$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json) Hash identifier: qCnLI86Sp8Y0HyaRLxua8lxVE8xHBO3ztLKoepN4GSM= Subject key identifier: C5:89:A2:08:9B:3C:7E:E4:0A:B7:02:8F:AE:CE:9B:1A:F2:73:1F:61 Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Certificate serial: 6874172B992396257D8F756919C7BC8E62CFAD8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft Manifest number: CF Signing time: Sun 04 Oct 2026 00:10:10 +0000 Manifest this update: Sun 04 Oct 2026 00:05:10 +0000 Manifest next update: Mon 05 Oct 2026 01:43:10 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=) 2: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: 6jsIB1h1iScBuVVcEgeIjoi81Kue3vUq6uOnijXkpm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 01:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:74:17:2b:99:23:96:25:7d:8f:75:69:19:c7:bc:8e:62:cf:ad:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Validity Not Before: Oct 4 00:05:10 2026 GMT Not After : Oct 5 01:43:10 2026 GMT Subject: CN=C589A2089B3C7EE40AB7028FAECE9B1AF2731F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:35:9d:00:c3:94:c5:39:42:27:ed:2e:19: 86:6f:46:6d:e9:77:1e:f8:c6:6f:60:bc:e8:11:81: 18:16:ca:e3:9e:6a:a4:b4:27:d9:7d:0a:7d:da:60: 6e:b0:69:f3:c6:14:4e:98:55:b4:c0:a1:05:d2:a0: a2:95:0f:b7:ae:26:36:b8:a1:be:f4:bf:ff:58:3c: 13:6d:dc:b8:75:d0:42:5b:3b:c8:5c:18:2e:dc:36: 5c:33:dd:c5:7c:37:87:01:91:62:c6:78:6c:ec:0d: 7b:ab:82:ba:a0:49:c6:19:9b:9e:57:55:ce:2a:83: e4:b4:31:e5:6f:52:85:26:0f:06:fb:3e:30:9e:9a: 93:73:78:52:83:18:05:ea:38:b2:70:3c:71:3d:83: 19:13:d9:95:08:d6:3f:17:55:e5:08:38:70:8d:b2: d2:fe:f6:ef:b4:c1:bc:d6:70:66:f9:ee:af:04:74: 31:ac:d2:85:19:2f:f2:4b:e8:73:8e:38:ef:6d:71: 94:05:23:4e:93:e3:ad:a4:ac:29:de:fc:73:7e:22: ab:c8:04:80:66:24:fe:52:58:a8:f0:4c:92:5d:5d: e0:72:db:ce:95:9a:ca:43:b5:7b:b9:b3:62:0d:65: cd:c3:c1:b9:74:7c:80:ca:96:1d:97:eb:eb:08:39: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:89:A2:08:9B:3C:7E:E4:0A:B7:02:8F:AE:CE:9B:1A:F2:73:1F:61 X509v3 Authority Key Identifier: keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cc:22:19:51:12:ed:50:ce:e7:99:3a:85:ee:36:9f:3a:08: 3f:d3:7e:0a:ed:f0:8c:72:21:9e:d5:0a:55:18:6c:fd:79:69: 23:a8:19:aa:dc:f7:7e:0a:28:f7:a7:2b:6f:bb:c6:ee:36:be: 0e:71:e1:5c:7e:9b:a9:ba:93:68:2a:9a:50:03:b9:fa:df:ca: 61:57:0f:4c:98:bb:59:6a:f0:b8:11:8f:15:8f:57:17:8a:cd: 5e:5b:b7:51:be:68:16:7b:57:f3:41:bd:98:ed:cf:2a:a5:65: bf:3f:4e:3a:3d:ae:80:4f:42:40:5f:fd:7b:f4:b3:3d:03:04: 73:2a:02:f0:98:96:c5:1c:d3:a3:50:14:e8:66:67:3f:40:6b: f8:78:b9:fc:ca:03:76:76:c7:9e:5e:98:be:12:bb:5b:3e:f8: 5e:dc:1a:8b:23:23:5e:84:91:32:29:2f:0e:17:8e:9d:4c:4f: e6:83:aa:ac:25:27:e8:bb:38:bc:fe:d9:c4:07:36:64:0b:2a: 6f:8f:31:5f:3c:50:31:79:83:e0:98:8c:3e:22:44:fb:8d:84: 18:8c:d0:bc:1e:1a:ad:51:c4:49:09:ec:87:a8:96:d7:94:81: 56:62:75:38:dd:23:38:64:0c:7b:f8:30:91:3b:4c:b5:61:9e: ca:31:47:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHQXK5kjliV9j3VpGce8jmLPrY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx OTMzNURBMTAeFw0yNjEwMDQwMDA1MTBaFw0yNjEwMDUwMTQzMTBaMDMxMTAvBgNV BAMTKEM1ODlBMjA4OUIzQzdFRTQwQUI3MDI4RkFFQ0U5QjFBRjI3MzFGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLODWdAMOUxTlCJ+0uGYZvRm3p dx74xm9gvOgRgRgWyuOeaqS0J9l9Cn3aYG6wafPGFE6YVbTAoQXSoKKVD7euJja4 ob70v/9YPBNt3Lh10EJbO8hcGC7cNlwz3cV8N4cBkWLGeGzsDXurgrqgScYZm55X Vc4qg+S0MeVvUoUmDwb7PjCempNzeFKDGAXqOLJwPHE9gxkT2ZUI1j8XVeUIOHCN stL+9u+0wbzWcGb57q8EdDGs0oUZL/JL6HOOOO9tcZQFI06T462krCne/HN+IqvI BIBmJP5SWKjwTJJdXeBy286VmspDtXu5s2INZc3Dwbl0fIDKlh2X6+sIOWDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYmiCJs8fuQKtwKPrs6bGvJzH2EwHwYDVR0j BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1 QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1 REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLMIhlREu1QzueZOoXuNp86CD/Tfgrt8Ixy IZ7VClUYbP15aSOoGarc934KKPenK2+7xu42vg5x4Vx+m6m6k2gqmlADufrfymFX D0yYu1lq8LgRjxWPVxeKzV5bt1G+aBZ7V/NBvZjtzyqlZb8/Tjo9roBPQkBf/Xv0 sz0DBHMqAvCYlsUc06NQFOhmZz9Aa/h4ufzKA3Z2x55emL4Su1s++F7cGosjI16E kTIpLw4Xjp1MT+aDqqwlJ+i7OLz+2cQHNmQLKm+PMV88UDF5g+CYjD4iRPuNhBiM 0LweGq1RxEkJ7IeolteUgVZidTjdIzhkDHv4MJE7TLVhnsoxR/0= -----END CERTIFICATE-----Generated at Sun Oct 4 15:25:21 2026 by rpki-client