
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json)
Hash identifier: 8P+k21kSyUD6gnefoSFG0h+AckpJlXYVohoJ9Y/UPJ0=
Subject key identifier: A0:DC:46:5F:2F:E4:C5:DC:58:F7:8F:7B:16:8E:19:B4:C0:BF:71:91
Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A
Certificate serial: 18E3656E74532A5C447C67501303E4FACE12C9D6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:37:30 +0000
Manifest this update: Tue 12 May 2026 17:32:30 +0000
Manifest next update: Wed 13 May 2026 18:00:30 +0000
Files and hashes: 1: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=)
2: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=)
3: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: 7QS6vo/cb8Arber9SzrelriTpQfmnIa6z9mIPPiM0Rg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e3:65:6e:74:53:2a:5c:44:7c:67:50:13:03:e4:fa:ce:12:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A
Validity
Not Before: May 12 17:32:30 2026 GMT
Not After : May 13 18:00:30 2026 GMT
Subject: CN=A0DC465F2FE4C5DC58F78F7B168E19B4C0BF7191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:32:c3:b3:56:67:98:f8:a2:55:f7:79:b2:
91:d7:36:99:a6:e7:6d:97:24:a3:d2:bb:a2:74:81:
ff:5f:88:75:a6:97:b0:37:38:d7:42:e7:c3:8e:ab:
bd:2c:94:2c:40:4f:d6:9a:45:3c:03:2f:d5:36:f1:
d2:d9:49:a2:e8:1a:a3:a7:3b:6b:ad:c0:05:47:d2:
00:b3:32:4e:9d:74:46:e0:67:8e:8b:22:1b:42:2a:
fc:8f:4c:63:6f:c4:6a:7f:99:64:4e:f1:44:84:25:
69:ce:d7:d5:e8:53:95:ff:31:2b:b4:9f:75:f7:90:
b3:f0:86:46:0c:74:8a:5b:c7:14:6f:1f:0c:e8:cc:
86:b3:31:9f:e5:42:96:f9:6f:b2:a4:28:89:92:c2:
dc:8c:d5:1b:00:2c:48:af:f8:a6:92:12:7c:66:a3:
e5:e3:af:87:d4:d6:48:d6:49:18:bb:fe:ba:8b:b3:
29:da:37:96:39:c5:7d:d5:8d:67:44:54:af:95:de:
bf:c0:b6:3d:58:a5:d0:5e:54:62:18:d4:93:ef:7e:
2e:03:48:1a:75:6e:b3:60:5a:d3:80:ee:e6:22:80:
29:3a:79:b1:ad:58:6d:2b:25:1d:87:a1:c2:31:1b:
e5:53:65:38:b3:ff:08:4c:18:52:c9:e0:21:8e:0a:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:46:5F:2F:E4:C5:DC:58:F7:8F:7B:16:8E:19:B4:C0:BF:71:91
X509v3 Authority Key Identifier:
keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b6:04:33:c4:a4:b1:dc:53:51:e7:57:4b:61:a0:13:72:0e:
39:cb:ad:23:fd:d4:54:04:f2:ed:2f:e2:5f:9d:05:0c:9d:41:
27:47:5d:f6:ee:8d:63:bb:75:fc:33:a9:b6:69:a8:9f:00:fe:
8e:99:6b:7b:a3:26:77:ca:35:27:d9:93:71:7b:6b:07:8b:33:
b3:54:87:67:30:2a:3a:73:89:da:9a:99:e7:79:be:af:93:d1:
8c:6d:45:10:42:44:c6:ea:ac:ff:ce:ad:70:3e:b9:b5:30:92:
87:ae:a5:00:ab:bc:6a:15:c4:4d:3c:03:3f:06:09:95:3e:5a:
20:18:70:5a:9f:ad:6e:bb:b8:14:a9:ec:13:2d:aa:74:a9:09:
dd:f2:f3:06:9c:d2:c4:0a:98:be:e0:78:a0:0f:b2:17:2d:2f:
97:fd:74:40:b7:e3:ba:0d:e4:17:d7:f1:85:ba:e4:e5:e7:54:
a2:a6:ff:7e:50:e5:be:79:d5:dc:e8:8d:ff:44:12:fe:00:44:
4b:9e:ed:d6:5d:32:fa:3a:98:69:3f:9b:f6:c7:9a:74:95:05:
9d:ed:12:c5:b5:8b:0f:d6:dd:a1:55:7f:2a:5a:6c:96:c6:d7:
d3:8c:f1:ee:6a:68:c4:88:ec:44:d1:9d:9a:40:d8:9c:2a:28:
0a:e7:9e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:23 2026 by rpki-client