$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json) Hash identifier: HD/XbJR4+OFsn0fGHbRXM3XRnFKPZ+c+LJcxdL3tIBA= Subject key identifier: 41:16:E9:09:58:27:69:D3:EF:32:C7:30:B2:EF:25:F0:E8:B3:61:6B Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 72A4BF655275383C94B60AC88B38AA84B297EFAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:44:48 +0000 Manifest this update: Wed 17 Jun 2026 05:39:48 +0000 Manifest next update: Thu 18 Jun 2026 06:28:48 +0000 Files and hashes: 1: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=) 2: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: rDGh5Nivz4bUIOdSv8CgTajopUB1Ly4fWuMvjGvzXoY=) 3: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=) 4: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=) 5: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=) 6: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=) 7: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a4:bf:65:52:75:38:3c:94:b6:0a:c8:8b:38:aa:84:b2:97:ef:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: Jun 17 05:39:48 2026 GMT Not After : Jun 18 06:28:48 2026 GMT Subject: CN=4116E909582769D3EF32C730B2EF25F0E8B3616B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:bc:07:0c:e3:d8:9c:90:d1:2e:ee:dd:86: 8d:98:45:5e:90:e3:01:28:44:36:61:a1:26:8c:d9: 07:9d:84:5a:15:41:6b:9c:31:41:d7:ca:d3:4f:a0: 05:ae:c5:29:4f:72:34:42:0b:78:b5:5e:c8:b8:c3: 00:c5:41:f6:88:b8:e2:62:10:c4:05:bb:0a:a3:aa: 9c:7b:f3:18:c0:8b:7c:cd:08:ac:47:cd:2e:99:1a: 57:ff:8e:ac:b3:fe:17:9a:ab:f2:e6:3b:bf:b1:42: c9:eb:94:8d:7c:4e:31:bc:73:9b:36:db:56:49:ca: cd:68:1e:90:ae:6a:0a:03:c1:82:50:ff:4f:8d:f1: a3:ae:33:ee:59:23:3f:28:aa:a2:5b:87:b9:00:70: 2e:e7:2f:4c:47:20:a7:df:37:a8:3d:9e:50:65:6c: 9e:ac:ee:3a:c1:79:61:bd:ff:ec:2d:94:f6:cb:5e: 75:e1:38:57:eb:85:dd:be:23:51:f9:57:96:81:ae: 27:6c:73:49:9f:37:fe:a7:dd:af:15:41:d9:31:be: 78:59:8a:bb:87:5c:e0:3a:81:35:b6:16:a3:18:69: 7f:18:23:a4:8c:ee:48:2c:17:21:90:9d:b9:05:67: f7:b9:39:f9:93:c3:6d:44:76:cc:f6:04:80:e3:b5: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:16:E9:09:58:27:69:D3:EF:32:C7:30:B2:EF:25:F0:E8:B3:61:6B X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:de:79:55:4e:a3:24:f7:c4:76:6a:47:de:9f:cd:68:5a:66: 72:f9:7c:8b:ce:8f:fb:1e:e0:e6:ec:42:2e:80:94:01:53:25: 3d:d4:0f:04:1a:b8:67:42:ee:24:a4:5b:d5:b4:88:a4:6b:2a: 86:37:3c:0e:77:1f:fe:08:69:74:3c:4a:3c:f7:fa:41:7d:38: 57:c0:c5:fb:a4:5e:a6:f5:5b:7e:41:89:b9:32:66:78:a6:0f: 66:ff:45:3f:44:bb:92:16:91:e6:4b:54:fb:27:05:23:54:17: 25:07:73:84:86:79:4a:bf:16:43:97:74:c9:0c:17:44:97:43: c7:08:8f:21:1e:3e:a0:3a:8a:46:f6:3a:8d:32:3d:83:d9:4c: d9:0f:85:06:b6:fe:8c:2a:23:1a:51:93:14:07:32:67:c4:b4: 48:38:65:2a:f6:ae:4d:e4:1a:c9:3e:0f:b2:13:ae:35:51:40: 9d:2c:12:58:2a:a5:84:0b:a1:95:72:5d:33:d7:ba:56:31:ca: 71:e8:ce:3b:0e:d5:9e:31:e8:ae:e0:db:e9:c7:04:fa:6e:63: 99:49:01:bf:87:9d:8f:13:99:ba:0d:d9:30:cb:a8:53:fc:93: 30:15:91:72:16:11:68:f2:69:51:eb:39:3b:fd:c7:66:a0:90: 31:37:9e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqS/ZVJ1ODyUtgrIiziqhLKX768wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjA2MTcwNTM5NDhaFw0yNjA2MTgwNjI4NDhaMDMxMTAvBgNV BAMTKDQxMTZFOTA5NTgyNzY5RDNFRjMyQzczMEIyRUYyNUYwRThCMzYxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjr7wHDOPYnJDRLu7dho2YRV6Q 4wEoRDZhoSaM2QedhFoVQWucMUHXytNPoAWuxSlPcjRCC3i1Xsi4wwDFQfaIuOJi EMQFuwqjqpx78xjAi3zNCKxHzS6ZGlf/jqyz/heaq/LmO7+xQsnrlI18TjG8c5s2 21ZJys1oHpCuagoDwYJQ/0+N8aOuM+5ZIz8oqqJbh7kAcC7nL0xHIKffN6g9nlBl bJ6s7jrBeWG9/+wtlPbLXnXhOFfrhd2+I1H5V5aBridsc0mfN/6n3a8VQdkxvnhZ iruHXOA6gTW2FqMYaX8YI6SM7kgsFyGQnbkFZ/e5OfmTw21Edsz2BIDjtTL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQRbpCVgnadPvMscwsu8l8OizYWswHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2 OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1 ODczM0FGQkZBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHeeVVOoyT3xHZqR96fzWhaZnL5fIvOj/se 4ObsQi6AlAFTJT3UDwQauGdC7iSkW9W0iKRrKoY3PA53H/4IaXQ8Sjz3+kF9OFfA xfukXqb1W35BibkyZnimD2b/RT9Eu5IWkeZLVPsnBSNUFyUHc4SGeUq/FkOXdMkM F0SXQ8cIjyEePqA6ikb2Oo0yPYPZTNkPhQa2/owqIxpRkxQHMmfEtEg4ZSr2rk3k Gsk+D7ITrjVRQJ0sElgqpYQLoZVyXTPXulYxynHozjsO1Z4x6K7g2+nHBPpuY5lJ Ab+HnY8TmboN2TDLqFP8kzAVkXIWEWjyaVHrOTv9x2agkDE3nlw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:24 2026 by rpki-client