
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json)
Hash identifier: pLzvE1B35X2UJ/fpHTJewQe6XxErClVKLVgEHt93kTw=
Subject key identifier: 58:40:CA:52:B2:44:63:57:D3:EA:DE:2C:8E:72:EF:25:1C:8C:A5:CD
Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A
Certificate serial: 14C43E4563B67B9072553A3B5716F2C1952A89E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 15:25:38 +0000
Manifest this update: Mon 20 Jul 2026 15:20:38 +0000
Manifest next update: Tue 21 Jul 2026 17:23:38 +0000
Files and hashes: 1: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=)
2: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=)
3: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: khP1bIqOf0vMKZ5TQ09yCNfdYvXqAIfoPW4eAkau28Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 17:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c4:3e:45:63:b6:7b:90:72:55:3a:3b:57:16:f2:c1:95:2a:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A
Validity
Not Before: Jul 20 15:20:38 2026 GMT
Not After : Jul 21 17:23:38 2026 GMT
Subject: CN=5840CA52B2446357D3EADE2C8E72EF251C8CA5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:80:cc:ac:f2:40:9a:36:89:a6:80:60:8a:
47:78:38:e0:63:b6:cd:b0:12:53:8c:79:5e:ad:c9:
f8:f0:a4:e4:45:9e:56:51:34:a9:2b:00:39:1c:00:
a9:55:e9:74:87:c5:ee:02:86:39:43:26:31:0c:e7:
3e:fb:17:d8:b6:04:7b:2d:10:17:7b:28:0d:c7:6a:
1f:bf:b9:ae:8e:fa:f6:81:de:97:74:8b:17:8a:41:
93:9f:f2:7b:85:f3:3f:c9:4e:b9:39:22:04:b9:1b:
6e:6e:d0:6d:44:fc:38:6a:fb:69:e6:f7:a8:f2:6d:
90:ec:66:84:a5:1b:a2:29:9c:bd:51:a5:47:a0:e7:
70:1f:a5:27:3a:e6:81:26:4a:ad:66:18:bc:c1:61:
ed:19:ce:a8:47:7f:43:31:1d:b3:c1:e4:02:31:11:
6a:40:d1:75:31:be:64:8b:6d:1b:4a:ae:cd:90:a1:
f7:7d:de:ba:fa:72:85:bb:99:82:f7:e3:c0:2e:9d:
35:c8:c5:a9:66:be:26:2e:d3:91:3d:24:13:d7:2e:
f0:53:08:aa:00:0b:62:2e:8b:1d:5d:ec:db:13:f0:
bf:5d:7e:fb:b7:37:62:43:b1:45:d8:a3:c4:cf:f5:
45:3a:6d:44:8e:3f:b8:84:8c:dd:f4:bf:bd:00:5b:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:CA:52:B2:44:63:57:D3:EA:DE:2C:8E:72:EF:25:1C:8C:A5:CD
X509v3 Authority Key Identifier:
keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bc:67:77:be:66:13:8a:66:55:61:64:cb:90:e8:cb:be:8b:
e5:82:b4:8e:3f:5c:ea:ce:57:b8:b7:87:54:83:af:89:2b:62:
39:37:22:ab:84:dc:90:ed:44:3a:52:55:3f:ea:c4:75:d2:89:
47:ea:0a:5c:89:5d:29:10:0b:79:01:bf:fb:96:90:d5:16:05:
24:2b:e0:76:f2:29:d1:f0:37:2e:73:64:77:f0:0b:e5:a5:91:
88:75:6d:51:74:3f:4b:13:df:f6:81:20:a7:f5:06:de:e3:b2:
d0:11:a9:ce:e2:28:92:1e:01:9c:e7:2b:e0:69:b2:36:0a:ff:
20:2b:2a:70:86:08:da:ed:ab:7e:d1:dd:20:7a:2f:29:d8:bb:
34:6c:56:b5:73:6f:e9:03:1d:17:59:1f:69:6d:52:f2:7c:61:
cb:f5:41:e5:44:01:d9:9a:45:c3:74:7a:3d:38:67:5b:28:ac:
e7:b0:27:e6:9c:10:ae:2c:8d:09:3c:d2:fc:0a:f8:8e:64:6e:
9e:39:f4:11:bb:65:d0:50:fd:d3:4a:68:7b:e3:e4:17:66:fe:
80:d8:01:a2:5c:3c:91:a7:a4:d6:af:4b:8e:7b:c5:fc:6a:54:
84:bd:a4:97:8f:9b:81:4a:91:46:f6:2d:c0:45:65:a9:df:cf:
88:7d:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:17 2026 by rpki-client