$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json) Hash identifier: eFopCmXnpW3W4zDnSlq3tTlXMkOikNy892w3VTKslxE= Subject key identifier: 66:09:58:E5:C9:C6:F8:99:F0:F8:2D:FF:8A:94:3C:A9:B0:58:5B:BA Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 1899EB574B9E4BC908BFE3D828A576C6D1818B78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 13:12:39 +0000 Manifest this update: Tue 22 Sep 2026 13:07:39 +0000 Manifest next update: Wed 23 Sep 2026 16:24:39 +0000 Files and hashes: 1: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: iT1ypjEEzJ75TRCJ7Uxf91Z7EPXoVCO19on4uyq7O6A=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 16:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:99:eb:57:4b:9e:4b:c9:08:bf:e3:d8:28:a5:76:c6:d1:81:8b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: Sep 22 13:07:39 2026 GMT Not After : Sep 23 16:24:39 2026 GMT Subject: CN=660958E5C9C6F899F0F82DFF8A943CA9B0585BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:84:2e:e9:70:e2:46:64:6f:5f:4a:5f:72: 5f:b0:20:74:b2:91:a6:67:fa:48:3e:05:18:4d:9e: 9e:74:85:21:af:6b:b4:86:d4:cf:c7:ac:d1:cf:6a: 7f:8c:fa:24:18:05:b0:d1:e2:5a:12:43:53:47:a6: cc:c5:9e:f5:91:30:cc:81:66:43:ff:67:d0:cd:cd: 65:15:d0:66:4b:c7:de:d2:68:e1:66:63:5e:de:e1: 19:01:d4:24:f2:0b:84:f0:23:f3:8b:ff:cf:16:54: b6:2c:f6:03:a2:ed:52:d6:2a:fa:5b:86:97:91:8f: 27:8f:53:db:56:b4:bb:93:df:df:54:53:56:e7:91: 01:a5:d0:98:10:c8:a2:14:a7:15:fe:7c:7c:e9:56: 99:31:28:b6:c8:d1:c2:e9:b0:cc:31:0b:c7:3b:bc: a3:4e:67:14:15:2c:b4:8e:5c:29:60:7e:fd:df:d3: c4:f7:bf:81:58:b2:64:86:6c:6d:9a:80:aa:15:f9: f1:9c:3e:95:1c:4e:92:13:93:dc:d7:db:52:36:e0: ba:4c:53:9e:79:1f:04:a0:86:d0:6e:32:48:c5:c0: a0:1f:50:ab:cc:2d:5d:a2:30:cd:b0:e7:ef:b8:3b: 4f:7b:fb:47:bc:5c:b8:07:80:12:f1:76:ea:a2:7f: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:09:58:E5:C9:C6:F8:99:F0:F8:2D:FF:8A:94:3C:A9:B0:58:5B:BA X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:09:3d:74:85:00:8b:3e:bf:23:e5:f4:b5:64:aa:97:8f: 89:ea:b8:e3:b9:ad:ba:41:4f:51:b0:ca:d5:bd:5d:a4:30:be: ca:40:63:36:c7:b8:6b:2f:b1:58:5b:25:27:fe:f4:a3:fe:fe: 11:6a:6e:ce:41:40:4f:b8:0f:25:a9:26:9e:25:39:e3:1a:af: 22:80:12:36:09:65:5d:c8:f7:b6:79:22:b0:9f:19:57:97:70: 21:95:7f:8d:87:00:13:11:a6:8f:40:02:ef:ed:2d:c4:7b:47: d3:57:db:69:dc:7b:75:c5:91:f6:b1:67:b7:56:e6:72:b9:f8: 9b:0a:8c:f1:ce:95:37:4d:72:5d:3c:d9:b5:de:9e:5e:06:08: f0:f1:37:9b:e0:7e:9f:1e:e3:c7:c1:e6:d0:e1:90:96:8b:99: aa:30:7a:2c:e3:e1:85:5f:cf:f3:54:42:14:3b:df:87:cf:98: 1d:d7:ee:48:3f:ed:2c:80:9e:82:0f:73:0d:11:b8:a6:82:48: 3f:6b:22:3c:41:47:7a:b9:40:cd:ea:68:54:c4:53:06:1c:b3: c2:46:7a:5b:e3:28:2e:e2:68:2f:67:89:f1:f6:8f:df:c2:94: c9:69:65:f9:4c:45:d1:7e:31:36:9c:70:5d:f8:86:d3:c7:9b: 00:ac:8c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJnrV0ueS8kIv+PYKKV2xtGBi3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjA5MjIxMzA3MzlaFw0yNjA5MjMxNjI0MzlaMDMxMTAvBgNV BAMTKDY2MDk1OEU1QzlDNkY4OTlGMEY4MkRGRjhBOTQzQ0E5QjA1ODVCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jYQu6XDiRmRvX0pfcl+wIHSy kaZn+kg+BRhNnp50hSGva7SG1M/HrNHPan+M+iQYBbDR4loSQ1NHpszFnvWRMMyB ZkP/Z9DNzWUV0GZLx97SaOFmY17e4RkB1CTyC4TwI/OL/88WVLYs9gOi7VLWKvpb hpeRjyePU9tWtLuT399UU1bnkQGl0JgQyKIUpxX+fHzpVpkxKLbI0cLpsMwxC8c7 vKNOZxQVLLSOXClgfv3f08T3v4FYsmSGbG2agKoV+fGcPpUcTpITk9zX21I24LpM U555HwSghtBuMkjFwKAfUKvMLV2iMM2w5++4O097+0e8XLgHgBLxduqif1AdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZglY5cnG+Jnw+C3/ipQ8qbBYW7owHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0 NEMzNEI1RjFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMrCT10hQCLPr8j5fS1ZKqXj4nquOO5rbpB T1GwytW9XaQwvspAYzbHuGsvsVhbJSf+9KP+/hFqbs5BQE+4DyWpJp4lOeMaryKA EjYJZV3I97Z5IrCfGVeXcCGVf42HABMRpo9AAu/tLcR7R9NX22nce3XFkfaxZ7dW 5nK5+JsKjPHOlTdNcl082bXenl4GCPDxN5vgfp8e48fB5tDhkJaLmaoweizj4YVf z/NUQhQ734fPmB3X7kg/7SyAnoIPcw0RuKaCSD9rIjxBR3q5QM3qaFTEUwYcs8JG elvjKC7iaC9nifH2j9/ClMlpZflMRdF+MTaccF34htPHmwCsjHs= -----END CERTIFICATE-----Generated at Tue Sep 22 17:08:46 2026 by rpki-client