
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier: bst8usFx6JF6l1NQpCL014Rl8vLBw72qRpZoBMKnn+I=
Subject key identifier: A3:44:C1:EB:52:6F:51:28:9C:B6:A0:8E:5F:F1:65:2E:E3:E9:70:55
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial: 134D3035DFB5348A011F85F3247983DDB3801ECB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:20:10 +0000
Manifest this update: Tue 12 May 2026 19:15:10 +0000
Manifest next update: Wed 13 May 2026 21:46:10 +0000
Files and hashes: 1: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
2: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
3: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
4: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
5: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
6: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
7: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
8: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
9: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
10: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
11: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
12: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
13: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
14: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
15: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
16: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
17: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: QVWzLCS6MaiWGndNzl5rqDlTWB5Dc8oYwNgkiYEgDr0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4d:30:35:df:b5:34:8a:01:1f:85:f3:24:79:83:dd:b3:80:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Validity
Not Before: May 12 19:15:10 2026 GMT
Not After : May 13 21:46:10 2026 GMT
Subject: CN=A344C1EB526F51289CB6A08E5FF1652EE3E97055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:90:35:62:77:47:4e:7d:2e:9b:c2:59:38:
13:23:6e:48:35:64:d5:ef:46:9f:ce:9d:56:77:96:
85:bd:c4:29:df:37:5c:fe:13:59:36:95:52:e5:3f:
a9:95:1b:69:90:d3:22:e7:74:d9:7a:90:09:13:50:
7a:9b:50:53:3d:e8:d4:2e:95:e8:8f:0b:f5:2d:b3:
a6:41:cc:0a:b9:7a:eb:44:ae:51:e9:ed:00:37:2f:
41:9e:6d:cd:de:9c:fe:88:2c:a0:6e:31:f0:61:1b:
a5:0b:bb:07:2e:fa:6b:5c:a1:b3:5c:25:fc:e0:79:
82:29:6b:94:03:16:a4:4d:8c:d8:58:49:d8:df:c5:
c2:63:90:fc:6b:6d:a1:97:fe:54:d8:6b:65:0d:c7:
e9:d6:dd:61:c9:4d:63:14:40:67:55:f2:87:46:b6:
cc:bf:e8:fe:0b:d6:72:6e:78:e5:bb:50:79:9b:af:
87:f3:3d:0f:80:f4:77:e2:0c:97:c0:dd:5a:0b:9c:
2b:e7:1b:bf:71:a2:20:f4:f4:db:9e:30:d0:c8:53:
63:e5:48:87:60:02:11:67:41:a7:1d:54:ca:9d:f4:
b1:b6:ef:42:7d:96:1e:68:d5:39:7f:f8:30:6c:90:
48:5e:ae:c7:05:b2:d7:3b:ec:05:91:7d:d9:4f:a4:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:C1:EB:52:6F:51:28:9C:B6:A0:8E:5F:F1:65:2E:E3:E9:70:55
X509v3 Authority Key Identifier:
keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:39:98:47:c8:de:23:30:e9:3d:46:1c:01:35:4e:09:07:b5:
f1:b3:37:ea:cd:71:3b:8e:45:88:c1:c5:4f:20:63:0e:46:9b:
6d:95:84:a0:ee:51:71:9a:64:5a:ae:8f:a8:7b:5f:fc:66:94:
95:6b:f8:3d:21:5f:68:15:b9:b1:c7:d1:25:6e:80:94:52:b7:
23:4e:77:cc:31:97:ab:fb:96:d7:3a:4e:5e:22:0a:d9:80:dc:
c8:a3:79:0f:27:0f:4f:e9:d8:4d:1e:50:02:80:0f:6d:73:db:
34:3e:57:26:ec:c0:c1:b2:49:15:a3:c9:f1:aa:60:ab:45:42:
9e:41:13:7d:b9:54:f1:13:e1:d5:a5:fe:65:5c:56:4b:2b:1f:
58:17:c0:df:be:ca:fe:ba:6a:71:bc:54:7a:48:2e:ce:cb:b4:
50:02:06:dc:70:2d:91:1f:38:60:41:3c:cf:51:7d:30:16:4b:
5e:b2:50:a7:7b:fd:ab:7c:4d:11:0c:f3:b8:cd:be:59:9b:1c:
e3:b2:41:55:fb:b2:6a:a3:f4:ec:52:51:54:da:4d:71:7d:e4:
31:31:b1:0c:91:ea:6b:36:a1:36:2d:98:93:87:70:5c:18:20:
18:0d:fc:cd:a7:fc:2c:64:bd:58:f8:10:8a:d9:78:f5:86:cf:
f1:89:87:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE00wNd+1NIoBH4XzJHmD3bOAHsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3
NDUwOTU5QjAeFw0yNjA1MTIxOTE1MTBaFw0yNjA1MTMyMTQ2MTBaMDMxMTAvBgNV
BAMTKEEzNDRDMUVCNTI2RjUxMjg5Q0I2QTA4RTVGRjE2NTJFRTNFOTcwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrZA1YndHTn0um8JZOBMjbkg1
ZNXvRp/OnVZ3loW9xCnfN1z+E1k2lVLlP6mVG2mQ0yLndNl6kAkTUHqbUFM96NQu
leiPC/Uts6ZBzAq5eutErlHp7QA3L0Gebc3enP6ILKBuMfBhG6ULuwcu+mtcobNc
JfzgeYIpa5QDFqRNjNhYSdjfxcJjkPxrbaGX/lTYa2UNx+nW3WHJTWMUQGdV8odG
tsy/6P4L1nJueOW7UHmbr4fzPQ+A9HfiDJfA3VoLnCvnG79xoiD09NueMNDIU2Pl
SIdgAhFnQacdVMqd9LG270J9lh5o1Tl/+DBskEherscFstc77AWRfdlPpAeTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUo0TB61JvUSictqCOX/FlLuPpcFUwHwYDVR0j
BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3
NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5
NTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky
YjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEw
Nzg3NDUwOTU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACI5mEfI3iMw6T1GHAE1TgkHtfGzN+rNcTuO
RYjBxU8gYw5Gm22VhKDuUXGaZFquj6h7X/xmlJVr+D0hX2gVubHH0SVugJRStyNO
d8wxl6v7ltc6Tl4iCtmA3MijeQ8nD0/p2E0eUAKAD21z2zQ+VybswMGySRWjyfGq
YKtFQp5BE325VPET4dWl/mVcVksrH1gXwN++yv66anG8VHpILs7LtFACBtxwLZEf
OGBBPM9RfTAWS16yUKd7/at8TREM87jNvlmbHOOyQVX7smqj9OxSUVTaTXF95DEx
sQyR6ms2oTYtmJOHcFwYIBgN/M2n/CxkvVj4EIrZePWGz/GJh04=
-----END CERTIFICATE-----
Generated at Tue May 12 22:46:51 2026 by rpki-client