
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: MTIoxlkP/pP5RM6UbXj41lLvBWKvyg0/d4WZMByPHI4=
Subject key identifier: 8A:9B:B8:81:B1:DA:F8:EC:A5:C4:DE:EA:1B:EB:C3:3B:82:F9:8E:9C
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 66E2B4ED9C8EC083C13168601716BCA9155D2E20
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 01:56:34 +0000
Manifest this update: Fri 24 Jul 2026 01:51:34 +0000
Manifest next update: Sat 25 Jul 2026 03:51:34 +0000
Files and hashes: 1: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
2: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
3: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
4: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
5: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
6: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
7: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
8: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
9: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
10: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
11: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
12: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: YM0rYH+OCDnaDcJvPvGn6pqls49vHSgM16kfH/a9LtM=)
13: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
14: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
15: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
16: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
17: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e2:b4:ed:9c:8e:c0:83:c1:31:68:60:17:16:bc:a9:15:5d:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Jul 24 01:51:34 2026 GMT
Not After : Jul 25 03:51:34 2026 GMT
Subject: CN=8A9BB881B1DAF8ECA5C4DEEA1BEBC33B82F98E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:36:35:d3:42:45:f2:0e:f4:84:00:fa:92:
a0:d6:50:01:60:99:d3:df:e3:1c:1b:ee:51:1e:c8:
b1:9f:96:6a:6b:06:0c:7b:03:72:8d:36:54:d8:15:
f0:b2:dc:ec:66:c9:f9:eb:75:b6:0a:90:af:bd:40:
f9:3c:7d:7e:7b:a1:d4:92:0d:6c:6c:bf:b9:0d:3a:
f3:b5:52:49:87:ce:98:61:fa:31:c0:bd:89:b7:37:
ba:68:fe:b1:d0:ac:a0:aa:90:9b:33:ed:1c:24:77:
33:13:f7:61:04:62:ca:39:53:99:94:06:c8:1f:8b:
b0:7a:43:1b:20:52:96:66:43:83:1f:ce:d5:45:b6:
81:8b:75:67:2e:e5:6e:95:9b:50:c2:94:a8:9b:a8:
17:84:f8:c6:d2:d9:17:2c:39:15:08:4f:66:fc:03:
fa:31:67:ed:e9:a9:51:1b:bd:ee:c1:77:0c:8b:70:
70:4a:f8:d9:fa:ca:96:4c:88:3b:29:f3:e2:16:21:
02:db:d4:02:e9:bb:4d:83:3d:9c:4f:73:bf:db:14:
aa:0f:34:d8:49:86:01:ac:55:e0:30:5e:41:9b:82:
b6:90:42:ac:42:48:13:a5:e7:da:cb:ad:bd:e4:13:
fc:43:24:d8:6e:e0:a4:db:1a:4a:ac:1f:3c:47:dc:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:B8:81:B1:DA:F8:EC:A5:C4:DE:EA:1B:EB:C3:3B:82:F9:8E:9C
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:2e:25:a5:b6:c0:20:0a:01:c3:f8:58:db:8a:c2:6a:52:
97:04:a4:8e:dc:9d:01:3f:5d:b0:27:28:07:08:ee:bd:f8:7f:
fd:f8:12:22:b2:1d:64:56:9f:30:1e:cf:b8:7d:d4:f3:34:a4:
8d:b2:da:80:9b:56:6f:bb:ed:d8:82:41:b5:ea:f1:a5:20:0f:
53:86:48:1b:1a:30:c8:55:29:e9:36:ae:7b:78:27:e9:b7:14:
de:55:a8:56:76:91:1c:52:c9:2b:9c:e5:99:34:04:6f:50:5b:
63:dd:b1:fb:30:22:c8:3e:72:58:f3:8f:47:01:36:ee:e3:cc:
85:6d:31:5b:d5:e4:a3:cc:34:e7:70:32:2d:6d:02:9f:31:36:
a5:3a:6d:a6:13:6b:72:6c:73:94:44:ba:aa:37:4d:25:bb:94:
e0:1a:8b:2b:f1:03:09:fc:87:fb:17:12:47:11:99:e7:39:6f:
d5:f1:77:a7:83:9a:cd:5d:51:e8:d3:7c:67:cf:e3:85:c1:d9:
d2:30:2e:c8:52:b1:ad:42:58:d4:33:20:c7:e1:89:9c:07:7b:
7a:73:6e:f0:c7:33:80:94:6a:43:f7:3d:66:5b:8f:05:ac:75:
b8:4f:18:a6:8e:73:f5:6b:86:1c:63:df:62:ef:dc:90:1e:2f:
1f:3e:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:30 2026 by rpki-client