$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: GhcnvToy/NGRPZUQYNtQCRrCwL1d6Wl+3YzX4i/Hr78= Subject key identifier: 8F:69:7A:A7:3E:85:4A:B2:B6:23:EF:79:C9:72:5D:09:4F:2C:FA:94 Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 4B46448440AAA62BD0032FCA1628FBA92EED4FCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: D1 Signing time: Tue 06 Oct 2026 04:18:21 +0000 Manifest this update: Tue 06 Oct 2026 04:13:21 +0000 Manifest next update: Wed 07 Oct 2026 07:50:21 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: NRNZ0efnHI+5kAtic9nHK02WO+O+ZrS7rxCjKG7d6GE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 07:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:46:44:84:40:aa:a6:2b:d0:03:2f:ca:16:28:fb:a9:2e:ed:4f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: Oct 6 04:13:21 2026 GMT Not After : Oct 7 07:50:21 2026 GMT Subject: CN=8F697AA73E854AB2B623EF79C9725D094F2CFA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:6c:73:33:86:87:45:08:08:6e:4f:ef:eb: 80:8d:be:e9:ac:b1:d2:2b:47:c8:a8:4b:6e:dd:69: ce:25:f2:be:a9:60:f8:98:19:a6:ed:57:66:ea:9b: 93:43:08:28:5c:1c:5b:67:58:24:64:39:0e:8a:10: a2:3d:18:c2:cb:71:39:0e:da:f9:d6:23:82:19:60: d1:5d:bb:94:5d:bc:94:fa:48:13:ca:c5:b4:7d:06: cd:41:0c:a2:09:8b:6d:3f:1d:a4:9a:05:24:84:dc: 6b:02:55:c4:74:00:76:f5:ef:b7:45:df:e8:de:4d: c1:2f:94:e4:45:b3:18:40:1e:89:18:94:a7:59:7f: 69:70:71:08:8d:d2:2d:16:f2:71:a4:11:c2:fc:ee: 32:b4:0d:47:57:63:63:4a:ca:b4:7c:5f:04:bd:3b: 4e:3d:b3:b4:dd:c4:63:ed:9a:70:80:1a:20:69:58: 61:3b:b0:63:de:54:4c:ec:b4:26:35:f9:b2:46:4d: b7:de:f4:b6:3d:72:a7:46:7b:64:21:4a:99:97:9d: aa:09:6c:5f:e2:87:55:81:01:7a:a1:a7:74:bf:73: 1b:1d:0d:0a:2e:d8:fa:5b:8d:47:7b:11:ab:3c:44: 13:fa:be:9e:01:ef:2d:03:d2:ba:2d:d8:7b:44:82: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:7A:A7:3E:85:4A:B2:B6:23:EF:79:C9:72:5D:09:4F:2C:FA:94 X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:75:6c:94:3d:23:e9:be:f6:3f:fa:e6:56:7b:d6:9e:a2:52: f9:b4:5a:9a:1f:5a:53:26:c7:f7:d6:49:ab:a3:05:d9:71:4c: 81:e4:96:c3:fc:23:b4:d8:90:c7:13:d4:5d:a7:50:c4:83:2f: 62:65:01:04:49:3d:91:38:9d:17:56:37:b0:32:41:e3:96:54: c7:58:37:b5:0d:bd:61:de:49:02:e2:97:19:e1:03:f6:f8:9e: 31:c5:a3:56:35:7a:cd:69:0d:2e:8a:14:87:84:ce:dc:a1:4e: 47:38:0c:1c:b6:6c:14:59:70:e3:81:b6:0c:e3:47:ff:f9:ba: 50:a2:f5:cf:d5:ff:1c:5b:10:7e:b2:b5:4d:5d:71:a4:19:6c: 23:78:e8:e3:72:33:82:f4:e9:88:93:31:e5:b1:ca:0b:6a:a4: 9d:56:4d:af:d1:1b:0c:b2:2e:2a:e2:e8:b6:95:3e:54:0b:4a: d6:3c:b6:cb:79:a0:51:29:10:50:68:91:57:65:41:e5:9b:10: 42:fd:79:87:f1:9c:30:6c:63:89:9b:8f:de:94:c4:34:df:02: 5e:6b:49:d7:79:f0:67:41:7f:ad:32:93:d3:26:24:a5:dd:a0: 2e:1f:35:89:8e:af:48:ab:55:1f:f7:21:d3:25:d7:84:48:e4: 83:cf:91:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0ZEhECqpivQAy/KFij7qS7tT8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjEwMDYwNDEzMjFaFw0yNjEwMDcwNzUwMjFaMDMxMTAvBgNV BAMTKDhGNjk3QUE3M0U4NTRBQjJCNjIzRUY3OUM5NzI1RDA5NEYyQ0ZBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWmxzM4aHRQgIbk/v64CNvums sdIrR8ioS27dac4l8r6pYPiYGabtV2bqm5NDCChcHFtnWCRkOQ6KEKI9GMLLcTkO 2vnWI4IZYNFdu5RdvJT6SBPKxbR9Bs1BDKIJi20/HaSaBSSE3GsCVcR0AHb177dF 3+jeTcEvlORFsxhAHokYlKdZf2lwcQiN0i0W8nGkEcL87jK0DUdXY2NKyrR8XwS9 O049s7TdxGPtmnCAGiBpWGE7sGPeVEzstCY1+bJGTbfe9LY9cqdGe2QhSpmXnaoJ bF/ih1WBAXqhp3S/cxsdDQou2PpbjUd7Eas8RBP6vp4B7y0D0rot2HtEgrPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2l6pz6FSrK2I+95yXJdCU8s+pQwHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx1bJQ9I+m+9j/65lZ71p6iUvm0WpofWlMm x/fWSaujBdlxTIHklsP8I7TYkMcT1F2nUMSDL2JlAQRJPZE4nRdWN7AyQeOWVMdY N7UNvWHeSQLilxnhA/b4njHFo1Y1es1pDS6KFIeEztyhTkc4DBy2bBRZcOOBtgzj R//5ulCi9c/V/xxbEH6ytU1dcaQZbCN46ONyM4L06YiTMeWxygtqpJ1WTa/RGwyy Liri6LaVPlQLStY8tst5oFEpEFBokVdlQeWbEEL9eYfxnDBsY4mbj96UxDTfAl5r Sdd58GdBf60yk9MmJKXdoC4fNYmOr0irVR/3IdMl14RI5IPPkfU= -----END CERTIFICATE-----Generated at Tue Oct 6 14:43:11 2026 by rpki-client