$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json) Hash identifier: maZztsga2gYp1lexcjdLweCLrLhvCZHWHSOyJ6bqYXE= Subject key identifier: 3A:3A:F0:B3:29:45:33:74:AE:D0:B1:96:61:20:4F:E0:DD:74:BD:79 Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6 Certificate serial: 0307BCDD40D90AF4D2A638670572F6042C32A8A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 23:56:06 +0000 Manifest this update: Tue 28 Jul 2026 23:51:06 +0000 Manifest next update: Wed 29 Jul 2026 23:58:06 +0000 Files and hashes: 1: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: JyJFldZhBKNpdg6PIOBWz7U3F7av6XI1nTBurlP22wk=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:07:bc:dd:40:d9:0a:f4:d2:a6:38:67:05:72:f6:04:2c:32:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6 Validity Not Before: Jul 28 23:51:06 2026 GMT Not After : Jul 29 23:58:06 2026 GMT Subject: CN=3A3AF0B329453374AED0B19661204FE0DD74BD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:e0:86:58:a7:c3:65:5d:87:86:75:f4:56: 9b:de:05:15:f6:98:44:9c:29:0b:65:98:cc:8e:0d: 0c:6c:f9:12:8f:56:0d:65:10:3f:3f:48:93:bb:e8: 34:53:4d:96:0f:42:21:b2:4d:66:40:f0:44:f2:30: 2a:c7:76:2f:24:cf:5e:2a:ce:f8:c7:aa:4c:03:11: 87:1f:e1:94:95:0c:54:dc:24:16:e8:da:40:0b:a4: 19:62:c8:fd:d3:f7:df:51:23:33:94:c5:28:d5:79: b0:07:f9:ee:c2:5f:13:bd:b5:9c:09:a5:6a:26:44: 38:e6:95:6d:ef:49:7c:91:85:ff:b2:10:62:26:bb: e4:a4:9d:c8:f1:13:62:45:dc:b5:e6:24:4a:17:b9: 83:d6:0f:8e:43:42:f9:24:ff:97:04:32:c5:91:1a: 61:0d:87:f2:38:b1:42:6e:5a:b2:a5:fc:0a:cc:1c: 93:de:25:67:15:70:c2:b2:fc:38:7b:20:ec:0e:b8: 65:63:b2:5a:b8:4d:f1:d9:ba:54:04:66:aa:b3:a9: a2:63:17:dd:b3:d7:61:8e:c6:b1:fb:8a:27:f1:a0: 42:ab:65:5a:74:1a:ce:3d:2b:d6:54:72:e0:25:e4: 7b:52:92:16:cb:87:da:25:9a:9a:12:5a:50:0e:53: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3A:F0:B3:29:45:33:74:AE:D0:B1:96:61:20:4F:E0:DD:74:BD:79 X509v3 Authority Key Identifier: keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e8:5c:37:26:a9:c1:06:24:92:dd:11:f6:95:a8:05:e2:b2: 7e:0f:61:d0:39:89:0c:4f:5c:1e:0b:1e:73:17:14:ba:a4:eb: 9a:b0:b1:15:e4:1e:5c:a3:80:89:a7:ea:54:08:7a:d9:21:71: 9d:16:1c:4b:5e:83:ea:21:dc:8d:8d:29:30:8f:4d:46:f5:1d: 1c:74:86:d0:d6:1d:30:dc:57:8c:77:39:2f:b4:8a:fc:21:36: be:15:de:70:a7:c0:0f:e1:98:54:4f:91:bd:17:06:91:5c:51: 3b:ab:db:b2:05:19:82:86:be:fd:3f:ba:af:01:b6:86:c9:fb: eb:01:ed:62:26:24:18:10:43:31:c8:39:a0:4b:bb:7b:c8:e0: c9:8b:3d:0f:36:f3:68:43:de:0d:f7:9a:e8:87:32:86:2d:7e: f4:3c:43:01:92:9e:02:3d:56:8b:93:eb:00:00:82:51:56:e8: 70:7d:53:e9:36:e9:14:a4:6c:b3:85:5b:30:b0:25:be:20:69: 6b:ae:84:ec:18:65:36:5b:f0:de:da:69:c0:e1:59:8f:2c:65: 36:a1:eb:00:a8:a8:e6:aa:63:af:48:52:cf:5a:7f:23:95:21: d4:7a:72:d8:9c:1f:17:8a:53:9a:7f:a1:d5:9c:21:6b:a9:97: 31:78:bf:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwe83UDZCvTSpjhnBXL2BCwyqKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYx Qjk0MEVBNjAeFw0yNjA3MjgyMzUxMDZaFw0yNjA3MjkyMzU4MDZaMDMxMTAvBgNV BAMTKDNBM0FGMEIzMjk0NTMzNzRBRUQwQjE5NjYxMjA0RkUwREQ3NEJENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlE+CGWKfDZV2HhnX0VpveBRX2 mEScKQtlmMyODQxs+RKPVg1lED8/SJO76DRTTZYPQiGyTWZA8ETyMCrHdi8kz14q zvjHqkwDEYcf4ZSVDFTcJBbo2kALpBliyP3T999RIzOUxSjVebAH+e7CXxO9tZwJ pWomRDjmlW3vSXyRhf+yEGImu+SkncjxE2JF3LXmJEoXuYPWD45DQvkk/5cEMsWR GmENh/I4sUJuWrKl/ArMHJPeJWcVcMKy/Dh7IOwOuGVjslq4TfHZulQEZqqzqaJj F92z12GOxrH7iifxoEKrZVp0Gs49K9ZUcuAl5HtSkhbLh9olmpoSWlAOUwV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjrwsylFM3Su0LGWYSBP4N10vXkwHwYDVR0j BBgwFoAUFT0TKQcDiSDTCHTY4eozFhuUDqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2YTU3YzUtZGY3My00M2Y1LTg2NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkw NzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYxQjk0MEVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTNEMTMyOTA3MDM4OTIwRDMwODc0RDhFMUVBMzMxNjFCOTQw RUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMz MTYxQjk0MEVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAroXDcmqcEGJJLdEfaVqAXisn4PYdA5iQxP XB4LHnMXFLqk65qwsRXkHlyjgImn6lQIetkhcZ0WHEteg+oh3I2NKTCPTUb1HRx0 htDWHTDcV4x3OS+0ivwhNr4V3nCnwA/hmFRPkb0XBpFcUTur27IFGYKGvv0/uq8B tobJ++sB7WImJBgQQzHIOaBLu3vI4MmLPQ8282hD3g33muiHMoYtfvQ8QwGSngI9 VouT6wAAglFW6HB9U+k26RSkbLOFWzCwJb4gaWuuhOwYZTZb8N7aacDhWY8sZTah 6wCoqOaqY69IUs9afyOVIdR6cticHxeKU5p/odWcIWuplzF4vyI= -----END CERTIFICATE-----Generated at Wed Jul 29 01:18:20 2026 by rpki-client