
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json)
Hash identifier: poF4NUp4G9/Oh5JfqQU0Y+gqSZa0uTRNKYZRmIxSbaM=
Subject key identifier: 3C:1A:7F:1F:17:7A:A4:4F:D1:9E:8C:B3:6A:0F:34:C1:03:1E:8F:23
Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8
Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
Certificate serial: 4A7BC1035D77E3E99AE01C46CD46038B732F3741
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 15:44:40 +0000
Manifest this update: Fri 19 Jun 2026 15:39:40 +0000
Manifest next update: Sat 20 Jun 2026 19:29:40 +0000
Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=)
2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: JmxjXoHU2iegj1rzMF5mTBfaIPGZbcwp3ws2Pj2eUS4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl
rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7b:c1:03:5d:77:e3:e9:9a:e0:1c:46:cd:46:03:8b:73:2f:37:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8
Validity
Not Before: Jun 19 15:39:40 2026 GMT
Not After : Jun 20 19:29:40 2026 GMT
Subject: CN=3C1A7F1F177AA44FD19E8CB36A0F34C1031E8F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:a6:96:36:58:b7:79:50:9a:71:30:7f:e9:
16:1f:0f:b7:61:84:4d:7f:3c:05:b1:da:d6:78:50:
42:88:cb:f5:63:b5:d9:bb:43:1d:e6:41:20:12:35:
2d:9d:75:ad:41:43:84:ac:c4:da:7a:e8:3a:d5:93:
e0:0c:d5:22:17:af:ce:eb:df:3c:66:56:d1:d3:8b:
14:3e:7e:66:e0:bf:ab:b6:da:15:cd:64:2b:26:3a:
93:5f:b9:26:96:df:83:a3:ef:52:68:ab:0d:96:df:
86:89:5a:d9:94:97:fe:5f:f1:d1:0d:bd:b6:aa:66:
83:6f:c0:cb:0c:42:99:b2:7d:51:98:39:46:61:49:
b5:f9:08:46:d8:94:53:fa:82:98:4f:7e:91:65:2f:
cc:68:37:48:a2:3b:83:71:d6:de:03:fa:23:ef:87:
94:c7:4b:2d:91:1e:0f:09:17:70:93:44:cc:15:61:
a3:8f:da:ad:1d:cc:3d:7d:96:79:4c:a8:10:35:9f:
0d:65:f3:9a:0d:fe:be:6b:71:6a:0e:f9:e5:c6:91:
0b:28:86:4a:95:54:0d:6f:19:e9:8f:a2:c6:6a:e6:
88:a8:39:67:f0:dd:50:7e:2b:10:0d:f3:2d:13:c4:
1d:17:76:e9:91:03:1e:7d:71:28:c5:34:78:95:cd:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1A:7F:1F:17:7A:A4:4F:D1:9E:8C:B3:6A:0F:34:C1:03:1E:8F:23
X509v3 Authority Key Identifier:
keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:79:79:db:d2:da:0a:bd:a6:4f:7e:51:cb:88:30:ee:b5:6b:
19:4c:54:c5:32:13:28:e9:6b:33:68:ad:a7:a5:f4:cb:c6:bb:
ac:23:c4:18:a5:fc:d4:8a:b8:33:b0:8b:16:7d:cb:ae:95:ce:
45:3e:48:7f:8b:6c:7a:de:3e:69:95:53:ea:a3:60:67:df:9a:
5f:9b:6e:9c:cf:5b:0a:18:41:b0:8e:81:34:97:ee:6d:4b:3e:
59:2d:cc:be:3e:29:41:6c:f8:22:bb:d9:30:66:28:3b:27:c7:
a2:5d:18:cc:88:5a:87:c1:ad:86:4a:a9:67:16:8c:3b:0c:4a:
32:83:7d:4c:a6:e9:63:04:61:fc:7b:5c:f5:b0:9e:24:87:61:
4d:2c:d0:b6:18:5e:2c:59:10:ef:6a:b9:f2:44:c0:71:51:ab:
fc:10:bf:74:fa:0d:cb:f4:7b:18:f1:c5:18:2f:6d:fa:0a:28:
9d:4f:af:bc:a5:02:77:21:1c:0f:db:c4:5f:1a:f4:73:d4:26:
4c:d1:fe:a2:c6:fa:cc:c0:86:20:fd:74:d7:83:60:f6:bc:7b:
e4:a1:2e:83:80:89:00:67:a3:6a:63:d9:ae:5e:9b:6a:87:44:
4f:d5:08:d1:12:37:84:c3:89:ea:4f:60:4d:2f:57:b0:70:bf:
e9:f5:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:57 2026 by rpki-client