$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft File: C53650EF45967BD821B00241E9B0355EE9A79B4B.mft (raw, json) Hash identifier: BUAuFkZaLV/56f0h+wkV+y6UC4BLUtxH02cpWclWxUo= Subject key identifier: 67:7B:BE:7B:E3:44:BA:03:20:5B:27:DD:30:94:B7:68:DA:46:86:BE Authority key identifier: C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B Certificate issuer: /CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Certificate serial: 245DC37DD618F557418DAC656BB54350EAE915 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 19:14:25 +0000 Manifest this update: Thu 24 Sep 2026 19:09:25 +0000 Manifest next update: Fri 25 Sep 2026 21:54:25 +0000 Files and hashes: 1: C53650EF45967BD821B00241E9B0355EE9A79B4B.crl (hash: b+vP0glTNOxsx78tVYBR0zgnHPBgDFm1mp+nEygA+/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:c3:7d:d6:18:f5:57:41:8d:ac:65:6b:b5:43:50:ea:e9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Validity Not Before: Sep 24 19:09:25 2026 GMT Not After : Sep 25 21:54:25 2026 GMT Subject: CN=677BBE7BE344BA03205B27DD3094B768DA4686BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:7f:35:eb:60:66:67:59:77:02:04:0b:0f: 1f:1b:f3:8f:bd:e0:b7:ee:a0:68:ef:f1:a5:ce:f9: 60:97:1c:4e:58:b4:e8:b6:d4:d0:7d:f2:19:ea:78: dc:e4:7a:e4:92:3c:b1:0c:a5:42:37:62:98:dc:fe: a7:7a:02:9e:bb:42:ef:69:a0:5b:f5:21:4d:63:c0: 97:e9:e3:68:d7:93:6f:8e:65:ce:67:15:ad:73:5d: 3a:61:4c:a5:d7:a1:4c:16:aa:c0:db:ff:bd:a5:44: 02:55:da:5b:52:23:bb:63:3a:c4:74:e4:90:ac:41: 08:fa:41:67:f7:a9:6e:dd:8a:a2:fc:ca:f4:ac:16: ed:ee:98:07:b4:94:67:c6:d4:97:dc:11:42:4a:76: 96:14:24:9e:8e:32:47:81:47:9d:19:76:2f:67:0c: 93:05:67:4a:1c:89:e0:eb:ca:17:8e:91:07:6f:6e: a3:8d:f8:60:82:9c:2d:c0:80:cc:9a:e1:77:d6:a1: 31:a9:ca:af:b3:de:2a:01:7c:05:82:fe:ab:3f:58: 4e:d6:ae:68:d5:5e:14:dc:f2:a8:13:b5:65:42:ab: 53:05:b0:ef:7c:cf:e2:f8:5c:24:b1:72:4c:ed:1a: 9e:d2:5d:77:7e:8c:2a:6b:cf:3a:cf:87:87:77:20: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:BE:7B:E3:44:BA:03:20:5B:27:DD:30:94:B7:68:DA:46:86:BE X509v3 Authority Key Identifier: keyid:C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:72:77:eb:5a:41:f5:e1:69:e2:cd:cf:d2:49:f7:b6:af:d7: 83:5b:9b:57:97:26:1d:7d:f2:c0:78:11:cc:19:21:ba:9f:77: 53:47:2d:f1:9b:a8:bb:d1:e7:f9:d6:a5:60:8b:9d:7c:18:c9: de:60:a0:21:43:46:63:07:6e:f1:f1:5a:e9:ee:a6:3c:16:e5: 41:66:b3:e4:42:a2:30:2e:08:fa:b9:44:56:ce:e0:4d:4e:d6: 60:97:9e:c0:9d:18:bd:cf:24:15:92:e8:98:6b:47:c2:b8:32: b1:9c:ef:cb:6c:76:d7:ea:4b:c6:45:e4:78:25:9d:aa:ee:31: c6:f2:2f:63:69:91:be:06:80:ce:44:a6:60:e9:37:d1:bf:4e: 79:28:e2:6e:99:96:ad:3d:dd:34:6c:f4:02:8f:53:bb:a1:49: be:dc:0c:63:fc:70:5d:91:9f:8f:4e:09:1d:4a:ab:2a:24:b5: 22:cd:3a:b4:ff:c4:0c:9a:1b:46:c7:86:26:5f:28:a7:6b:68: 06:7c:d7:99:35:53:6c:d1:ea:f4:78:4d:4b:b3:16:71:fa:8b: 5b:30:97:40:50:37:48:2f:ed:52:22:6b:88:b7:4b:89:b0:cd: 22:77:cc:4a:4b:8d:68:d6:d2:60:7a:4e:15:37:88:7a:8f:0e: eb:4b:07:d1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITJF3DfdYY9VdBjaxla7VDUOrpFTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDNTM2NTBFRjQ1OTY3QkQ4MjFCMDAyNDFFOUIwMzU1RUU5 QTc5QjRCMB4XDTI2MDkyNDE5MDkyNVoXDTI2MDkyNTIxNTQyNVowMzExMC8GA1UE AxMoNjc3QkJFN0JFMzQ0QkEwMzIwNUIyN0REMzA5NEI3NjhEQTQ2ODZCRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMIfzXrYGZnWXcCBAsPHxvzj73g t+6gaO/xpc75YJccTli06LbU0H3yGep43OR65JI8sQylQjdimNz+p3oCnrtC72mg W/UhTWPAl+njaNeTb45lzmcVrXNdOmFMpdehTBaqwNv/vaVEAlXaW1Iju2M6xHTk kKxBCPpBZ/epbt2KovzK9KwW7e6YB7SUZ8bUl9wRQkp2lhQkno4yR4FHnRl2L2cM kwVnShyJ4OvKF46RB29uo434YIKcLcCAzJrhd9ahManKr7PeKgF8BYL+qz9YTtau aNVeFNzyqBO1ZUKrUwWw73zP4vhcJLFyTO0antJdd36MKmvPOs+Hh3cgKP8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRne75740S6AyBbJ90wlLdo2kaGvjAfBgNVHSME GDAWgBTFNlDvRZZ72CGwAkHpsDVe6aebSzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC9DNTM2NTBFRjQ1 OTY3QkQ4MjFCMDAyNDFFOUIwMzU1RUU5QTc5QjRCLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0M1MzY1MEVGNDU5NjdCRDgyMUIwMDI0MUU5QjAzNTVFRTlBNzlC NEIuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9kOTE2NDExZi03OGNhLTQ5MTYtODkx OS0zN2MxZDk5ZWZiZDgvMC9DNTM2NTBFRjQ1OTY3QkQ4MjFCMDAyNDFFOUIwMzU1 RUU5QTc5QjRCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAiXJ361pB9eFp4s3P0kn3tq/Xg1ubV5cmHX3y wHgRzBkhup93U0ct8Zuou9Hn+dalYIudfBjJ3mCgIUNGYwdu8fFa6e6mPBblQWaz 5EKiMC4I+rlEVs7gTU7WYJeewJ0Yvc8kFZLomGtHwrgysZzvy2x21+pLxkXkeCWd qu4xxvIvY2mRvgaAzkSmYOk30b9OeSjibpmWrT3dNGz0Ao9Tu6FJvtwMY/xwXZGf j04JHUqrKiS1Is06tP/EDJobRseGJl8op2toBnzXmTVTbNHq9HhNS7MWcfqLWzCX QFA3SC/tUiJriLdLibDNInfMSkuNaNbSYHpOFTeIeo8O60sH0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 15:40:28 2026 by rpki-client