
$ rpki-client -vvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
File: E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft (raw, json)
Hash identifier: Hk999nntxkkeOU5U6adrp2YKI2zqXwUqstUS8fY/R2Y=
Subject key identifier: AD:30:55:4D:E2:3E:61:61:F5:2F:63:02:1C:CA:22:89:95:6E:40:4D
Authority key identifier: E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
Certificate issuer: /CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Certificate serial: 6709745EFC87DFAFE5E1425CD1AF510671DFB575
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 01:59:14 +0000
Manifest this update: Thu 18 Jun 2026 01:54:14 +0000
Manifest next update: Fri 19 Jun 2026 02:33:14 +0000
Files and hashes: 1: E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl (hash: Ggt/YpawY0TnmIu1UWP3sgWt76/75TUTueHCiVYNopk=)
2: 3139382e31352e31362e302f32342d3234203d3e20313432363339.roa (hash: 0CCDYy/I/lMXwPNc0U/+5ITduVGZmmxxNNoPayR3Zi8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 02:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:09:74:5e:fc:87:df:af:e5:e1:42:5c:d1:af:51:06:71:df:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E58CEA1741CC123421BB7B3012F855F3EAAEA625
Validity
Not Before: Jun 18 01:54:14 2026 GMT
Not After : Jun 19 02:33:14 2026 GMT
Subject: CN=AD30554DE23E6161F52F63021CCA2289956E404D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:4c:58:c1:77:28:9e:2d:e4:fb:0d:8e:3a:
59:e8:a0:fb:34:97:3c:2f:7f:a5:aa:5c:87:7b:1b:
94:02:63:f4:75:da:84:b5:6a:0a:e2:5d:bf:73:69:
61:42:4a:2b:04:e6:cb:e1:6f:4e:fe:b1:75:90:30:
a7:06:ee:b3:0a:8b:57:90:46:d7:a7:e3:69:14:e8:
4f:9b:e6:3e:00:1f:13:ed:b6:00:37:e9:e0:05:11:
99:d3:5d:54:a3:2d:8f:6e:aa:fd:ab:84:79:1f:ec:
30:47:9d:76:61:1b:2b:bd:79:c5:48:e9:e9:7e:9c:
89:1b:20:25:3e:db:65:c6:32:03:84:2a:5e:f5:c8:
71:c8:f2:18:e7:91:07:4b:5b:49:e4:d9:2e:e5:57:
d8:20:e1:1e:83:ae:06:32:c2:e8:fe:55:81:a9:bf:
0c:0a:b1:18:dd:20:ee:07:45:32:2f:fc:d6:da:b6:
f0:2b:9c:31:e9:b5:bf:51:12:02:f7:9a:95:b7:96:
31:a5:d4:84:cb:3f:0e:96:04:75:af:36:c3:0d:79:
43:15:22:21:8b:0c:fb:1f:de:99:28:6c:5f:bf:cc:
a2:b9:86:82:4e:db:31:1b:82:a9:4c:81:4b:46:72:
67:27:be:a1:6f:0e:fc:37:28:66:dc:3b:3e:b9:3e:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:55:4D:E2:3E:61:61:F5:2F:63:02:1C:CA:22:89:95:6E:40:4D
X509v3 Authority Key Identifier:
keyid:E5:8C:EA:17:41:CC:12:34:21:BB:7B:30:12:F8:55:F3:EA:AE:A6:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/E58CEA1741CC123421BB7B3012F855F3EAAEA625.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:09:ed:9d:6e:44:67:dd:4b:b2:e6:3c:03:4a:8b:09:82:
a2:59:87:f6:ac:74:4c:f4:fc:c8:18:8b:f9:65:de:8e:ff:a0:
7e:91:65:0b:dd:f7:65:57:b7:5d:18:70:da:38:93:30:6f:12:
d2:49:fa:2e:a5:15:f4:c9:51:3f:da:84:ef:7c:d9:6f:e2:c8:
cf:d9:73:b8:62:24:5a:e0:ed:7f:5c:2c:16:93:9a:f8:b1:2c:
d9:16:db:ef:13:94:c4:f9:aa:bc:fb:3d:b4:76:09:f1:41:7f:
8d:a6:2d:be:85:43:58:95:a6:19:12:ba:05:bd:a5:be:e8:0e:
24:2b:15:c3:86:91:db:5d:20:71:13:7c:51:90:cd:08:a0:cc:
5f:4d:9b:f2:70:e8:e9:74:dd:60:4f:e5:0f:8c:29:b9:3e:4f:
19:98:1e:49:b3:2a:d5:5b:66:4b:b9:84:0b:be:fd:3b:67:30:
ae:c8:c2:68:88:8b:41:a1:e3:90:0f:d6:01:25:3f:2c:04:65:
5e:c7:4b:b1:04:5e:e9:79:18:67:78:5c:a5:6d:b6:a5:31:93:
30:7e:2b:09:0d:98:6c:60:ef:38:4d:ea:51:e8:32:8b:94:3c:
b3:c8:29:2b:ac:7d:57:b1:9c:48:87:56:18:8f:e6:6b:e0:fe:
14:b0:9a:33
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZwl0XvyH36/l4UJc0a9RBnHftXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNF
QUFFQTYyNTAeFw0yNjA2MTgwMTU0MTRaFw0yNjA2MTkwMjMzMTRaMDMxMTAvBgNV
BAMTKEFEMzA1NTRERTIzRTYxNjFGNTJGNjMwMjFDQ0EyMjg5OTU2RTQwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tUxYwXconi3k+w2OOlnooPs0
lzwvf6WqXId7G5QCY/R12oS1agriXb9zaWFCSisE5svhb07+sXWQMKcG7rMKi1eQ
Rten42kU6E+b5j4AHxPttgA36eAFEZnTXVSjLY9uqv2rhHkf7DBHnXZhGyu9ecVI
6el+nIkbICU+22XGMgOEKl71yHHI8hjnkQdLW0nk2S7lV9gg4R6DrgYywuj+VYGp
vwwKsRjdIO4HRTIv/NbatvArnDHptb9REgL3mpW3ljGl1ITLPw6WBHWvNsMNeUMV
IiGLDPsf3pkobF+/zKK5hoJO2zEbgqlMgUtGcmcnvqFvDvw3KGbcOz65PjOPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrTBVTeI+YWH1L2MCHMoiiZVuQE0wHwYDVR0j
BBgwFoAU5YzqF0HMEjQhu3swEvhV8+qupiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0
MUNDMTIzNDIxQkI3QjMwMTJGODU1RjNFQUFFQTYyNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9FNThDRUExNzQxQ0MxMjM0MjFCQjdCMzAxMkY4NTVGM0VBQUVB
NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm
Y2YtYWUzMmE4N2ZlNjM2LzAvRTU4Q0VBMTc0MUNDMTIzNDIxQkI3QjMwMTJGODU1
RjNFQUFFQTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIUDCe2dbkRn3Uuy5jwDSosJgqJZh/asdEz0
/MgYi/ll3o7/oH6RZQvd92VXt10YcNo4kzBvEtJJ+i6lFfTJUT/ahO982W/iyM/Z
c7hiJFrg7X9cLBaTmvixLNkW2+8TlMT5qrz7PbR2CfFBf42mLb6FQ1iVphkSugW9
pb7oDiQrFcOGkdtdIHETfFGQzQigzF9Nm/Jw6Ol03WBP5Q+MKbk+TxmYHkmzKtVb
Zku5hAu+/TtnMK7IwmiIi0Gh45AP1gElPywEZV7HS7EEXul5GGd4XKVttqUxkzB+
KwkNmGxg7zhN6lHoMouUPLPIKSusfVexnEiHVhiP5mvg/hSwmjM=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:03 2026 by rpki-client