$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json) Hash identifier: 4U3Amam4/1w/9ym899x/oOggPe2niNj1qExVMJJhE5k= Subject key identifier: 68:E9:7A:08:FA:67:49:EB:4A:6F:CB:BB:78:7E:C2:23:C8:06:56:9D Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 06EB5E3AC89586C34EDC848C14B67F8161697EC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:31 +0000 Manifest this update: Tue 12 May 2026 19:56:31 +0000 Manifest next update: Wed 13 May 2026 23:52:31 +0000 Files and hashes: 1: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: VAYfVgi0oL2ZXz7KRuZlQT6+vz/u9B56QcF9PiGJyOY=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:eb:5e:3a:c8:95:86:c3:4e:dc:84:8c:14:b6:7f:81:61:69:7e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: May 12 19:56:31 2026 GMT Not After : May 13 23:52:31 2026 GMT Subject: CN=68E97A08FA6749EB4A6FCBBB787EC223C806569D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:ed:98:dc:96:a9:86:c1:d2:55:24:2e:f1: 1b:74:a8:a7:53:29:09:78:d0:89:ec:d2:20:de:34: fa:ca:b4:8a:0d:03:1e:b0:97:a5:52:58:84:e9:ce: cc:21:f2:fd:60:f9:28:49:d1:41:1e:d5:e7:8a:ca: 92:0d:06:a2:9f:1b:92:0d:9f:14:95:25:b4:66:7c: 19:6d:ce:33:98:c6:3d:58:5e:d7:ce:31:bb:d8:e1: 7e:1a:60:36:6f:2c:b6:46:6d:f6:df:20:8c:67:19: f0:f4:9c:42:6b:90:f9:ea:02:57:0a:ce:ef:a0:5b: 8d:ed:5d:e0:b3:74:8b:ef:53:f8:fd:ba:aa:c7:dc: 1c:ff:9a:42:e1:db:1c:79:6a:f7:1c:da:98:b6:83: df:d5:8b:33:93:18:93:13:55:0c:02:a5:10:0a:eb: d6:c6:49:d2:7b:62:6b:60:a1:fd:00:e4:93:d7:e3: 44:29:f4:2e:3e:d5:aa:cd:42:b8:1f:ad:57:f8:33: 43:93:4f:95:37:0d:98:00:1c:69:29:7c:ce:0c:e0: 60:bf:03:6f:7d:7a:9e:0e:17:d4:45:0d:b7:aa:34: e2:cf:1c:9f:b7:0f:ef:80:e7:a0:63:6b:09:79:98: 07:86:9f:1b:d8:ce:3a:da:0e:cc:60:f1:18:86:ff: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E9:7A:08:FA:67:49:EB:4A:6F:CB:BB:78:7E:C2:23:C8:06:56:9D X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:6d:a9:17:27:83:28:45:ad:02:a6:53:26:36:47:ba:0b: 0f:bf:29:fa:c2:15:d4:75:05:66:76:15:23:a7:bb:10:51:28: db:87:46:f3:9b:4b:b3:44:c0:4f:5d:9f:e4:00:e3:fd:cf:58: df:a0:ad:e4:81:2b:2d:84:47:96:fb:b0:bb:e4:b4:38:32:72: ab:b2:b9:9b:93:a1:3c:2d:a6:19:cb:73:3c:d3:e2:d6:9e:56: e0:df:3b:bd:a7:01:6a:0f:f0:24:e0:70:a1:f0:f4:76:5b:a6: 73:10:26:01:ca:9c:b0:51:d0:8e:2e:43:31:5c:44:4f:90:71: e3:a7:7a:f6:d0:cc:80:e4:ec:f6:17:f0:04:d8:b0:2a:cf:58: f9:2d:43:01:44:c4:b7:73:7f:82:9a:0a:44:2b:da:c9:09:06: ba:7e:00:a0:19:f7:e6:e8:d3:84:1b:9a:78:fe:26:44:97:b2: c7:6c:ff:f6:aa:56:8b:9a:39:e1:cd:43:65:23:3c:7d:87:93: 31:2b:b9:b5:8d:06:76:19:aa:5d:73:65:5f:a4:93:c7:e7:9d: 38:e3:02:eb:29:b8:dd:52:a5:b5:d0:d3:de:a1:da:9b:a5:f1: 54:83:c8:66:00:95:01:c4:e8:d1:91:9a:a3:2a:ff:16:5c:c4: 83:b2:29:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUButeOsiVhsNO3ISMFLZ/gWFpfskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjA1MTIxOTU2MzFaFw0yNjA1MTMyMzUyMzFaMDMxMTAvBgNV BAMTKDY4RTk3QTA4RkE2NzQ5RUI0QTZGQ0JCQjc4N0VDMjIzQzgwNjU2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iu2Y3JaphsHSVSQu8Rt0qKdT KQl40Ins0iDeNPrKtIoNAx6wl6VSWITpzswh8v1g+ShJ0UEe1eeKypINBqKfG5IN nxSVJbRmfBltzjOYxj1YXtfOMbvY4X4aYDZvLLZGbfbfIIxnGfD0nEJrkPnqAlcK zu+gW43tXeCzdIvvU/j9uqrH3Bz/mkLh2xx5avcc2pi2g9/VizOTGJMTVQwCpRAK 69bGSdJ7Ymtgof0A5JPX40Qp9C4+1arNQrgfrVf4M0OTT5U3DZgAHGkpfM4M4GC/ A299ep4OF9RFDbeqNOLPHJ+3D++A56Bjawl5mAeGnxvYzjraDsxg8RiG/xi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOl6CPpnSetKb8u7eH7CI8gGVp0wHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0 NEMzNEI1RjFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAYbakXJ4MoRa0CplMmNke6Cw+/KfrCFdR1 BWZ2FSOnuxBRKNuHRvObS7NEwE9dn+QA4/3PWN+greSBKy2ER5b7sLvktDgycquy uZuToTwtphnLczzT4taeVuDfO72nAWoP8CTgcKHw9HZbpnMQJgHKnLBR0I4uQzFc RE+QceOnevbQzIDk7PYX8ATYsCrPWPktQwFExLdzf4KaCkQr2skJBrp+AKAZ9+bo 04Qbmnj+JkSXssds//aqVouaOeHNQ2UjPH2HkzErubWNBnYZql1zZV+kk8fnnTjj AuspuN1SpbXQ096h2pul8VSDyGYAlQHE6NGRmqMq/xZcxIOyKTk= -----END CERTIFICATE-----Generated at Wed May 13 02:47:07 2026 by rpki-client