
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json)
Hash identifier: 8YSOIrfJdBs/H2SyIg1GK7BN1JvrQokHtDneYFwBDpo=
Subject key identifier: CF:8A:44:DD:8E:68:49:13:D3:2A:C6:82:CD:4B:E8:36:5B:31:D9:AC
Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Certificate serial: 2668D2E64A249AEC7027F25AC46030B4749F2297
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:55:41 +0000
Manifest this update: Tue 21 Jul 2026 03:50:41 +0000
Manifest next update: Wed 22 Jul 2026 07:47:41 +0000
Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=)
2: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: 7MYJ23Tw+FkktLcXKkwAjlgcJncEV/z2QKlAVIaRynA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:68:d2:e6:4a:24:9a:ec:70:27:f2:5a:c4:60:30:b4:74:9f:22:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1
Validity
Not Before: Jul 21 03:50:41 2026 GMT
Not After : Jul 22 07:47:41 2026 GMT
Subject: CN=CF8A44DD8E684913D32AC682CD4BE8365B31D9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:45:27:6f:6b:4d:68:ae:90:5d:2f:8e:51:
02:7c:f9:b0:f7:b8:67:7b:79:1d:b0:90:ed:d0:e1:
25:9d:72:ec:01:16:e4:81:4e:74:98:aa:90:38:c7:
20:4e:29:f0:2c:7b:73:df:bf:3b:9b:a7:91:f4:31:
ec:14:b8:cf:9d:b6:1a:8c:30:a9:d8:0e:aa:52:ed:
66:1f:58:41:ad:7b:04:77:c4:6a:51:e5:86:66:9e:
8f:cd:e7:2e:98:0f:1c:bf:17:0e:a9:d5:b4:34:72:
08:ad:0b:38:5d:9f:f4:02:58:51:33:94:a3:10:23:
d2:1b:52:cb:a3:1a:4f:ca:20:21:87:78:fb:91:60:
a9:27:3c:d3:60:c7:34:df:61:13:7e:1b:a1:17:bf:
c2:8b:bd:c0:c9:58:62:e4:a1:ba:1a:2b:ec:6a:b7:
b2:e7:f3:97:43:51:86:ed:03:fc:3f:8b:f0:87:3e:
8d:5b:9d:b0:96:83:31:51:09:70:09:ae:d3:72:16:
a6:49:ca:c3:81:f5:ce:be:fa:62:fe:5b:43:b5:c5:
93:16:eb:29:e5:a0:27:53:9b:3b:1b:a7:80:da:f8:
21:0d:74:e8:44:7f:55:76:d9:08:d1:57:b0:44:8c:
a2:87:28:bf:5b:00:58:1c:07:24:6a:b5:95:ac:4e:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:44:DD:8E:68:49:13:D3:2A:C6:82:CD:4B:E8:36:5B:31:D9:AC
X509v3 Authority Key Identifier:
keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9c:20:b3:04:b6:bd:30:9a:8d:6f:6f:67:42:67:cf:ae:44:
39:df:9b:2e:f6:76:02:f9:08:bb:0e:2d:b1:dd:43:e4:b6:98:
3f:aa:fd:b8:93:7c:23:b9:58:c7:a1:4b:87:cc:d3:6f:6f:e2:
44:9f:bf:02:e3:b3:5d:b0:2e:ba:9b:25:0c:7e:ab:f7:9b:c5:
99:bd:d8:66:4a:15:5b:be:4f:d1:2b:ff:fa:f6:23:24:0e:52:
99:44:e2:f6:ea:45:a0:cc:df:c0:ef:b8:ae:be:1b:26:e5:43:
ef:7b:45:9d:48:c7:6d:55:26:51:b4:2e:df:3a:1c:6b:b2:37:
a6:69:db:7f:47:5f:ba:cf:1d:1f:fe:8b:74:74:fe:86:05:15:
5d:d0:fd:85:1e:61:fa:33:e4:1d:2c:7a:b7:88:b2:5c:44:0b:
f3:ba:e4:e7:56:8f:6c:76:65:2f:b1:2c:0a:07:2c:00:f2:0d:
94:fe:4e:11:2a:3b:42:2d:e6:d9:ff:45:f5:4e:e8:f6:61:ca:
c2:d1:24:68:2a:2d:0b:a5:34:3a:ca:30:d9:87:b3:06:07:35:
dd:35:28:80:13:60:4e:e7:e0:33:f2:31:38:49:dd:f5:cd:b0:
4a:56:c2:49:7d:87:23:13:c5:49:60:2f:d4:f4:a6:e0:07:ba:
81:54:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:12:03 2026 by rpki-client