$ rpki-client -vvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json) Hash identifier: cnL9PEHbt0QTE/v9aky0LNMMug+kf/ZhKTwgwgYFC5Y= Subject key identifier: 4F:4D:71:9A:FE:24:7B:98:62:39:DD:CD:50:8C:B2:F6:50:75:9B:EA Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Certificate serial: 57BC4B1D6723D8954C7B278F8CAF90FC6DF8A569 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:55:26 +0000 Manifest this update: Tue 12 May 2026 15:50:26 +0000 Manifest next update: Wed 13 May 2026 19:26:26 +0000 Files and hashes: 1: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: kpFt0kHUz72VZUyOlLYynx38xEWvBzIzoJIZGzC5Ue8=) 2: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=) 3: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bc:4b:1d:67:23:d8:95:4c:7b:27:8f:8c:af:90:fc:6d:f8:a5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Validity Not Before: May 12 15:50:26 2026 GMT Not After : May 13 19:26:26 2026 GMT Subject: CN=4F4D719AFE247B986239DDCD508CB2F650759BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:c2:8b:ed:4a:52:22:ef:1d:e9:68:bf:44: d1:d2:bb:3e:15:39:fc:fa:fb:4b:2d:27:83:db:49: 4a:68:27:a5:4f:71:b2:66:d6:df:42:55:b6:c8:67: e2:9d:13:99:13:54:39:a1:77:b1:c7:57:12:79:63: 15:af:ce:64:3c:e0:8e:7e:a5:11:b3:0e:11:73:70: 42:49:71:bf:46:43:92:69:6b:3d:7e:d4:c9:01:2e: 30:df:29:be:ea:55:83:1c:f9:a0:70:58:06:1b:90: 7a:aa:49:6b:13:40:62:91:3a:aa:16:4e:cb:37:d3: f8:d2:e4:22:ef:c9:bd:a8:0a:67:48:c2:42:a2:2e: 94:bf:06:82:c5:49:a9:93:85:1c:f4:7f:76:6a:a7: c3:1f:75:06:f7:8c:65:df:28:1c:20:8c:50:59:30: 43:1b:76:32:cd:a2:3a:57:5c:41:0d:7f:74:09:b3: 71:c4:4c:49:4e:4d:b3:a1:33:00:e4:e2:25:0d:09: 90:a0:7f:f7:b3:b0:f8:38:64:25:52:5c:0d:6d:c3: df:00:84:bd:bd:09:e1:32:32:88:ef:76:fa:50:83: f0:ba:16:5f:0c:d9:e3:4a:da:58:ae:d8:62:ea:61: e5:16:5b:c0:41:3e:87:cc:7f:7c:71:d0:34:d2:23: 99:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:71:9A:FE:24:7B:98:62:39:DD:CD:50:8C:B2:F6:50:75:9B:EA X509v3 Authority Key Identifier: keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e6:17:c6:92:78:a2:20:0a:4b:8f:6e:e7:dc:04:94:56:bc: b9:b8:ff:3d:df:28:36:35:df:d3:70:5b:24:66:95:c2:b3:57: 31:1c:fc:0b:84:da:c9:a6:1d:c7:73:22:f9:24:4b:56:61:c0: 45:3a:0d:1f:98:9b:48:16:25:68:9e:01:32:fe:3b:b8:b6:84: c0:28:fd:4e:f6:ca:41:c8:ff:35:53:d2:ef:46:4b:86:ec:2d: 4e:2b:42:68:7d:0b:0e:46:3a:2d:a1:3d:12:fb:3a:c1:76:72: 77:d8:5c:4a:bc:a6:84:56:30:7e:73:a4:a8:ab:f4:81:15:e9: 8d:54:4f:9d:6e:9e:20:8f:fb:6c:d0:a2:24:d2:ce:ed:e4:83: 54:da:a6:6c:0f:bf:49:02:39:b9:05:e1:e6:33:09:e2:bc:90: fb:f2:4f:2a:4e:47:6a:6d:d3:40:36:17:26:26:4f:35:9c:36: 85:0f:36:42:d9:8e:21:64:b9:0d:8a:cd:a8:86:79:3f:ca:54: 96:bf:77:b2:bc:f5:f7:dd:44:0d:a9:a9:2d:54:e6:1c:7c:d3: 70:b6:e5:63:2e:36:e0:77:9d:24:9e:c3:78:67:22:37:85:21: 64:2b:b4:09:d0:e5:f9:5a:94:14:51:c3:6a:e0:d9:30:59:54: ec:7f:2c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7xLHWcj2JVMeyePjK+Q/G34pWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAy OEVGNjRGNTAeFw0yNjA1MTIxNTUwMjZaFw0yNjA1MTMxOTI2MjZaMDMxMTAvBgNV BAMTKDRGNEQ3MTlBRkUyNDdCOTg2MjM5RERDRDUwOENCMkY2NTA3NTlCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSMKL7UpSIu8d6Wi/RNHSuz4V Ofz6+0stJ4PbSUpoJ6VPcbJm1t9CVbbIZ+KdE5kTVDmhd7HHVxJ5YxWvzmQ84I5+ pRGzDhFzcEJJcb9GQ5Jpaz1+1MkBLjDfKb7qVYMc+aBwWAYbkHqqSWsTQGKROqoW Tss30/jS5CLvyb2oCmdIwkKiLpS/BoLFSamThRz0f3Zqp8MfdQb3jGXfKBwgjFBZ MEMbdjLNojpXXEENf3QJs3HETElOTbOhMwDk4iUNCZCgf/ezsPg4ZCVSXA1tw98A hL29CeEyMojvdvpQg/C6Fl8M2eNK2liu2GLqYeUWW8BBPofMf3xx0DTSI5khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT01xmv4ke5hiOd3NUIyy9lB1m+owHwYDVR0j BBgwFoAUU77oschF4EN9obo80YZ2MCjvZPUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk5MGRhNDktOTg2Mi00MWRlLTgzM2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFD ODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAyOEVGNjRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0JFRThCMUM4NDVFMDQzN0RBMUJBM0NEMTg2NzYzMDI4RUY2 NEY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2 MzAyOEVGNjRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHmF8aSeKIgCkuPbufcBJRWvLm4/z3fKDY1 39NwWyRmlcKzVzEc/AuE2smmHcdzIvkkS1ZhwEU6DR+Ym0gWJWieATL+O7i2hMAo /U72ykHI/zVT0u9GS4bsLU4rQmh9Cw5GOi2hPRL7OsF2cnfYXEq8poRWMH5zpKir 9IEV6Y1UT51uniCP+2zQoiTSzu3kg1TapmwPv0kCObkF4eYzCeK8kPvyTypOR2pt 00A2FyYmTzWcNoUPNkLZjiFkuQ2KzaiGeT/KVJa/d7K89ffdRA2pqS1U5hx803C2 5WMuNuB3nSSew3hnIjeFIWQrtAnQ5flalBRRw2rg2TBZVOx/LOY= -----END CERTIFICATE-----Generated at Wed May 13 02:50:54 2026 by rpki-client