
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json)
Hash identifier: ryqj5l1SyKRmKMQbt5EkBB9qWaiDhyQsbJMOAn4KnGI=
Subject key identifier: 3D:41:E6:C0:56:81:97:D0:8B:2C:A2:84:5E:A1:56:C7:47:DB:A5:53
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 3F0FD3520FCFC6BF03C7EF4EE30E12B346731701
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
Manifest number: A7
Signing time: Fri 04 Sep 2026 07:40:39 +0000
Manifest this update: Fri 04 Sep 2026 07:35:39 +0000
Manifest next update: Sat 05 Sep 2026 09:29:39 +0000
Files and hashes: 1: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=)
2: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=)
3: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=)
4: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=)
5: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: 1z8jWJYyQ9hwgwy5/qrB8uirORyUAnmQDvrCGQEdx0g=)
6: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=)
7: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:d3:52:0f:cf:c6:bf:03:c7:ef:4e:e3:0e:12:b3:46:73:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: Sep 4 07:35:39 2026 GMT
Not After : Sep 5 09:29:39 2026 GMT
Subject: CN=3D41E6C0568197D08B2CA2845EA156C747DBA553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:48:a7:9c:9a:d9:cc:87:25:09:54:37:1b:
6f:9e:60:5d:91:72:1f:09:f0:2c:a0:05:fc:11:a7:
44:0e:b5:2f:f3:11:55:83:f7:9c:7c:87:76:6d:1c:
4b:0b:2b:02:bc:19:ce:ca:c1:cf:6f:3a:58:9d:2f:
8b:12:01:34:60:9f:35:a9:d7:36:44:85:7f:2c:25:
db:71:7c:19:96:f6:4b:67:13:96:b0:c8:e8:f1:1d:
0c:10:a3:70:41:4f:6e:b1:80:37:27:39:43:7b:69:
92:32:0c:ee:ab:22:50:d8:b4:37:d1:e1:67:01:83:
58:f4:6b:fb:93:75:99:1d:cb:8d:25:65:88:45:b2:
68:bf:c6:d2:75:64:1b:c2:61:0f:b6:df:59:4e:e9:
bf:af:42:37:58:88:c0:97:22:b1:5f:ae:55:de:b6:
0d:eb:39:52:5d:05:4a:3a:f6:2f:68:54:68:d7:a7:
94:da:21:fd:a2:79:fc:5b:0c:69:b6:8d:1a:4c:5b:
f0:22:46:04:33:f7:8d:30:68:6a:73:f9:c6:e2:65:
b1:87:b9:ae:29:a6:0a:e8:c7:5f:19:45:0d:80:bb:
5a:9d:2d:ff:80:81:11:da:a3:da:32:7e:74:51:7b:
15:83:1c:5f:1f:d5:58:cd:bc:95:61:6e:14:75:f1:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:E6:C0:56:81:97:D0:8B:2C:A2:84:5E:A1:56:C7:47:DB:A5:53
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:84:a8:5d:ab:52:3b:58:1f:7a:fb:df:c8:95:cc:93:be:
bf:65:d8:06:fa:5e:fe:89:eb:4c:78:c3:10:3b:75:77:78:dd:
60:f3:17:20:d2:66:ac:3f:b3:84:6c:ac:16:b3:60:ed:73:ad:
cd:5e:ee:1a:5a:60:49:5e:fc:1c:13:84:6f:42:87:4d:88:86:
a8:87:97:ae:7d:c8:c1:6b:8d:e8:07:0e:a4:a4:f2:a8:d3:70:
12:5c:a2:6a:a1:8e:be:4f:33:aa:79:77:87:b6:3a:2c:d5:14:
58:46:91:4a:05:d0:9a:bb:42:58:be:48:8c:a2:f3:2d:56:35:
a5:92:2d:e4:45:82:6b:36:01:f2:ce:53:2c:15:29:41:28:46:
86:fc:dc:af:a5:92:96:35:50:92:a6:27:c1:8d:74:34:c7:f7:
a7:86:af:d5:eb:91:9a:25:0a:26:55:26:6f:76:83:80:ac:c8:
49:59:0a:43:81:ec:04:26:8a:c2:e3:53:2c:25:aa:bd:81:76:
82:ea:4d:c6:41:59:b0:ef:df:1d:3b:d6:53:ab:6c:18:29:04:
c4:8d:8a:90:13:5b:59:df:76:8d:16:d3:d5:ef:c2:48:fd:5e:
7e:5d:ce:2f:cb:ed:59:42:4f:d8:d2:2f:9b:32:8c:c3:1e:ca:
ad:3b:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 12:19:23 2026 by rpki-client