
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
File: 530B657BC2C884CC14953B48E6700F4395D4AE66.mft (raw, json)
Hash identifier: vD8bd5IewefuftyZrTpCOeJCiHB7HC4c14vBCJvE3XM=
Subject key identifier: CE:D8:75:92:F6:31:53:CE:E1:3F:7B:3D:4D:39:D8:66:0B:3F:29:99
Authority key identifier: 53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
Certificate issuer: /CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Certificate serial: 5021857D2A8EE4FD044524EA74D61A1EBD2C86C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:35:24 +0000
Manifest this update: Tue 16 Jun 2026 17:30:24 +0000
Manifest next update: Wed 17 Jun 2026 18:05:24 +0000
Files and hashes: 1: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: hHEDiD3x1jCZU7rbFxON3QBOnaHax4YzsCxjk1ivhKM=)
2: 530B657BC2C884CC14953B48E6700F4395D4AE66.crl (hash: /Ah34SvLFNEzon6wESlv1qX1hneSgGD/e8SXLPXHlkg=)
3: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: twC7JvDoInB/4rtJFFg+lB4BVq30Kkq/oNt5ibEPmaY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:21:85:7d:2a:8e:e4:fd:04:45:24:ea:74:d6:1a:1e:bd:2c:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530B657BC2C884CC14953B48E6700F4395D4AE66
Validity
Not Before: Jun 16 17:30:24 2026 GMT
Not After : Jun 17 18:05:24 2026 GMT
Subject: CN=CED87592F63153CEE13F7B3D4D39D8660B3F2999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:2a:1c:79:ed:52:91:d5:12:95:cf:68:fc:
aa:9e:d1:87:c1:27:92:ce:15:f5:4d:41:f4:6e:be:
a9:71:1b:ca:52:64:b1:0f:62:a7:1a:1f:db:78:bc:
2e:bf:6f:49:3c:2c:11:6e:96:4b:4f:d9:dd:a1:de:
71:69:88:d8:6d:32:8b:08:b6:4c:89:9e:9c:b5:af:
0b:03:6d:c6:75:2c:6a:2f:cf:0b:ff:1a:10:5a:ee:
bd:c6:ba:36:63:32:6f:13:20:89:47:a5:54:b6:04:
07:67:66:ef:68:78:4a:bb:5a:f0:69:a9:ee:98:6e:
be:f1:04:5a:dd:78:9b:96:cf:5d:13:47:14:cc:28:
c9:59:e5:41:16:cc:6c:60:65:85:5c:d2:54:14:10:
9a:3b:7b:77:1e:01:4f:e9:87:3d:63:f3:04:29:95:
59:7f:e7:51:05:33:2d:ce:85:4b:a7:8a:6e:4c:7e:
90:74:cd:ef:5d:56:f7:70:a9:7d:76:a9:11:38:ae:
4a:c3:ae:fd:9f:3f:8b:f1:2a:10:e2:64:b2:55:38:
10:c5:32:42:1d:49:8d:bf:ae:2a:d2:aa:ea:50:75:
04:97:59:90:92:b1:90:34:21:88:de:6b:12:63:a3:
8d:63:74:f5:3c:b2:6a:85:54:f7:8a:b3:51:c7:e7:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:75:92:F6:31:53:CE:E1:3F:7B:3D:4D:39:D8:66:0B:3F:29:99
X509v3 Authority Key Identifier:
keyid:53:0B:65:7B:C2:C8:84:CC:14:95:3B:48:E6:70:0F:43:95:D4:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/530B657BC2C884CC14953B48E6700F4395D4AE66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/530B657BC2C884CC14953B48E6700F4395D4AE66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:aa:8e:97:2c:3d:25:5f:17:1a:55:b8:39:4c:c7:87:8b:37:
57:c4:08:aa:47:45:a0:36:8d:d6:ee:b7:d8:64:83:d1:db:3a:
91:65:94:bb:b3:6e:54:2f:94:a8:df:1a:5f:dc:b3:d4:73:4e:
19:7d:88:15:ae:2e:67:2b:4c:f5:fb:99:44:d9:7f:29:0a:e3:
20:01:cf:42:b9:10:91:c5:05:36:8f:9a:5e:3b:3f:34:90:d0:
5b:0b:2b:31:69:b8:79:15:2b:5d:d6:b1:f1:74:cf:e6:ca:c3:
f2:32:0b:32:39:13:5d:2c:e4:c6:aa:4f:67:43:6b:74:3d:b7:
3c:99:6d:cc:61:00:0c:ae:9e:17:9b:98:e3:d6:47:6e:38:4c:
f8:24:8f:08:e5:ad:d6:db:62:30:88:a9:f4:0f:cb:16:74:a5:
08:f5:18:36:db:d0:ab:13:e0:4a:90:9c:70:5c:c4:66:74:dc:
74:e2:9b:ef:f8:1d:59:40:27:12:cd:a0:34:03:fa:4f:2d:d8:
85:54:af:c7:57:6c:ed:ba:87:6f:b1:7a:bd:8c:99:82:6e:0e:
f1:44:c4:03:82:0d:27:ad:1a:af:dd:05:01:e3:b9:12:ac:86:
a4:fc:2d:41:5f:41:c9:20:d7:15:c0:e4:a1:ce:12:b1:b7:b1:
d2:95:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:31:42 2026 by rpki-client