$ rpki-client -vvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json) Hash identifier: 3EEk5FAoktK+Bt9RFPeOQIPiBrVcBPQ1FzPFH41CdHg= Subject key identifier: 3A:67:11:F3:89:40:BA:8A:6C:87:9F:7F:A7:6B:18:26:0B:05:2D:9B Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Certificate serial: 143805743AEC860F09DA100A5D04ABBD8CD3B298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:01:42 +0000 Manifest this update: Fri 24 Jul 2026 01:56:42 +0000 Manifest next update: Sat 25 Jul 2026 05:30:42 +0000 Files and hashes: 1: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=) 2: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: m5ppFWGChHvymTCVfQGoqar3iGHTBubV6kOIN0YKek4=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:38:05:74:3a:ec:86:0f:09:da:10:0a:5d:04:ab:bd:8c:d3:b2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Validity Not Before: Jul 24 01:56:42 2026 GMT Not After : Jul 25 05:30:42 2026 GMT Subject: CN=3A6711F38940BA8A6C879F7FA76B18260B052D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:3d:d3:46:12:f5:38:d9:9c:3e:2c:2f:f6: b2:d7:f6:7f:54:cc:27:90:da:56:ee:67:78:39:9f: 47:32:98:e0:16:f2:43:fa:10:85:f0:27:41:34:2a: 1f:d6:55:7d:30:cf:1a:b0:48:7f:1d:7d:83:de:7a: 2d:b1:a6:9b:49:c4:c2:fe:8c:ff:57:5c:7b:e9:ce: 95:6d:f4:b1:e5:2a:47:72:4b:57:45:71:5a:37:89: 37:dc:b3:e0:79:aa:c0:f5:76:86:9a:a2:86:e2:11: 64:a5:28:d6:dd:50:98:5f:f1:a6:e0:2c:c8:41:5d: 6b:22:64:1d:38:ad:ca:38:2f:ac:02:d3:71:d3:16: d3:11:53:50:69:1d:e5:cc:9b:d7:7a:70:47:38:64: 3e:32:89:a5:c7:73:11:09:32:d7:cf:2b:c0:e0:6d: 42:8f:0b:37:ef:49:40:0e:ee:98:d1:0e:bc:dd:b9: f7:e7:d4:a3:73:9e:eb:83:11:0b:84:fa:99:11:48: be:b9:44:49:f9:5a:ab:3a:dd:aa:00:3d:70:3f:01: 23:9e:0d:9b:71:2a:31:0e:97:ea:a4:97:25:ec:41: 06:53:47:f2:23:18:9e:e0:c7:38:c1:c5:1e:9c:4f: ca:30:91:8e:da:d9:17:d3:0c:24:ef:e2:e0:56:b5: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:11:F3:89:40:BA:8A:6C:87:9F:7F:A7:6B:18:26:0B:05:2D:9B X509v3 Authority Key Identifier: keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:80:5c:ce:33:be:f6:55:52:3c:c7:df:f2:51:53:76:ed:b5: ec:b3:a2:d6:a5:70:52:22:bc:5c:a6:e9:91:55:54:c8:c9:76: 2e:b7:62:d6:97:f8:8b:c8:14:67:73:10:e3:7d:24:43:7c:77: ee:a7:d3:30:35:dd:33:c2:4a:7f:86:0e:26:0a:9b:99:9c:0f: 43:37:d1:47:0e:24:fc:4d:57:56:78:10:3d:0a:c7:d5:cd:2a: 3e:9d:29:be:0f:f1:02:f3:c3:03:bf:89:51:11:2f:f0:de:d9: 54:69:e8:fc:5b:ef:c1:49:1b:82:2e:b3:77:2e:be:58:51:25: 64:fe:ac:36:2c:bc:99:29:8f:56:1a:1c:6d:77:77:19:c7:35: c9:2a:44:f4:4b:c5:4f:13:32:7e:2b:d3:d6:82:36:42:c2:20: 60:9f:63:4a:3e:87:7d:c0:b8:2a:9b:16:02:4b:ed:ef:c0:f2: 1d:51:30:a0:b6:8a:5b:be:1e:18:36:21:81:33:68:22:f3:f2: 7f:56:f2:49:1d:51:ce:4e:10:dc:2f:14:16:3a:9f:fd:02:90: fa:ae:f6:d5:47:ea:35:41:b2:37:cd:4a:31:5a:bf:5b:6b:ca: df:ff:0b:36:13:81:21:28:2e:02:1d:16:f0:44:d2:84:da:91: 31:e4:3c:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDgFdDrshg8J2hAKXQSrvYzTspgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAy OEVGNjRGNTAeFw0yNjA3MjQwMTU2NDJaFw0yNjA3MjUwNTMwNDJaMDMxMTAvBgNV BAMTKDNBNjcxMUYzODk0MEJBOEE2Qzg3OUY3RkE3NkIxODI2MEIwNTJEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWz3TRhL1ONmcPiwv9rLX9n9U zCeQ2lbuZ3g5n0cymOAW8kP6EIXwJ0E0Kh/WVX0wzxqwSH8dfYPeei2xpptJxML+ jP9XXHvpzpVt9LHlKkdyS1dFcVo3iTfcs+B5qsD1doaaoobiEWSlKNbdUJhf8abg LMhBXWsiZB04rco4L6wC03HTFtMRU1BpHeXMm9d6cEc4ZD4yiaXHcxEJMtfPK8Dg bUKPCzfvSUAO7pjRDrzduffn1KNznuuDEQuE+pkRSL65REn5Wqs63aoAPXA/ASOe DZtxKjEOl+qklyXsQQZTR/IjGJ7gxzjBxR6cT8owkY7a2RfTDCTv4uBWtaLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOmcR84lAuopsh59/p2sYJgsFLZswHwYDVR0j BBgwFoAUU77oschF4EN9obo80YZ2MCjvZPUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk5MGRhNDktOTg2Mi00MWRlLTgzM2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFD ODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAyOEVGNjRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0JFRThCMUM4NDVFMDQzN0RBMUJBM0NEMTg2NzYzMDI4RUY2 NEY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2 MzAyOEVGNjRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmAXM4zvvZVUjzH3/JRU3btteyzotalcFIi vFym6ZFVVMjJdi63YtaX+IvIFGdzEON9JEN8d+6n0zA13TPCSn+GDiYKm5mcD0M3 0UcOJPxNV1Z4ED0Kx9XNKj6dKb4P8QLzwwO/iVERL/De2VRp6Pxb78FJG4Ius3cu vlhRJWT+rDYsvJkpj1YaHG13dxnHNckqRPRLxU8TMn4r09aCNkLCIGCfY0o+h33A uCqbFgJL7e/A8h1RMKC2ilu+Hhg2IYEzaCLz8n9W8kkdUc5OENwvFBY6n/0CkPqu 9tVH6jVBsjfNSjFav1tryt//CzYTgSEoLgIdFvBE0oTakTHkPMk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:26 2026 by rpki-client