$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json) Hash identifier: WpheDDFoCyihzR9UCChrnfmhpuXmcNB28h6JvBRxdJc= Subject key identifier: 5A:50:D4:D4:46:EC:BF:E0:7A:EA:FF:AC:63:6B:D4:07:72:86:A1:26 Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 74351ED62A1A22EBD02743F304506734456B4057 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:42:32 +0000 Manifest this update: Thu 24 Sep 2026 17:37:32 +0000 Manifest next update: Fri 25 Sep 2026 20:28:32 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=) 2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: PGu+vlZQgUSCw+hgZ/JBNAmIZHEi22J7j8t0RQzX+w0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:35:1e:d6:2a:1a:22:eb:d0:27:43:f3:04:50:67:34:45:6b:40:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: Sep 24 17:37:32 2026 GMT Not After : Sep 25 20:28:32 2026 GMT Subject: CN=5A50D4D446ECBFE07AEAFFAC636BD4077286A126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:34:09:3f:4a:67:0b:37:d4:25:6f:84:e0: 49:1c:24:77:54:0d:41:5e:b1:2e:09:42:76:0f:0d: 74:a7:54:b5:37:3a:8f:46:d3:5d:6b:bf:38:fd:78: 5e:88:a8:73:ff:59:65:2e:60:32:a2:03:a9:89:c2: 71:25:8a:2a:67:21:d9:bf:ed:ab:1b:79:66:a1:3b: 6a:09:a8:83:b8:e1:81:02:d3:df:18:b9:a5:39:0a: a8:7a:e0:d8:4d:a0:e9:7a:15:b4:f2:ab:be:0c:08: 69:5a:3c:c3:00:4c:1b:1a:74:b4:44:e7:e4:25:fe: 97:82:af:56:ad:ea:9a:5a:86:21:c2:42:8c:5f:54: d8:7b:76:92:02:a9:1a:83:82:9a:b1:90:52:89:f4: 5b:14:43:c5:c2:42:e4:1b:ca:5d:17:49:89:56:ec: 8a:09:04:18:db:bd:26:b8:ab:2e:b5:ba:36:a4:74: 0b:4b:47:b2:8a:41:38:53:7f:c5:ea:36:31:fd:84: 08:48:fe:64:39:38:1c:c8:93:31:99:1f:ff:8c:5b: cb:db:2b:e0:e9:35:f7:06:97:ac:a2:9d:7e:cc:c5: d2:0f:de:bb:8d:6e:00:ab:d1:40:c0:26:ec:0c:61: c3:40:bf:54:7d:ba:f3:07:b5:58:49:77:94:2a:62: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:50:D4:D4:46:EC:BF:E0:7A:EA:FF:AC:63:6B:D4:07:72:86:A1:26 X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0e:d1:c0:3c:f6:d1:67:c3:6b:11:d6:e9:85:6d:b4:62:9f: 03:d5:5e:3c:35:f9:08:3e:57:7a:60:a5:c5:09:0e:9e:26:95: 1e:76:46:53:b8:23:56:1c:10:6a:99:57:9b:2f:b0:7c:81:94: 83:38:da:24:7c:f9:77:1f:39:5e:d0:a3:6d:2f:76:fb:b2:93: 27:48:7f:37:1c:a8:95:44:4f:f8:00:b1:39:0b:60:5c:c5:5f: e5:c1:d1:4c:01:de:15:2e:d3:5e:77:35:6d:87:50:48:bc:de: 69:09:3e:64:b4:ac:e7:91:93:ac:0a:c7:11:9f:13:84:fe:c7: bb:da:5a:2b:4a:1e:61:08:f4:10:f7:22:3e:c5:76:85:e3:51: ac:33:d8:b8:03:db:62:6a:f2:a0:5d:0b:f3:3e:95:18:d7:21: 36:2f:40:ff:bd:22:4f:5c:bb:00:c6:ad:37:b9:f1:92:28:0a: 4e:a0:53:fc:a5:8f:23:f7:1f:92:5c:19:77:d6:ce:15:87:5a: 89:b7:40:63:be:66:ca:9a:2f:26:b6:e2:db:9d:06:25:e9:f3: 83:64:78:66:c2:2d:e5:92:d8:2a:d0:53:a2:fd:71:62:1a:43: 23:da:87:4a:a4:9d:4f:e0:e9:58:3c:b0:7e:54:68:9a:8c:3f: 51:25:1e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDUe1ioaIuvQJ0PzBFBnNEVrQFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjA5MjQxNzM3MzJaFw0yNjA5MjUyMDI4MzJaMDMxMTAvBgNV BAMTKDVBNTBENEQ0NDZFQ0JGRTA3QUVBRkZBQzYzNkJENDA3NzI4NkExMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EDQJP0pnCzfUJW+E4EkcJHdU DUFesS4JQnYPDXSnVLU3Oo9G011rvzj9eF6IqHP/WWUuYDKiA6mJwnEliipnIdm/ 7asbeWahO2oJqIO44YEC098YuaU5Cqh64NhNoOl6FbTyq74MCGlaPMMATBsadLRE 5+Ql/peCr1at6ppahiHCQoxfVNh7dpICqRqDgpqxkFKJ9FsUQ8XCQuQbyl0XSYlW 7IoJBBjbvSa4qy61ujakdAtLR7KKQThTf8XqNjH9hAhI/mQ5OBzIkzGZH/+MW8vb K+DpNfcGl6yinX7MxdIP3ruNbgCr0UDAJuwMYcNAv1R9uvMHtVhJd5QqYuPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWlDU1Ebsv+B66v+sY2vUB3KGoSYwHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0 NEMzNEI1RjFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0O0cA89tFnw2sR1umFbbRinwPVXjw1+Qg+ V3pgpcUJDp4mlR52RlO4I1YcEGqZV5svsHyBlIM42iR8+XcfOV7Qo20vdvuykydI fzccqJVET/gAsTkLYFzFX+XB0UwB3hUu0153NW2HUEi83mkJPmS0rOeRk6wKxxGf E4T+x7vaWitKHmEI9BD3Ij7FdoXjUawz2LgD22Jq8qBdC/M+lRjXITYvQP+9Ik9c uwDGrTe58ZIoCk6gU/yljyP3H5JcGXfWzhWHWom3QGO+ZsqaLya24tudBiXp84Nk eGbCLeWS2CrQU6L9cWIaQyPah0qknU/g6Vg8sH5UaJqMP1ElHrg= -----END CERTIFICATE-----Generated at Thu Sep 24 20:44:13 2026 by rpki-client