$ rpki-client -vvvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json) Hash identifier: nk57qLerFFUK0/owbFNPawOIcQhfaCumNuzKjS2Og7k= Subject key identifier: 2C:2C:AA:9D:92:F0:43:9C:10:E3:FA:96:FD:A9:65:B4:6D:C5:6D:EC Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6 Certificate serial: 75967DBBDEAA869D63029018076C0D20381F0D1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft Manifest number: CB Signing time: Wed 30 Sep 2026 14:49:09 +0000 Manifest this update: Wed 30 Sep 2026 14:44:09 +0000 Manifest next update: Thu 01 Oct 2026 17:43:09 +0000 Files and hashes: 1: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: Wqlop8KiuFhPNLRMODA+lV0o36KWfrqv6LGNahtE1Cs=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:96:7d:bb:de:aa:86:9d:63:02:90:18:07:6c:0d:20:38:1f:0d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6 Validity Not Before: Sep 30 14:44:09 2026 GMT Not After : Oct 1 17:43:09 2026 GMT Subject: CN=2C2CAA9D92F0439C10E3FA96FDA965B46DC56DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4a:b8:1e:73:2c:6c:68:f8:8d:b4:fe:78:8b: 02:e6:d4:e6:12:c7:a9:80:7b:7c:54:35:af:42:8a: 36:b1:37:8b:0c:57:59:05:63:0a:0a:1c:26:6b:8b: 7b:9e:b6:17:13:9d:db:42:0c:8b:3a:f2:8a:a2:23: 56:d1:21:d0:ae:7f:db:d8:a2:9f:8c:7e:55:7c:5a: 86:67:0b:f3:6f:8d:c2:1f:98:d3:54:c9:9f:a0:0f: c9:10:90:dd:c7:7c:41:fe:2c:41:54:a1:cd:12:64: 7a:a8:96:6b:b6:e1:d8:bb:b8:10:b7:2a:1b:1b:86: ff:aa:81:ee:21:89:49:db:d3:db:12:65:0d:42:76: de:7d:bd:37:18:4c:64:0b:67:f4:a0:20:ab:92:9a: 16:1e:3c:97:0a:09:ae:76:0e:02:39:da:cd:7a:75: 95:91:9b:0c:55:7e:b3:34:75:81:ae:89:d5:89:c0: 02:39:7d:e6:fa:e2:62:29:19:70:d5:82:aa:6b:4b: 11:ee:ec:7e:b1:2f:1f:e4:12:99:50:53:b5:93:89: 9f:9e:da:a7:2c:ea:96:bc:de:40:11:e9:2c:27:a8: 23:a2:02:b8:cf:25:ec:18:2a:51:35:24:93:fa:b9: 5c:63:f0:5c:fe:1b:f3:9d:ba:47:8b:0f:f3:32:71: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2C:AA:9D:92:F0:43:9C:10:E3:FA:96:FD:A9:65:B4:6D:C5:6D:EC X509v3 Authority Key Identifier: keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5e:63:74:c8:c0:4e:dd:b1:82:65:e8:cb:a4:7c:8a:cd:10: af:9b:14:8e:43:bc:14:95:85:9d:f2:09:88:4d:5a:b9:75:a2: 00:d3:65:56:f8:1a:eb:0e:89:f4:fe:06:fd:4b:ff:aa:23:0d: a7:c7:45:8f:ff:58:4b:e6:25:77:b0:78:e4:87:89:2d:ef:6a: 6c:83:d4:d7:4e:f0:f3:34:6d:0c:fb:83:f1:97:8d:73:e3:b7: 29:6c:7c:90:6f:60:bb:52:4f:4f:99:a0:cd:ba:6b:a4:f5:10: 7e:4a:ed:46:26:25:3a:9d:7a:7d:e6:4c:dc:b5:4f:97:c8:b7: 1e:6d:19:46:b3:08:86:1f:fe:46:0a:92:60:ac:93:4b:52:7d: 1f:4d:9f:13:21:d3:ce:42:3a:c2:19:04:4c:52:c7:7c:ff:a1: dd:a3:a7:c8:36:65:b8:4d:c5:1d:43:46:d5:e5:88:14:39:90: ee:35:88:bc:cc:6c:3c:6e:5e:72:e7:05:9c:f1:5d:72:bb:a0: 9b:18:5c:b4:f1:9c:ad:b6:11:ee:fd:9d:9c:e8:2e:35:71:35: be:cb:98:31:2a:bd:3d:ac:37:bd:16:0b:48:eb:ba:9b:e7:53: 1a:d6:bf:7b:bc:c1:e3:91:6e:2a:18:1f:04:8f:3d:d1:a6:e9: e6:94:72:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZZ9u96qhp1jApAYB2wNIDgfDR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYx Qjk0MEVBNjAeFw0yNjA5MzAxNDQ0MDlaFw0yNjEwMDExNzQzMDlaMDMxMTAvBgNV BAMTKDJDMkNBQTlEOTJGMDQzOUMxMEUzRkE5NkZEQTk2NUI0NkRDNTZERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7SrgecyxsaPiNtP54iwLm1OYS x6mAe3xUNa9CijaxN4sMV1kFYwoKHCZri3uethcTndtCDIs68oqiI1bRIdCuf9vY op+MflV8WoZnC/NvjcIfmNNUyZ+gD8kQkN3HfEH+LEFUoc0SZHqolmu24di7uBC3 Khsbhv+qge4hiUnb09sSZQ1Cdt59vTcYTGQLZ/SgIKuSmhYePJcKCa52DgI52s16 dZWRmwxVfrM0dYGuidWJwAI5feb64mIpGXDVgqprSxHu7H6xLx/kEplQU7WTiZ+e 2qcs6pa83kAR6SwnqCOiArjPJewYKlE1JJP6uVxj8Fz+G/OdukeLD/MycZU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCyqnZLwQ5wQ4/qW/alltG3FbewwHwYDVR0j BBgwFoAUFT0TKQcDiSDTCHTY4eozFhuUDqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2YTU3YzUtZGY3My00M2Y1LTg2NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkw NzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYxQjk0MEVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTNEMTMyOTA3MDM4OTIwRDMwODc0RDhFMUVBMzMxNjFCOTQw RUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMz MTYxQjk0MEVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZeY3TIwE7dsYJl6MukfIrNEK+bFI5DvBSV hZ3yCYhNWrl1ogDTZVb4GusOifT+Bv1L/6ojDafHRY//WEvmJXeweOSHiS3vamyD 1NdO8PM0bQz7g/GXjXPjtylsfJBvYLtST0+ZoM26a6T1EH5K7UYmJTqden3mTNy1 T5fItx5tGUazCIYf/kYKkmCsk0tSfR9NnxMh085COsIZBExSx3z/od2jp8g2ZbhN xR1DRtXliBQ5kO41iLzMbDxuXnLnBZzxXXK7oJsYXLTxnK22Ee79nZzoLjVxNb7L mDEqvT2sN70WC0jrupvnUxrWv3u8weORbioYHwSPPdGm6eaUcqQ= -----END CERTIFICATE-----Generated at Wed Sep 30 22:52:20 2026 by rpki-client