
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json)
Hash identifier: bPH1b8vv9FoAjAnaY+ISJ76hdZsmqg9M3nAKC5SOGic=
Subject key identifier: 40:E7:90:B4:3E:80:68:E4:40:0D:91:4F:ED:AC:AB:86:0E:DE:E1:D2
Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A
Certificate serial: 222CB7C143BEB0FB4EA65BBD21E33768187A839D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:04:15 +0000
Manifest this update: Wed 17 Jun 2026 00:59:15 +0000
Manifest next update: Thu 18 Jun 2026 02:33:15 +0000
Files and hashes: 1: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: 934SshveO6rGDORqxnUJ8nuPXKSmlnI1dwk0uD3nYQk=)
2: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=)
3: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2c:b7:c1:43:be:b0:fb:4e:a6:5b:bd:21:e3:37:68:18:7a:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A
Validity
Not Before: Jun 17 00:59:15 2026 GMT
Not After : Jun 18 02:33:15 2026 GMT
Subject: CN=40E790B43E8068E4400D914FEDACAB860EDEE1D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:8a:7c:1c:e0:66:90:f0:9d:15:47:39:15:
ba:39:23:74:c7:21:94:dd:e8:b9:f9:44:7d:37:11:
6c:b1:38:70:27:3a:64:d9:d4:4b:d3:87:f2:a6:6f:
32:ab:50:df:22:0d:fb:67:ea:ba:4c:76:be:84:bc:
60:07:01:f6:60:3e:c0:e1:65:22:92:fe:e2:df:65:
46:ff:60:3f:42:68:48:9b:36:7c:44:92:af:01:10:
22:24:33:d3:9f:ad:d1:97:26:ba:2a:e7:2a:17:43:
42:bc:58:37:fc:5d:80:a6:ef:a2:f3:b3:3b:f9:0d:
42:52:38:79:37:4e:26:9c:33:16:fc:09:08:3a:f4:
ea:c7:0d:c0:01:d7:bd:dd:cc:69:fa:8c:f6:96:53:
d7:7d:e6:15:aa:d3:ac:34:f5:3b:ad:8e:8f:01:81:
c1:6d:d3:bf:bc:53:20:1e:1f:e1:7f:ac:e4:f6:42:
06:55:ce:65:82:64:20:5f:96:cd:f6:fa:8d:03:65:
ee:68:cd:6c:da:b1:b8:38:8a:06:e9:0b:a5:6c:2d:
0a:1e:78:cf:bc:2c:36:ea:a3:2a:ba:72:a7:89:a6:
bb:4b:b6:b5:ff:e5:cc:b7:a1:83:a5:75:28:ae:29:
2d:0c:bc:5f:65:33:e2:71:75:19:88:c3:48:18:db:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:90:B4:3E:80:68:E4:40:0D:91:4F:ED:AC:AB:86:0E:DE:E1:D2
X509v3 Authority Key Identifier:
keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:68:eb:33:09:3f:9d:ab:02:f1:bc:6a:c7:2e:3b:24:b5:
67:f7:7e:7a:8f:bc:cd:4f:14:4f:31:05:e0:ff:9d:0d:20:80:
f9:0c:78:15:fd:32:9c:d5:77:65:05:4e:be:b0:9c:5b:89:d2:
41:c5:0b:03:4c:e8:30:f9:c1:6b:ff:66:49:46:e1:89:4d:0d:
12:9a:24:74:40:f9:84:62:72:71:7b:32:0d:1f:4e:98:f1:94:
e5:e8:12:9b:da:36:c9:c2:e4:51:20:f5:b3:8d:f2:65:ff:d1:
71:9a:58:3a:e3:ee:9a:4a:88:4e:ac:0f:bc:fe:1b:f0:92:36:
fd:e3:8c:e3:3d:aa:1b:0d:47:27:a0:19:f6:40:e8:19:3b:9d:
38:02:d4:a6:b6:78:ec:97:2e:8d:89:37:1d:1f:c8:72:23:75:
98:f5:36:de:fe:90:e2:cf:17:3c:32:a2:e1:35:6a:7a:72:45:
ac:88:58:a0:56:48:b7:93:b7:5b:e1:f3:9c:81:8a:b0:66:eb:
0c:0a:4f:b0:80:65:a8:af:c3:8d:2e:1d:87:ac:c1:f1:81:e9:
03:e0:bd:b5:2b:42:b0:39:a2:43:bf:c8:b1:3c:f2:13:54:b9:
89:09:2c:05:fb:8e:de:4c:ec:1a:bd:3f:f9:6a:f1:1c:bf:71:
12:46:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:14 2026 by rpki-client