
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
File: E57A1275BA6338436B9AC4AE519D143B5747116B.mft (raw, json)
Hash identifier: 5aqLybiC5APfn8EPivo6fcWKU3SLjL4oD978EhLBxHw=
Subject key identifier: EE:F6:C1:CE:BC:94:99:63:64:CB:C0:73:CE:0A:71:78:BA:E1:7B:E4
Authority key identifier: E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
Certificate issuer: /CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Certificate serial: 4025394D856EDE6CA0AF13C2528712091FA74E28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 11:23:10 +0000
Manifest this update: Sun 15 Nov 2026 11:18:10 +0000
Manifest next update: Mon 16 Nov 2026 14:07:10 +0000
Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: hnn33VKD9efbhB9XD33L1BjuaAJltz7STiP/0n5gC5M=)
2: E57A1275BA6338436B9AC4AE519D143B5747116B.crl (hash: 66T1mEfyUYpYRtjmchErml9kj6VrZ04vH0rE9Jyl/CY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:25:39:4d:85:6e:de:6c:a0:af:13:c2:52:87:12:09:1f:a7:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E57A1275BA6338436B9AC4AE519D143B5747116B
Validity
Not Before: Nov 15 11:18:10 2026 GMT
Not After : Nov 16 14:07:10 2026 GMT
Subject: CN=EEF6C1CEBC94996364CBC073CE0A7178BAE17BE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:ca:a2:1b:20:ae:53:5e:e6:1a:c4:f2:a7:
57:6e:f9:ed:cb:7f:30:19:00:50:5f:1f:ec:32:c9:
1b:3a:10:a9:66:c0:ae:19:ba:0e:f9:d6:77:ef:14:
e5:29:65:22:3e:e2:91:21:11:77:52:cb:9c:f8:fb:
e2:a1:1d:b2:89:6b:e0:79:91:78:2c:23:2b:36:b9:
7a:a8:be:c6:7c:d0:14:fd:4b:cf:78:dd:bf:6a:fe:
e3:d0:f1:b0:10:97:f7:b6:24:25:98:ad:8f:c8:57:
bd:c7:45:79:fa:15:38:8f:ce:98:18:f4:a2:1c:25:
99:55:9a:cf:f8:bb:50:34:aa:a6:3f:54:5f:63:55:
cb:d2:71:3e:3b:de:9b:31:de:98:f7:b2:13:a9:82:
af:78:a9:c2:8f:9d:5e:71:9e:8b:37:54:df:05:fa:
d6:70:d1:17:2c:26:62:f3:db:57:f2:34:7b:72:52:
6a:4d:f7:64:79:db:db:f7:fa:c6:da:c6:d6:ab:86:
59:a2:3e:c3:55:e2:0c:f3:02:2c:1b:ac:0a:4d:09:
70:5e:09:30:a0:32:2a:b1:dd:cf:1e:c8:c0:d0:08:
61:a0:63:41:41:f8:de:b1:ee:5f:7e:a8:40:4e:0e:
ae:07:53:50:6b:d4:32:5c:eb:26:af:0a:a5:6b:be:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:C1:CE:BC:94:99:63:64:CB:C0:73:CE:0A:71:78:BA:E1:7B:E4
X509v3 Authority Key Identifier:
keyid:E5:7A:12:75:BA:63:38:43:6B:9A:C4:AE:51:9D:14:3B:57:47:11:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E57A1275BA6338436B9AC4AE519D143B5747116B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/E57A1275BA6338436B9AC4AE519D143B5747116B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:56:2b:64:ec:dd:0d:0b:e3:93:5b:32:df:62:57:99:fd:
95:cc:80:78:23:26:58:e2:b5:99:ca:5c:8d:d0:6c:cf:81:e3:
bf:53:5a:16:0e:2a:31:b4:a2:7f:43:60:49:d1:e1:8a:14:ee:
f2:e0:14:ca:e7:8d:81:77:cd:e2:df:f9:10:c2:6a:d8:a8:d5:
c3:de:15:a0:a7:42:9e:e1:d6:2b:3f:36:fb:f5:2f:e8:b1:30:
c3:7c:28:0e:0b:03:26:4a:58:34:58:0f:94:8c:12:89:21:53:
19:38:4e:03:f9:f1:ae:aa:0b:ac:67:18:12:6c:39:d2:0b:aa:
89:cf:96:9c:86:f2:b7:78:27:e3:79:ae:99:7e:c0:93:a6:7d:
13:11:32:12:be:ea:47:42:95:24:0b:1c:c1:81:c2:7b:35:84:
0b:6a:2b:8c:68:2c:9f:c6:e0:4c:ee:b7:b5:2a:ec:66:ce:a7:
10:b7:41:e6:2d:3c:05:34:dd:eb:de:a7:45:61:18:f1:ae:c4:
60:c2:4b:04:e1:e5:45:fd:37:fb:13:a4:d4:3f:60:bf:8f:e6:
90:ad:ea:c6:93:ad:bf:f8:bb:2a:a2:de:b0:de:13:0d:90:63:
4b:23:77:42:bd:b5:fd:f9:5e:2c:39:cc:10:1c:c9:16:c1:3b:
e2:37:02:69
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQCU5TYVu3mygrxPCUocSCR+nTigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1
NzQ3MTE2QjAeFw0yNjExMTUxMTE4MTBaFw0yNjExMTYxNDA3MTBaMDMxMTAvBgNV
BAMTKEVFRjZDMUNFQkM5NDk5NjM2NENCQzA3M0NFMEE3MTc4QkFFMTdCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GsqiGyCuU17mGsTyp1du+e3L
fzAZAFBfH+wyyRs6EKlmwK4Zug751nfvFOUpZSI+4pEhEXdSy5z4++KhHbKJa+B5
kXgsIys2uXqovsZ80BT9S8943b9q/uPQ8bAQl/e2JCWYrY/IV73HRXn6FTiPzpgY
9KIcJZlVms/4u1A0qqY/VF9jVcvScT473psx3pj3shOpgq94qcKPnV5xnos3VN8F
+tZw0RcsJmLz21fyNHtyUmpN92R529v3+sbaxtarhlmiPsNV4gzzAiwbrApNCXBe
CTCgMiqx3c8eyMDQCGGgY0FB+N6x7l9+qEBODq4HU1Br1DJc6yavCqVrvufRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7vbBzryUmWNky8BzzgpxeLrhe+QwHwYDVR0j
BBgwFoAU5XoSdbpjOENrmsSuUZ0UO1dHEWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTkzZTNkMjYtNGFhZi00ZTk2LWFkNDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVC
QTYzMzg0MzZCOUFDNEFFNTE5RDE0M0I1NzQ3MTE2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNTdBMTI3NUJBNjMzODQzNkI5QUM0QUU1MTlEMTQzQjU3NDcx
MTZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk
NDktNTI3M2YwYTRlNmVkLzAvRTU3QTEyNzVCQTYzMzg0MzZCOUFDNEFFNTE5RDE0
M0I1NzQ3MTE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABJQVitk7N0NC+OTWzLfYleZ/ZXMgHgjJlji
tZnKXI3QbM+B479TWhYOKjG0on9DYEnR4YoU7vLgFMrnjYF3zeLf+RDCatio1cPe
FaCnQp7h1is/Nvv1L+ixMMN8KA4LAyZKWDRYD5SMEokhUxk4TgP58a6qC6xnGBJs
OdILqonPlpyG8rd4J+N5rpl+wJOmfRMRMhK+6kdClSQLHMGBwns1hAtqK4xoLJ/G
4Ezut7Uq7GbOpxC3QeYtPAU03evep0VhGPGuxGDCSwTh5UX9N/sTpNQ/YL+P5pCt
6saTrb/4uyqi3rDeEw2QY0sjd0K9tf35Xiw5zBAcyRbBO+I3Amk=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:58 2026 by rpki-client