
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json)
Hash identifier: BEJYaBeGEmxFXW0GkmAY7kEe0Yyf8ZzO1nWYe64rQJE=
Subject key identifier: 01:58:27:CF:49:24:6C:6B:BE:17:F7:A8:56:BD:22:38:92:96:29:65
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 2B5571396D3A1A2E33B8671B5ED01038BA6D2322
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 04:16:10 +0000
Manifest this update: Tue 21 Jul 2026 04:11:10 +0000
Manifest next update: Wed 22 Jul 2026 07:49:10 +0000
Files and hashes: 1: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: +u6qGeH3hk5pjMbfORmlPHVbRPl6iWOrovj81BhWcwc=)
2: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=)
3: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=)
4: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=)
5: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=)
6: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=)
7: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:55:71:39:6d:3a:1a:2e:33:b8:67:1b:5e:d0:10:38:ba:6d:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: Jul 21 04:11:10 2026 GMT
Not After : Jul 22 07:49:10 2026 GMT
Subject: CN=015827CF49246C6BBE17F7A856BD223892962965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:0c:01:cb:23:5f:a3:51:58:bf:ed:b6:60:
84:c4:fc:bc:f7:94:95:0c:3c:15:50:8f:bd:19:49:
27:ed:c1:19:67:ca:6f:1d:e8:36:bf:81:56:f6:be:
80:68:ee:58:f5:a6:9b:31:b6:db:a4:d0:3e:e8:04:
a8:bb:e8:29:c9:33:d2:ee:01:90:6f:d2:65:42:67:
20:24:07:1a:70:00:a8:52:b6:79:d4:3b:4c:74:83:
f7:cf:4a:13:d1:4c:72:f8:87:d4:84:9c:30:fa:1d:
a3:90:2f:1a:f5:3a:69:ea:c4:9a:28:f5:f9:33:58:
48:13:30:00:82:1a:2b:04:68:7c:a0:89:39:c6:f4:
6e:54:ce:50:63:7c:a0:0a:6b:f6:b0:b2:f1:2b:09:
e7:8d:c2:14:69:f0:ec:e8:9e:03:29:f3:3e:db:54:
99:55:55:cf:04:fb:16:66:7e:a0:68:9b:61:c9:94:
61:d0:ea:b8:f8:43:28:18:f5:08:0c:27:0b:8d:39:
39:ce:9c:9f:7b:5a:1c:98:7c:45:41:f5:56:41:cb:
20:f0:c1:7e:06:ee:45:3b:b7:f9:1f:21:a4:84:c1:
d0:73:6f:2a:7a:5c:11:be:4c:31:8e:59:11:65:fc:
1b:58:3f:c4:15:24:c3:ca:16:74:22:65:1e:ad:7f:
c4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:58:27:CF:49:24:6C:6B:BE:17:F7:A8:56:BD:22:38:92:96:29:65
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:23:29:81:2c:35:fc:ec:5e:b3:f4:1b:73:3a:e7:c0:98:
8e:f8:82:28:75:50:c7:d5:6f:7e:30:5d:1b:87:6c:ed:ce:e0:
14:40:95:f9:ea:3d:e4:0f:bb:db:8d:b6:2f:42:2e:8b:51:ab:
52:ac:9c:14:fd:ef:c5:06:46:b1:eb:79:e8:87:66:61:e1:e3:
8c:71:42:77:fd:1c:33:8f:da:f0:06:a3:17:6e:d7:4b:a1:e7:
58:96:10:2f:f0:83:9f:a7:ee:e2:90:0e:58:3a:0c:bf:c9:1f:
e4:de:dc:a1:a3:3e:d5:18:68:24:b7:31:18:50:2b:e9:b8:2b:
77:3d:c4:7c:20:17:36:e6:c1:f7:e7:95:49:60:5d:6c:0f:3d:
ae:57:54:78:4f:4f:b3:b0:5f:01:17:fc:c4:a7:98:99:e6:42:
fd:c4:9b:35:3f:e9:fc:9a:0c:3f:4a:a5:d8:1f:19:a4:e4:24:
40:67:eb:22:a0:5c:bf:b3:62:70:65:95:38:29:97:01:7c:35:
60:a0:d2:92:fb:46:51:94:ec:84:16:07:db:16:af:1e:ae:a4:
56:27:9f:3a:d6:75:51:85:a7:09:b9:64:40:01:ab:c6:7f:5e:
e8:05:72:5a:52:08:21:ef:8e:05:9d:dc:8c:ee:17:27:42:39:
7a:f3:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:40 2026 by rpki-client