
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json)
Hash identifier: tSihx7NoTXFcmLg+ahBLhV1meBsOmAyvoiO+p75qwUQ=
Subject key identifier: D4:59:0E:80:E8:E4:77:6E:BF:0C:12:98:17:B6:89:83:95:94:6F:92
Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Certificate serial: 3D10B0FF48D7283BE7BE080FE74A291E5E00D5B2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:33:39 +0000
Manifest this update: Fri 24 Jul 2026 03:28:39 +0000
Manifest next update: Sat 25 Jul 2026 06:22:39 +0000
Files and hashes: 1: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: m/7ycusff/MITUrL8yc2HIhXaR6yoDGK73HewEiOKQ8=)
2: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=)
3: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=)
4: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=)
5: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=)
6: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=)
7: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:10:b0:ff:48:d7:28:3b:e7:be:08:0f:e7:4a:29:1e:5e:00:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE
Validity
Not Before: Jul 24 03:28:39 2026 GMT
Not After : Jul 25 06:22:39 2026 GMT
Subject: CN=D4590E80E8E4776EBF0C129817B6898395946F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:ca:c9:95:c4:c8:c6:ee:04:d9:f1:5b:cf:
82:c2:16:a8:a8:35:c8:bd:26:79:e0:44:97:8a:ec:
09:c4:e5:42:40:2a:17:0a:63:23:0a:7d:24:f7:17:
bd:60:5f:30:34:71:d4:f8:87:a7:6d:80:df:13:6d:
8e:75:6a:ea:24:2f:3c:df:6c:94:9e:b1:37:0b:0c:
91:62:e9:91:55:23:d9:b6:69:0e:1c:52:c6:f6:95:
ac:f4:c9:a7:a5:c9:a1:d7:c3:f1:66:4d:92:ba:4a:
ad:c9:cc:0f:8c:5c:1b:bb:5b:de:54:b2:7f:39:b2:
26:59:c7:bb:3e:90:82:91:41:ed:0f:0c:20:05:f1:
b1:cc:95:8a:7a:d2:80:00:ee:90:51:32:95:d5:2b:
3b:2b:b4:0a:9b:4d:64:97:35:98:f7:a4:4d:a3:a2:
b0:1d:53:d0:70:d0:65:6d:aa:6e:34:c2:02:c0:51:
88:f6:9a:d6:45:8d:84:b1:4d:04:1e:08:c9:e5:ac:
42:90:16:f6:1c:40:24:3b:54:9a:f9:43:c2:51:9b:
ae:37:cf:01:57:4c:46:32:73:34:01:86:3a:1e:72:
bf:fc:ad:e8:26:c7:ae:da:5d:8d:4a:98:ac:d9:cf:
63:3c:e1:e3:3f:d9:7b:f1:d4:32:16:4d:cd:be:d5:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:0E:80:E8:E4:77:6E:BF:0C:12:98:17:B6:89:83:95:94:6F:92
X509v3 Authority Key Identifier:
keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:fb:c1:84:04:5d:58:00:5f:15:71:d7:17:cc:01:cc:23:
cb:9d:9a:4d:de:03:04:a5:97:24:56:ae:4c:c3:d3:24:89:28:
9a:c7:e7:5c:0e:0a:2e:a5:32:2e:7e:13:a1:7c:24:69:3f:5a:
7a:21:c4:9a:5e:81:bf:df:7a:b4:40:fe:75:9a:54:66:2a:c8:
74:b8:46:e3:46:87:4c:8a:ad:99:f0:20:d5:39:67:4d:a1:01:
01:4e:8d:ce:43:ba:69:f0:f4:d5:ea:ac:62:21:e7:9e:5d:d1:
5b:8f:d2:66:f7:a0:1c:1d:52:b3:eb:7e:5f:cc:94:45:6c:f9:
c3:06:3c:23:7e:36:df:49:e8:c7:6a:d1:5f:b9:4e:30:f6:ae:
b4:91:e2:53:6c:27:dd:4b:cd:c9:a3:a4:d4:ce:86:3f:18:45:
a7:71:be:6e:1f:57:0b:52:63:78:63:80:29:5f:6f:12:95:02:
78:df:b0:d7:de:62:6a:f5:55:4e:cb:7b:22:4f:4f:2a:61:1f:
f6:12:8a:87:e4:c8:0f:6d:7a:1a:ea:ed:00:f0:5a:14:8f:07:
04:8e:4f:d1:ed:3c:2d:f4:99:ea:ae:03:b1:92:86:9f:0b:f9:
45:a7:40:25:e8:f0:73:ff:e0:da:84:de:59:c6:a0:a6:71:0e:
af:c9:f0:21
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPRCw/0jXKDvnvggP50opHl4A1bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz
M0FGQkZBRTAeFw0yNjA3MjQwMzI4MzlaFw0yNjA3MjUwNjIyMzlaMDMxMTAvBgNV
BAMTKEQ0NTkwRTgwRThFNDc3NkVCRjBDMTI5ODE3QjY4OTgzOTU5NDZGOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqMrJlcTIxu4E2fFbz4LCFqio
Nci9JnngRJeK7AnE5UJAKhcKYyMKfST3F71gXzA0cdT4h6dtgN8TbY51auokLzzf
bJSesTcLDJFi6ZFVI9m2aQ4cUsb2laz0yaelyaHXw/FmTZK6Sq3JzA+MXBu7W95U
sn85siZZx7s+kIKRQe0PDCAF8bHMlYp60oAA7pBRMpXVKzsrtAqbTWSXNZj3pE2j
orAdU9Bw0GVtqm40wgLAUYj2mtZFjYSxTQQeCMnlrEKQFvYcQCQ7VJr5Q8JRm643
zwFXTEYyczQBhjoecr/8regmx67aXY1KmKzZz2M84eM/2Xvx1DIWTc2+1SQzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1FkOgOjkd26/DBKYF7aJg5WUb5IwHwYDVR0j
BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0
NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC
RkFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2
OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1
ODczM0FGQkZBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABWJ+8GEBF1YAF8VcdcXzAHMI8udmk3eAwSl
lyRWrkzD0ySJKJrH51wOCi6lMi5+E6F8JGk/WnohxJpegb/ferRA/nWaVGYqyHS4
RuNGh0yKrZnwINU5Z02hAQFOjc5Dumnw9NXqrGIh555d0VuP0mb3oBwdUrPrfl/M
lEVs+cMGPCN+Nt9J6Mdq0V+5TjD2rrSR4lNsJ91LzcmjpNTOhj8YRadxvm4fVwtS
Y3hjgClfbxKVAnjfsNfeYmr1VU7LeyJPTyphH/YSiofkyA9tehrq7QDwWhSPBwSO
T9HtPC30mequA7GShp8L+UWnQCXo8HP/4NqE3lnGoKZxDq/J8CE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:46 2026 by rpki-client