$ rpki-client -vvvf rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft File: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft (raw, json) Hash identifier: JGPGJDYixOuPsFcvhTHfd0PA9NsTxt09DjAnx2VqVOY= Subject key identifier: FB:62:2B:BA:3A:AB:7D:7E:16:E9:4F:D2:D2:6C:C9:FD:68:96:B5:C9 Authority key identifier: C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9 Certificate issuer: /CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9 Certificate serial: 111D9DF49B68CB36C905B3CFBDA551BCA754F92D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:47:15 +0000 Manifest this update: Mon 21 Sep 2026 12:42:15 +0000 Manifest next update: Tue 22 Sep 2026 15:23:15 +0000 Files and hashes: 1: C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl (hash: u/8DVShZH21TI7/jSUK221tBqpIifvBivlOMNHXTvAM=) 2: 3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (hash: DSqrZf2t+vOo0dpO9Z2Ts4Q/3PwkQ/7IIkFcOCMaS2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:9d:f4:9b:68:cb:36:c9:05:b3:cf:bd:a5:51:bc:a7:54:f9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53EE3AFE0B265EA314DBBAB7C015C805000A8E9 Validity Not Before: Sep 21 12:42:15 2026 GMT Not After : Sep 22 15:23:15 2026 GMT Subject: CN=FB622BBA3AAB7D7E16E94FD2D26CC9FD6896B5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:01:b2:47:f7:7e:1d:7c:f3:c7:52:3b:16: c3:2a:70:bd:ff:bc:09:aa:a4:b6:14:41:df:ca:b6: 1d:67:11:49:4a:a0:a1:86:61:1d:05:09:3f:f3:02: b2:fe:67:4b:3b:c1:b9:11:4b:1f:56:5d:c1:aa:65: 21:2a:fd:38:8b:ed:d7:c9:4a:9b:3d:90:44:db:63: 2f:01:0e:95:d1:ad:eb:ad:05:d7:89:77:fa:b2:2e: 9f:af:3c:db:2a:ba:9b:e9:fb:33:57:2a:87:2f:b0: 03:f2:d5:ce:39:9f:51:31:dc:c2:f3:22:6e:9a:14: c7:2f:e2:89:aa:c5:c6:08:d4:e3:5d:b3:37:f9:92: 19:ce:74:bc:33:e8:36:8b:a1:51:bc:7e:97:8d:ed: 58:08:d3:59:c2:d7:ec:c9:e2:67:7c:47:d3:f8:5e: 47:7c:cc:1a:f6:73:38:f0:e4:99:37:6f:bb:99:1c: 08:86:c0:b2:28:5f:f1:30:97:21:72:d6:ca:b8:31: 5b:93:7e:f7:c4:82:52:d8:07:eb:28:f9:04:fa:ad: 0b:6c:31:d8:97:7f:18:d3:51:96:9e:e1:96:86:f5: e0:3f:26:fc:fb:63:38:9f:7d:fa:7f:bb:a2:e9:05: cb:63:02:31:9c:b0:5a:90:4d:10:9f:0b:1b:49:d5: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:62:2B:BA:3A:AB:7D:7E:16:E9:4F:D2:D2:6C:C9:FD:68:96:B5:C9 X509v3 Authority Key Identifier: keyid:C5:3E:E3:AF:E0:B2:65:EA:31:4D:BB:AB:7C:01:5C:80:50:00:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/C53EE3AFE0B265EA314DBBAB7C015C805000A8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8b:13:a8:2e:e3:f3:ad:77:4a:68:aa:06:97:48:db:58:af: 61:23:9d:02:1c:0a:a4:23:1f:5b:d2:30:af:83:b0:4c:6b:95: 8e:c3:4c:9e:fc:cf:eb:30:21:62:7c:ec:72:30:1d:75:b7:40: d8:d0:2e:56:d6:fa:12:67:10:99:83:fc:ed:a9:37:e3:79:32: a6:04:58:4a:ef:14:f8:d4:b8:e7:7d:9f:2c:e7:f3:4d:60:fa: 8d:c3:07:bd:48:63:46:7d:4f:47:7c:40:b2:e7:20:79:b8:9a: 5c:63:2f:97:32:8e:e6:cc:89:33:95:87:a5:cb:9c:5a:c6:b9: 5b:1b:74:c5:e3:99:1b:c2:16:4d:3b:f7:2d:88:8b:58:4b:7e: 17:2f:14:13:e8:38:01:5e:94:99:7a:3b:f7:64:47:25:8c:e3: 1a:43:52:0f:a5:cb:a1:0e:60:a6:fd:88:b9:df:4e:4d:c2:dc: eb:05:d8:b7:d3:57:0b:05:1e:5a:5c:c6:02:0b:e2:40:04:67: f0:65:40:7c:8b:d4:03:d5:cb:e4:64:09:ad:0d:82:fe:b6:79: 17:f3:d3:55:91:88:61:78:e1:97:95:db:ef:ce:3f:b6:8b:d2: 4e:41:4e:c2:88:2b:f5:19:c8:07:90:16:8a:ea:5a:07:a6:ba: 54:f2:74:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER2d9JtoyzbJBbPPvaVRvKdU+S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVDODA1 MDAwQThFOTAeFw0yNjA5MjExMjQyMTVaFw0yNjA5MjIxNTIzMTVaMDMxMTAvBgNV BAMTKEZCNjIyQkJBM0FBQjdEN0UxNkU5NEZEMkQyNkNDOUZENjg5NkI1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXyQGyR/d+HXzzx1I7FsMqcL3/ vAmqpLYUQd/Kth1nEUlKoKGGYR0FCT/zArL+Z0s7wbkRSx9WXcGqZSEq/TiL7dfJ Sps9kETbYy8BDpXRreutBdeJd/qyLp+vPNsqupvp+zNXKocvsAPy1c45n1Ex3MLz Im6aFMcv4omqxcYI1ONdszf5khnOdLwz6DaLoVG8fpeN7VgI01nC1+zJ4md8R9P4 Xkd8zBr2czjw5Jk3b7uZHAiGwLIoX/EwlyFy1sq4MVuTfvfEglLYB+so+QT6rQts MdiXfxjTUZae4ZaG9eA/Jvz7Yzifffp/u6LpBctjAjGcsFqQTRCfCxtJ1VB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2IrujqrfX4W6U/S0mzJ/WiWtckwHwYDVR0j BBgwFoAUxT7jr+CyZeoxTburfAFcgFAAqOkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYzMDU0ZjYtOGQwOS00ZDEyLWIxOWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZF MEIyNjVFQTMxNERCQkFCN0MwMTVDODA1MDAwQThFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTNFRTNBRkUwQjI2NUVBMzE0REJCQUI3QzAxNUM4MDUwMDBB OEU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYzMDU0ZjYtOGQwOS00ZDEyLWIx OWItNTAwZDZkOTIxZmMxLzAvQzUzRUUzQUZFMEIyNjVFQTMxNERCQkFCN0MwMTVD ODA1MDAwQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWLE6gu4/Otd0poqgaXSNtYr2EjnQIcCqQj H1vSMK+DsExrlY7DTJ78z+swIWJ87HIwHXW3QNjQLlbW+hJnEJmD/O2pN+N5MqYE WErvFPjUuOd9nyzn801g+o3DB71IY0Z9T0d8QLLnIHm4mlxjL5cyjubMiTOVh6XL nFrGuVsbdMXjmRvCFk079y2Ii1hLfhcvFBPoOAFelJl6O/dkRyWM4xpDUg+ly6EO YKb9iLnfTk3C3OsF2LfTVwsFHlpcxgIL4kAEZ/BlQHyL1APVy+RkCa0Ngv62eRfz 01WRiGF44ZeV2+/OP7aL0k5BTsKIK/UZyAeQForqWgemulTydMM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:34:02 2026 by rpki-client