$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft File: C53650EF45967BD821B00241E9B0355EE9A79B4B.mft (raw, json) Hash identifier: DxdJH5mueZcwVE8a47SjB3B/YMpn9Q+asrYdcVP9TNo= Subject key identifier: 48:01:B2:D2:AE:23:92:85:55:13:C0:3B:1E:64:2E:E4:01:9A:D9:62 Authority key identifier: C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B Certificate issuer: /CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Certificate serial: 0A3F00DA9EF91199B0E7957688B524533BE291F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft Manifest number: D8 Signing time: Sat 10 Oct 2026 14:56:04 +0000 Manifest this update: Sat 10 Oct 2026 14:51:04 +0000 Manifest next update: Sun 11 Oct 2026 15:50:04 +0000 Files and hashes: 1: C53650EF45967BD821B00241E9B0355EE9A79B4B.crl (hash: 3q3xGh462lh3pLEXRurAUP9JK3V0iOaNlDw4DSzxXjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:00:da:9e:f9:11:99:b0:e7:95:76:88:b5:24:53:3b:e2:91:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Validity Not Before: Oct 10 14:51:04 2026 GMT Not After : Oct 11 15:50:04 2026 GMT Subject: CN=4801B2D2AE2392855513C03B1E642EE4019AD962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:eb:72:47:ec:38:dd:8a:89:8d:c4:51:8c: 07:f4:6b:3b:28:ad:6f:0f:4e:d9:04:13:80:21:14: 46:3f:a1:aa:d9:bb:da:84:ed:b0:42:4d:6c:76:0c: a2:ab:72:d6:66:ad:65:b0:26:b8:66:ca:50:86:ca: 3a:55:96:de:8a:f4:c2:28:51:01:b1:69:bd:56:50: 88:72:3e:21:c4:51:a1:63:d4:25:d7:66:1a:21:3c: 44:75:a7:f6:2f:ae:3b:cf:13:10:a1:27:cc:e2:b6: a5:70:fc:b3:b3:d8:6c:0a:ed:78:b5:66:d1:13:4e: 34:e7:c2:29:fd:7c:a5:a5:3a:55:7d:f5:f6:64:ff: f2:c0:ad:c8:79:a9:69:bc:75:83:9e:50:80:7e:d9: 3c:c5:15:f5:94:20:e9:d8:85:06:9a:fc:34:f0:65: 99:e6:15:06:07:32:89:39:78:29:ab:1b:41:08:5a: 08:79:87:bd:31:ce:86:ff:e3:11:90:d4:21:3b:97: 57:4e:4a:45:2a:20:ef:13:bd:4b:7f:92:2f:7e:a2: 65:ca:93:5c:02:89:fc:75:f0:5d:55:4a:39:7e:52: ea:16:09:b8:97:d2:b3:c1:fe:6f:c7:23:c9:0b:27: 08:01:fe:4b:80:c1:1c:5f:2d:7a:88:26:bc:ae:f7: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:B2:D2:AE:23:92:85:55:13:C0:3B:1E:64:2E:E4:01:9A:D9:62 X509v3 Authority Key Identifier: keyid:C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a6:26:a0:98:db:7e:bd:5d:b8:73:b3:a7:9e:cd:38:b9:5e: ac:12:25:d1:47:b9:8f:46:71:41:6c:77:d9:ec:41:57:44:aa: dd:61:26:88:7b:a1:5b:29:12:85:1d:70:b8:7e:e7:d2:de:eb: a3:a0:1d:09:75:28:ba:a4:a2:97:be:fb:43:21:90:0b:47:54: 71:f3:8b:fc:f4:58:23:97:6e:3b:3a:a9:e6:e6:3e:12:74:37: 60:a0:a3:af:24:45:8f:79:89:85:03:a1:7c:7f:63:38:35:91: f3:09:0c:fa:7d:f7:a6:8a:d4:18:0f:6d:7f:18:3b:eb:a1:5b: 78:06:4c:99:1c:e7:8c:90:9e:4e:2f:21:b1:9e:3c:39:12:c6: 30:c9:c8:ed:60:ca:1f:cb:89:47:e6:dc:4f:16:bf:64:ae:eb: 2c:de:11:dd:4c:8c:18:48:27:91:3a:af:69:d2:22:83:f0:20: 04:4f:15:e1:9c:6e:21:c9:06:7c:e3:0f:9d:9c:d0:81:ac:57: 71:51:ad:f1:41:f1:3e:4e:81:2c:a1:02:e6:f9:d7:61:fa:ba: ce:fd:c6:fb:81:65:d0:3d:99:ad:6e:d6:8a:c8:55:07:36:e9: d6:8d:76:55:43:e8:03:1e:7e:08:d4:35:a4:e7:04:a8:af:b4: d0:e6:de:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj8A2p75EZmw55V2iLUkUzvikfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUzNjUwRUY0NTk2N0JEODIxQjAwMjQxRTlCMDM1NUVF OUE3OUI0QjAeFw0yNjEwMTAxNDUxMDRaFw0yNjEwMTExNTUwMDRaMDMxMTAvBgNV BAMTKDQ4MDFCMkQyQUUyMzkyODU1NTEzQzAzQjFFNjQyRUU0MDE5QUQ5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xutyR+w43YqJjcRRjAf0azso rW8PTtkEE4AhFEY/oarZu9qE7bBCTWx2DKKrctZmrWWwJrhmylCGyjpVlt6K9MIo UQGxab1WUIhyPiHEUaFj1CXXZhohPER1p/YvrjvPExChJ8zitqVw/LOz2GwK7Xi1 ZtETTjTnwin9fKWlOlV99fZk//LArch5qWm8dYOeUIB+2TzFFfWUIOnYhQaa/DTw ZZnmFQYHMok5eCmrG0EIWgh5h70xzob/4xGQ1CE7l1dOSkUqIO8TvUt/ki9+omXK k1wCifx18F1VSjl+UuoWCbiX0rPB/m/HI8kLJwgB/kuAwRxfLXqIJryu9zAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAGy0q4jkoVVE8A7HmQu5AGa2WIwHwYDVR0j BBgwFoAUxTZQ70WWe9ghsAJB6bA1Xumnm0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxNjQxMWYtNzhjYS00OTE2LTg5MTktMzdjMWQ5OWVmYmQ4LzAvQzUzNjUwRUY0 NTk2N0JEODIxQjAwMjQxRTlCMDM1NUVFOUE3OUI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTM2NTBFRjQ1OTY3QkQ4MjFCMDAyNDFFOUIwMzU1RUU5QTc5 QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvQzUzNjUwRUY0NTk2N0JEODIxQjAwMjQxRTlCMDM1 NUVFOUE3OUI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmmJqCY2369Xbhzs6eezTi5XqwSJdFHuY9G cUFsd9nsQVdEqt1hJoh7oVspEoUdcLh+59Le66OgHQl1KLqkope++0MhkAtHVHHz i/z0WCOXbjs6qebmPhJ0N2Cgo68kRY95iYUDoXx/Yzg1kfMJDPp996aK1BgPbX8Y O+uhW3gGTJkc54yQnk4vIbGePDkSxjDJyO1gyh/LiUfm3E8Wv2Su6yzeEd1MjBhI J5E6r2nSIoPwIARPFeGcbiHJBnzjD52c0IGsV3FRrfFB8T5OgSyhAub512H6us79 xvuBZdA9ma1u1orIVQc26daNdlVD6AMefgjUNaTnBKivtNDm3jY= -----END CERTIFICATE-----Generated at Sat Oct 10 17:25:05 2026 by rpki-client