
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
File: 530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json)
Hash identifier: 6mXLyGj/s613C7aBXIvk3DC686UtITba7K2MoIu0Yvk=
Subject key identifier: 6C:AF:0A:5E:FB:7B:7A:F2:13:38:29:7B:6F:16:67:82:6D:4E:80:6B
Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
Certificate issuer: /CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Certificate serial: 09172D04F497D29B5ED271BE5503CD1A73EFCB49
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
Manifest number: 1C
Signing time: Fri 22 May 2026 19:02:43 +0000
Manifest this update: Fri 22 May 2026 18:57:43 +0000
Manifest next update: Sat 23 May 2026 19:29:43 +0000
Files and hashes: 1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=)
2: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=)
3: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: LTMMJVWDgD+b7LNWNecW7OctZmA3BLw+teuJdlYKWwM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 12:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:17:2d:04:f4:97:d2:9b:5e:d2:71:be:55:03:cd:1a:73:ef:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Validity
Not Before: May 22 18:57:43 2026 GMT
Not After : May 23 19:29:43 2026 GMT
Subject: CN=6CAF0A5EFB7B7AF21338297B6F1667826D4E806B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:5e:56:66:d1:0a:76:ea:2b:dc:cc:44:ae:
4a:82:6d:b3:cf:12:30:18:77:01:22:fb:f1:92:8c:
c7:23:36:05:24:02:1c:ed:03:2d:aa:9b:b2:08:6a:
35:0f:52:b9:43:df:3b:7d:1c:da:03:26:44:59:54:
2e:19:87:b2:28:9d:bc:9c:95:83:9f:64:c0:87:71:
30:84:ea:32:b2:71:6d:7f:f5:c8:fe:ee:71:23:fe:
b3:9c:f8:27:20:6e:c6:eb:28:4a:dd:1e:ff:13:45:
ee:31:25:51:c2:17:d6:07:04:fb:0a:0f:de:40:33:
9b:86:29:32:20:76:f4:82:e3:81:f3:d0:ce:54:c2:
c8:68:27:b2:1d:cd:e6:79:8f:e3:42:47:e3:74:48:
b8:48:aa:32:63:50:ff:5c:2e:c7:b2:a5:01:c1:c0:
78:9c:24:82:57:a2:9e:a1:19:e1:5c:f8:52:67:59:
7f:3d:a4:8c:91:65:3c:ab:f4:c2:5d:d8:21:f7:65:
7d:b2:8c:64:64:f0:66:bd:6d:90:d7:ca:63:55:5f:
b7:3b:56:93:b3:ab:38:9c:ad:aa:81:17:9e:20:b1:
8b:fa:53:49:f9:88:43:f5:e6:2b:51:31:c7:ae:f2:
af:f6:af:9d:10:bd:2e:57:bf:d0:f2:ba:d1:ee:e4:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:0A:5E:FB:7B:7A:F2:13:38:29:7B:6F:16:67:82:6D:4E:80:6B
X509v3 Authority Key Identifier:
keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:dc:b6:d4:85:ca:a0:a4:1f:9d:ce:e7:61:9c:4e:bc:24:
94:d0:39:73:5d:21:7a:17:51:37:e3:26:57:bd:f3:94:94:b9:
0a:66:4e:52:7d:b8:83:a3:c3:88:59:cd:56:5c:a1:f6:d0:bb:
7e:45:ba:4c:40:4d:09:95:d5:43:28:3f:f6:df:cf:e3:f3:e5:
2b:9d:08:c6:00:01:c3:5b:aa:af:57:d1:c4:cd:55:34:92:a5:
4a:40:bb:bd:af:6d:fa:c8:be:05:18:ca:6d:ba:fe:0f:59:78:
fa:e9:76:a8:57:0f:42:53:ea:51:a5:45:bb:8a:3f:05:d1:d5:
dd:97:67:62:03:6b:c2:fb:08:69:43:5e:e0:37:f5:d2:3a:c2:
42:3a:68:42:6d:5c:4f:2b:3a:ba:db:de:ec:2d:ae:5d:6a:a6:
3f:11:7b:e3:eb:49:45:d3:43:fb:c2:c8:ee:62:02:64:a2:22:
e5:df:78:78:c6:7e:80:6e:ec:e9:18:eb:88:e9:1c:8f:cc:51:
cf:e4:ba:d4:e3:fe:79:62:c9:17:0f:a6:b3:91:75:89:0d:5f:
f2:16:14:cf:26:c2:7c:f7:15:ae:fd:38:e8:19:8b:18:e0:9a:
82:57:8b:fa:a8:c0:7d:0e:b3:42:b8:af:bf:7a:7b:d8:0e:f9:
b4:cd:70:06
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCRctBPSX0pte0nG+VQPNGnPvy0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5
NUQ0QUU2NjAeFw0yNjA1MjIxODU3NDNaFw0yNjA1MjMxOTI5NDNaMDMxMTAvBgNV
BAMTKDZDQUYwQTVFRkI3QjdBRjIxMzM4Mjk3QjZGMTY2NzgyNkQ0RTgwNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W15WZtEKduor3MxErkqCbbPP
EjAYdwEi+/GSjMcjNgUkAhztAy2qm7IIajUPUrlD3zt9HNoDJkRZVC4Zh7Ionbyc
lYOfZMCHcTCE6jKycW1/9cj+7nEj/rOc+CcgbsbrKErdHv8TRe4xJVHCF9YHBPsK
D95AM5uGKTIgdvSC44Hz0M5UwshoJ7IdzeZ5j+NCR+N0SLhIqjJjUP9cLseypQHB
wHicJIJXop6hGeFc+FJnWX89pIyRZTyr9MJd2CH3ZX2yjGRk8Ga9bZDXymNVX7c7
VpOzqzicraqBF54gsYv6U0n5iEP15itRMceu8q/2r50QvS5Xv9DyutHu5Kq1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbK8KXvt7evITOCl7bxZngm1OgGswHwYDVR0j
BBgwFoAUUwtle8LIhMwUlTtI5nAPQ5XUrmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDI3NWZkNzYtZThlZS00NmM4LTlkODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JD
MkM4ODRDQzE0OTUzQjQ4RTY3MDBGNDM5NUQ0QUU2Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81MzBCNjU3QkMyQzg4NENDMTQ5NTNCNDhFNjcwMEY0Mzk1RDRB
RTY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk
ODItYjczNWI5ZjcwNDMxLzAvNTMwQjY1N0JDMkM4ODRDQzE0OTUzQjQ4RTY3MDBG
NDM5NUQ0QUU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJe73LbUhcqgpB+dzudhnE68JJTQOXNdIXoX
UTfjJle985SUuQpmTlJ9uIOjw4hZzVZcofbQu35FukxATQmV1UMoP/bfz+Pz5Sud
CMYAAcNbqq9X0cTNVTSSpUpAu72vbfrIvgUYym26/g9ZePrpdqhXD0JT6lGlRbuK
PwXR1d2XZ2IDa8L7CGlDXuA39dI6wkI6aEJtXE8rOrrb3uwtrl1qpj8Re+PrSUXT
Q/vCyO5iAmSiIuXfeHjGfoBu7OkY64jpHI/MUc/kutTj/nliyRcPprORdYkNX/IW
FM8mwnz3Fa79OOgZixjgmoJXi/qowH0Os0K4r796e9gO+bTNcAY=
-----END CERTIFICATE-----
Generated at Sat May 23 06:06:48 2026 by rpki-client