
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
File: E57A1275BA6338436B9AC4AE519D143B5747116B.mft (raw, json)
Hash identifier: JVdcsA0Cx5lgQO0ggJC2YnQdAI/57J5CCcrmbTuCG5A=
Subject key identifier: B7:47:A5:90:AF:06:46:06:9C:8F:22:20:68:47:CB:88:D9:2A:20:35
Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
Certificate issuer: /CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Certificate serial: 18F7CEE2F72D8C50618D5B9E6E397238F850C1C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 13:50:21 +0000
Manifest this update: Mon 02 Nov 2026 13:45:21 +0000
Manifest next update: Tue 03 Nov 2026 15:41:21 +0000
Files and hashes: 1: E57A1275BA6338436B9AC4AE519D143B5747116B.crl (hash: tCZzS75GJdRo3kPooNgzbaAvR7JkQH6Qe36AOI6TvI8=)
2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 12:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:ce:e2:f7:2d:8c:50:61:8d:5b:9e:6e:39:72:38:f8:50:c1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Validity
Not Before: Nov 2 13:45:21 2026 GMT
Not After : Nov 3 15:41:21 2026 GMT
Subject: CN=B747A590AF0646069C8F22206847CB88D92A2035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:45:1a:62:d3:7b:5a:2e:34:84:12:c8:44:
aa:6a:b7:99:62:34:da:38:48:ab:f2:ed:ad:24:ea:
20:24:76:c9:00:e9:75:dd:b8:33:2e:e9:80:95:7c:
d4:cd:42:7d:9a:22:86:a3:23:e5:ef:1c:c7:60:69:
4f:d7:0b:ff:58:fd:7d:48:9a:56:e1:60:a8:c6:8b:
fa:77:3f:6c:08:3f:1a:86:5d:f7:0d:f6:f2:d9:4a:
af:93:44:8a:69:6a:73:7a:1a:6a:92:de:d7:d8:10:
70:34:9b:1f:ba:c4:3b:00:0b:a2:e6:3a:e0:1c:2a:
a9:a9:9e:c4:94:9b:66:8c:9f:cf:33:ef:78:ca:d7:
99:d0:1a:dd:16:96:21:48:13:ce:e4:29:a3:ee:9d:
c2:34:1f:75:62:11:d3:0b:d3:80:92:a7:9c:b3:b3:
48:95:5b:db:8a:df:37:ef:27:33:bf:96:f4:8a:15:
d1:58:ee:7f:f6:c5:1f:26:e5:6b:97:9f:27:3b:84:
e1:7d:95:6e:f6:9c:a5:c3:04:cd:f2:cf:f0:f0:6c:
b7:37:fc:ab:36:3c:55:da:9e:a6:15:37:fd:ce:60:
37:73:1c:6f:95:8e:b4:c4:64:5e:61:f1:99:a3:9c:
21:15:21:e2:5a:1d:d0:5d:93:54:72:f9:b1:09:73:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:A5:90:AF:06:46:06:9C:8F:22:20:68:47:CB:88:D9:2A:20:35
X509v3 Authority Key Identifier:
keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:5b:e2:88:4d:3c:b3:49:34:4e:de:21:e5:00:c8:33:68:
06:fe:a7:3b:73:17:e4:d4:a0:51:06:96:82:16:25:2e:16:d4:
02:80:e6:ef:2f:7e:64:ee:78:8b:24:59:10:d7:fc:17:72:f3:
eb:fe:c6:be:ca:f6:26:46:03:23:60:66:fc:15:4d:ef:c8:15:
9f:c4:75:a9:08:15:4e:fd:22:b4:05:12:4c:ae:bd:2f:b6:47:
64:a9:13:f8:68:ad:f1:f7:0d:4c:00:9a:20:52:dd:80:a6:9c:
e2:df:94:d4:2a:e3:31:ad:59:3b:c2:ec:8a:ea:25:d6:3d:59:
d1:30:81:b4:f3:8b:3a:1d:7d:50:8a:c9:2a:49:8a:9d:a2:26:
31:e9:48:4c:91:0b:e1:82:fd:77:a9:a7:82:31:8a:ca:d5:37:
13:24:62:d8:f8:ea:40:db:1e:6f:cb:4a:de:47:42:1f:c0:c2:
87:e9:3c:9a:99:36:cc:f7:8e:bf:78:57:44:de:96:8f:a4:18:
24:d8:ad:91:24:45:29:05:4e:8f:dc:86:d2:67:fa:7e:8f:10:
ea:fb:82:65:25:0e:ca:bf:6a:18:0e:e2:ea:97:6d:65:36:26:
72:f3:ac:78:b3:15:81:0e:37:01:77:67:fc:dc:11:3f:9d:0c:
7f:b4:97:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGPfO4vctjFBhjVuebjlyOPhQwcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1
NzQ3MTE2QjAeFw0yNjExMDIxMzQ1MjFaFw0yNjExMDMxNTQxMjFaMDMxMTAvBgNV
BAMTKEI3NDdBNTkwQUYwNjQ2MDY5QzhGMjIyMDY4NDdDQjg4RDkyQTIwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzB0UaYtN7Wi40hBLIRKpqt5li
NNo4SKvy7a0k6iAkdskA6XXduDMu6YCVfNTNQn2aIoajI+XvHMdgaU/XC/9Y/X1I
mlbhYKjGi/p3P2wIPxqGXfcN9vLZSq+TRIppanN6GmqS3tfYEHA0mx+6xDsAC6Lm
OuAcKqmpnsSUm2aMn88z73jK15nQGt0WliFIE87kKaPuncI0H3ViEdML04CSp5yz
s0iVW9uK3zfvJzO/lvSKFdFY7n/2xR8m5WuXnyc7hOF9lW72nKXDBM3yz/DwbLc3
/Ks2PFXanqYVN/3OYDdzHG+VjrTEZF5h8ZmjnCEVIeJaHdBdk1Ry+bEJc7m9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUt0elkK8GRgacjyIgaEfLiNkqIDUwHwYDVR0j
BBgwFoAU5XoSdbpjOENrmsSuUZ0UO1dHEWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTkzZTNkMjYtNGFhZi00ZTk2LWFkNDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVC
QTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1NzQ3MTE2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNTdBMTI3NUJBNjMzODQzNkI5QUM0QUU1MTlEMTQzQjU3NDcx
MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk
NDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0
M0I1NzQ3MTE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFD8W+KITTyzSTRO3iHlAMgzaAb+pztzF+TU
oFEGloIWJS4W1AKA5u8vfmTueIskWRDX/Bdy8+v+xr7K9iZGAyNgZvwVTe/IFZ/E
dakIFU79IrQFEkyuvS+2R2SpE/horfH3DUwAmiBS3YCmnOLflNQq4zGtWTvC7Irq
JdY9WdEwgbTzizodfVCKySpJip2iJjHpSEyRC+GC/Xepp4IxisrVNxMkYtj46kDb
Hm/LSt5HQh/AwofpPJqZNsz3jr94V0Telo+kGCTYrZEkRSkFTo/chtJn+n6PEOr7
gmUlDsq/ahgO4uqXbWU2JnLzrHizFYEONwF3Z/zcET+dDH+0l/4=
-----END CERTIFICATE-----
Generated at Mon Nov 2 20:17:33 2026 by rpki-client