$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft File: 530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json) Hash identifier: g05uF/u88cfrKDS+F4LZsnYlYDdNLFA3m9qrUrFJikc= Subject key identifier: A3:32:2B:B4:53:A3:C0:27:00:5B:88:E1:97:A1:86:AB:29:3B:F7:D3 Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66 Certificate issuer: /CN=530B657BC2C884CC14953B48E6700F4395D4AE66 Certificate serial: 520D47E5F0375B4CC2CED39FB13ED70D095EBA4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 08:56:47 +0000 Manifest this update: Thu 24 Sep 2026 08:51:47 +0000 Manifest next update: Fri 25 Sep 2026 10:30:47 +0000 Files and hashes: 1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=) 2: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=) 3: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: XgZHC/e3iLTWCKuCLwTr+SxI0a25YLA4Sykgea8+P/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0d:47:e5:f0:37:5b:4c:c2:ce:d3:9f:b1:3e:d7:0d:09:5e:ba:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66 Validity Not Before: Sep 24 08:51:47 2026 GMT Not After : Sep 25 10:30:47 2026 GMT Subject: CN=A3322BB453A3C027005B88E197A186AB293BF7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:b3:63:09:8e:cb:e7:60:8f:27:be:02:80: a6:b5:3a:42:3a:b8:f5:f0:67:57:be:34:5d:da:9d: f1:c9:ea:3d:ac:a4:77:5e:e2:b2:74:6e:37:30:73: 3b:fa:cc:69:fa:fc:46:a1:28:10:f2:e8:a9:24:69: b9:9b:28:3f:66:09:dc:a7:15:22:74:08:43:78:5d: 6e:a5:c2:8a:17:03:96:4c:30:c6:bc:8e:bc:61:cc: 62:5f:cf:9c:9b:a4:c3:f5:4f:ce:cc:c8:29:87:23: c8:67:68:dc:3d:a7:ce:fc:04:1f:f8:d1:aa:39:9b: f1:d7:dc:3f:10:fe:29:13:9f:8b:a7:78:a3:6f:4b: a0:bd:4c:ce:b6:fc:fe:e9:f3:fb:9a:ba:4c:49:21: 10:16:a3:36:09:be:2d:dd:f4:ca:4b:15:e7:0d:2e: 68:63:ff:8c:c6:67:4c:1e:d1:19:0e:ad:a5:21:6b: b7:dc:11:8a:88:9a:a0:7f:f6:43:61:64:07:5c:df: 71:91:0a:f4:17:b0:d4:56:b6:1f:c1:21:bb:62:e0: 8f:3b:ae:ce:2b:06:4c:ba:f0:88:ea:d9:b9:f9:c2: 79:3a:ac:01:43:e8:94:ed:f5:93:dd:0a:cf:76:31: 62:c3:57:a9:26:7b:a9:9f:ab:f0:31:dd:9f:fa:54: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:2B:B4:53:A3:C0:27:00:5B:88:E1:97:A1:86:AB:29:3B:F7:D3 X509v3 Authority Key Identifier: keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7c:9d:4c:ab:a7:32:44:34:68:21:2a:9b:a4:9e:4b:46:cf: c0:e9:7e:89:73:0b:cb:f5:35:42:08:83:94:5a:e2:74:6e:f2: e7:03:a1:6a:49:b0:d5:8a:9c:9f:c7:6d:a0:44:19:67:01:73: 0a:5b:74:5f:21:7a:06:87:67:b3:a7:55:b4:93:d9:c7:26:9e: a8:67:74:73:ac:28:2b:01:a9:38:94:73:6e:4b:76:50:72:45: d8:84:c7:85:2f:ba:2a:0d:32:da:d8:a5:f9:43:2f:ba:84:31: cf:e9:d4:c2:9a:5e:90:4a:65:72:32:91:d0:18:0f:93:fc:98: 60:32:93:57:22:b5:e5:54:fb:fc:fa:94:3b:1a:eb:b6:d6:6d: 9f:18:9e:72:e7:ab:86:83:eb:db:8a:a5:29:23:9c:dc:cc:43: e8:85:f5:8b:1f:d8:13:cf:24:fd:06:6a:df:96:fd:4e:dd:22: da:8d:cf:3d:ab:d2:bd:ef:a7:26:c1:24:bd:a9:90:3c:63:4a: bd:aa:d8:5f:dc:d4:22:bb:3e:be:78:73:e9:22:37:70:dd:f9: e2:de:44:03:7d:52:5d:4a:e9:76:95:07:12:a6:f6:5b:2d:b0: 7a:78:75:30:1e:94:87:8f:bb:f8:79:91:57:79:fe:08:af:c3: 47:0f:0a:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUg1H5fA3W0zCztOfsT7XDQleukowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5 NUQ0QUU2NjAeFw0yNjA5MjQwODUxNDdaFw0yNjA5MjUxMDMwNDdaMDMxMTAvBgNV BAMTKEEzMzIyQkI0NTNBM0MwMjcwMDVCODhFMTk3QTE4NkFCMjkzQkY3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtrNjCY7L52CPJ74CgKa1OkI6 uPXwZ1e+NF3anfHJ6j2spHde4rJ0bjcwczv6zGn6/EahKBDy6KkkabmbKD9mCdyn FSJ0CEN4XW6lwooXA5ZMMMa8jrxhzGJfz5ybpMP1T87MyCmHI8hnaNw9p878BB/4 0ao5m/HX3D8Q/ikTn4uneKNvS6C9TM62/P7p8/uaukxJIRAWozYJvi3d9MpLFecN Lmhj/4zGZ0we0RkOraUha7fcEYqImqB/9kNhZAdc33GRCvQXsNRWth/BIbti4I87 rs4rBky68Ijq2bn5wnk6rAFD6JTt9ZPdCs92MWLDV6kme6mfq/Ax3Z/6VJRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUozIrtFOjwCcAW4jhl6GGqyk799MwHwYDVR0j BBgwFoAUUwtle8LIhMwUlTtI5nAPQ5XUrmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI3NWZkNzYtZThlZS00NmM4LTlkODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JD MkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5NUQ0QUU2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzBCNjU3QkMyQzg4NENDMTQ5NTNCNDhFNjcwMEY0Mzk1RDRB RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBG NDM5NUQ0QUU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh8nUyrpzJENGghKpuknktGz8DpfolzC8v1 NUIIg5Ra4nRu8ucDoWpJsNWKnJ/HbaBEGWcBcwpbdF8hegaHZ7OnVbST2ccmnqhn dHOsKCsBqTiUc25LdlByRdiEx4UvuioNMtrYpflDL7qEMc/p1MKaXpBKZXIykdAY D5P8mGAyk1citeVU+/z6lDsa67bWbZ8YnnLnq4aD69uKpSkjnNzMQ+iF9Ysf2BPP JP0Gat+W/U7dItqNzz2r0r3vpybBJL2pkDxjSr2q2F/c1CK7Pr54c+kiN3Dd+eLe RAN9Ul1K6XaVBxKm9lstsHp4dTAelIePu/h5kVd5/givw0cPCvI= -----END CERTIFICATE-----Generated at Thu Sep 24 17:32:42 2026 by rpki-client