$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: SbWFde1LLMa71HeCYTXrAR/v/gQEd7jcpf8IiG/kvkw= Subject key identifier: 6F:18:A2:6E:19:27:C8:93:22:5A:81:7B:CA:C4:65:DA:F2:B5:5B:9A Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 6309644D391244AF6D553A3CE730F2C7D8C74D2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:28:34 +0000 Manifest this update: Fri 24 Jul 2026 07:23:34 +0000 Manifest next update: Sat 25 Jul 2026 08:21:34 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: wybpX7y1GrM+6tbl1xn+1GtbcYVSIHo4ZJb4MbHDUTA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:09:64:4d:39:12:44:af:6d:55:3a:3c:e7:30:f2:c7:d8:c7:4d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: Jul 24 07:23:34 2026 GMT Not After : Jul 25 08:21:34 2026 GMT Subject: CN=6F18A26E1927C893225A817BCAC465DAF2B55B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:76:47:25:ef:95:71:5e:48:24:9f:be:39: 2b:ec:e7:32:59:b6:cf:7b:95:43:a7:ce:2e:e4:86: e6:ea:db:95:22:0c:5b:f8:c1:86:07:fe:4a:33:da: bd:e0:5e:a1:c6:78:e0:69:b9:21:72:cb:87:16:6a: c1:1c:f9:0c:2b:36:f2:8b:d2:75:5a:cb:40:d0:cb: dc:b4:fe:43:89:81:0e:7c:60:c0:f1:3d:1c:ce:e6: d3:95:3d:6d:e0:93:5c:3c:bc:e2:bd:aa:96:ed:03: 3d:32:c4:36:67:dc:53:37:dd:82:9f:f9:bf:13:8e: 91:28:82:f5:c5:f6:7f:7f:0e:c8:21:b4:82:90:96: 15:97:8f:b9:5c:4e:7b:fa:79:4f:c6:a2:25:bc:14: 4f:a9:a0:dc:ff:a4:87:9c:2c:51:f0:cc:fe:88:44: 54:37:45:51:9e:46:b8:a4:4a:2e:c8:68:17:da:29: c6:77:76:78:30:d2:16:03:98:4d:28:45:2f:79:30: 1e:f5:16:96:c0:28:b2:df:b9:9b:4e:dc:3c:48:74: c6:76:40:0b:16:f3:19:aa:d0:ee:53:2c:4f:a6:5d: 8f:ae:c8:32:47:bc:55:df:d7:1b:38:4f:ce:b4:f8: 87:49:79:84:57:58:4a:1e:06:ed:43:98:ed:f2:0e: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:18:A2:6E:19:27:C8:93:22:5A:81:7B:CA:C4:65:DA:F2:B5:5B:9A X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:93:cc:27:48:68:91:17:68:7d:13:b9:ac:c0:ba:50:5f:fb: 8d:a8:9e:23:f6:1a:e7:da:b7:e6:57:17:94:3a:f4:c6:47:59: 03:61:08:e2:1a:97:0e:27:fc:7f:48:12:90:1b:ea:ad:ef:34: 80:dc:60:ac:c1:fc:3f:7b:3d:e7:24:e3:61:cb:c6:0b:cf:3b: 90:31:3c:cd:ba:4c:52:b0:9d:0b:e3:e1:32:fb:64:ff:85:8b: 39:88:eb:dc:75:21:67:83:31:d5:21:99:9a:da:a6:c5:41:95: dc:08:2c:f2:b0:f1:86:9e:c0:86:ab:02:e0:f1:4b:88:88:1e: f5:bd:b6:ae:59:a4:a2:87:d0:a9:a5:48:af:ed:5a:be:1b:3f: e1:5e:07:92:4d:4b:ab:d7:a1:a5:17:51:2c:67:1b:c6:41:2d: 7e:46:91:c7:80:44:07:5d:3b:78:69:be:83:2a:04:ab:af:23: 83:bd:14:04:af:58:d3:64:25:d4:5b:05:9c:3b:cc:ac:71:8c: fc:30:a1:cb:ef:08:67:9d:32:77:51:3a:21:23:fe:62:fb:cd: 73:63:74:28:9d:d6:ab:0f:83:7b:d5:d5:23:73:0b:da:3c:44: 66:8f:7b:df:cf:78:0e:67:3b:ba:3c:d6:bb:2b:0e:1f:24:ea: 1d:f9:f5:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwlkTTkSRK9tVTo85zDyx9jHTS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjA3MjQwNzIzMzRaFw0yNjA3MjUwODIxMzRaMDMxMTAvBgNV BAMTKDZGMThBMjZFMTkyN0M4OTMyMjVBODE3QkNBQzQ2NURBRjJCNTVCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pXZHJe+VcV5IJJ++OSvs5zJZ ts97lUOnzi7khubq25UiDFv4wYYH/koz2r3gXqHGeOBpuSFyy4cWasEc+QwrNvKL 0nVay0DQy9y0/kOJgQ58YMDxPRzO5tOVPW3gk1w8vOK9qpbtAz0yxDZn3FM33YKf +b8TjpEogvXF9n9/DsghtIKQlhWXj7lcTnv6eU/GoiW8FE+poNz/pIecLFHwzP6I RFQ3RVGeRrikSi7IaBfaKcZ3dngw0hYDmE0oRS95MB71FpbAKLLfuZtO3DxIdMZ2 QAsW8xmq0O5TLE+mXY+uyDJHvFXf1xs4T860+IdJeYRXWEoeBu1DmO3yDveZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbxiibhknyJMiWoF7ysRl2vK1W5owHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaTzCdIaJEXaH0TuazAulBf+42oniP2Gufa t+ZXF5Q69MZHWQNhCOIalw4n/H9IEpAb6q3vNIDcYKzB/D97Peck42HLxgvPO5Ax PM26TFKwnQvj4TL7ZP+FizmI69x1IWeDMdUhmZrapsVBldwILPKw8YaewIarAuDx S4iIHvW9tq5ZpKKH0KmlSK/tWr4bP+FeB5JNS6vXoaUXUSxnG8ZBLX5GkceARAdd O3hpvoMqBKuvI4O9FASvWNNkJdRbBZw7zKxxjPwwocvvCGedMndROiEj/mL7zXNj dCid1qsPg3vV1SNzC9o8RGaPe9/PeA5nO7o81rsrDh8k6h359RA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:21:01 2026 by rpki-client