$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: 1lKZv7XQH+sP5XXpyauc/bWItJG5uGpoK9grmRSji9M= Subject key identifier: 39:91:AC:6E:2C:5A:78:34:D8:ED:4C:CE:DB:76:C7:0B:CB:A7:C6:7C Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 1130F3B9928A07523B4664FC8DAF1BF344AB581D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 019A Signing time: Thu 19 Mar 2026 02:40:44 +0000 Manifest this update: Thu 19 Mar 2026 02:35:44 +0000 Manifest next update: Sun 22 Mar 2026 08:39:44 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: uXP/ZHYcNxP08heeBsRgD6XouFwLWcevCBZKEru9CTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 08:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:30:f3:b9:92:8a:07:52:3b:46:64:fc:8d:af:1b:f3:44:ab:58:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Mar 19 02:35:44 2026 GMT Not After : Mar 22 08:39:44 2026 GMT Subject: CN=3991AC6E2C5A7834D8ED4CCEDB76C70BCBA7C67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:eb:2a:b8:ae:c0:07:c6:e1:31:f7:5b:f9: 83:83:25:17:f8:de:47:43:6e:b4:be:b5:e6:c7:4c: 0d:7b:a4:72:35:d5:88:2d:7a:97:78:13:62:14:13: 57:2d:79:de:ea:b9:8b:35:ee:f9:65:64:0a:7f:d4: 17:d3:49:7a:7a:c3:5c:44:71:b6:e8:75:b6:e9:38: cc:14:35:09:63:be:3b:c6:c5:01:d9:99:0a:d5:e8: 67:4a:a0:97:d2:40:56:3b:e7:e3:e0:43:ad:b5:e6: b0:8e:06:bd:13:ce:cc:33:74:fa:57:eb:52:f3:47: 76:0d:70:fd:14:fd:32:84:81:a1:96:9f:b3:11:49: 45:29:ab:6b:ad:96:a6:dc:20:d8:96:9b:16:4d:6b: 5f:e8:d2:51:4e:8d:ad:85:f3:d5:ab:6f:ef:4a:3d: 4f:da:f4:ff:0d:89:50:94:6b:b0:ce:f7:06:53:8a: 35:34:2a:b4:45:a9:6f:a0:20:4e:9d:c1:59:6b:ed: 08:38:5e:88:92:b0:8f:ed:c5:21:63:20:2d:75:dc: b4:27:d8:d5:0b:d1:d7:91:46:65:f4:bf:5c:bc:9e: b0:4a:55:49:67:ea:48:9e:51:e2:0b:e1:43:a7:4e: 06:87:95:81:7d:16:9a:62:42:b9:11:4d:2f:ba:78: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:AC:6E:2C:5A:78:34:D8:ED:4C:CE:DB:76:C7:0B:CB:A7:C6:7C X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fb:23:f0:c1:15:a9:e4:3c:c1:4e:43:a5:63:c6:76:f6:56: 90:99:af:50:4c:ee:16:94:e3:bd:db:02:76:cb:86:46:e5:1f: bd:f7:30:2e:a5:62:7e:40:8a:ff:4c:b9:07:f7:23:c0:12:05: fc:c5:bc:ff:74:68:aa:2e:01:b1:a9:b1:05:56:f2:b8:25:56: 33:b5:3c:d9:a0:c1:30:4f:40:88:4f:4e:5f:d3:72:5a:bc:d6: 6b:4a:c4:d9:4f:61:71:e1:13:be:91:ad:47:1d:29:c7:1b:08: 8e:0b:82:a7:e7:ea:40:7d:6c:0b:43:d7:f2:95:ca:a9:cf:20: 2e:94:30:6c:7b:d1:82:26:da:5d:e2:d9:cc:bd:f6:8b:3b:f2: 7a:a4:87:d5:cf:ff:7b:87:ca:0e:ad:bf:12:6e:d8:67:f7:70: 6d:75:39:73:59:a2:ec:86:26:cb:b7:55:32:7d:c2:ec:1d:77: a1:40:a1:11:48:6f:28:0c:7f:02:0f:da:55:ea:5b:3b:78:7c: c9:c5:33:7b:a2:45:a4:53:66:b0:d2:f4:f2:30:ed:da:8c:ad: 51:cb:25:16:93:5a:58:e4:8d:0c:d6:3e:f9:b2:b3:48:48:2e: 01:91:3a:47:93:a1:d4:27:b8:5c:0b:4f:83:32:7e:1b:a4:b0: b2:78:13:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETDzuZKKB1I7RmT8ja8b80SrWB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNjAzMTkwMjM1NDRaFw0yNjAzMjIwODM5NDRaMDMxMTAvBgNV BAMTKDM5OTFBQzZFMkM1QTc4MzREOEVENENDRURCNzZDNzBCQ0JBN0M2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/OsquK7AB8bhMfdb+YODJRf4 3kdDbrS+tebHTA17pHI11Ygtepd4E2IUE1cted7quYs17vllZAp/1BfTSXp6w1xE cbbodbbpOMwUNQljvjvGxQHZmQrV6GdKoJfSQFY75+PgQ6215rCOBr0TzswzdPpX 61LzR3YNcP0U/TKEgaGWn7MRSUUpq2utlqbcINiWmxZNa1/o0lFOja2F89Wrb+9K PU/a9P8NiVCUa7DO9wZTijU0KrRFqW+gIE6dwVlr7Qg4XoiSsI/txSFjIC113LQn 2NUL0deRRmX0v1y8nrBKVUln6kieUeIL4UOnTgaHlYF9FppiQrkRTS+6eL+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZGsbixaeDTY7UzO23bHC8unxnwwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT7I/DBFankPMFOQ6Vjxnb2VpCZr1BM7haU 473bAnbLhkblH733MC6lYn5Aiv9MuQf3I8ASBfzFvP90aKouAbGpsQVW8rglVjO1 PNmgwTBPQIhPTl/Tclq81mtKxNlPYXHhE76RrUcdKccbCI4Lgqfn6kB9bAtD1/KV yqnPIC6UMGx70YIm2l3i2cy99os78nqkh9XP/3uHyg6tvxJu2Gf3cG11OXNZouyG Jsu3VTJ9wuwdd6FAoRFIbygMfwIP2lXqWzt4fMnFM3uiRaRTZrDS9PIw7dqMrVHL JRaTWljkjQzWPvmys0hILgGROkeTodQnuFwLT4MyfhuksLJ4E30= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client