
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json)
Hash identifier: Bs/TC1agrviFFT/PVORqQlr2eb1egY1pbeWLxZbMHkU=
Subject key identifier: C8:64:38:50:FE:53:5A:2A:BB:A8:40:33:FF:78:3A:3E:1C:63:41:20
Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Certificate serial: 709CB1A0C661657F5BB33D250D6580F53ACAE99F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 23:49:59 +0000
Manifest this update: Fri 25 Sep 2026 23:44:59 +0000
Manifest next update: Sun 27 Sep 2026 00:08:59 +0000
Files and hashes: 1: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=)
2: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=)
3: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: r2XBtOIt8zADk3frZryBHgzbVLwQJf5afN1KLGtuXhE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9c:b1:a0:c6:61:65:7f:5b:b3:3d:25:0d:65:80:f5:3a:ca:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Validity
Not Before: Sep 25 23:44:59 2026 GMT
Not After : Sep 27 00:08:59 2026 GMT
Subject: CN=C8643850FE535A2ABBA84033FF783A3E1C634120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:35:44:c9:2d:55:84:8f:0c:10:cd:0c:55:
10:19:0d:31:c9:ba:39:05:74:15:38:da:e4:7e:40:
ea:59:c0:2b:11:4a:8b:df:5a:ed:37:c7:18:5e:3f:
b3:6c:d4:7f:9f:f2:2e:e8:2b:c0:ea:f1:a2:b4:23:
87:8a:d1:56:de:4e:f2:49:e1:13:a2:55:bf:1a:96:
ff:7b:b6:c0:61:5c:77:e0:74:f0:f6:5b:53:9b:b1:
95:41:e4:70:97:0d:cf:20:d9:83:7d:7f:4c:56:ce:
10:ec:d3:68:5a:f1:24:d6:c1:89:8e:7c:e3:1c:29:
28:fa:85:4f:da:cb:09:53:b6:62:d7:0f:f3:9f:73:
b1:ea:b1:d0:7d:87:18:68:26:52:e4:0f:c9:47:4b:
09:f0:98:22:c8:90:71:74:ca:6c:d0:65:03:95:f9:
6f:7e:88:bc:bd:b6:e8:fa:78:24:d5:c8:48:7f:48:
04:df:cc:b0:c8:fe:56:b1:a3:ee:a9:01:6f:de:1e:
87:8f:c9:be:53:3c:e9:f1:d3:e2:9e:e1:32:b3:82:
e3:2d:2f:17:a9:0e:6b:76:67:a9:57:52:2c:2c:90:
b6:7b:3d:56:15:8e:10:c8:79:80:78:56:8c:25:f2:
47:f5:7b:c5:3a:94:06:46:74:c8:0b:a4:80:30:af:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:38:50:FE:53:5A:2A:BB:A8:40:33:FF:78:3A:3E:1C:63:41:20
X509v3 Authority Key Identifier:
keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:ca:69:d8:7f:49:c9:ef:d0:29:db:62:44:df:71:8b:9f:
e9:d5:9f:f6:85:0b:52:eb:37:de:98:53:3a:f8:81:33:4d:41:
ac:13:fe:4e:b1:df:60:f5:c5:06:8d:05:36:52:b9:f2:14:ce:
cc:ed:bd:f1:6f:11:76:c7:97:24:a8:cc:cb:1c:0f:29:cd:1a:
4a:5b:47:b6:f3:d1:ce:49:f5:44:2a:c7:20:ab:7a:5e:07:ad:
6c:05:9b:b0:cf:69:f2:94:49:0a:f7:5e:f9:ff:2e:0c:6d:1e:
8d:1e:83:66:17:50:db:c3:d4:dc:e8:80:0d:1d:44:c0:ae:b4:
5e:5b:e3:11:ab:2a:68:73:e4:b3:cd:48:58:ac:7a:1a:93:2b:
94:8c:1a:49:b5:f3:68:61:7a:ff:22:85:0a:3e:a4:31:2e:3b:
ee:67:96:c0:6d:fe:fe:f7:2b:e1:ac:c4:e3:b1:5b:19:d4:1d:
de:a6:83:4d:8b:93:ec:4e:db:cc:14:98:3a:30:23:02:03:9f:
69:58:6d:1b:8b:2f:c1:22:bf:0a:17:68:8e:a9:0b:3a:58:75:
f3:d7:53:a8:80:b6:a7:54:56:2c:38:f9:bd:f8:6e:1b:88:30:
75:eb:4a:59:c8:2f:ae:69:76:fd:5f:98:b5:ec:8e:02:e7:fd:
d6:06:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:54:40 2026 by rpki-client