
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: lRzWFuzWZy28etVX0feengUxrCTcGIuwlxrOmI5DNYg=
Subject key identifier: 31:65:71:2A:E8:AF:8B:22:F7:95:E8:DF:4E:F9:D2:CD:46:26:A1:49
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 28F73599747E3F2CF397B061EE72843C0565190A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 06:18:49 +0000
Manifest this update: Wed 23 Sep 2026 06:13:49 +0000
Manifest next update: Thu 24 Sep 2026 08:38:49 +0000
Files and hashes: 1: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
2: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
3: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
4: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: fjg1FS3+m4MYxoyL8v6EVPl0R7q3RnQK4YpADsCJNBE=)
5: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
6: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
7: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
8: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
9: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
10: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
11: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
12: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
13: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
14: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
15: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
16: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
17: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f7:35:99:74:7e:3f:2c:f3:97:b0:61:ee:72:84:3c:05:65:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: Sep 23 06:13:49 2026 GMT
Not After : Sep 24 08:38:49 2026 GMT
Subject: CN=3165712AE8AF8B22F795E8DF4EF9D2CD4626A149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:ab:be:11:f3:c5:44:36:7b:33:f7:98:06:
35:d0:95:3a:e0:37:76:d9:1e:47:10:17:10:06:be:
b5:6a:14:60:52:7c:36:57:a3:56:0e:42:64:64:a1:
39:47:1d:69:cb:cf:77:3a:94:9c:d0:c9:29:a8:e6:
34:d6:c4:4f:60:f8:72:74:f1:ea:7f:ae:b2:f4:79:
6a:4f:7c:49:e3:81:c9:fe:d1:9c:b4:8e:3c:2b:ea:
96:1a:fa:81:0d:ac:db:a5:aa:2f:32:8e:af:fc:be:
ac:9e:70:36:3e:28:b0:20:30:d8:ce:8d:9e:b9:08:
77:b5:25:41:29:4d:a5:f0:aa:26:3a:78:53:a7:f0:
f8:47:ce:05:f9:f4:7c:1d:fa:f2:4f:24:45:67:25:
19:6a:2a:2e:bd:f4:80:c4:29:f2:53:f4:2e:0f:bd:
d4:8d:22:85:3c:aa:e7:2c:6e:78:d3:84:4d:04:72:
44:d1:6c:9e:12:cb:06:d5:1f:78:56:fc:68:3d:31:
0c:91:ba:b9:39:17:c7:f7:32:35:f8:0a:a3:8c:71:
10:44:16:35:16:9f:a1:6d:8d:bf:01:21:b4:26:a2:
47:7a:50:df:25:9c:1d:cb:a7:fa:cd:58:69:fe:cc:
c8:3c:b4:24:2e:05:ee:c2:b1:4a:73:d5:c8:bb:aa:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:65:71:2A:E8:AF:8B:22:F7:95:E8:DF:4E:F9:D2:CD:46:26:A1:49
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:35:d7:4d:fd:d1:c2:5e:23:4d:71:8b:23:90:06:1e:bb:f9:
1c:7a:a8:a6:6d:20:1e:27:6f:b9:0a:7e:6a:ff:24:56:a6:c7:
6e:f5:67:06:e8:ff:a3:70:58:15:35:33:4e:79:11:f5:6e:2a:
b9:c2:3d:54:5b:05:53:9a:a4:d1:b5:f9:9a:c6:16:6b:dc:c7:
39:de:52:b1:92:97:0e:0e:aa:5f:f5:37:b4:7d:db:19:30:21:
f5:07:17:41:8d:d5:9e:1c:02:3d:0a:97:cb:9e:01:e1:04:05:
19:9f:6c:70:7a:89:ad:43:2e:f8:62:68:ca:93:99:b8:db:bc:
52:18:c7:d3:c3:0e:24:3f:dc:31:a2:83:d9:3e:c0:5d:9b:4d:
54:0b:51:9f:40:4f:fa:38:bb:9c:d7:f3:2a:50:a1:ad:82:9f:
00:a7:9f:2f:3b:e8:b8:a4:62:8b:5e:3d:bd:f2:3f:84:31:70:
19:40:a2:56:d9:ac:90:6d:af:56:12:e7:1b:1b:6a:05:84:b3:
bf:6b:07:55:90:ac:6c:0e:28:28:5f:32:3c:82:6e:03:0f:6d:
a4:16:fd:89:53:7c:26:23:a0:66:bb:a8:dc:ed:b6:de:05:7c:
8c:fc:71:f8:20:7c:de:a9:c9:fa:c4:77:74:f7:83:9a:90:5d:
ce:eb:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:13:10 2026 by rpki-client