
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: WaH2MDtcA1s6bXpvBG9elDaYU669dhFgl34cVuiT/UU=
Subject key identifier: 65:3D:EC:24:99:9A:88:FD:03:3F:79:93:AE:35:83:E9:7A:51:56:DF
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 156BF2A6A9FDB44979731E5E9208437F7F92AE5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 15:15:21 +0000
Manifest this update: Tue 28 Jul 2026 15:10:21 +0000
Manifest next update: Wed 29 Jul 2026 17:15:21 +0000
Files and hashes: 1: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
2: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
3: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
4: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
5: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
6: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
7: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
8: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
9: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
10: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
11: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
12: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: DHryXGQtopmuicQX2DwzwfS1JyspCqxK3at/RQymaZg=)
13: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
14: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
15: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
16: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
17: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6b:f2:a6:a9:fd:b4:49:79:73:1e:5e:92:08:43:7f:7f:92:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Jul 28 15:10:21 2026 GMT
Not After : Jul 29 17:15:21 2026 GMT
Subject: CN=653DEC24999A88FD033F7993AE3583E97A5156DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:c7:ba:b4:2b:d2:2c:d7:c9:d7:20:6f:0b:
01:46:a4:9b:3d:0e:91:0d:3e:a4:38:8a:31:9c:08:
6f:6f:dc:0f:ac:5e:2c:ab:f8:5f:00:dc:a6:bb:14:
18:ab:1d:7f:71:49:64:a9:da:cb:8f:b0:87:49:59:
d4:bf:9d:51:b7:40:33:1d:a5:9d:e4:f4:65:87:3d:
37:e2:f4:30:ff:c9:89:cf:cd:e1:04:ab:f6:21:68:
e1:2e:ec:31:af:d5:57:08:91:d9:47:0a:1c:f6:ca:
b2:15:f9:31:ce:83:0b:34:cc:a9:5b:41:97:6e:84:
cd:47:fa:2a:9d:8f:c4:c6:22:19:5e:ed:03:17:85:
cd:9f:28:0e:09:82:63:77:cf:ec:75:4c:99:0d:c5:
ec:90:4b:4c:54:5d:b8:62:46:c2:bf:06:85:aa:82:
56:75:76:d9:e8:28:89:00:2b:ee:55:0e:a8:d1:4e:
cc:b9:bf:5c:9b:da:34:bf:a6:51:ef:03:cb:2d:a7:
dc:55:d8:ae:7f:53:32:f4:57:0e:45:b5:37:a4:31:
6f:65:3b:8c:1e:ee:a1:39:be:a1:08:78:11:6d:b1:
02:48:4f:65:28:6e:10:15:a3:12:ae:5b:17:e7:4d:
6c:19:fc:03:ab:53:00:55:23:47:74:57:20:95:6e:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:EC:24:99:9A:88:FD:03:3F:79:93:AE:35:83:E9:7A:51:56:DF
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c3:bc:16:99:7b:5d:bb:43:e1:7d:f4:1e:e2:36:b3:45:99:
c8:92:d6:41:3b:e2:49:ab:a6:b4:dc:1f:4a:3e:20:16:1b:d3:
88:73:69:fe:e6:c6:45:40:c9:62:e9:1e:e4:09:6c:2a:a7:43:
60:71:53:c5:3b:75:9e:50:49:21:1e:69:1b:4f:31:9c:11:99:
18:fa:12:65:90:73:59:ee:77:2a:b4:03:3e:10:21:0b:db:94:
05:5c:dd:51:9e:43:4e:0d:df:12:67:99:9d:50:bb:91:c1:d7:
c1:48:96:3d:6a:f7:09:b8:c2:87:07:db:6d:00:8c:4f:eb:ca:
ff:69:13:39:42:c9:da:c7:3b:45:86:89:23:f4:76:91:de:a5:
4c:52:91:3d:43:4f:65:64:09:af:bc:14:aa:cc:ff:77:c8:35:
09:60:33:e2:6c:57:7d:0b:9a:d9:a0:95:7e:fd:54:b1:a7:1d:
28:3d:ef:e7:14:87:14:40:4d:c4:c7:dc:ea:c0:85:1d:a9:67:
c7:89:50:f1:fb:87:48:17:94:fb:50:33:e6:9b:e9:9a:04:f9:
1c:44:f4:87:0b:53:be:29:69:05:2c:ce:fc:f7:26:eb:c1:d6:
66:88:6d:20:fc:69:dc:6a:af:05:f7:40:87:dd:01:60:6d:6d:
11:22:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:35 2026 by rpki-client