$ rpki-client -vvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json) Hash identifier: XBX6baq7P6cjsQUBgNLGvfj5XM4c/yh7iDYSYuR1IR0= Subject key identifier: EA:42:ED:76:38:66:B5:EE:3A:D3:A0:D3:50:EB:A0:26:2C:76:41:41 Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Certificate serial: 75590BB979FF9AF06296C6452E62BF661A299FEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:14:37 +0000 Manifest this update: Fri 24 Jul 2026 04:09:37 +0000 Manifest next update: Sat 25 Jul 2026 07:02:37 +0000 Files and hashes: 1: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: 2JniLaKlU4iWLlY7m9KvqrWxh4Gz098k2GG+Spza/H8=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:0b:b9:79:ff:9a:f0:62:96:c6:45:2e:62:bf:66:1a:29:9f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Validity Not Before: Jul 24 04:09:37 2026 GMT Not After : Jul 25 07:02:37 2026 GMT Subject: CN=EA42ED763866B5EE3AD3A0D350EBA0262C764141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:a7:20:f3:f9:d8:ba:4b:3a:11:43:c6:17: 11:ff:52:0c:63:10:0b:aa:b3:35:aa:15:c1:2f:83: 0d:e0:6c:ce:6e:5e:ac:8b:58:82:93:09:89:fc:ef: d8:15:33:6e:fa:bc:95:58:bb:27:60:48:6a:01:dc: fa:d0:24:ed:60:0f:d4:06:5c:a4:53:ce:d7:b1:13: 9a:3f:44:c9:38:e2:68:f1:ce:06:13:41:e7:4a:57: 50:47:55:c4:78:50:3f:56:1f:9c:ed:f2:6d:8a:f6: bf:bb:bc:7c:fe:b9:f4:49:55:4e:ef:dc:ab:35:67: e4:68:b9:7b:da:e9:4d:7c:1d:f1:66:a5:c4:6b:d3: b0:e4:13:51:2b:16:45:4e:cf:da:d8:b9:ce:99:b1: a9:9b:78:64:58:66:2e:8b:1c:df:a5:3f:6b:33:eb: c2:98:a2:08:f0:e7:ec:9a:5f:f6:96:bc:3e:c3:30: c9:5f:96:ee:85:34:47:43:62:60:9b:e9:c1:3c:37: e7:a5:1e:9f:15:9b:f6:5d:85:f5:0e:44:6c:94:04: ad:76:58:2f:9d:4f:26:35:72:d5:63:c0:71:52:90: 41:1c:e2:82:ea:06:7b:bc:5d:c0:27:21:f0:c8:e8: 45:ff:1d:fe:e0:b3:97:d5:9e:9b:23:ab:c9:cd:c2: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:ED:76:38:66:B5:EE:3A:D3:A0:D3:50:EB:A0:26:2C:76:41:41 X509v3 Authority Key Identifier: keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:72:bf:02:a8:f4:a8:54:5b:3b:fa:3d:21:b5:c3:29:d0:0b: 94:07:e1:8b:a7:1e:f2:21:a2:42:59:fb:18:0c:1a:16:ff:1a: 6b:c9:97:77:f8:10:a2:a0:a6:21:e2:c8:fd:ae:06:5d:fa:14: 9d:d8:d7:5b:b1:e4:b6:84:0b:01:bc:fa:fb:32:db:6b:b1:d4: 64:49:2e:4c:c1:75:fd:c7:27:8f:b6:05:34:69:60:7f:9d:2a: b8:03:a4:b8:d1:3f:69:79:8c:bc:d8:92:f3:0f:98:52:fc:20: fc:00:ad:19:68:2c:05:b7:37:bd:29:b9:37:0a:1b:3d:74:ce: 6b:4b:aa:c8:7b:af:f0:6b:82:d3:4e:6d:4e:b0:d0:3f:69:5e: 26:a6:b4:12:3b:a6:e1:84:26:2e:94:80:61:45:75:2d:6b:d1: 33:67:5e:5c:c5:50:46:a9:cd:43:e8:72:ec:f8:17:bf:d8:0f: 77:a2:df:63:31:13:54:4a:e1:9a:8b:f9:98:c0:d9:36:55:b7: d3:9b:89:9b:a4:c8:98:af:88:7d:86:7c:2d:6a:ef:4c:f7:cc: a5:ee:58:56:6e:b1:d6:4c:19:e3:06:63:2f:3b:be:c5:d2:40: b7:2a:6c:7d:24:f6:5b:30:5b:ff:70:e4:fb:3f:38:6b:02:8c: a6:c2:1e:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVkLuXn/mvBilsZFLmK/Zhopn+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx OTMzNURBMTAeFw0yNjA3MjQwNDA5MzdaFw0yNjA3MjUwNzAyMzdaMDMxMTAvBgNV BAMTKEVBNDJFRDc2Mzg2NkI1RUUzQUQzQTBEMzUwRUJBMDI2MkM3NjQxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTq6cg8/nYuks6EUPGFxH/Ugxj EAuqszWqFcEvgw3gbM5uXqyLWIKTCYn879gVM276vJVYuydgSGoB3PrQJO1gD9QG XKRTztexE5o/RMk44mjxzgYTQedKV1BHVcR4UD9WH5zt8m2K9r+7vHz+ufRJVU7v 3Ks1Z+RouXva6U18HfFmpcRr07DkE1ErFkVOz9rYuc6ZsambeGRYZi6LHN+lP2sz 68KYogjw5+yaX/aWvD7DMMlflu6FNEdDYmCb6cE8N+elHp8Vm/ZdhfUORGyUBK12 WC+dTyY1ctVjwHFSkEEc4oLqBnu8XcAnIfDI6EX/Hf7gs5fVnpsjq8nNwkFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kLtdjhmte4606DTUOugJix2QUEwHwYDVR0j BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1 QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1 REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRyvwKo9KhUWzv6PSG1wynQC5QH4YunHvIh okJZ+xgMGhb/GmvJl3f4EKKgpiHiyP2uBl36FJ3Y11ux5LaECwG8+vsy22ux1GRJ LkzBdf3HJ4+2BTRpYH+dKrgDpLjRP2l5jLzYkvMPmFL8IPwArRloLAW3N70puTcK Gz10zmtLqsh7r/BrgtNObU6w0D9pXiamtBI7puGEJi6UgGFFdS1r0TNnXlzFUEap zUPocuz4F7/YD3ei32MxE1RK4ZqL+ZjA2TZVt9ObiZukyJiviH2GfC1q70z3zKXu WFZusdZMGeMGYy87vsXSQLcqbH0k9lswW/9w5Ps/OGsCjKbCHl0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:56:50 2026 by rpki-client