$ rpki-client -vvf rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft File: 153D132907038920D30874D8E1EA33161B940EA6.mft (raw, json) Hash identifier: rkWzl8xrEWbgj2IX/5dHmyr7g4q1vUP7FZ021o1HMkA= Subject key identifier: 81:E2:EE:78:D3:D8:FB:62:0D:2F:36:FB:15:00:5B:08:71:79:64:72 Authority key identifier: 15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 Certificate issuer: /CN=153D132907038920D30874D8E1EA33161B940EA6 Certificate serial: 30D9D27F2AE9A15FF02EDFC216841B1F3E2F9D63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 13:56:43 +0000 Manifest this update: Fri 24 Jul 2026 13:51:43 +0000 Manifest next update: Sat 25 Jul 2026 15:26:43 +0000 Files and hashes: 1: 153D132907038920D30874D8E1EA33161B940EA6.crl (hash: 40hhHjASxktPl6RVszhG9t4pXNao8QjdKU8cYBkIcWs=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: pulqmJflTAxdM7jOySuU657i95+QOMozLp6rdyTPI6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d9:d2:7f:2a:e9:a1:5f:f0:2e:df:c2:16:84:1b:1f:3e:2f:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153D132907038920D30874D8E1EA33161B940EA6 Validity Not Before: Jul 24 13:51:43 2026 GMT Not After : Jul 25 15:26:43 2026 GMT Subject: CN=81E2EE78D3D8FB620D2F36FB15005B0871796472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:38:6d:07:bb:06:c3:a4:06:5f:76:b1:7e: 19:50:ef:44:de:c8:a2:66:ec:d4:a6:27:55:5d:5f: cf:72:9d:80:bd:ca:6d:2a:13:7f:9a:2c:d6:ec:42: 73:a9:83:2f:1d:26:92:c7:e3:45:83:fc:11:7a:91: 35:30:41:36:05:c1:36:a5:9f:ac:47:96:39:37:84: 1c:15:b6:33:af:40:1c:c0:0c:c4:76:07:ec:48:df: b3:df:0c:8f:1e:7b:43:70:a4:12:67:16:47:53:f1: 4e:90:b4:44:a6:25:50:be:cd:fb:45:48:17:c3:23: d3:82:3b:28:ed:53:25:0d:e2:23:97:0c:26:ca:40: 9f:b9:15:78:b7:e6:fe:da:2c:0e:ac:fd:a0:3c:95: 77:81:a5:5e:17:c9:8b:ce:f8:6b:4c:3a:64:f6:68: 7f:da:f0:65:37:eb:a4:5b:9b:62:a3:73:a9:f8:e5: d1:06:be:aa:99:d5:a6:03:0b:7d:e1:18:3c:64:eb: 57:e0:fd:8e:17:5c:03:88:2e:7e:1f:e0:a8:1a:cc: 1e:45:ca:ff:15:e6:f5:7e:1a:70:ef:ef:b0:b8:d7: 9c:da:7b:53:a7:9c:13:10:69:34:c5:fc:73:e2:91: 04:e8:1c:97:be:66:f8:7f:ab:96:d6:5e:2f:4e:ef: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E2:EE:78:D3:D8:FB:62:0D:2F:36:FB:15:00:5B:08:71:79:64:72 X509v3 Authority Key Identifier: keyid:15:3D:13:29:07:03:89:20:D3:08:74:D8:E1:EA:33:16:1B:94:0E:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/153D132907038920D30874D8E1EA33161B940EA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/153D132907038920D30874D8E1EA33161B940EA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:02:72:d3:a7:38:b7:ec:3f:64:93:42:ff:0e:f7:90:b0: 23:e9:0f:2a:b5:35:0f:bb:07:d5:3f:8c:85:16:8e:1e:aa:18: 63:e4:28:4c:e5:e1:e3:e5:e7:7c:db:40:24:8b:bb:83:fe:83: 82:22:df:ec:8c:c9:01:e5:8b:db:7b:c9:32:5c:76:bb:18:0d: b7:5d:13:eb:ee:71:35:d5:83:7a:0c:e0:e1:ed:c0:ba:a3:6e: 44:7f:2e:38:b0:3e:8d:89:19:93:ac:0e:e6:aa:33:1a:25:fc: 20:68:7e:df:65:cd:eb:dd:92:55:c8:94:bf:c7:8d:a3:e4:6e: 6e:a3:73:54:bc:c0:d5:f6:49:54:6c:6d:92:28:90:4d:e7:d8: 7c:a7:c0:3c:7e:80:9d:94:53:7b:05:c8:22:3e:96:9a:c8:7f: 74:a3:f2:8f:21:29:4f:42:31:92:c8:dd:24:16:24:0e:4d:fa: ce:ff:6e:a6:88:ae:bf:d9:6f:26:40:6d:27:a8:07:e5:ff:d0: 9f:c4:9a:4d:96:46:f0:7c:8f:5d:26:65:28:50:e7:77:9a:c5: 49:57:cd:6b:87:ce:cc:24:e4:26:88:40:b8:08:2a:ad:8a:71: 5d:57:e7:1a:87:04:47:2a:86:7f:ae:f3:cd:8a:e9:4a:98:cc: 41:6d:f1:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNnSfyrpoV/wLt/CFoQbHz4vnWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYx Qjk0MEVBNjAeFw0yNjA3MjQxMzUxNDNaFw0yNjA3MjUxNTI2NDNaMDMxMTAvBgNV BAMTKDgxRTJFRTc4RDNEOEZCNjIwRDJGMzZGQjE1MDA1QjA4NzE3OTY0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLjhtB7sGw6QGX3axfhlQ70Te yKJm7NSmJ1VdX89ynYC9ym0qE3+aLNbsQnOpgy8dJpLH40WD/BF6kTUwQTYFwTal n6xHljk3hBwVtjOvQBzADMR2B+xI37PfDI8ee0NwpBJnFkdT8U6QtESmJVC+zftF SBfDI9OCOyjtUyUN4iOXDCbKQJ+5FXi35v7aLA6s/aA8lXeBpV4XyYvO+GtMOmT2 aH/a8GU366Rbm2Kjc6n45dEGvqqZ1aYDC33hGDxk61fg/Y4XXAOILn4f4KgazB5F yv8V5vV+GnDv77C415zae1OnnBMQaTTF/HPikQToHJe+Zvh/q5bWXi9O77fdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeLueNPY+2INLzb7FQBbCHF5ZHIwHwYDVR0j BBgwFoAUFT0TKQcDiSDTCHTY4eozFhuUDqYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGU2YTU3YzUtZGY3My00M2Y1LTg2NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkw NzAzODkyMEQzMDg3NEQ4RTFFQTMzMTYxQjk0MEVBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTNEMTMyOTA3MDM4OTIwRDMwODc0RDhFMUVBMzMxNjFCOTQw RUE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvMTUzRDEzMjkwNzAzODkyMEQzMDg3NEQ4RTFFQTMz MTYxQjk0MEVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3xAnLTpzi37D9kk0L/DveQsCPpDyq1NQ+7 B9U/jIUWjh6qGGPkKEzl4ePl53zbQCSLu4P+g4Ii3+yMyQHli9t7yTJcdrsYDbdd E+vucTXVg3oM4OHtwLqjbkR/LjiwPo2JGZOsDuaqMxol/CBoft9lzevdklXIlL/H jaPkbm6jc1S8wNX2SVRsbZIokE3n2HynwDx+gJ2UU3sFyCI+lprIf3Sj8o8hKU9C MZLI3SQWJA5N+s7/bqaIrr/ZbyZAbSeoB+X/0J/Emk2WRvB8j10mZShQ53eaxUlX zWuHzswk5CaIQLgIKq2KcV1X5xqHBEcqhn+u882K6UqYzEFt8R4= -----END CERTIFICATE-----Generated at Fri Jul 24 22:18:54 2026 by rpki-client