$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json) Hash identifier: QTjVJZ80Fc3X/yeXUAMDM9ffSGpqxod3L+XbIBlSdMk= Subject key identifier: 71:3A:1C:D6:FE:5F:81:1A:DE:2F:B3:21:FB:CC:D6:E4:3C:23:60:5B Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 0DE8F5DDD970551EBBD9B48381ECC6BD6647DABB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:27:45 +0000 Manifest this update: Wed 03 Jun 2026 02:22:45 +0000 Manifest next update: Thu 04 Jun 2026 06:10:45 +0000 Files and hashes: 1: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=) 2: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=) 3: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=) 4: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=) 5: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: rcwWjLpqZSLUYxpjSV94RZ5rDHqjZGphC9QVgvSAjSk=) 6: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=) 7: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e8:f5:dd:d9:70:55:1e:bb:d9:b4:83:81:ec:c6:bd:66:47:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: Jun 3 02:22:45 2026 GMT Not After : Jun 4 06:10:45 2026 GMT Subject: CN=713A1CD6FE5F811ADE2FB321FBCCD6E43C23605B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:38:d9:87:bf:b2:7e:8d:1b:36:3a:40:c6: 10:bf:1c:c1:96:02:4d:90:82:a4:24:a5:73:e5:f0: a5:a5:6d:a7:38:ab:47:56:c2:1b:a9:94:95:fa:d4: 03:28:2d:87:f3:e2:8b:a6:d7:ba:ec:0b:d5:b4:78: 33:65:15:66:53:0b:7d:d7:24:6d:cb:a2:29:fc:3a: 00:98:5a:81:54:ad:52:98:01:c1:98:66:42:b3:d7: 9d:00:a2:e6:17:5a:29:5f:38:e8:88:3b:6a:eb:36: c8:1a:32:2a:f1:88:9c:d2:fb:32:c6:d3:4f:0b:fc: f0:90:0a:56:c0:4f:7c:a5:a8:31:8c:aa:b4:69:76: 38:b2:a1:fd:88:00:d3:0c:8d:cc:d0:06:a3:66:1b: eb:92:81:53:29:a7:f2:3b:a8:b2:9b:88:98:20:e3: b1:c4:bf:7e:8f:b8:58:22:1d:66:04:d3:eb:85:70: 54:81:f8:f9:8e:13:b9:51:90:f3:6c:39:56:eb:63: 28:2f:9a:cf:89:f1:f8:f7:98:20:69:3e:7e:cf:54: 02:a8:68:5d:73:3e:97:96:c3:9c:f4:80:a5:23:1e: d9:81:8a:4a:2a:e7:92:b0:c5:aa:34:82:eb:e0:c9: 65:05:1e:bd:9b:bb:52:9f:43:69:bb:2b:d3:7a:8b: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3A:1C:D6:FE:5F:81:1A:DE:2F:B3:21:FB:CC:D6:E4:3C:23:60:5B X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:27:0e:1f:d1:1c:84:53:ae:c6:1c:ae:98:d9:fb:78:b9:48: 0f:76:ca:c2:19:73:b4:14:1b:22:6d:2b:3f:66:26:07:cf:08: f4:9f:b6:6f:4a:61:a8:66:50:03:3b:ee:25:04:ad:e8:bc:02: ae:c9:3e:3b:46:06:ae:05:fc:df:95:e3:86:96:39:0d:fc:c6: b6:7d:c7:c1:ce:73:a3:cc:b4:20:85:68:b4:b5:bd:b1:e7:32: 2f:1a:78:1f:68:31:59:46:61:bf:87:fb:46:9b:a1:ee:bf:c1: 2e:9e:d3:cf:49:75:77:18:fc:43:25:10:99:85:6b:0a:03:2e: b8:1a:f6:0f:33:fb:48:f5:0b:cf:df:04:a7:42:3f:2d:4a:94: 6e:0b:83:26:b3:a1:9d:6b:b5:2c:0e:01:8c:b9:1a:dd:7d:21: 64:87:f0:3b:91:cb:5c:6d:86:7a:aa:cf:07:4a:ce:37:69:bb: 88:67:2b:6e:27:fe:74:e0:dd:40:c3:3a:dd:b3:a8:aa:9b:29: 17:3a:fe:9f:e0:5d:b6:3e:70:b6:0a:db:e2:f2:94:c2:3c:d3: f3:45:1b:ab:96:7d:95:77:8c:83:6a:bb:f1:0b:0d:78:0a:0e: bb:67:b9:b9:cb:66:c8:c7:23:ef:e2:a7:8c:bf:04:eb:11:3f: c9:f9:37:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDej13dlwVR672bSDgezGvWZH2rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjA2MDMwMjIyNDVaFw0yNjA2MDQwNjEwNDVaMDMxMTAvBgNV BAMTKDcxM0ExQ0Q2RkU1RjgxMUFERTJGQjMyMUZCQ0NENkU0M0MyMzYwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBTjZh7+yfo0bNjpAxhC/HMGW Ak2QgqQkpXPl8KWlbac4q0dWwhuplJX61AMoLYfz4oum17rsC9W0eDNlFWZTC33X JG3Loin8OgCYWoFUrVKYAcGYZkKz150AouYXWilfOOiIO2rrNsgaMirxiJzS+zLG 008L/PCQClbAT3ylqDGMqrRpdjiyof2IANMMjczQBqNmG+uSgVMpp/I7qLKbiJgg 47HEv36PuFgiHWYE0+uFcFSB+PmOE7lRkPNsOVbrYygvms+J8fj3mCBpPn7PVAKo aF1zPpeWw5z0gKUjHtmBikoq55Kwxao0guvgyWUFHr2bu1KfQ2m7K9N6i1sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcToc1v5fgRreL7Mh+8zW5DwjYFswHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2 OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1 ODczM0FGQkZBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEnDh/RHIRTrsYcrpjZ+3i5SA92ysIZc7QU GyJtKz9mJgfPCPSftm9KYahmUAM77iUErei8Aq7JPjtGBq4F/N+V44aWOQ38xrZ9 x8HOc6PMtCCFaLS1vbHnMi8aeB9oMVlGYb+H+0aboe6/wS6e089JdXcY/EMlEJmF awoDLrga9g8z+0j1C8/fBKdCPy1KlG4LgyazoZ1rtSwOAYy5Gt19IWSH8DuRy1xt hnqqzwdKzjdpu4hnK24n/nTg3UDDOt2zqKqbKRc6/p/gXbY+cLYK2+LylMI80/NF G6uWfZV3jINqu/ELDXgKDrtnubnLZsjHI+/ip4y/BOsRP8n5Nyc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:43 2026 by rpki-client