
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: Lcim6klHjYo8/tgALUlfRRfOTN7Q2PmR9iCsPWjqbF4=
Subject key identifier: 84:55:F1:BE:ED:B3:06:50:91:8B:5D:7C:EE:7F:E3:05:07:DF:E1:19
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 6A6143D19719E6B101233C4D1D751738E8DC3C67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 15:53:48 +0000
Manifest this update: Sat 13 Jun 2026 15:48:48 +0000
Manifest next update: Sun 14 Jun 2026 16:17:48 +0000
Files and hashes: 1: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
2: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
3: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
4: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
5: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
6: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
7: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
8: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
9: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
10: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
11: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
12: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
13: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: fTvmqQtN+jqU18e6bUcwsIStprzPCwwUvcRdVV3hEzU=)
14: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
15: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
16: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
17: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:61:43:d1:97:19:e6:b1:01:23:3c:4d:1d:75:17:38:e8:dc:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Jun 13 15:48:48 2026 GMT
Not After : Jun 14 16:17:48 2026 GMT
Subject: CN=8455F1BEEDB30650918B5D7CEE7FE30507DFE119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:cd:20:06:9e:8e:1c:8a:ce:5d:6f:27:ca:
79:ae:55:bb:07:57:2c:03:a0:73:17:22:0a:a2:4e:
8c:c3:41:e0:75:2e:1b:c8:86:6b:fd:bf:13:33:1a:
47:c7:a2:ca:ec:94:48:b3:88:db:4f:28:42:5b:53:
1f:d4:75:b9:90:76:85:ad:db:2f:cd:2c:28:cb:06:
80:81:11:a2:60:54:0d:b1:0f:1b:8d:a2:ce:d3:64:
d8:00:6a:90:2f:03:26:cb:f6:b3:81:4a:a8:c9:3d:
40:a0:f2:5c:54:3e:23:71:41:dc:8f:5a:7e:b0:9b:
6e:58:77:4a:0f:1c:0e:64:c7:d5:89:8f:92:18:51:
8c:10:85:f9:c1:c0:75:f0:68:b1:7a:f8:79:7e:74:
8d:95:8b:52:af:99:57:93:c5:7a:b6:f3:7c:2b:fe:
32:cd:aa:1d:49:b2:8a:c1:0a:84:ad:92:99:4d:6e:
3b:35:36:19:c2:ed:b4:5c:78:94:3d:c7:0b:03:c8:
f1:29:70:16:90:41:16:79:d9:21:90:e3:51:4b:ed:
f7:a8:2a:cc:6b:db:34:4c:94:f8:87:14:ba:69:4a:
b5:2d:61:28:48:98:03:d9:c7:38:28:00:75:46:62:
e1:6b:4c:3d:ba:34:b5:df:97:e2:bf:b1:68:38:ff:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:F1:BE:ED:B3:06:50:91:8B:5D:7C:EE:7F:E3:05:07:DF:E1:19
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:5a:5c:1e:0e:67:b1:36:30:90:37:26:c5:d3:07:d1:98:
c5:c8:a4:06:c0:e6:ea:5d:20:25:12:d5:4c:30:1a:eb:fa:fb:
64:e7:2d:6d:b7:a7:8d:0e:87:de:bd:99:69:8b:3e:fe:01:02:
a3:5c:53:a9:6f:0d:db:9e:79:a9:1b:97:14:2c:34:a6:9f:4a:
dc:06:f4:42:03:e7:45:d9:f0:69:b7:42:9f:27:aa:9f:cf:71:
03:89:a8:8a:64:e4:32:92:c5:b9:a4:85:92:e1:79:92:59:6e:
66:3b:0b:88:6a:f1:3f:e8:1d:92:4e:c0:63:2f:86:81:e8:7b:
b8:dd:cf:25:e8:46:c1:1e:af:ac:4c:04:2f:2e:e7:a9:02:00:
bc:92:b7:99:bf:bf:7b:23:90:ae:ea:f8:d0:de:18:3d:5d:8d:
cd:5d:8e:f8:c4:74:5c:4c:bf:6d:d2:cb:eb:cf:60:32:fe:43:
f7:d1:2c:a7:71:6f:b8:0c:51:10:0b:42:66:4a:a4:38:37:73:
cf:3e:5f:80:ca:3c:73:d5:25:58:67:4d:09:8d:36:41:44:6b:
8a:83:da:7d:12:64:95:1a:92:1a:fb:0f:c1:37:2e:29:78:6a:
83:93:03:41:c6:54:74:ad:87:b0:7a:c2:cb:a9:2e:0d:c5:92:
49:7a:7c:cc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUamFD0ZcZ5rEBIzxNHXUXOOjcPGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3
NDUwOTU5QjAeFw0yNjA2MTMxNTQ4NDhaFw0yNjA2MTQxNjE3NDhaMDMxMTAvBgNV
BAMTKDg0NTVGMUJFRURCMzA2NTA5MThCNUQ3Q0VFN0ZFMzA1MDdERkUxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv480gBp6OHIrOXW8nynmuVbsH
VywDoHMXIgqiTozDQeB1LhvIhmv9vxMzGkfHosrslEiziNtPKEJbUx/UdbmQdoWt
2y/NLCjLBoCBEaJgVA2xDxuNos7TZNgAapAvAybL9rOBSqjJPUCg8lxUPiNxQdyP
Wn6wm25Yd0oPHA5kx9WJj5IYUYwQhfnBwHXwaLF6+Hl+dI2Vi1KvmVeTxXq283wr
/jLNqh1JsorBCoStkplNbjs1NhnC7bRceJQ9xwsDyPEpcBaQQRZ52SGQ41FL7feo
Ksxr2zRMlPiHFLppSrUtYShImAPZxzgoAHVGYuFrTD26NLXfl+K/sWg4/8XVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhFXxvu2zBlCRi1187n/jBQff4RkwHwYDVR0j
BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3
NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5
NTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky
YjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEw
Nzg3NDUwOTU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAc8WlweDmexNjCQNybF0wfRmMXIpAbA5upd
ICUS1UwwGuv6+2TnLW23p40Oh969mWmLPv4BAqNcU6lvDdueeakblxQsNKafStwG
9EID50XZ8Gm3Qp8nqp/PcQOJqIpk5DKSxbmkhZLheZJZbmY7C4hq8T/oHZJOwGMv
hoHoe7jdzyXoRsEer6xMBC8u56kCALySt5m/v3sjkK7q+NDeGD1djc1djvjEdFxM
v23Sy+vPYDL+Q/fRLKdxb7gMURALQmZKpDg3c88+X4DKPHPVJVhnTQmNNkFEa4qD
2n0SZJUakhr7D8E3Lil4aoOTA0HGVHSth7B6wsupLg3Fkkl6fMw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:18:34 2026 by rpki-client