$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: bS/lHySqR8T0yluvzQd0HX53m5hBq7QPP8skEobjLP0= Subject key identifier: 86:00:F6:8F:60:C1:2D:C6:BA:82:1E:95:44:51:76:7E:35:A4:F6:CD Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 094733D614BC11225256BF7CD7C24FC383D69934 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 0192 Signing time: Sun 01 Mar 2026 17:30:44 +0000 Manifest this update: Sun 01 Mar 2026 17:25:44 +0000 Manifest next update: Wed 04 Mar 2026 23:45:44 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: akmEKgd9mFeBcPK/vf2FKXJwjWKJGeDEUVEqj/NYih8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:47:33:d6:14:bc:11:22:52:56:bf:7c:d7:c2:4f:c3:83:d6:99:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Mar 1 17:25:44 2026 GMT Not After : Mar 4 23:45:44 2026 GMT Subject: CN=8600F68F60C12DC6BA821E954451767E35A4F6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:ab:16:fa:d2:3c:93:e7:f0:15:61:8b:84: 5e:8a:20:85:d8:7e:9c:a0:8b:25:05:fb:e4:fa:34: 2f:d3:15:13:d8:07:25:3f:ef:b6:ae:83:f6:fb:98: e7:dc:40:cd:94:95:15:ca:8d:2d:66:1a:16:c3:c7: e9:a3:e9:2f:f8:c7:e6:89:fb:f1:11:d3:df:91:2f: 25:f3:9b:ce:4a:2f:26:63:02:78:ad:b1:00:a1:55: ea:05:f1:c6:b1:84:00:32:49:6d:e8:51:82:58:b9: 5e:81:9b:a5:e4:80:7e:bd:06:17:28:04:60:c6:51: 3d:2c:34:08:5f:a1:94:d9:0e:23:52:61:a9:73:17: 9c:4d:18:22:29:53:c7:c2:ad:9b:74:fc:10:87:a6: 48:69:f8:d6:17:61:aa:de:4d:fd:24:c6:91:f6:a9: eb:be:a5:29:6b:cb:03:f3:6b:6f:65:cc:49:8f:23: 90:e4:a9:00:f5:80:ca:ee:63:5e:af:6e:c0:1f:a8: 12:f5:a4:35:77:a0:15:ba:db:2b:fb:39:6e:a1:65: e0:93:c3:26:b8:b2:95:40:5a:01:40:9a:2f:30:d4: b7:73:6e:4e:d8:8f:f7:a5:38:09:9d:03:d7:2b:bf: d4:32:c7:53:30:a7:de:e8:7b:ff:41:08:35:2b:bc: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:F6:8F:60:C1:2D:C6:BA:82:1E:95:44:51:76:7E:35:A4:F6:CD X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d2:6f:7b:a9:ec:a0:37:98:b7:a7:d0:ed:08:bb:d6:35:17: 3c:e9:79:dc:bb:01:c2:b3:74:46:a9:25:f6:e2:72:23:9f:a9: 05:60:67:9e:15:d0:47:c5:84:72:50:d1:d4:b5:ab:b8:10:b6: 24:4f:f7:7a:76:3f:78:c1:51:14:9c:9c:96:f7:f6:34:e7:8e: c8:19:a2:38:dd:3d:67:b4:07:37:fa:8f:10:a8:6e:12:ce:34: 91:98:8c:c8:69:b6:48:16:a2:96:e0:6f:65:c4:f2:54:84:d3: 1c:19:9c:bf:16:89:ff:9e:8a:89:12:53:25:7b:02:46:94:b9: 18:ee:84:c9:89:80:2e:16:2e:66:ae:8d:1e:2b:f5:a5:25:e5: d9:e6:73:8c:2f:f0:ae:2d:b3:1f:5a:bb:ee:0d:7d:a6:40:29: 9f:10:6d:03:22:02:be:4c:7e:4b:90:6c:0e:63:20:30:94:46: 52:e9:d1:1d:56:6f:55:b7:8f:a7:3a:1c:dd:5b:c0:fb:ad:89: d8:8a:3f:6b:8c:b7:3f:4c:50:d0:ee:dd:96:31:04:ab:07:76: b5:db:47:b9:08:91:5a:f7:be:95:0f:c9:f0:78:1d:74:f3:d5: b6:5e:4c:96:8d:51:d3:83:a1:98:d4:f0:4e:d1:45:d0:f3:ad: b8:30:a5:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUcz1hS8ESJSVr9818JPw4PWmTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNjAzMDExNzI1NDRaFw0yNjAzMDQyMzQ1NDRaMDMxMTAvBgNV BAMTKDg2MDBGNjhGNjBDMTJEQzZCQTgyMUU5NTQ0NTE3NjdFMzVBNEY2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0asW+tI8k+fwFWGLhF6KIIXY fpygiyUF++T6NC/TFRPYByU/77aug/b7mOfcQM2UlRXKjS1mGhbDx+mj6S/4x+aJ +/ER09+RLyXzm85KLyZjAnitsQChVeoF8caxhAAySW3oUYJYuV6Bm6XkgH69Bhco BGDGUT0sNAhfoZTZDiNSYalzF5xNGCIpU8fCrZt0/BCHpkhp+NYXYareTf0kxpH2 qeu+pSlrywPza29lzEmPI5DkqQD1gMruY16vbsAfqBL1pDV3oBW62yv7OW6hZeCT wya4spVAWgFAmi8w1Ldzbk7Yj/elOAmdA9crv9Qyx1Mwp97oe/9BCDUrvJZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgD2j2DBLca6gh6VRFF2fjWk9s0wHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTSb3up7KA3mLen0O0Iu9Y1Fzzpedy7AcKz dEapJfbiciOfqQVgZ54V0EfFhHJQ0dS1q7gQtiRP93p2P3jBURScnJb39jTnjsgZ ojjdPWe0Bzf6jxCobhLONJGYjMhptkgWopbgb2XE8lSE0xwZnL8Wif+eiokSUyV7 AkaUuRjuhMmJgC4WLmaujR4r9aUl5dnmc4wv8K4tsx9au+4NfaZAKZ8QbQMiAr5M fkuQbA5jIDCURlLp0R1Wb1W3j6c6HN1bwPutidiKP2uMtz9MUNDu3ZYxBKsHdrXb R7kIkVr3vpUPyfB4HXTz1bZeTJaNUdODoZjU8E7RRdDzrbgwpVc= -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:20 2026 by rpki-client