$ rpki-client -vvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json) Hash identifier: dwBnSK1MefDGU4uRK2dC4dpfXJlYkwsUTGIkoQwMTnQ= Subject key identifier: B3:0A:4C:2A:B5:7F:2B:E1:55:40:8E:B7:BC:2D:93:0F:5F:BD:E0:74 Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Certificate serial: 6CA1DEE73287C235C66B831D7B1558E3E38CBB11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 18:04:01 +0000 Manifest this update: Tue 28 Jul 2026 17:59:01 +0000 Manifest next update: Wed 29 Jul 2026 21:14:01 +0000 Files and hashes: 1: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: 0HOLCS17DJf8k98GggyvD5tlNE9qYpUWgjsOB9rir20=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a1:de:e7:32:87:c2:35:c6:6b:83:1d:7b:15:58:e3:e3:8c:bb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Validity Not Before: Jul 28 17:59:01 2026 GMT Not After : Jul 29 21:14:01 2026 GMT Subject: CN=B30A4C2AB57F2BE155408EB7BC2D930F5FBDE074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:18:97:82:3c:7d:cd:8d:19:fd:de:ad:43:9b: 87:88:16:62:9e:e3:01:ab:09:7a:2b:0b:03:1f:39: aa:4a:52:10:ed:6d:43:34:f9:23:95:65:df:0c:3e: 3c:08:d9:d2:38:cf:2c:fc:1d:70:7d:37:12:74:6b: 31:ff:92:48:df:a6:4b:99:00:a0:a5:bc:8e:36:06: 51:99:a6:86:76:79:0c:3e:c5:a4:c0:32:16:23:0c: eb:7a:40:3a:a5:c5:de:fa:0b:c9:54:39:f6:52:e0: a9:41:4b:a0:6e:22:30:31:7f:e6:3b:53:10:74:9e: 92:0d:92:38:d3:39:9e:f3:2d:90:dc:41:df:dc:d0: 92:1c:dc:8c:a8:5e:fe:60:16:fb:b6:63:30:84:14: 70:8f:75:a0:7d:92:51:18:d7:68:d9:55:98:f7:79: 03:cb:54:f0:3f:f5:82:d6:bc:83:7c:20:84:e1:fe: 01:4c:8a:c8:49:8f:5e:f6:43:3b:a2:0f:3d:81:70: cc:63:3b:c1:1a:35:86:6d:6c:1b:f9:26:39:68:13: 30:01:f9:80:90:f5:51:a3:a5:1e:48:80:3c:59:ba: 2b:ff:84:09:ed:56:df:fd:0d:c5:c3:97:b6:d5:1f: 75:2a:fa:02:b5:93:6a:2c:64:4d:e3:d2:17:c3:39: 7c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0A:4C:2A:B5:7F:2B:E1:55:40:8E:B7:BC:2D:93:0F:5F:BD:E0:74 X509v3 Authority Key Identifier: keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3c:cb:c0:cb:b2:25:28:0d:16:c0:d8:3c:af:e1:38:b4:c4: 62:99:7d:0a:c9:02:8e:ec:4b:e2:b7:b4:3b:6f:39:8d:ff:9a: ab:03:c0:49:7f:d8:d1:3e:41:f1:df:56:71:4f:c6:fa:fc:1d: ba:71:d2:66:c3:a6:21:33:2d:1a:3d:73:74:ea:37:c7:b0:60: 1e:86:57:6d:67:af:d7:22:58:48:b4:f5:2a:ed:f2:1c:5c:2a: 51:4b:30:c5:b3:01:1f:fc:6e:54:7b:8b:ec:20:9a:82:bc:d7: 02:6d:68:90:0a:53:0e:6c:ab:45:9a:07:00:d6:e7:5e:71:96: 1b:f1:d1:f7:3b:a7:12:1e:0b:fa:cb:59:7b:7e:66:59:78:2a: 2e:05:90:8c:e9:b1:a0:a7:56:b6:5c:30:81:29:07:fd:c6:05: 6f:0f:49:f9:35:3b:ef:97:a0:1e:87:9d:c2:9b:80:15:62:44: a4:da:3f:af:e9:9f:f1:da:9e:c4:0c:97:6e:2d:41:e7:6d:a8: 75:23:f1:d8:29:6a:3e:db:58:8f:c5:cd:19:21:27:d9:44:b3: fa:bd:a1:cf:dd:73:bb:91:d3:3f:6a:a3:33:0d:56:3d:e8:b6: 7d:61:ce:46:25:5c:cb:e1:80:f9:d8:35:58:5e:77:cf:8e:4d: 00:d9:8c:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKHe5zKHwjXGa4MdexVY4+OMuxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx OTMzNURBMTAeFw0yNjA3MjgxNzU5MDFaFw0yNjA3MjkyMTE0MDFaMDMxMTAvBgNV BAMTKEIzMEE0QzJBQjU3RjJCRTE1NTQwOEVCN0JDMkQ5MzBGNUZCREUwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGJeCPH3NjRn93q1Dm4eIFmKe 4wGrCXorCwMfOapKUhDtbUM0+SOVZd8MPjwI2dI4zyz8HXB9NxJ0azH/kkjfpkuZ AKClvI42BlGZpoZ2eQw+xaTAMhYjDOt6QDqlxd76C8lUOfZS4KlBS6BuIjAxf+Y7 UxB0npINkjjTOZ7zLZDcQd/c0JIc3IyoXv5gFvu2YzCEFHCPdaB9klEY12jZVZj3 eQPLVPA/9YLWvIN8IITh/gFMishJj172QzuiDz2BcMxjO8EaNYZtbBv5JjloEzAB +YCQ9VGjpR5IgDxZuiv/hAntVt/9DcXDl7bVH3Uq+gK1k2osZE3j0hfDOXxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUswpMKrV/K+FVQI63vC2TD1+94HQwHwYDVR0j BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1 QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1 REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY8y8DLsiUoDRbA2Dyv4Ti0xGKZfQrJAo7s S+K3tDtvOY3/mqsDwEl/2NE+QfHfVnFPxvr8Hbpx0mbDpiEzLRo9c3TqN8ewYB6G V21nr9ciWEi09Srt8hxcKlFLMMWzAR/8blR7i+wgmoK81wJtaJAKUw5sq0WaBwDW 515xlhvx0fc7pxIeC/rLWXt+Zll4Ki4FkIzpsaCnVrZcMIEpB/3GBW8PSfk1O++X oB6HncKbgBViRKTaP6/pn/HansQMl24tQedtqHUj8dgpaj7bWI/FzRkhJ9lEs/q9 oc/dc7uR0z9qozMNVj3otn1hzkYlXMvhgPnYNVhed8+OTQDZjGk= -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:13 2026 by rpki-client