$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: URIQax99VdqQ9MQ830Ecc1vMKhLHblSJpf5qhMuvj94= Subject key identifier: AD:9D:40:41:F1:72:CA:19:A9:58:8A:F9:5D:72:B9:41:1D:AC:2F:03 Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 35EE846322FCB457F006AF56FC00C887BD182F0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:47:59 +0000 Manifest this update: Tue 12 May 2026 20:42:59 +0000 Manifest next update: Wed 13 May 2026 20:53:59 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: 3xKgP2ulXb70J4SpV/YIlwGATxs7/ze3deQT3xM4fzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ee:84:63:22:fc:b4:57:f0:06:af:56:fc:00:c8:87:bd:18:2f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: May 12 20:42:59 2026 GMT Not After : May 13 20:53:59 2026 GMT Subject: CN=AD9D4041F172CA19A9588AF95D72B9411DAC2F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:f0:fc:1e:ba:1c:ff:46:c1:25:70:fd:10: b7:b8:61:7e:7a:b8:e4:5a:9c:df:f4:1c:e6:7b:94: 8c:fb:e5:0f:90:0d:c6:7a:c9:96:0c:00:e9:0c:18: 44:48:9e:4d:6b:02:26:72:18:ab:5d:15:11:56:0f: c5:29:2e:5c:6c:0a:93:48:8e:fa:7e:dc:69:cd:47: b3:7c:ba:bb:44:6f:66:8a:34:4f:8c:16:eb:28:f0: 40:a2:dd:8b:83:4a:26:43:87:06:64:5a:e0:fa:c2: ae:b7:df:fb:4c:25:0d:00:b1:32:e6:3a:88:cd:f8: 2a:e4:fa:65:72:0c:56:6b:ce:37:45:d0:fe:a1:4a: 88:f1:de:6d:74:30:b1:25:6c:8d:9c:f0:52:ad:f0: 72:21:0e:4d:51:73:6d:3d:f4:98:ca:c3:4a:cc:c7: 01:87:6e:18:ea:72:f0:3b:09:18:af:3c:de:86:8c: 55:f6:c7:54:5f:c3:65:3d:1e:02:85:86:98:c4:b0: f9:89:85:8e:86:ad:0b:49:1a:1a:12:42:95:8a:99: eb:e9:e2:35:08:89:2c:de:1a:2f:ed:29:a8:52:7b: aa:4b:d4:66:a2:03:c1:2f:e1:5a:b8:67:f2:99:f5: a6:6a:c5:e7:0a:8e:d6:47:f7:b5:6a:3f:8b:21:65: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:40:41:F1:72:CA:19:A9:58:8A:F9:5D:72:B9:41:1D:AC:2F:03 X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:32:0b:80:56:17:2e:ff:bd:f3:73:2d:44:a9:98:93:cd:50: 06:a7:5a:0a:7a:36:d9:28:58:a4:34:83:99:ed:8a:3b:17:6b: a0:cd:bf:ca:58:77:68:b5:b5:f1:b5:7f:41:d1:3d:e1:66:81: ff:82:2e:61:6f:a4:22:cd:b2:fa:bd:06:be:a7:7d:83:ac:ae: 25:16:a1:d9:d3:a8:bf:45:59:20:cb:02:8d:e0:76:a1:53:22: d0:4e:a2:08:20:34:44:fd:14:e4:a1:a3:77:5a:aa:a1:05:c0: b8:49:d4:24:f6:4d:91:7a:fd:af:c2:9e:61:0d:35:98:c2:d2: 88:9a:db:c7:d3:d6:47:85:20:53:eb:0c:3e:17:43:49:69:15: 5a:25:43:5e:f4:bd:7e:39:cb:c9:bb:db:4f:45:ab:4b:62:c1: 2a:d5:b6:d0:ef:63:18:8b:a4:91:32:70:db:40:5f:53:22:0b: ff:12:5a:a4:e6:08:9b:f0:de:f1:93:af:06:d3:43:f0:46:f6: 3b:ce:f6:51:9a:33:21:96:6d:41:f3:99:6a:90:29:45:fa:48: a0:94:45:4e:8a:b5:6f:65:6c:1d:45:61:72:8c:ad:cd:5c:6e: db:b6:52:62:3c:97:d6:56:83:0b:76:a8:1e:a0:51:27:b8:b2: f7:f1:80:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNe6EYyL8tFfwBq9W/ADIh70YLw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjA1MTIyMDQyNTlaFw0yNjA1MTMyMDUzNTlaMDMxMTAvBgNV BAMTKEFEOUQ0MDQxRjE3MkNBMTlBOTU4OEFGOTVENzJCOTQxMURBQzJGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqvD8Hroc/0bBJXD9ELe4YX56 uORanN/0HOZ7lIz75Q+QDcZ6yZYMAOkMGERInk1rAiZyGKtdFRFWD8UpLlxsCpNI jvp+3GnNR7N8urtEb2aKNE+MFuso8ECi3YuDSiZDhwZkWuD6wq633/tMJQ0AsTLm OojN+Crk+mVyDFZrzjdF0P6hSojx3m10MLElbI2c8FKt8HIhDk1Rc2099JjKw0rM xwGHbhjqcvA7CRivPN6GjFX2x1Rfw2U9HgKFhpjEsPmJhY6GrQtJGhoSQpWKmevp 4jUIiSzeGi/tKahSe6pL1GaiA8Ev4Vq4Z/KZ9aZqxecKjtZH97VqP4shZRftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZ1AQfFyyhmpWIr5XXK5QR2sLwMwHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAyC4BWFy7/vfNzLUSpmJPNUAanWgp6Ntko WKQ0g5ntijsXa6DNv8pYd2i1tfG1f0HRPeFmgf+CLmFvpCLNsvq9Br6nfYOsriUW odnTqL9FWSDLAo3gdqFTItBOogggNET9FOSho3daqqEFwLhJ1CT2TZF6/a/CnmEN NZjC0oia28fT1keFIFPrDD4XQ0lpFVolQ170vX45y8m7209Fq0tiwSrVttDvYxiL pJEycNtAX1MiC/8SWqTmCJvw3vGTrwbTQ/BG9jvO9lGaMyGWbUHzmWqQKUX6SKCU RU6KtW9lbB1FYXKMrc1cbtu2UmI8l9ZWgwt2qB6gUSe4svfxgAg= -----END CERTIFICATE-----Generated at Wed May 13 02:26:23 2026 by rpki-client