
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json)
Hash identifier: zw0bW2NR5ttkKiy3sReKUbcINtKy/cJPjR9f5Tb6OMI=
Subject key identifier: A4:A7:A1:CE:4A:FD:AB:05:17:2B:CC:68:72:D6:D2:4E:63:1D:19:DB
Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6
Certificate serial: 2D3FDAD3BA0E51AFA3F33AF9183C034A83260E5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
Manifest number: A7
Signing time: Thu 03 Sep 2026 12:57:41 +0000
Manifest this update: Thu 03 Sep 2026 12:52:41 +0000
Manifest next update: Fri 04 Sep 2026 14:58:41 +0000
Files and hashes: 1: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=)
2: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: ujoyYotn/Zouobxsnwu+nCJV/emB9eYLXnReM/IF5AQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 12:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3f:da:d3:ba:0e:51:af:a3:f3:3a:f9:18:3c:03:4a:83:26:0e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6
Validity
Not Before: Sep 3 12:52:41 2026 GMT
Not After : Sep 4 14:58:41 2026 GMT
Subject: CN=A4A7A1CE4AFDAB05172BCC6872D6D24E631D19DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:b7:04:78:b7:12:64:e5:ce:57:75:2d:53:
90:ca:17:fd:87:73:01:2f:54:01:84:e6:2d:e8:59:
2f:de:f7:5a:6e:34:5b:64:0b:d5:99:50:32:da:d3:
66:2e:eb:45:0f:5a:59:17:58:e7:34:43:cc:90:00:
4e:b4:d4:1b:46:84:3b:ec:2e:3b:df:9d:12:e2:77:
06:94:f4:e7:5a:04:a9:49:2f:c2:3e:7b:df:29:09:
d2:d4:24:82:a1:af:d4:47:13:c6:a6:1d:15:d7:3b:
4a:cc:e1:99:17:1a:67:dd:bd:0a:f7:c6:7e:0c:42:
1c:23:1d:ea:92:b3:d0:41:e1:55:be:85:44:85:f7:
91:a9:6f:d6:19:cd:3c:36:8a:23:a8:68:db:21:a3:
8e:d4:5c:db:74:40:53:7b:52:aa:e7:10:be:e3:8b:
87:d9:5b:0b:e1:09:76:a9:74:3d:a7:93:92:c6:b9:
8b:1c:09:1b:09:00:f6:4c:07:16:18:9d:bd:a3:ae:
ab:f5:88:e9:59:fc:31:99:81:e0:29:85:fd:ee:cc:
fb:e1:44:7a:2b:fe:e0:a3:b6:a7:2c:b6:c5:85:f3:
1b:d1:24:97:1f:69:1a:5a:30:6f:b4:ba:4f:11:4f:
73:b1:93:43:15:36:1a:0b:1d:85:f2:03:71:f4:29:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:A1:CE:4A:FD:AB:05:17:2B:CC:68:72:D6:D2:4E:63:1D:19:DB
X509v3 Authority Key Identifier:
keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c8:e7:3c:ef:1d:5d:9e:4d:13:b7:03:6f:d7:8d:46:cd:b5:
b5:01:d2:a7:93:03:1e:9e:2f:aa:61:0a:c5:3f:ce:a4:72:89:
0b:fd:dd:77:21:b7:87:3b:73:32:d7:65:81:e1:6c:13:6e:06:
76:15:ef:9a:10:bb:cd:db:ad:2f:be:34:3b:ab:56:50:44:7a:
aa:20:87:92:3b:b6:d4:1d:bc:39:de:62:ed:f6:22:24:99:4c:
3f:2d:d2:26:34:a9:c9:1f:fe:90:4e:f2:f6:47:33:27:1a:7a:
44:eb:ec:cb:f0:2c:6f:e0:cc:04:0c:9f:94:15:4e:ff:74:f8:
ce:19:4e:10:01:06:67:69:c5:ec:b5:5c:2b:f4:8f:2d:eb:cb:
b1:f8:03:5d:11:58:68:4e:4e:9d:01:68:d4:ac:4c:ea:b1:7b:
4a:6e:46:31:67:29:db:a7:9c:cc:5e:16:3c:5f:be:d5:8f:bd:
5b:42:39:56:aa:5a:bb:ce:21:d9:b4:c5:b4:a7:5d:b1:94:e4:
d7:76:40:c7:5f:89:3e:e3:86:8e:94:bc:7b:10:4c:05:7b:e8:
05:64:ae:c8:fc:79:7b:d6:03:60:75:1a:ba:ce:ee:9c:ac:cd:
82:8f:b5:8c:38:8b:4a:65:29:53:c8:82:f2:0c:b4:ae:95:82:
4d:0e:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:14:19 2026 by rpki-client