
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
File: C5528B1880D1A3C409F79997E426F977596B3E01.mft (raw, json)
Hash identifier: hPax1iSAW0cKxS5PvR7RU11v1T3dF1KJPO5DGWqSfkA=
Subject key identifier: AF:BB:64:1F:0F:FB:E0:14:48:BC:19:AF:C0:8B:E3:88:2F:34:5D:F2
Authority key identifier: C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
Certificate issuer: /CN=C5528B1880D1A3C409F79997E426F977596B3E01
Certificate serial: 7BC180C872AAB5AB4B0537244FE33B5B40300A6E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
Manifest number: A3
Signing time: Mon 31 Aug 2026 15:13:14 +0000
Manifest this update: Mon 31 Aug 2026 15:08:14 +0000
Manifest next update: Tue 01 Sep 2026 16:22:14 +0000
Files and hashes: 1: 3132332e3233312e3139322e302f32342d3234203d3e20313333383431.roa (hash: PziNog+zvAUbbN4+8y9y6HUVBkh6U4yn2w/M1kBUJ3M=)
2: 323430303a383030303a313a3a2f34382d3438203d3e2034383030.roa (hash: JAhud4JQc0HOWwyApfakeInDoA5OYatFllUDLMr7Pyc=)
3: 3138322e32332e37302e302f32342d3234203d3e203338353133.roa (hash: pqxImjYS8S6/YpzWT879a3tofa5p9/fjZcadFkwpQJY=)
4: 323430303a383030303a323a3a2f34382d3438203d3e2034383030.roa (hash: GBdfFumQ5DV/1xYnnlyi47x4qk5lERcVl7kr2idNp9c=)
5: 33362e33372e36342e302f31382d3234203d3e2034383030.roa (hash: NMlc08aJ8UseGSZOmITgHbPdAq3IYwx8PL3tK8OhSoQ=)
6: 33362e33372e36342e302f32342d3234203d3e2034383030.roa (hash: PA39TYh6P41nbjHtJH0d1GIAsFc6B+1kH+m4xb6uCPI=)
7: 3138322e32332e37312e302f32342d3234203d3e203338353133.roa (hash: uIhlq8cMxn28Pvj8ZJACnavGoWzTzhn/pqOPaz7cSrw=)
8: 323430303a383030303a383a3a2f34382d3438203d3e2034383030.roa (hash: sFIKspn12oUVHMGbLxwOULA11WrS73eFtedLiDBByg0=)
9: 3138322e32332e36342e302f32342d3234203d3e203338353133.roa (hash: gkkwRnS2WCIrOKy5FApAtJv026NVWI/A1L4CP2KojeQ=)
10: 3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa (hash: aOJnQA8BUfuxQfVNSyhFqfhSin0ZYrphjORcdL0q8eg=)
11: 3138322e32332e36372e302f32342d3234203d3e203338353133.roa (hash: z9+inTK8KbQyjNS+A1qnkPMcbFcWl5VrPild9PgNuTs=)
12: 3132332e3233312e3230392e302f32342d3234203d3e20313333383431.roa (hash: 8ijdIyFVW9aw6d+fjBurWhMcHj56f4wz73eWHGjXguY=)
13: 33362e33372e3132322e302f32342d3234203d3e203338353133.roa (hash: cWP8iAHaEjYsueDVJd8R9/n8dlp28yD3v23DTEpYPKY=)
14: 36312e382e36342e302f32302d3234203d3e2034383030.roa (hash: u/3V+YUc4uTcyVtWF2imjpJ9kxtpOd7fsYnh6IgqcNs=)
15: 3132332e3233312e3139342e302f32342d3234203d3e20313333383431.roa (hash: E5xaoMhIJJpQzcXEnlW+IRv8euAL1pbLqPkV9yn2SKY=)
16: 323430303a383030303a383030323a3a2f34382d3438203d3e2034383030.roa (hash: +FoUbdGqHste4Nh6N+vVNIkBiBBvlXu31JdL6AXnfxk=)
17: 323430303a383030303a343a3a2f34382d3438203d3e2034383030.roa (hash: fFE75K3W1S2PF2UEu21NSSWiXUvr4s7t59N8byPr7Uc=)
18: 3138332e39312e36342e302f31392d3234203d3e2034383030.roa (hash: tM+4rXxsNzn2Xt+XM8Ks+1Tdp/f/87KXQ0KFIbK7uGs=)
19: 3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa (hash: KnBKIBRoDtz6h2mBN9L3VOYgb0UdlxxYukrw8OBbzFk=)
20: 3138322e32332e302e302f31372d3234203d3e2034383030.roa (hash: U7X90K4Jy4kLKgTOmXUTDjHtLbQ6EpATpQl9RDN0oBc=)
21: C5528B1880D1A3C409F79997E426F977596B3E01.crl (hash: qxlpc5UkuFMlZhRakH6x9oVK0EwYP1puhr57/GA7Id8=)
22: 33362e33372e3132312e302f32342d3234203d3e203338353133.roa (hash: mkrmQkgwL86xbeW+q2o6iJGrar2kKUyH1ZsbTKExBr0=)
23: 323430303a383030303a313030303a3a2f34382d3438203d3e2034383030.roa (hash: AbuxTitLp5NbH1D9N3SVbU1kKn9cTa0zWEuaoHG9AII=)
24: 3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa (hash: q2jksXlJwwtBSWXAUcRDeu2FxcGVOFAwiSWmsF2gKVc=)
25: 3138322e32332e37322e302f32342d3234203d3e203338353133.roa (hash: d2wkWP4NTFCxZMxZrrL/t+E+Nxs8rQ3V9zJx3Q4Eo54=)
26: 33362e33372e3132302e302f32342d3234203d3e203338353133.roa (hash: OnqFY4cXr8RFS2caorgMP3DdTGQyrYKCJDLBQwCeM0Y=)
27: 323430303a383030303a333030323a3a2f34382d3438203d3e2034383030.roa (hash: g+lx3ys8NW6kqZwkq/LNHL6bYo4Lrqb3vwI4EtUf0O0=)
28: 323430303a383030303a323432303a3a2f34382d3438203d3e2034383030.roa (hash: D3yC7NolqMgijsm8RN1FhQBnmM0H+Utd/4UUZ3puwXo=)
29: 3132332e3233312e3132382e302f31372d3234203d3e2034383030.roa (hash: 11WIVRJKlIe1G6ph/l2ojd2a/Iec8TvbdWCKImaRqpY=)
30: 3230322e3135322e302e302f31382d3234203d3e2034383030.roa (hash: cicKi/T6f7Jr16t/8dsj0hJbDvZ04h7npH+a5sskg8g=)
31: 3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa (hash: iZ7rrvTpP13TLOrEpwbrP8seywLWjyotiEpyEnkmPd4=)
32: 3132332e3233312e3139382e302f32342d3234203d3e20313333383431.roa (hash: 1PeGWjB946IOBgS/zWBRfsPNkbgS8NlecAgzbINF/uk=)
33: 3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa (hash: 3vEtSN8mP7FRPCchYPmRbaIlK0ypUNunvESKJ134bZI=)
34: 3138322e32332e36362e302f32342d3234203d3e203338353133.roa (hash: 6TltNAIcL1hNOlajbpm3mzYL3xNnH1FyO5LGCYWnO6U=)
35: 3138322e32332e36352e302f32342d3234203d3e203338353133.roa (hash: HRWl0PoxYyazhSUQDSGYzTKY4ZEVK4o77lBdIeKHD0g=)
36: 323430303a383030303a383030313a3a2f34382d3438203d3e2034383030.roa (hash: 3PhEkUV3N12R8pRIHSoFuztVIR9bfgzvVF7hUhxIxyU=)
37: 3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa (hash: 4CWlYP/hBAAcLFHyTJgnnlFrO0AlAkZEDFkRi5epNhU=)
38: 33362e33372e36362e302f32342d3234203d3e20313331373138.roa (hash: KyNkP5cl4LQ8ysprqyY5wf+6No4xpjxc8VYDSxIg1wc=)
39: 323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa (hash: mABESLLCQ2wB+/DcP8V/6aovf2f/HSwW3vN4LrjbIeI=)
40: 323430303a383030303a363a3a2f34382d3438203d3e2034383030.roa (hash: jOJHetqOXQoWZjUBm4n9O8ywIbKG1mgUVhk6ESWf478=)
41: 3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa (hash: QSUXaKgtOpsCAJhn4I0b/ra4wfYKk11U0gz7p01iOHg=)
42: 3132352e3231332e3133302e302f32342d3234203d3e203338353133.roa (hash: XIMmqKtvzDRBukYNyJnKPO2gKd7GkkA781Y0tXGj4Pc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 16:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c1:80:c8:72:aa:b5:ab:4b:05:37:24:4f:e3:3b:5b:40:30:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5528B1880D1A3C409F79997E426F977596B3E01
Validity
Not Before: Aug 31 15:08:14 2026 GMT
Not After : Sep 1 16:22:14 2026 GMT
Subject: CN=AFBB641F0FFBE01448BC19AFC08BE3882F345DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:f5:52:bd:8f:2c:1d:f1:b3:4f:fb:a5:be:
6e:1a:5e:57:e3:c8:f8:57:a4:4e:06:37:fd:22:e0:
23:69:ff:0c:6e:9c:5f:77:e2:7a:6b:cd:c7:99:af:
12:9e:71:c5:80:b2:ff:30:70:af:cc:63:74:e6:b7:
bb:88:81:fb:c0:8a:15:71:4b:6e:d0:17:03:ee:62:
a6:68:8c:0d:6a:94:86:eb:e3:13:ed:9b:4d:3d:9c:
0e:a2:c9:d6:2d:f4:ee:f5:10:c1:02:69:f3:7d:bb:
f7:51:d1:c3:1c:24:94:a2:0a:c7:6b:f4:58:4b:a0:
3d:2a:a3:33:c5:40:5b:5f:d4:53:56:f2:18:f4:a4:
43:80:cc:e8:09:a9:d6:39:47:4a:72:31:31:b2:56:
e2:c6:1e:70:6e:e9:36:15:2c:6e:3d:ef:ca:dc:47:
77:c4:12:f4:61:1a:8a:96:bb:ff:74:11:8d:78:57:
b4:89:74:a8:4d:b7:86:15:aa:bd:f9:8b:c3:a3:7d:
16:b3:0d:1b:9c:5d:38:5c:f8:e2:1e:51:ba:d9:e0:
ca:e4:e5:f6:4b:bf:c9:ea:45:ce:99:84:b3:66:b1:
38:3b:58:10:cd:8a:d2:dc:f5:4f:ca:24:57:1c:db:
07:63:be:e6:c2:5b:96:ba:e1:b3:8e:e3:21:18:2c:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:64:1F:0F:FB:E0:14:48:BC:19:AF:C0:8B:E3:88:2F:34:5D:F2
X509v3 Authority Key Identifier:
keyid:C5:52:8B:18:80:D1:A3:C4:09:F7:99:97:E4:26:F9:77:59:6B:3E:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C5528B1880D1A3C409F79997E426F977596B3E01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/C5528B1880D1A3C409F79997E426F977596B3E01.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:56:cf:2a:4f:c2:8d:40:00:d2:d1:ff:f5:e2:da:5b:b7:
fb:01:b5:4e:09:34:81:c9:77:32:39:a7:1a:dd:8d:32:d1:f6:
c9:92:6b:37:f0:45:db:f5:8f:20:81:07:1b:c4:f2:65:6d:00:
e0:57:58:c7:53:ed:76:f8:ab:22:0f:8d:60:3d:a8:ba:9f:d0:
f4:90:5e:e7:6a:22:e0:e3:1e:87:5f:be:57:f7:22:38:20:a5:
ad:7e:65:3e:25:15:98:a5:7f:5f:c5:48:94:5a:2a:9f:51:70:
a5:a9:79:f3:41:74:95:cd:f4:90:75:4a:dd:1d:3f:08:de:27:
70:5c:50:e7:fd:7a:e7:a4:a9:80:65:a5:65:05:06:f7:86:3b:
c3:2f:f3:93:a7:98:da:61:70:b2:bb:a4:ae:b6:b4:b4:c4:53:
a8:37:08:82:3e:d2:a7:c6:54:f0:0b:90:84:4b:67:83:5d:f2:
85:d9:12:b4:35:2d:e0:54:8c:fa:be:0f:ee:57:c5:63:52:df:
52:e2:cc:5f:80:75:1d:c7:6f:be:b6:a4:5f:ea:c3:bf:e7:7b:
e2:ee:22:e6:6a:0e:38:16:11:9b:a7:a1:47:e6:de:56:c2:4a:
e8:75:52:1c:25:78:7c:0a:0b:14:c3:c9:d2:22:e2:a6:6c:2a:
fc:dc:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 06:22:21 2026 by rpki-client