$ rpki-client -vvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json) Hash identifier: oRme14rQaU7pQ8iHTsWJuvYv0QvToTmt/nsLsV3sM2I= Subject key identifier: 4F:0C:88:34:5D:66:C6:51:42:C4:D2:F9:4B:82:A3:36:D3:2D:8C:B7 Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 43562378EB7782F03D7A6211F103231ACB13AB0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:18:58 +0000 Manifest this update: Tue 16 Jun 2026 16:13:58 +0000 Manifest next update: Wed 17 Jun 2026 18:45:58 +0000 Files and hashes: 1: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: n7c7gXAqP+vsQpyUJ+mdxFceIo4PVogoQJdfrHP7Uxo=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:56:23:78:eb:77:82:f0:3d:7a:62:11:f1:03:23:1a:cb:13:ab:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: Jun 16 16:13:58 2026 GMT Not After : Jun 17 18:45:58 2026 GMT Subject: CN=4F0C88345D66C65142C4D2F94B82A336D32D8CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:e6:f2:90:38:bf:5a:57:a6:2b:c6:ad:b9: 53:4e:94:9b:fe:30:bc:26:4d:54:e3:fd:55:d2:a5: e9:5b:3f:5a:7a:9f:23:30:bc:40:cb:53:3e:1b:ff: 6b:0a:5d:02:93:9a:d1:af:ff:d6:8f:d7:bb:15:97: 19:c3:a1:5b:40:5b:c8:99:c3:bf:df:63:1d:43:2e: b8:0b:dd:29:e8:48:01:dd:a3:08:0d:2a:bb:13:f0: b7:a3:0a:4e:3f:54:47:3f:bb:86:6e:23:4e:58:92: 53:14:ca:ab:ab:66:4d:75:1f:f7:d5:df:db:d3:d7: c4:6c:07:5e:29:73:70:d0:a3:18:61:a3:55:32:95: 32:93:5a:35:f8:37:aa:28:0a:ab:70:5d:c3:69:d9: 66:96:b2:53:6e:b9:b1:5d:7e:41:99:26:a3:0f:01: bc:cf:ef:85:ab:05:80:dd:3b:59:91:2b:06:d5:a9: 3c:d5:c8:bd:21:0c:11:89:d7:65:57:e0:99:03:b9: 1c:ca:b0:63:95:30:9c:96:11:38:dc:af:a6:45:37: 0d:dc:be:58:05:7c:87:52:7d:1d:28:e0:dd:77:4c: 37:d4:39:8d:29:d0:51:1e:79:65:6a:14:a7:19:d7: 83:5e:52:83:ed:85:9e:d7:c5:d7:58:3f:f9:74:09: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0C:88:34:5D:66:C6:51:42:C4:D2:F9:4B:82:A3:36:D3:2D:8C:B7 X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0b:fe:90:9e:98:ac:1b:25:f0:23:2d:06:af:d2:27:e2:3a: 81:92:36:cc:7a:aa:c2:f5:ce:90:9e:d9:88:e5:9c:87:d0:fd: 39:3d:4c:f3:02:aa:62:08:13:8e:3b:99:2c:d9:36:f9:ca:ea: 0f:23:47:a2:4b:1d:c8:d1:fc:c4:49:d7:de:0b:ed:da:99:32: 06:4c:78:92:f6:38:7d:23:d4:97:15:ed:7a:57:df:3b:84:5c: 26:07:4f:45:92:c7:3d:1f:eb:2d:45:76:4e:f3:32:2c:b1:b0: 04:d0:0f:11:1b:a9:17:85:81:9e:8a:9c:7f:03:81:9b:46:34: 49:c9:45:34:57:d3:54:4c:64:1a:ea:19:b8:0a:38:c0:21:2f: fc:e0:50:4c:33:08:fd:63:d5:0a:47:f0:cf:59:68:98:6b:b3: 4e:ff:f9:f7:1b:26:a9:ae:3b:5a:96:9d:cf:59:9f:fc:af:93: 46:49:ea:c6:ba:93:c6:f5:c3:d7:7f:b9:53:61:9f:8c:e9:8a: f4:57:21:31:53:8c:70:4d:c8:2d:23:84:c8:89:7d:32:a4:57: 37:65:54:3d:15:09:9c:0b:5d:56:97:bc:5c:e6:34:e9:7b:ed: ef:68:1b:1e:4c:f2:f1:87:37:6d:67:06:5f:d1:51:6e:f4:a3: 84:3b:83:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1YjeOt3gvA9emIR8QMjGssTqw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjA2MTYxNjEzNThaFw0yNjA2MTcxODQ1NThaMDMxMTAvBgNV BAMTKDRGMEM4ODM0NUQ2NkM2NTE0MkM0RDJGOTRCODJBMzM2RDMyRDhDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO7+bykDi/WlemK8atuVNOlJv+ MLwmTVTj/VXSpelbP1p6nyMwvEDLUz4b/2sKXQKTmtGv/9aP17sVlxnDoVtAW8iZ w7/fYx1DLrgL3SnoSAHdowgNKrsT8LejCk4/VEc/u4ZuI05YklMUyqurZk11H/fV 39vT18RsB14pc3DQoxhho1UylTKTWjX4N6ooCqtwXcNp2WaWslNuubFdfkGZJqMP AbzP74WrBYDdO1mRKwbVqTzVyL0hDBGJ12VX4JkDuRzKsGOVMJyWETjcr6ZFNw3c vlgFfIdSfR0o4N13TDfUOY0p0FEeeWVqFKcZ14NeUoPthZ7XxddYP/l0CUj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwyINF1mxlFCxNL5S4KjNtMtjLcwHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0 NEMzNEI1RjFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgL/pCemKwbJfAjLQav0ifiOoGSNsx6qsL1 zpCe2YjlnIfQ/Tk9TPMCqmIIE447mSzZNvnK6g8jR6JLHcjR/MRJ194L7dqZMgZM eJL2OH0j1JcV7XpX3zuEXCYHT0WSxz0f6y1Fdk7zMiyxsATQDxEbqReFgZ6KnH8D gZtGNEnJRTRX01RMZBrqGbgKOMAhL/zgUEwzCP1j1QpH8M9ZaJhrs07/+fcbJqmu O1qWnc9Zn/yvk0ZJ6sa6k8b1w9d/uVNhn4zpivRXITFTjHBNyC0jhMiJfTKkVzdl VD0VCZwLXVaXvFzmNOl77e9oGx5M8vGHN21nBl/RUW70o4Q7g1g= -----END CERTIFICATE-----Generated at Wed Jun 17 12:52:15 2026 by rpki-client