$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json) Hash identifier: c4VEbcM4UTYl3EAMNQglzXuFQ+lZPxev6IbTqz+v+5M= Subject key identifier: F0:DE:AE:2F:41:A3:A5:04:99:1D:77:02:3D:E3:E8:B2:E5:51:AF:16 Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Certificate serial: 0A89545D2955F56C7B1A44BD878AFB48B54525EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:41:11 +0000 Manifest this update: Mon 21 Sep 2026 07:36:11 +0000 Manifest next update: Tue 22 Sep 2026 11:23:11 +0000 Files and hashes: 1: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=) 2: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: 6ynsnh2Klsl9TQ0APeQVcnTrxRMN/ecw8HPTAEkVe38=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:89:54:5d:29:55:f5:6c:7b:1a:44:bd:87:8a:fb:48:b5:45:25:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Validity Not Before: Sep 21 07:36:11 2026 GMT Not After : Sep 22 11:23:11 2026 GMT Subject: CN=F0DEAE2F41A3A504991D77023DE3E8B2E551AF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5e:30:4b:3c:83:90:1a:75:32:a7:3c:e8:c2: 9a:70:0d:5f:6b:bb:42:a8:17:3a:45:dd:73:e0:e9: 1f:1a:67:ed:9f:88:84:5e:38:5e:e1:25:2e:e5:0b: e0:38:57:4e:a5:eb:2e:8f:1e:1e:6e:0e:43:f2:d8: 87:34:7e:fe:0b:95:5b:de:27:b0:94:ba:30:d7:c0: 53:8b:f7:4c:9d:3d:e4:95:4e:8b:75:c1:57:ad:29: a8:5b:51:a0:0d:6b:79:90:fc:4d:37:48:39:af:98: 1c:23:f4:3e:96:b1:7a:74:fa:29:fb:c4:fe:db:17: f4:56:48:c4:73:99:be:91:41:7b:98:ef:bd:b0:37: 45:b8:2b:16:53:b4:88:1e:26:45:53:63:6c:f3:f9: 9b:7f:9c:aa:8c:58:13:24:43:98:a0:ee:42:80:25: 68:ff:62:67:e6:4f:1b:7e:75:ee:fe:05:20:71:e7: 41:56:a4:00:26:cc:bc:e1:44:e0:b7:ae:c9:32:5d: d9:29:a1:9a:63:fa:a1:b2:f8:03:f7:8b:23:01:04: e8:06:21:c9:fa:34:7a:c3:f5:af:1c:98:a3:56:09: a8:6a:c7:a8:0d:12:30:b5:cb:c2:b2:2f:6b:14:62: b6:f0:23:04:00:3c:e9:fd:ea:a6:d7:a6:ed:29:d0: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DE:AE:2F:41:A3:A5:04:99:1D:77:02:3D:E3:E8:B2:E5:51:AF:16 X509v3 Authority Key Identifier: keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:c7:bf:57:33:b1:89:4e:93:25:12:d3:b3:6a:91:31:ed: 26:9d:bf:40:1c:96:84:a7:98:f0:9d:43:06:3c:90:21:cb:26: 29:79:93:45:e5:16:27:ad:33:14:2e:e9:4d:56:98:de:0a:4a: bf:dc:e4:f0:31:f5:c5:7c:bf:cc:81:79:50:18:cf:71:04:27: 6d:56:74:79:6a:6a:d7:4a:a1:4e:95:73:b3:4a:63:b6:83:59: 44:1c:ca:89:36:77:f8:d1:91:1c:d7:57:0a:53:7a:8f:90:62: af:23:6d:f6:e1:c3:df:e4:43:38:9c:46:09:a1:45:86:53:48: d7:56:96:18:fb:31:b8:30:b5:1f:10:fc:09:fd:c2:3a:a8:51: 14:ba:a2:f1:1f:00:ab:f2:22:70:ca:32:b5:3a:a8:ac:a7:f9: 81:2d:33:7e:96:b8:27:bc:28:71:34:7c:87:6e:fd:e2:a6:89: b8:17:01:82:a8:23:cb:ca:9c:65:9f:a8:36:73:a1:29:04:41: 91:79:24:97:af:b2:76:75:43:7c:46:af:52:e0:3a:89:e9:4f: 12:ea:b9:4f:8c:42:15:1e:8a:4e:fa:df:37:47:b1:e2:3e:cb: a7:f6:0a:9e:28:77:89:9e:38:ca:2a:8a:d0:97:1d:fb:c6:55: ac:57:20:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUColUXSlV9Wx7GkS9h4r7SLVFJeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAy OEVGNjRGNTAeFw0yNjA5MjEwNzM2MTFaFw0yNjA5MjIxMTIzMTFaMDMxMTAvBgNV BAMTKEYwREVBRTJGNDFBM0E1MDQ5OTFENzcwMjNERTNFOEIyRTU1MUFGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XjBLPIOQGnUypzzowppwDV9r u0KoFzpF3XPg6R8aZ+2fiIReOF7hJS7lC+A4V06l6y6PHh5uDkPy2Ic0fv4LlVve J7CUujDXwFOL90ydPeSVTot1wVetKahbUaANa3mQ/E03SDmvmBwj9D6WsXp0+in7 xP7bF/RWSMRzmb6RQXuY772wN0W4KxZTtIgeJkVTY2zz+Zt/nKqMWBMkQ5ig7kKA JWj/YmfmTxt+de7+BSBx50FWpAAmzLzhROC3rskyXdkpoZpj+qGy+AP3iyMBBOgG Icn6NHrD9a8cmKNWCahqx6gNEjC1y8KyL2sUYrbwIwQAPOn96qbXpu0p0O5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8N6uL0GjpQSZHXcCPePosuVRrxYwHwYDVR0j BBgwFoAUU77oschF4EN9obo80YZ2MCjvZPUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk5MGRhNDktOTg2Mi00MWRlLTgzM2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFD ODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAyOEVGNjRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0JFRThCMUM4NDVFMDQzN0RBMUJBM0NEMTg2NzYzMDI4RUY2 NEY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2 MzAyOEVGNjRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkqx79XM7GJTpMlEtOzapEx7Sadv0AcloSn mPCdQwY8kCHLJil5k0XlFietMxQu6U1WmN4KSr/c5PAx9cV8v8yBeVAYz3EEJ21W dHlqatdKoU6Vc7NKY7aDWUQcyok2d/jRkRzXVwpTeo+QYq8jbfbhw9/kQzicRgmh RYZTSNdWlhj7MbgwtR8Q/An9wjqoURS6ovEfAKvyInDKMrU6qKyn+YEtM36WuCe8 KHE0fIdu/eKmibgXAYKoI8vKnGWfqDZzoSkEQZF5JJevsnZ1Q3xGr1LgOonpTxLq uU+MQhUeik763zdHseI+y6f2Cp4od4meOMoqitCXHfvGVaxXIB0= -----END CERTIFICATE-----Generated at Mon Sep 21 13:34:29 2026 by rpki-client