$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: 8WIpxpYd2IfnnDnQgGH+bo1wbK6ZYmGVYz9puaDU7tI= Subject key identifier: F6:75:44:B6:F3:AA:A5:A2:2A:5A:96:15:D5:DF:06:58:92:67:FE:70 Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 734A423EDDF45A67AD7EA90EA37784BA6FB6B42C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:46:03 +0000 Manifest this update: Tue 22 Sep 2026 11:41:03 +0000 Manifest next update: Wed 23 Sep 2026 12:34:03 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: qfT/R7aQtdeVS24rUdAcYsbA5ih+CGFsmb/iUnf5z1c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4a:42:3e:dd:f4:5a:67:ad:7e:a9:0e:a3:77:84:ba:6f:b6:b4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: Sep 22 11:41:03 2026 GMT Not After : Sep 23 12:34:03 2026 GMT Subject: CN=F67544B6F3AAA5A22A5A9615D5DF06589267FE70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:c4:ff:ff:de:05:10:68:44:53:5c:89:71: 0b:96:7b:ee:b1:75:c5:06:a3:19:99:e6:c5:60:a3: eb:ad:6e:96:52:44:a8:38:d0:0e:e0:88:e5:6b:3b: 74:64:ef:28:87:bf:6c:47:a7:b6:38:f4:ee:3b:85: 3d:cf:9c:0a:48:2e:fb:07:64:49:7a:9d:de:03:92: 55:bc:fb:b4:5d:7e:62:2e:1c:f8:e1:64:4d:af:8a: c2:d1:ec:9d:86:b0:ea:e2:0f:c1:60:b4:64:b5:0c: db:8c:30:7b:65:b2:74:d8:14:d7:a6:c4:15:16:39: c6:b3:c5:c3:cb:21:4d:ef:a8:fe:93:43:f6:81:75: 81:b1:55:79:d7:6f:65:57:1a:57:64:19:44:59:14: d7:a3:29:77:df:ad:b3:8e:33:5d:16:bf:8c:ce:d7: dd:72:0e:03:91:78:74:94:bb:bf:bf:d8:67:8e:d7: 7f:a0:52:56:44:9d:df:59:75:f1:4d:86:67:9c:a2: fc:54:36:ad:75:ac:2f:1b:48:f5:0b:0e:50:e7:8e: ba:df:de:ac:e8:f4:73:62:fe:6f:2f:76:ba:c1:d3: b1:47:84:30:94:fe:d4:bd:5f:08:58:ff:25:5c:36: 8d:d6:19:e8:69:61:bf:0c:dc:fe:42:c1:cc:a5:09: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:44:B6:F3:AA:A5:A2:2A:5A:96:15:D5:DF:06:58:92:67:FE:70 X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:30:74:ad:63:18:5f:dd:b1:fb:17:4a:06:aa:9c:90:19:c4: c7:94:c9:fc:68:8b:4c:74:75:ba:ef:9d:a7:f2:a0:2f:f8:fc: b5:ee:e0:e9:20:07:bc:46:d8:e8:1e:3f:be:5a:a7:40:0c:2d: 34:59:58:09:e3:99:96:cc:53:c6:76:bf:02:b3:6b:26:7e:75: 38:dd:fb:96:7a:00:99:c3:bc:c0:a7:a4:4a:85:1f:59:d6:c6: 69:7b:cf:9c:38:2d:09:73:e0:7d:15:e1:47:e1:2e:b9:c1:5b: d1:33:2e:17:cd:bc:21:6f:98:8d:c9:d2:59:1f:66:f0:2b:ed: 4f:12:e3:09:ac:1a:18:ee:07:46:73:4f:62:14:3a:0d:d4:67: 12:08:81:24:7e:dd:5d:8d:b2:70:eb:29:47:4f:1b:d3:91:a7: b7:1c:09:c1:46:74:af:4f:98:cc:cc:57:8f:ab:c8:ff:9e:d3: 9f:eb:14:a5:54:78:6c:a2:49:7f:9b:21:32:1c:03:24:17:6f: e6:51:b5:8c:ab:90:f8:26:d5:8d:0b:3b:f7:fa:42:28:01:9d: bd:f6:87:7e:68:0e:d7:cf:86:70:f5:68:23:bb:91:ef:f0:32: 2c:d9:33:37:75:fa:d2:c0:68:93:00:3e:84:22:64:f0:f1:44: 13:b2:69:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0pCPt30WmetfqkOo3eEum+2tCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjA5MjIxMTQxMDNaFw0yNjA5MjMxMjM0MDNaMDMxMTAvBgNV BAMTKEY2NzU0NEI2RjNBQUE1QTIyQTVBOTYxNUQ1REYwNjU4OTI2N0ZFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ98T//94FEGhEU1yJcQuWe+6x dcUGoxmZ5sVgo+utbpZSRKg40A7giOVrO3Rk7yiHv2xHp7Y49O47hT3PnApILvsH ZEl6nd4DklW8+7RdfmIuHPjhZE2visLR7J2GsOriD8FgtGS1DNuMMHtlsnTYFNem xBUWOcazxcPLIU3vqP6TQ/aBdYGxVXnXb2VXGldkGURZFNejKXffrbOOM10Wv4zO 191yDgOReHSUu7+/2GeO13+gUlZEnd9ZdfFNhmecovxUNq11rC8bSPULDlDnjrrf 3qzo9HNi/m8vdrrB07FHhDCU/tS9XwhY/yVcNo3WGehpYb8M3P5CwcylCU6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nVEtvOqpaIqWpYV1d8GWJJn/nAwHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8wdK1jGF/dsfsXSgaqnJAZxMeUyfxoi0x0 dbrvnafyoC/4/LXu4OkgB7xG2OgeP75ap0AMLTRZWAnjmZbMU8Z2vwKzayZ+dTjd +5Z6AJnDvMCnpEqFH1nWxml7z5w4LQlz4H0V4UfhLrnBW9EzLhfNvCFvmI3J0lkf ZvAr7U8S4wmsGhjuB0ZzT2IUOg3UZxIIgSR+3V2NsnDrKUdPG9ORp7ccCcFGdK9P mMzMV4+ryP+e05/rFKVUeGyiSX+bITIcAyQXb+ZRtYyrkPgm1Y0LO/f6QigBnb32 h35oDtfPhnD1aCO7ke/wMizZMzd1+tLAaJMAPoQiZPDxRBOyaXo= -----END CERTIFICATE-----Generated at Wed Sep 23 00:56:22 2026 by rpki-client