$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft File: 529B615ABA9F13191A216A37170723B01A89793A.mft (raw, json) Hash identifier: kmsio4eoYWZOLJjb/CLpPWkJhBHPLkUQtHih7+1ReUA= Subject key identifier: DE:B6:AC:7A:AE:E8:98:91:F0:22:5E:99:DE:B5:27:5F:80:DF:44:D2 Authority key identifier: 52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A Certificate issuer: /CN=529B615ABA9F13191A216A37170723B01A89793A Certificate serial: 63EC5F9640331B18BFBB7EA79D11BEDE3DBF6550 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft Manifest number: BC Signing time: Sun 20 Sep 2026 13:08:16 +0000 Manifest this update: Sun 20 Sep 2026 13:03:16 +0000 Manifest next update: Mon 21 Sep 2026 14:04:16 +0000 Files and hashes: 1: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: yuCoctK3fh/1noMtqmTNEcpu7lQ/bDLhcWGke9P3cXA=) 2: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: FGY54/U/sApIO0WnuIi9FgJuB2ojszOr2KUIIMJQgfQ=) 3: 529B615ABA9F13191A216A37170723B01A89793A.crl (hash: hHc69m3d2jbsuSWD8OEZby8KJwd/fQuvGivOEhbePa0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ec:5f:96:40:33:1b:18:bf:bb:7e:a7:9d:11:be:de:3d:bf:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B615ABA9F13191A216A37170723B01A89793A Validity Not Before: Sep 20 13:03:16 2026 GMT Not After : Sep 21 14:04:16 2026 GMT Subject: CN=DEB6AC7AAEE89891F0225E99DEB5275F80DF44D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:46:a3:59:a2:30:38:62:47:cf:21:29:e9: 45:59:89:fc:ed:b0:d3:ef:f5:45:3c:bc:9d:97:ec: 68:07:e7:df:59:e2:a6:e9:0e:c4:57:7a:f9:6e:b6: 47:0a:5f:7b:78:bd:2d:31:32:c8:78:d5:0b:c9:7c: 24:66:68:e2:e8:97:dc:81:2e:2b:15:d7:f7:a0:c3: bf:18:97:9b:0a:a7:9b:5f:09:40:f6:ab:59:f8:ff: 00:9d:65:ac:b2:da:ea:19:4e:9b:63:19:d8:97:75: 8d:11:4e:2b:aa:01:b6:f6:6c:ac:ac:c5:85:57:a8: 94:ee:b2:03:39:76:9c:55:1d:2f:40:97:ab:b5:0b: 7a:29:4a:44:44:dc:35:6c:2c:d5:cf:44:fb:44:17: 8a:93:5d:37:71:2a:e0:30:2b:b1:31:29:f8:b9:f3: 01:f5:1d:1a:39:8e:d4:fe:6c:6e:28:5d:b8:b9:46: d5:71:cd:2c:d6:83:e9:80:a6:c0:f1:6c:2f:e4:72: b3:bc:2e:3b:65:e0:0f:09:98:24:fa:c2:9c:75:58: 9f:94:2a:9a:a5:06:cc:61:75:2b:08:9f:6c:64:a6: ef:3f:07:8e:90:71:5a:08:c0:e1:a2:84:38:8b:c2: c2:e7:2b:19:4d:b0:f8:7b:f3:a6:28:fe:3f:b6:22: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:AC:7A:AE:E8:98:91:F0:22:5E:99:DE:B5:27:5F:80:DF:44:D2 X509v3 Authority Key Identifier: keyid:52:9B:61:5A:BA:9F:13:19:1A:21:6A:37:17:07:23:B0:1A:89:79:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/529B615ABA9F13191A216A37170723B01A89793A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/529B615ABA9F13191A216A37170723B01A89793A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:25:9a:1f:25:ab:b3:c7:f4:80:97:c4:ac:de:cf:0b:43:00: a1:54:cc:a7:f8:91:5c:c8:bb:cf:69:40:b9:55:85:83:4f:62: 31:b2:db:3a:5f:28:e0:a5:77:26:f1:ee:bc:9d:0c:9e:b0:7a: 0b:d5:f5:a0:1a:21:15:f0:2e:1a:08:08:8d:5b:95:a9:93:02: 11:2b:d6:14:3d:47:40:53:e9:92:cb:21:0d:43:1e:af:0a:97: e5:8d:8d:bc:34:d0:47:bb:d5:50:ab:3b:3e:d1:ae:8f:34:ea: e6:6a:20:e5:c1:f4:dd:16:6f:d0:af:8d:03:cf:9a:9d:cc:da: 57:d3:a2:6b:1b:93:7f:00:eb:34:6b:60:78:ac:14:70:f0:4f: d3:36:5a:e3:ee:c8:59:4d:87:c9:25:c7:ca:0b:89:eb:ad:14: 40:84:d5:27:1b:e8:fb:2a:cc:17:33:ae:8d:6f:04:5d:a1:d2: e3:26:8a:06:bf:2b:83:87:0a:93:cc:f6:cc:2e:71:ae:eb:c8: 9f:0a:52:28:f9:70:db:6e:ae:bb:32:09:b5:15:94:c3:8b:f8: 1e:65:bc:cc:08:e8:61:70:46:4a:d7:97:e7:e8:2b:96:7e:aa: 35:80:a3:15:a3:2f:f9:95:d5:e4:68:0e:bf:33:cd:71:ed:b9: 26:ed:87:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+xflkAzGxi/u36nnRG+3j2/ZVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI5QjYxNUFCQTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAx QTg5NzkzQTAeFw0yNjA5MjAxMzAzMTZaFw0yNjA5MjExNDA0MTZaMDMxMTAvBgNV BAMTKERFQjZBQzdBQUVFODk4OTFGMDIyNUU5OURFQjUyNzVGODBERjQ0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAEajWaIwOGJHzyEp6UVZifzt sNPv9UU8vJ2X7GgH599Z4qbpDsRXevlutkcKX3t4vS0xMsh41QvJfCRmaOLol9yB LisV1/egw78Yl5sKp5tfCUD2q1n4/wCdZayy2uoZTptjGdiXdY0RTiuqAbb2bKys xYVXqJTusgM5dpxVHS9Al6u1C3opSkRE3DVsLNXPRPtEF4qTXTdxKuAwK7ExKfi5 8wH1HRo5jtT+bG4oXbi5RtVxzSzWg+mApsDxbC/kcrO8Ljtl4A8JmCT6wpx1WJ+U KpqlBsxhdSsIn2xkpu8/B46QcVoIwOGihDiLwsLnKxlNsPh786Yo/j+2IlfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3raseq7omJHwIl6Z3rUnX4DfRNIwHwYDVR0j BBgwFoAUUpthWrqfExkaIWo3FwcjsBqJeTowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZlYzM1ZWQtMGYzNi00M2Q3LWI1MzctMDZkYjMxNGM5MGQ1LzAvNTI5QjYxNUFC QTlGMTMxOTFBMjE2QTM3MTcwNzIzQjAxQTg5NzkzQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjlCNjE1QUJBOUYxMzE5MUEyMTZBMzcxNzA3MjNCMDFBODk3 OTNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1 MzctMDZkYjMxNGM5MGQ1LzAvNTI5QjYxNUFCQTlGMTMxOTFBMjE2QTM3MTcwNzIz QjAxQTg5NzkzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAlmh8lq7PH9ICXxKzezwtDAKFUzKf4kVzI u89pQLlVhYNPYjGy2zpfKOCldybx7rydDJ6wegvV9aAaIRXwLhoICI1blamTAhEr 1hQ9R0BT6ZLLIQ1DHq8Kl+WNjbw00Ee71VCrOz7Rro806uZqIOXB9N0Wb9CvjQPP mp3M2lfTomsbk38A6zRrYHisFHDwT9M2WuPuyFlNh8klx8oLieutFECE1Scb6Psq zBczro1vBF2h0uMmiga/K4OHCpPM9swuca7ryJ8KUij5cNturrsyCbUVlMOL+B5l vMwI6GFwRkrXl+foK5Z+qjWAoxWjL/mV1eRoDr8zzXHtuSbth0E= -----END CERTIFICATE-----Generated at Sun Sep 20 21:39:04 2026 by rpki-client