$ rpki-client -vvf rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft File: C53650EF45967BD821B00241E9B0355EE9A79B4B.mft (raw, json) Hash identifier: M6nv8SivmnW+q96T9coK8FryBrzG6nea9YqSGRM0FLE= Subject key identifier: 8E:49:E8:FD:D6:B9:4B:E7:FF:F3:95:6F:B3:C1:2D:72:44:04:9E:53 Authority key identifier: C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B Certificate issuer: /CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Certificate serial: 4806FDB1420FD3E88B9B5C4C7F8D3A92DFCABF56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 10:14:39 +0000 Manifest this update: Tue 28 Jul 2026 10:09:39 +0000 Manifest next update: Wed 29 Jul 2026 13:20:39 +0000 Files and hashes: 1: C53650EF45967BD821B00241E9B0355EE9A79B4B.crl (hash: 7vu2ekSEDfQLdlVsOqNU08mFmxs3Buu8accz6uEzu28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:06:fd:b1:42:0f:d3:e8:8b:9b:5c:4c:7f:8d:3a:92:df:ca:bf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C53650EF45967BD821B00241E9B0355EE9A79B4B Validity Not Before: Jul 28 10:09:39 2026 GMT Not After : Jul 29 13:20:39 2026 GMT Subject: CN=8E49E8FDD6B94BE7FFF3956FB3C12D7244049E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:b4:2f:10:06:ed:a7:73:82:90:8e:9c:3c: ef:22:2f:f2:3c:b5:51:78:db:12:09:78:43:21:a5: 99:5b:12:79:50:56:4c:df:0c:e6:76:aa:e5:a2:92: ae:7d:a0:7b:2d:31:f7:6b:b4:b0:d1:9c:49:7a:d8: 39:69:98:28:8a:47:99:72:a7:91:e0:64:0a:87:03: 80:7b:18:e7:2a:09:24:3a:91:1b:7d:f8:f1:65:5f: 2f:4d:79:81:b4:12:0e:a0:61:9a:08:23:eb:f8:e0: 62:a2:b4:b6:b9:e6:eb:16:7f:3c:aa:16:b2:31:c3: ba:f9:f2:be:a3:f1:0b:16:da:7e:24:3c:0f:7a:c7: 3a:3f:df:96:3c:06:ff:2d:0f:68:71:25:8f:c9:68: 63:3e:39:a4:a5:85:73:04:5d:ca:57:83:30:4f:71: 71:ee:45:38:26:1d:01:ad:00:25:58:3f:f8:78:f8: 8c:91:43:cd:ae:b0:63:8e:da:15:37:7f:db:84:f7: 09:0f:8b:12:d4:af:7a:1a:31:93:6b:1d:63:6e:cf: 54:9d:49:7e:21:9f:1c:66:98:86:df:5a:22:f6:94: 48:4a:5e:ad:ce:b2:7d:de:1f:af:c0:5b:ef:75:d3: 9f:c2:1e:fa:6e:7c:c5:a8:a2:2b:1c:7f:f9:dc:a5: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:49:E8:FD:D6:B9:4B:E7:FF:F3:95:6F:B3:C1:2D:72:44:04:9E:53 X509v3 Authority Key Identifier: keyid:C5:36:50:EF:45:96:7B:D8:21:B0:02:41:E9:B0:35:5E:E9:A7:9B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C53650EF45967BD821B00241E9B0355EE9A79B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/C53650EF45967BD821B00241E9B0355EE9A79B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cb:0c:26:79:97:e9:59:e4:74:c8:b7:a6:74:ee:35:f6:5d: 0b:32:05:53:fe:b0:cb:3d:20:b3:9b:4e:72:71:34:6a:a9:7c: c4:00:41:cc:6b:fa:a9:bd:67:74:d1:b6:a0:47:61:f3:cd:a7: 76:6b:bc:e9:35:3b:65:01:fb:cd:c2:1e:a7:32:dc:48:57:9e: 57:7c:eb:47:27:99:36:5d:8d:f8:4b:1b:f5:a6:0f:8c:9e:1c: 40:6e:5f:51:38:1c:53:c0:b2:d2:5d:db:60:9f:42:29:92:e3: 9d:23:57:11:d9:75:be:6a:44:c6:fb:5c:1c:7b:c7:7f:13:1b: 9a:e7:34:ee:42:26:9c:60:d4:f8:08:b6:48:30:0d:ea:a2:4e: ad:56:19:6e:1b:90:9c:e4:06:4d:4c:2a:1a:05:d5:68:92:96: 44:c3:50:1d:5e:53:d8:0b:50:ad:46:e7:6c:79:76:cd:67:4f: 0a:a6:1d:86:48:13:23:31:b4:4e:fd:b5:1f:1e:eb:0a:f2:93: fa:99:54:6d:63:37:6a:83:05:f9:4c:81:05:d7:f2:fb:72:bf: 61:65:a1:b2:ea:4d:58:e8:f7:94:69:fb:28:40:59:67:75:16: e1:d5:4b:f0:53:3f:e4:4c:51:f8:34:5f:11:08:23:f1:f0:8b: 0c:7c:e6:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAb9sUIP0+iLm1xMf406kt/Kv1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUzNjUwRUY0NTk2N0JEODIxQjAwMjQxRTlCMDM1NUVF OUE3OUI0QjAeFw0yNjA3MjgxMDA5MzlaFw0yNjA3MjkxMzIwMzlaMDMxMTAvBgNV BAMTKDhFNDlFOEZERDZCOTRCRTdGRkYzOTU2RkIzQzEyRDcyNDQwNDlFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK7QvEAbtp3OCkI6cPO8iL/I8 tVF42xIJeEMhpZlbEnlQVkzfDOZ2quWikq59oHstMfdrtLDRnEl62DlpmCiKR5ly p5HgZAqHA4B7GOcqCSQ6kRt9+PFlXy9NeYG0Eg6gYZoII+v44GKitLa55usWfzyq FrIxw7r58r6j8QsW2n4kPA96xzo/35Y8Bv8tD2hxJY/JaGM+OaSlhXMEXcpXgzBP cXHuRTgmHQGtACVYP/h4+IyRQ82usGOO2hU3f9uE9wkPixLUr3oaMZNrHWNuz1Sd SX4hnxxmmIbfWiL2lEhKXq3Osn3eH6/AW+9105/CHvpufMWooiscf/ncpcVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjkno/da5S+f/85Vvs8EtckQEnlMwHwYDVR0j BBgwFoAUxTZQ70WWe9ghsAJB6bA1Xumnm0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkxNjQxMWYtNzhjYS00OTE2LTg5MTktMzdjMWQ5OWVmYmQ4LzAvQzUzNjUwRUY0 NTk2N0JEODIxQjAwMjQxRTlCMDM1NUVFOUE3OUI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTM2NTBFRjQ1OTY3QkQ4MjFCMDAyNDFFOUIwMzU1RUU5QTc5 QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvQzUzNjUwRUY0NTk2N0JEODIxQjAwMjQxRTlCMDM1 NUVFOUE3OUI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXLDCZ5l+lZ5HTIt6Z07jX2XQsyBVP+sMs9 ILObTnJxNGqpfMQAQcxr+qm9Z3TRtqBHYfPNp3ZrvOk1O2UB+83CHqcy3EhXnld8 60cnmTZdjfhLG/WmD4yeHEBuX1E4HFPAstJd22CfQimS450jVxHZdb5qRMb7XBx7 x38TG5rnNO5CJpxg1PgItkgwDeqiTq1WGW4bkJzkBk1MKhoF1WiSlkTDUB1eU9gL UK1G52x5ds1nTwqmHYZIEyMxtE79tR8e6wryk/qZVG1jN2qDBflMgQXX8vtyv2Fl obLqTVjo95Rp+yhAWWd1FuHVS/BTP+RMUfg0XxEII/Hwiwx85nE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:57:38 2026 by rpki-client