2026 00:26:35 +0000
Files and hashes: 1: E57A1275BA6338436B9AC4AE519D143B5747116B.crl (hash: 9XHjdHBtma1ezoJ+LmH/K8ogCtoykwRvl2NjtffGsNQ=)
2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 00:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f6:0f:af:d1:cb:d7:4a:2b:38:c0:de:b7:a6:6d:16:42:e4:d5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Validity
Not Before: Jun 2 21:00:35 2026 GMT
Not After : Jun 4 00:26:35 2026 GMT
Subject: CN=331E008D508712D74A6D6A3EDAB6D9435B7B180D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:85:04:96:25:1a:73:d3:27:4f:56:d6:f4:
2a:03:6c:c1:f4:84:b4:68:ac:6a:c6:e6:87:46:e4:
c3:03:02:21:b9:9e:a5:dd:a9:12:7b:57:66:4f:9a:
b9:7d:23:17:91:d7:7b:75:33:bd:41:6d:54:ba:21:
58:cf:df:22:d9:2b:19:6f:1f:8f:d6:c9:18:db:ab:
be:d0:06:90:a3:be:1f:ad:d3:52:45:2c:8d:b7:4f:
c6:f8:d6:c0:63:59:b5:57:ac:e5:61:30:03:c7:5c:
14:f4:26:ea:15:5c:31:5f:7e:3e:77:b1:43:9e:3b:
b6:4c:49:f0:c7:9d:79:8e:d2:80:f7:c8:77:12:54:
92:86:d6:77:52:87:e3:c7:d1:3f:78:a9:1d:73:38:
71:dd:e9:6b:38:74:b3:ad:f9:8e:92:6e:62:72:78:
2f:17:e3:59:84:39:18:df:9b:9c:67:4d:4c:62:6f:
92:1a:af:96:0d:d8:24:4f:7c:c0:a7:e6:89:e9:76:
b8:73:8b:60:80:4c:b6:e0:3c:7b:c2:50:11:eb:99:
06:87:af:6c:74:57:09:15:d5:ea:6c:88:9d:c2:b0:
30:23:db:cf:b4:0c:61:ba:71:5f:eb:f4:fc:94:f9:
0f:d6:80:b9:54:91:8b:da:0a:da:89:d3:28:f7:5f:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:00:8D:50:87:12:D7:4A:6D:6A:3E:DA:B6:D9:43:5B:7B:18:0D
X509v3 Authority Key Identifier:
keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:12:a4:c8:a2:03:37:ba:c3:24:e1:c7:e5:16:5b:9f:dc:1e:
f0:3f:fb:7f:8e:b7:f6:f6:0c:03:3b:4c:c0:89:b7:43:af:f6:
23:1c:8d:45:16:7c:38:70:db:48:c4:fb:d4:16:db:a5:59:f0:
4f:39:44:14:61:8b:51:ec:80:85:d3:cd:1f:64:c3:a2:c1:01:
a3:d6:2a:4e:d8:e6:3e:c1:86:80:66:17:3c:fb:be:7b:dc:01:
b4:01:04:7f:af:73:10:eb:90:6c:58:d2:f6:de:59:12:4e:91:
af:66:8d:71:a2:ff:37:2d:5e:41:b2:06:dd:27:51:99:c7:8f:
d4:39:3b:56:7f:b1:21:41:4b:60:8f:92:b3:12:fe:7d:74:30:
2e:c4:0e:2c:9e:4c:e4:a9:dc:66:35:08:6e:82:a2:d3:8d:e2:
eb:44:e4:31:75:70:8c:a9:10:14:31:dc:d0:ba:b9:cf:44:fb:
48:bc:5f:92:60:d3:8e:68:64:6a:18:be:c4:d1:af:6e:af:fe:
cb:d5:d4:75:e0:82:a3:b6:74:3e:47:3f:c2:42:34:27:60:d8:
c9:f7:73:60:2f:9c:5c:22:eb:5f:e8:53:58:95:7a:6d:dc:c9:
d5:b7:7e:de:2a:59:59:4b:64:8e:d7:d6:a5:3c:e5:9e:08:8b:
f2:50:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:32 2026 by rpki-client