
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
File: 530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json)
Hash identifier: 97XoDgZ5JytDyVQqX30XixpivKZNt5kc1vGbn/2NXuQ=
Subject key identifier: CF:E9:75:27:C7:15:99:61:C1:AB:9F:4C:80:F6:6F:AD:18:3E:2F:A8
Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
Certificate issuer: /CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Certificate serial: 3460F311F68B980180CD580B155DC2811382BC09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
Manifest number: EC
Signing time: Sat 24 Oct 2026 07:02:34 +0000
Manifest this update: Sat 24 Oct 2026 06:57:34 +0000
Manifest next update: Sun 25 Oct 2026 08:59:34 +0000
Files and hashes: 1: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: mXO5MT5tCLqCWfbKrDez168Kmem5ad/EoSsm0/+YmVs=)
2: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=)
3: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:60:f3:11:f6:8b:98:01:80:cd:58:0b:15:5d:c2:81:13:82:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Validity
Not Before: Oct 24 06:57:34 2026 GMT
Not After : Oct 25 08:59:34 2026 GMT
Subject: CN=CFE97527C7159961C1AB9F4C80F66FAD183E2FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:9e:a8:3e:4e:f7:35:ec:71:20:fe:5a:8e:
bb:0d:75:98:22:48:6a:95:a8:95:77:a0:e5:ee:d1:
1e:fe:7a:62:2d:d4:84:31:e0:80:6e:88:b4:c1:5c:
99:8e:b3:3f:af:2e:16:61:6b:90:25:55:e5:51:40:
dc:d5:7c:57:4f:17:86:d4:fc:11:f3:01:b4:9c:21:
20:24:e4:d9:1a:82:3b:f0:67:30:3e:94:a2:c8:63:
6e:fd:03:25:e1:35:e0:df:8f:5e:51:82:05:0d:a9:
1b:f6:64:bc:a5:d5:3d:e1:e9:63:6f:b3:2a:0b:fa:
bc:7b:13:1d:49:44:33:cd:04:ad:04:0b:ee:70:1c:
b0:44:ed:7b:29:72:5b:09:93:d8:25:1c:01:ac:42:
6b:14:f3:b9:5c:ba:1d:32:df:af:10:1a:4c:74:2a:
a2:ef:64:c8:1c:ad:2f:12:d1:ef:ab:82:8a:15:f1:
cf:94:7f:98:38:56:3f:e6:fc:61:d7:b9:46:e9:d0:
3c:09:a9:2c:ff:a9:a9:a1:5d:04:56:0b:4f:b0:7c:
77:c7:4f:6f:1a:4e:8a:5e:5a:39:7d:1e:48:a0:1d:
9a:20:2c:b8:b7:9e:9c:09:00:48:08:4b:51:1d:4d:
59:d8:04:dc:ac:85:72:53:0f:20:bc:b9:7d:2b:99:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:75:27:C7:15:99:61:C1:AB:9F:4C:80:F6:6F:AD:18:3E:2F:A8
X509v3 Authority Key Identifier:
keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:10:65:3a:ac:7d:ec:2b:5a:24:87:d6:b2:0e:81:e0:b0:
95:94:92:12:e3:56:8f:41:24:6f:f1:6d:79:da:07:01:77:56:
17:69:9d:2c:4b:04:34:56:69:68:4b:f5:07:05:c0:19:40:cd:
70:7a:22:95:73:d0:e5:25:fd:2c:74:79:b5:35:31:3b:f3:ad:
f1:1f:2b:a3:fd:b6:3a:d1:62:8f:9c:c8:d1:22:40:00:d4:db:
59:4a:bc:3d:e8:89:3c:5b:41:3e:74:8b:4b:37:1f:77:d1:2e:
29:f6:ff:72:ab:d1:ee:56:5e:7a:04:77:d6:e2:17:31:53:82:
8c:d0:c6:fb:b9:a5:2f:fe:42:52:ce:30:29:d5:76:e4:f0:15:
8c:df:1d:76:4e:b2:d7:10:dd:a4:94:63:25:d2:2e:ac:3d:31:
09:cc:55:9f:5b:e7:76:48:ae:31:e7:2e:39:4b:70:a9:57:b7:
19:3b:e9:40:fd:b5:77:66:80:d4:26:c6:37:ed:20:b9:87:f4:
06:8c:4a:ae:cc:9e:24:a4:fc:22:ce:85:ab:9a:a3:71:30:41:
c8:6a:70:df:b4:98:f8:22:56:fa:07:31:e8:b9:51:f1:a7:a8:
3d:3b:c7:3d:0b:f3:69:fd:6b:81:8b:90:40:24:04:78:89:8f:
87:5f:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:45 2026 by rpki-client