$ rpki-client -vvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json) Hash identifier: kZTvKUOXgnmn6fbJYEQ5JtquA3s3sqqToOS5sNblC7Y= Subject key identifier: C0:7E:B5:E1:04:FE:F7:81:BE:64:00:49:55:BA:0D:50:DA:CB:4A:20 Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Certificate serial: 34456ED60C4546AC275D003E91630FF77A09A62D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:24:45 +0000 Manifest this update: Tue 02 Jun 2026 16:19:45 +0000 Manifest next update: Wed 03 Jun 2026 18:55:45 +0000 Files and hashes: 1: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: tx/EllfJLU5gOgQJwjxiJSOLIw0NiysnvI44k4cnhDI=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:45:6e:d6:0c:45:46:ac:27:5d:00:3e:91:63:0f:f7:7a:09:a6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Validity Not Before: Jun 2 16:19:45 2026 GMT Not After : Jun 3 18:55:45 2026 GMT Subject: CN=C07EB5E104FEF781BE64004955BA0D50DACB4A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:8c:30:44:7a:1d:89:8d:04:99:2a:da:f6: a0:2e:91:20:06:92:a5:57:00:4a:f6:08:55:29:73: 57:39:74:dd:07:ae:95:cf:d1:43:b7:ef:32:dc:ca: ee:a5:f0:fb:2a:92:0c:90:b0:b7:8a:ed:21:f6:90: 3c:4a:34:8d:e8:9d:01:d9:9b:71:20:1e:9b:49:f4: b1:9b:a9:73:c9:a1:f3:44:78:f1:5d:78:cb:67:cf: 77:2b:74:f7:18:89:1d:d4:c8:bb:3e:82:1f:d2:e2: 57:c5:a3:8d:be:b5:db:ef:fb:78:fb:07:59:86:94: 3d:d2:c9:5a:f7:61:81:8d:c0:ab:53:fa:6d:0e:87: 5f:32:c6:29:f3:25:20:b0:2a:9c:4e:c7:a2:8d:c5: a2:99:60:3a:ce:10:44:df:0e:c3:0d:08:c9:b7:93: 5f:0e:80:44:92:0e:c8:68:94:6c:0b:ea:63:02:56: 0a:5a:73:64:9f:c6:24:60:e9:63:3f:96:94:58:2f: 45:06:e3:64:a8:ba:d4:df:14:1f:d1:c7:ba:7b:f7: bc:fa:8d:37:a5:96:c9:bc:1c:5f:3c:80:4b:1e:9e: 33:8a:b9:53:bb:90:cf:08:ee:93:31:e5:6e:f0:98: 61:1c:0a:ab:a2:89:d2:9b:cb:8f:34:5e:0f:bc:24: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:B5:E1:04:FE:F7:81:BE:64:00:49:55:BA:0D:50:DA:CB:4A:20 X509v3 Authority Key Identifier: keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:27:e0:1d:13:a4:fd:c0:b9:0a:a4:9e:af:ef:c9:6a:76: 7d:23:3c:24:02:91:98:f6:8c:8e:6f:d8:75:c8:dd:62:bb:0f: 63:c5:6a:c2:d7:02:42:c5:95:2c:6f:78:ad:85:b4:2f:b3:29: b8:81:9c:2e:e6:0d:87:85:6d:3f:e0:35:9c:a0:4a:90:fa:a4: 56:d4:62:1b:db:f7:17:28:08:a1:53:70:fc:04:e3:ce:f2:c7: 6e:8c:28:01:e0:9d:69:2f:4a:b9:5d:2a:6c:b2:38:0e:d8:b0: c4:15:da:f3:22:35:c1:6d:81:6b:91:d7:11:5b:18:9b:f5:ea: e5:9d:87:ef:aa:81:1f:f4:e7:f5:26:f2:ed:d6:14:4d:cb:fd: d3:50:1d:79:cf:d9:0f:4b:cf:86:86:de:92:4c:22:3a:e7:9c: 77:be:e3:ba:7c:2a:82:76:7c:7f:61:27:e3:5f:8d:42:90:ee: 41:2c:67:cb:bd:3e:dd:ca:49:2a:d2:47:0b:c3:5a:49:4e:ef: 24:6f:1e:a5:3f:7c:e0:51:23:cd:00:fd:78:3d:b7:34:16:61: f7:d3:b8:f4:02:a8:ce:c6:63:88:9c:68:fe:78:f4:8b:fa:95: 88:02:ff:f9:79:74:89:83:b1:41:6c:35:ad:90:af:de:fd:98: 47:46:bb:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEVu1gxFRqwnXQA+kWMP93oJpi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx OTMzNURBMTAeFw0yNjA2MDIxNjE5NDVaFw0yNjA2MDMxODU1NDVaMDMxMTAvBgNV BAMTKEMwN0VCNUUxMDRGRUY3ODFCRTY0MDA0OTU1QkEwRDUwREFDQjRBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6IwwRHodiY0EmSra9qAukSAG kqVXAEr2CFUpc1c5dN0HrpXP0UO37zLcyu6l8PsqkgyQsLeK7SH2kDxKNI3onQHZ m3EgHptJ9LGbqXPJofNEePFdeMtnz3crdPcYiR3UyLs+gh/S4lfFo42+tdvv+3j7 B1mGlD3SyVr3YYGNwKtT+m0Oh18yxinzJSCwKpxOx6KNxaKZYDrOEETfDsMNCMm3 k18OgESSDsholGwL6mMCVgpac2SfxiRg6WM/lpRYL0UG42SoutTfFB/Rx7p797z6 jTellsm8HF88gEsenjOKuVO7kM8I7pMx5W7wmGEcCquiidKby480Xg+8JJKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwH614QT+94G+ZABJVboNUNrLSiAwHwYDVR0j BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1 QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1 REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUXJ+AdE6T9wLkKpJ6v78lqdn0jPCQCkZj2 jI5v2HXI3WK7D2PFasLXAkLFlSxveK2FtC+zKbiBnC7mDYeFbT/gNZygSpD6pFbU Yhvb9xcoCKFTcPwE487yx26MKAHgnWkvSrldKmyyOA7YsMQV2vMiNcFtgWuR1xFb GJv16uWdh++qgR/05/Um8u3WFE3L/dNQHXnP2Q9Lz4aG3pJMIjrnnHe+47p8KoJ2 fH9hJ+NfjUKQ7kEsZ8u9Pt3KSSrSRwvDWklO7yRvHqU/fOBRI80A/Xg9tzQWYffT uPQCqM7GY4icaP549Iv6lYgC//l5dImDsUFsNa2Qr979mEdGu1w= -----END CERTIFICATE-----Generated at Wed Jun 3 04:38:28 2026 by rpki-client