$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json) Hash identifier: Suxh8iMf7QFhgnrtJSvYhc6vrdJF6DtwZh+2NY+ODWw= Subject key identifier: DA:E1:61:98:2E:97:CC:7B:E3:10:25:63:E0:70:C5:A6:F0:C3:DE:A6 Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 23D258F08AF22DF0CBA26E612DD7CDAEA94F91AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:28:58 +0000 Manifest this update: Wed 23 Sep 2026 14:23:58 +0000 Manifest next update: Thu 24 Sep 2026 15:51:58 +0000 Files and hashes: 1: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=) 2: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=) 3: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=) 4: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: XBiJiL/bZukcwKbEWCDpZIcymuHFgqMbmoRiWOG5xgU=) 5: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=) 6: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=) 7: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d2:58:f0:8a:f2:2d:f0:cb:a2:6e:61:2d:d7:cd:ae:a9:4f:91:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: Sep 23 14:23:58 2026 GMT Not After : Sep 24 15:51:58 2026 GMT Subject: CN=DAE161982E97CC7BE3102563E070C5A6F0C3DEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:2a:ee:44:3c:fa:ad:31:b4:a9:e0:54:3f: fc:18:65:2a:3b:77:d5:0e:07:b2:b9:7b:80:9b:d1: 91:8d:29:10:c3:d9:9f:f4:18:51:96:1e:2a:3a:06: 48:e5:8d:a6:a3:28:ab:f9:ab:36:15:2f:16:e5:54: be:a3:32:a8:88:09:0c:66:3f:d0:5e:ed:90:fd:3a: 10:10:5a:9b:0e:3f:3b:b4:b5:92:66:c8:1d:ae:7a: ab:f1:f3:c1:14:9a:8d:e7:04:a9:65:7e:c0:5a:a0: d2:cf:37:d1:59:98:21:c5:32:b9:94:9a:aa:24:46: 80:0f:f8:09:0f:6e:20:fd:a7:48:fd:cb:21:61:93: 32:ca:ec:5c:39:9a:94:c3:52:76:19:0e:f9:74:de: ab:27:a3:ea:94:53:ea:6a:aa:9b:0b:04:94:86:56: ff:18:d0:f0:05:95:f0:0f:56:ed:46:07:3a:bb:23: 8c:89:6a:91:c9:c1:44:5d:90:f7:16:bf:c9:08:27: 43:94:09:bf:73:b7:fb:92:27:8d:f1:96:f1:1e:bd: a8:ad:55:ef:9f:5d:e6:23:c9:d5:74:5e:31:b7:7a: b8:a0:24:50:70:e0:b4:05:58:cd:94:ba:4d:9c:b7: 98:b7:71:44:16:5f:1b:b4:81:c4:21:7e:7a:ac:0f: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E1:61:98:2E:97:CC:7B:E3:10:25:63:E0:70:C5:A6:F0:C3:DE:A6 X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9b:77:f9:0a:66:f5:71:0c:bb:24:58:4d:9f:f4:0c:c3:1b: bf:b9:84:d4:8f:e3:bc:37:16:70:5d:a4:f3:90:7e:cc:4d:93: 00:92:d5:ba:67:c4:81:72:59:a1:18:63:12:77:f5:c7:29:43: 82:ed:e4:fc:6c:47:04:c5:5e:86:e9:53:5e:d6:a1:05:8e:7b: f9:de:3b:f0:92:3b:24:49:03:a3:72:2a:f1:41:c7:75:be:2a: e0:48:9c:85:70:4b:44:76:b6:6c:5c:6c:3e:a2:6e:14:84:7e: c8:11:3c:98:12:4b:8b:96:c1:98:92:8e:4d:36:32:30:82:ad: 86:d8:2f:58:5c:7d:53:7d:7f:5e:82:6f:38:bc:8a:8c:0c:34: d6:a6:50:ae:a1:21:d3:3a:b4:82:19:41:6e:fa:b0:dc:70:fe: 10:dd:a3:08:33:da:c6:bb:16:91:67:2b:d3:26:6b:14:2c:25: 40:19:e3:3d:1c:3f:40:97:71:5e:ee:58:2f:d3:5a:b3:da:4c: 20:bd:5c:6e:cc:46:99:38:7b:34:69:23:33:44:07:c4:92:55: ca:b3:4b:a2:f5:c3:97:53:17:53:73:b6:90:97:85:01:0a:08: 54:a9:7d:a5:35:27:8c:1f:34:3a:ba:33:27:2d:90:76:56:49: 79:4b:2c:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9JY8IryLfDLom5hLdfNrqlPkaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjA5MjMxNDIzNThaFw0yNjA5MjQxNTUxNThaMDMxMTAvBgNV BAMTKERBRTE2MTk4MkU5N0NDN0JFMzEwMjU2M0UwNzBDNUE2RjBDM0RFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDACruRDz6rTG0qeBUP/wYZSo7 d9UOB7K5e4Cb0ZGNKRDD2Z/0GFGWHio6BkjljaajKKv5qzYVLxblVL6jMqiICQxm P9Be7ZD9OhAQWpsOPzu0tZJmyB2ueqvx88EUmo3nBKllfsBaoNLPN9FZmCHFMrmU mqokRoAP+AkPbiD9p0j9yyFhkzLK7Fw5mpTDUnYZDvl03qsno+qUU+pqqpsLBJSG Vv8Y0PAFlfAPVu1GBzq7I4yJapHJwURdkPcWv8kIJ0OUCb9zt/uSJ43xlvEevait Ve+fXeYjydV0XjG3erigJFBw4LQFWM2Uuk2ct5i3cUQWXxu0gcQhfnqsD7k3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2uFhmC6XzHvjECVj4HDFpvDD3qYwHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2 OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1 ODczM0FGQkZBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2bd/kKZvVxDLskWE2f9AzDG7+5hNSP47w3 FnBdpPOQfsxNkwCS1bpnxIFyWaEYYxJ39ccpQ4Lt5PxsRwTFXobpU17WoQWOe/ne O/CSOyRJA6NyKvFBx3W+KuBInIVwS0R2tmxcbD6ibhSEfsgRPJgSS4uWwZiSjk02 MjCCrYbYL1hcfVN9f16Cbzi8iowMNNamUK6hIdM6tIIZQW76sNxw/hDdowgz2sa7 FpFnK9MmaxQsJUAZ4z0cP0CXcV7uWC/TWrPaTCC9XG7MRpk4ezRpIzNEB8SSVcqz S6L1w5dTF1NztpCXhQEKCFSpfaU1J4wfNDq6MyctkHZWSXlLLLM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:53:05 2026 by rpki-client