
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json)
Hash identifier: GMR41+md8zT5Ur73J1iT/CouPszPRS5rGG9D7QRdkH8=
Subject key identifier: C1:F8:42:2D:CC:FE:99:89:84:2D:C1:BC:9F:E5:7A:7F:FC:70:F3:14
Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A
Certificate serial: 38FB4AA3CD314A6AF03CA92EF933FC4D7968FF9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 09:35:31 +0000
Manifest this update: Thu 17 Sep 2026 09:30:31 +0000
Manifest next update: Fri 18 Sep 2026 11:33:31 +0000
Files and hashes: 1: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: P9wYtC0BooX/K8oNZvuU1FSGUdfpVr9DDNDS4u7zEyM=)
2: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=)
3: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fb:4a:a3:cd:31:4a:6a:f0:3c:a9:2e:f9:33:fc:4d:79:68:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A
Validity
Not Before: Sep 17 09:30:31 2026 GMT
Not After : Sep 18 11:33:31 2026 GMT
Subject: CN=C1F8422DCCFE9989842DC1BC9FE57A7FFC70F314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:eb:45:3a:2a:84:cf:c0:1a:be:15:ba:58:
ea:d2:ad:f0:66:9f:c8:3e:d8:95:46:66:4a:50:d9:
0a:98:33:cb:22:25:56:65:68:6d:c8:18:be:43:ef:
f6:2f:f5:4a:35:c3:d4:e7:0a:a5:72:e6:d0:d5:02:
7c:4c:fc:38:09:09:b1:92:dc:75:d4:4a:52:3a:00:
d1:0b:02:ec:14:a9:53:c0:48:00:38:f6:b6:b0:54:
7b:d5:01:1c:ea:c5:5e:08:29:04:04:c7:b9:ec:14:
57:84:05:59:e9:6f:e2:53:49:39:47:f6:2d:4f:15:
a2:bf:7d:c5:48:2b:e5:cd:b0:cc:63:75:94:d1:45:
31:83:d1:b5:de:81:8a:64:13:75:9b:06:ee:c1:0e:
e8:fd:de:27:a2:cc:57:b7:1b:2e:77:0a:0b:fb:a8:
a7:c2:13:74:ed:ba:c8:3b:a8:77:2f:12:8b:51:67:
df:07:a6:be:17:bc:6f:f8:05:25:9e:57:c6:87:29:
7e:b4:9f:37:2e:7c:a5:bd:a3:3c:3b:71:d7:ba:f9:
8a:c2:e2:21:67:8c:c2:cf:08:7a:51:83:3c:d1:6e:
15:62:b3:b1:78:c9:88:22:e9:15:2b:6e:ee:57:b1:
9a:0e:be:b9:eb:8d:10:b8:07:79:e7:ed:d6:bc:46:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:42:2D:CC:FE:99:89:84:2D:C1:BC:9F:E5:7A:7F:FC:70:F3:14
X509v3 Authority Key Identifier:
keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:eb:22:c5:26:fc:73:a2:62:e1:35:59:e3:a4:74:1f:67:
8a:b5:3d:75:e7:e3:21:bd:2f:df:8e:ea:f8:f8:87:e7:ac:1d:
a4:7e:40:80:77:a3:3d:b3:4d:b5:b7:11:85:89:2b:03:5c:0f:
38:90:ac:b1:fa:92:e2:8e:45:36:49:04:73:11:72:b4:94:71:
5f:41:f4:05:5a:79:f8:09:61:86:57:2f:d3:ba:30:17:ba:8c:
23:49:90:89:0f:4d:0f:cf:12:87:e4:4c:3f:15:5a:30:b9:1e:
22:9b:ca:3b:de:99:ba:69:29:72:ce:51:cb:b9:ba:64:40:c3:
ee:ef:eb:5f:66:69:b5:2f:d5:0b:f3:3a:bc:f5:07:64:b6:24:
7d:31:09:e4:de:06:f9:b9:e6:33:2f:da:c5:c5:88:55:ee:75:
fc:7b:14:3f:21:7d:8b:63:b0:17:e3:7c:1d:8a:70:a6:93:59:
7e:5d:b0:15:2e:31:2c:f6:4b:7b:3b:ef:dc:82:06:bc:ff:6b:
9d:85:dd:34:2c:9b:ce:10:18:9a:15:f3:5c:34:94:a9:5f:8a:
da:35:16:01:83:67:59:41:a5:9d:7e:7e:0e:b7:62:e6:9e:34:
57:25:b5:94:9d:67:5b:31:c0:f9:90:95:ac:62:39:5b:5d:09:
1f:7a:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:18:29 2026 by rpki-client