$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: msxCaeo9wAEB1HLErWMQqvnyVgQHDnprn5/yqdLWHjQ= Subject key identifier: 33:85:BF:4F:8E:F6:5E:74:FB:47:DE:11:52:74:E8:BE:4C:CA:48:94 Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 10CF01E2B1F99771349377686725161A422D50AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 21:42:10 +0000 Manifest this update: Fri 19 Jun 2026 21:37:10 +0000 Manifest next update: Sat 20 Jun 2026 22:48:10 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: lcXAYYpYJyogAOUr7O3LDqUOKUsfGLMaGlvyBjgTNRw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cf:01:e2:b1:f9:97:71:34:93:77:68:67:25:16:1a:42:2d:50:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: Jun 19 21:37:10 2026 GMT Not After : Jun 20 22:48:10 2026 GMT Subject: CN=3385BF4F8EF65E74FB47DE115274E8BE4CCA4894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:79:d4:99:5c:e3:c6:1b:3a:31:4e:e2:78: 7e:b6:8e:b8:e8:e2:c8:11:84:a4:f9:5a:67:2e:2c: 7c:2a:74:c0:78:70:c6:0c:4f:85:fd:2f:6f:5c:ff: 57:de:4f:4e:f8:8a:b6:46:48:b8:a8:f7:ca:e8:2b: 98:00:62:a2:d6:1b:ff:9e:62:9c:72:24:c6:49:23: 4c:91:1f:6e:3f:95:f2:23:31:56:1b:11:14:2f:d6: 2e:d6:21:d9:fb:27:74:f4:43:4d:dd:91:8f:2e:76: eb:a9:e5:31:8a:04:33:36:74:67:1d:fa:09:93:3d: 65:91:eb:a4:59:20:1a:ac:8a:e3:eb:3d:60:d6:ff: 0a:3a:a0:9f:3c:bb:9a:df:fa:87:67:fa:58:6e:b0: 03:58:3c:61:1b:e9:0e:8e:38:9f:81:bf:f0:d1:0c: 73:cd:97:e7:03:41:33:4a:0e:10:fc:34:a9:a0:a4: 9f:a9:72:76:eb:8c:16:2f:d5:39:fb:0c:4f:32:4c: 64:f6:6e:c1:30:31:d8:5e:0a:1a:80:90:b9:9a:2e: a4:2f:41:b5:1f:0d:c9:4b:35:34:0d:88:4e:e3:dc: 3d:74:0b:43:89:20:de:a3:40:ca:bf:71:ae:0d:e2: 44:d2:4e:eb:02:df:62:b4:5d:e8:0f:1f:35:98:d1: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:BF:4F:8E:F6:5E:74:FB:47:DE:11:52:74:E8:BE:4C:CA:48:94 X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bb:52:22:50:ff:ba:9a:39:fe:40:ea:6a:6c:7d:82:a9:55: fc:72:db:85:a8:ac:37:e7:d7:e0:54:cf:29:0d:8e:cf:92:67: 16:37:2f:2f:04:03:4b:f8:23:06:8d:02:7c:b7:73:27:82:1b: 4b:a0:68:a1:a3:f5:4d:a3:8f:3c:25:84:f0:36:0a:59:31:a6: 03:bf:d4:00:4f:4e:97:9a:02:83:b1:d9:b8:66:a7:94:03:35: 5f:66:2a:1e:11:ce:7b:d5:66:58:71:b2:9c:7e:2c:6a:f3:6b: 85:30:be:12:e6:ac:c3:e4:41:e9:37:94:35:10:d1:28:7f:80: 3f:f1:eb:ff:86:af:28:ac:72:a1:e0:2b:27:98:1b:80:da:68: 1c:3a:2f:b2:6f:b4:ee:c7:ac:72:47:23:be:93:69:0c:46:69: 16:42:d7:40:f0:08:fc:d5:57:b7:7e:24:13:e5:a9:64:69:25: 0d:51:6c:b3:ab:d3:ce:17:25:9d:b0:bf:11:d1:ea:cc:63:b2: 96:0f:dc:34:be:59:07:22:3f:c5:a6:2e:02:5c:5c:17:77:3c: 56:af:6b:10:29:49:c5:0b:f5:4d:58:3a:05:2d:eb:b9:0e:d2: 5c:c3:61:95:1b:62:2e:af:9f:82:64:d4:89:9e:8b:fd:b6:9d: 16:5d:ac:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEM8B4rH5l3E0k3doZyUWGkItUKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjA2MTkyMTM3MTBaFw0yNjA2MjAyMjQ4MTBaMDMxMTAvBgNV BAMTKDMzODVCRjRGOEVGNjVFNzRGQjQ3REUxMTUyNzRFOEJFNENDQTQ4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujHnUmVzjxhs6MU7ieH62jrjo 4sgRhKT5WmcuLHwqdMB4cMYMT4X9L29c/1feT074irZGSLio98roK5gAYqLWG/+e YpxyJMZJI0yRH24/lfIjMVYbERQv1i7WIdn7J3T0Q03dkY8uduup5TGKBDM2dGcd +gmTPWWR66RZIBqsiuPrPWDW/wo6oJ88u5rf+odn+lhusANYPGEb6Q6OOJ+Bv/DR DHPNl+cDQTNKDhD8NKmgpJ+pcnbrjBYv1Tn7DE8yTGT2bsEwMdheChqAkLmaLqQv QbUfDclLNTQNiE7j3D10C0OJIN6jQMq/ca4N4kTSTusC32K0XegPHzWY0YuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4W/T472XnT7R94RUnTovkzKSJQwHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAK7UiJQ/7qaOf5A6mpsfYKpVfxy24WorDfn 1+BUzykNjs+SZxY3Ly8EA0v4IwaNAny3cyeCG0ugaKGj9U2jjzwlhPA2ClkxpgO/ 1ABPTpeaAoOx2bhmp5QDNV9mKh4RznvVZlhxspx+LGrza4UwvhLmrMPkQek3lDUQ 0Sh/gD/x6/+GryiscqHgKyeYG4DaaBw6L7JvtO7HrHJHI76TaQxGaRZC10DwCPzV V7d+JBPlqWRpJQ1RbLOr084XJZ2wvxHR6sxjspYP3DS+WQciP8WmLgJcXBd3PFav axApScUL9U1YOgUt67kO0lzDYZUbYi6vn4Jk1Imei/22nRZdrJ4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:15 2026 by rpki-client