$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: NGT5uhkKqFfh5lgCIC4saZh8MXQW/z0IvDn4Cp8416o= Subject key identifier: 3A:EA:7A:82:38:7B:23:9C:45:13:97:D5:46:83:9F:6A:70:8A:75:D3 Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 2B2D9330C4FAEDCDBC74B25011BD195395E83721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: 0191 Signing time: Sat 18 Apr 2026 23:51:50 +0000 Manifest this update: Sat 18 Apr 2026 23:46:50 +0000 Manifest next update: Wed 22 Apr 2026 08:18:50 +0000 Files and hashes: 1: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: agt9rodkxUXhEotAxIdgvzDWzAWYpq95ExkLbwbI6IA=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: 6UY/R+UdRsBhwgNfBVY0MjOGp2DSj7k+K0sc21L+Is0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2d:93:30:c4:fa:ed:cd:bc:74:b2:50:11:bd:19:53:95:e8:37:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: Apr 18 23:46:50 2026 GMT Not After : Apr 22 08:18:50 2026 GMT Subject: CN=3AEA7A82387B239C451397D546839F6A708A75D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:88:84:78:f2:11:9e:e9:11:34:f6:e7:e6: e6:d4:a1:5d:f8:8f:ae:be:85:81:d9:a3:f5:04:e7: a7:22:16:65:32:0a:53:da:54:42:a3:18:68:30:81: 16:bd:c3:1c:13:1f:52:70:88:cb:65:be:f1:d3:4d: 81:b5:39:28:52:9a:61:de:2f:ff:dc:96:e1:e6:df: 9a:db:83:38:08:6c:d9:98:7b:24:2f:ff:16:d3:5e: 16:49:8a:76:d4:bb:c4:76:c3:57:74:8a:67:61:98: 4d:99:a0:2a:f4:c8:11:37:ff:6a:a7:f4:2b:be:d7: 0c:b2:c6:d5:05:01:6f:3c:9a:4e:eb:cd:13:e4:33: c1:31:f1:2f:97:3b:fb:94:88:9e:94:9e:79:bf:e6: 90:4c:4d:91:84:c0:94:4c:2c:4e:24:df:e1:e1:79: 5a:f6:73:54:fb:18:ca:4a:4d:46:0c:3f:58:1f:e3: ec:04:d5:28:68:7a:48:ec:e4:b0:e3:a3:5d:21:29: b5:5a:ee:39:8e:54:15:0f:a5:fc:79:b0:65:de:26: 9d:3a:ce:77:36:86:e7:27:29:de:b5:69:62:1c:3f: b8:27:99:51:2e:bd:66:ae:c1:6d:dd:34:04:f9:e0: ab:8c:cb:52:f0:21:08:7e:7f:0b:b6:c1:6f:c6:fc: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:7A:82:38:7B:23:9C:45:13:97:D5:46:83:9F:6A:70:8A:75:D3 X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a7:de:53:34:b1:a9:9a:23:14:ab:f7:5e:3e:09:41:da:63: a4:9e:5c:fc:c6:95:ef:1f:03:1b:e3:fa:95:cb:24:c0:6c:7c: ac:f9:0d:bf:26:b6:e4:04:76:4a:e5:3a:d4:cf:0c:a0:a8:ea: d3:19:cb:97:af:b8:2a:a7:c5:92:d2:a5:29:a8:ef:ff:37:4b: 21:32:36:87:98:4e:d5:a8:ef:b5:ff:f9:e3:8a:6e:56:77:27: 9f:db:ca:d4:41:9e:d3:e5:83:f5:f0:7c:d0:bf:a6:ad:e6:c9: 36:f9:09:3c:92:79:b4:87:e4:66:89:ec:50:62:f0:f9:7f:21: 8d:79:27:f5:67:58:0a:92:98:48:49:ac:6f:af:2c:6b:5b:54: 23:db:fd:be:78:64:3a:a7:9e:59:29:8d:6f:5d:2b:5e:f4:f1: 3f:c6:75:00:1b:ba:a3:fe:d2:01:8c:b5:24:12:5b:58:48:f7: 1e:a9:4f:90:40:cc:75:a6:45:88:1a:42:10:bf:af:49:4c:c3: bd:5e:6a:35:12:2f:d7:48:77:2b:82:e5:fb:ae:39:21:0a:83: 57:76:48:fb:2a:6d:c1:f8:b2:b0:2b:d1:48:ee:f7:87:d5:9a: 82:85:1b:f4:45:f4:f3:4f:ab:63:43:73:34:b3:66:45:00:24: 0c:bb:77:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKy2TMMT67c28dLJQEb0ZU5XoNyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNjA0MTgyMzQ2NTBaFw0yNjA0MjIwODE4NTBaMDMxMTAvBgNV BAMTKDNBRUE3QTgyMzg3QjIzOUM0NTEzOTdENTQ2ODM5RjZBNzA4QTc1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlYiEePIRnukRNPbn5ubUoV34 j66+hYHZo/UE56ciFmUyClPaVEKjGGgwgRa9wxwTH1JwiMtlvvHTTYG1OShSmmHe L//cluHm35rbgzgIbNmYeyQv/xbTXhZJinbUu8R2w1d0imdhmE2ZoCr0yBE3/2qn 9Cu+1wyyxtUFAW88mk7rzRPkM8Ex8S+XO/uUiJ6Unnm/5pBMTZGEwJRMLE4k3+Hh eVr2c1T7GMpKTUYMP1gf4+wE1Shoekjs5LDjo10hKbVa7jmOVBUPpfx5sGXeJp06 znc2hucnKd61aWIcP7gnmVEuvWauwW3dNAT54KuMy1LwIQh+fwu2wW/G/CL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOup6gjh7I5xFE5fVRoOfanCKddMwHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWn3lM0samaIxSr914+CUHaY6SeXPzGle8f Axvj+pXLJMBsfKz5Db8mtuQEdkrlOtTPDKCo6tMZy5evuCqnxZLSpSmo7/83SyEy NoeYTtWo77X/+eOKblZ3J5/bytRBntPlg/XwfNC/pq3myTb5CTySebSH5GaJ7FBi 8Pl/IY15J/VnWAqSmEhJrG+vLGtbVCPb/b54ZDqnnlkpjW9dK1708T/GdQAbuqP+ 0gGMtSQSW1hI9x6pT5BAzHWmRYgaQhC/r0lMw71eajUSL9dIdyuC5fuuOSEKg1d2 SPsqbcH4srAr0Uju94fVmoKFG/RF9PNPq2NDczSzZkUAJAy7d0E= -----END CERTIFICATE-----Generated at Sun Apr 19 12:59:24 2026 by rpki-client