
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json)
Hash identifier: fs+KPgnesDJzinF33pg7tuumrLOskWL8KH1GZl9Y9dw=
Subject key identifier: 50:7B:5E:B4:99:AE:D2:9F:F0:94:5E:A5:2F:73:D2:D4:A6:77:14:B3
Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6
Certificate serial: 1D1503F272D8C0699631608783DA07168071A2F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
Manifest number: D7
Signing time: Fri 09 Oct 2026 22:45:54 +0000
Manifest this update: Fri 09 Oct 2026 22:40:54 +0000
Manifest next update: Sun 11 Oct 2026 01:08:54 +0000
Files and hashes: 1: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: AZoBDya0QBPrg9gqU+wTM5kuPrRNot5K6w9kMJ9SnQQ=)
2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 01:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:15:03:f2:72:d8:c0:69:96:31:60:87:83:da:07:16:80:71:a2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6
Validity
Not Before: Oct 9 22:40:54 2026 GMT
Not After : Oct 11 01:08:54 2026 GMT
Subject: CN=507B5EB499AED29FF0945EA52F73D2D4A67714B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:15:19:8b:f6:4e:de:3a:e1:60:ec:30:a3:
ff:25:43:95:56:5d:03:e4:15:00:bd:cb:d6:70:a9:
77:1d:1f:71:f2:f4:a1:b9:c7:16:d7:2f:4f:59:e6:
33:7b:46:37:cc:71:b1:af:a7:c8:ca:ab:80:10:fc:
f2:fc:50:a3:e4:b3:b9:e8:4c:7f:4d:24:61:d2:53:
87:96:16:98:97:f9:95:3a:fc:74:5c:6d:6a:08:36:
1e:6a:71:0a:a7:b4:09:77:af:71:6b:68:37:80:8d:
69:12:ae:dd:06:f3:fb:da:40:28:c2:f7:08:6d:28:
85:f9:e3:55:f8:85:b6:c5:59:ac:70:da:2d:9d:5f:
0f:b7:83:0e:d9:e7:d3:b6:84:c2:dd:d7:dc:29:0f:
61:8a:78:3c:3c:9d:5e:c4:38:ba:5b:6f:6e:cc:a3:
60:ed:21:51:20:92:69:9a:8c:ec:f6:db:58:3f:c8:
b6:90:45:05:eb:5e:08:a2:2c:5c:32:2f:ec:a6:01:
fd:b9:92:6a:19:fd:45:9d:ac:24:fe:d1:78:d0:90:
e0:19:ec:fe:00:92:3a:7a:7a:fa:4e:4a:08:78:3e:
a7:89:6d:09:c9:f4:13:ee:6b:b9:f3:a4:5c:23:61:
31:94:fc:8f:a6:12:f1:2b:e8:b9:60:7b:32:6c:7e:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:5E:B4:99:AE:D2:9F:F0:94:5E:A5:2F:73:D2:D4:A6:77:14:B3
X509v3 Authority Key Identifier:
keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:33:f8:38:0f:ca:3c:08:f4:e0:0d:9f:e4:07:92:97:5a:75:
cd:b7:49:ae:da:d5:e7:f5:42:05:85:12:2c:e5:07:11:9f:22:
58:00:0f:70:1a:42:e2:5c:4a:ba:c3:c9:f3:7a:66:32:fa:71:
9b:9d:45:19:2c:ee:6a:b7:9a:01:e6:f3:35:6c:8a:96:07:5b:
25:dd:8c:82:54:58:fc:86:e3:ef:61:d0:a5:d6:f4:cf:be:82:
94:71:6b:e0:35:47:08:2f:72:43:8d:ab:78:54:f8:11:fb:86:
1b:d6:41:1d:09:42:06:11:55:40:aa:0a:8e:5b:0b:b6:1a:d8:
9d:2b:98:34:28:20:02:0a:e3:1c:81:29:a9:a3:dc:b1:33:a3:
ad:89:b0:17:34:18:32:86:49:7a:78:b7:dd:f7:8b:66:9b:b6:
3e:e0:fe:cc:e5:d7:3c:ce:1c:2d:e8:bb:63:d0:08:61:fb:28:
af:c5:67:1b:aa:f9:74:65:fe:3a:67:dc:86:36:08:d7:c7:88:
c0:a1:b4:a0:63:e4:ef:08:9f:51:60:ca:37:f8:36:73:3b:bb:
24:30:3c:8b:54:0c:67:29:77:de:2b:fe:7e:d1:4b:27:b3:ac:
40:40:25:cf:9f:5e:cc:9a:a4:f2:a2:a0:e9:b6:f9:a0:20:af:
66:57:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:35:07 2026 by rpki-client