$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft File: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft (raw, json) Hash identifier: U1atJJ4syQPiDDDXwoCDf6lhiWbfV4erDijxT0LQSGg= Subject key identifier: 4E:2A:57:70:AE:1A:03:7D:05:4B:DB:C0:68:C7:5D:B6:1F:94:A3:8F Authority key identifier: 53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 Certificate issuer: /CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Certificate serial: 1D1F76F1F7D607226670CE48EF104E9BE153125A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:37:58 +0000 Manifest this update: Thu 17 Sep 2026 07:32:58 +0000 Manifest next update: Fri 18 Sep 2026 10:25:58 +0000 Files and hashes: 1: 53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl (hash: ERzmn1WJn//2Oc/Pyz6lbH57PT7AGlvuhTKDVOUqX0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1f:76:f1:f7:d6:07:22:66:70:ce:48:ef:10:4e:9b:e1:53:12:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66 Validity Not Before: Sep 17 07:32:58 2026 GMT Not After : Sep 18 10:25:58 2026 GMT Subject: CN=4E2A5770AE1A037D054BDBC068C75DB61F94A38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:37:f0:6e:8d:cf:9a:19:14:01:4d:e9:96: ed:c9:62:6a:12:04:2a:d4:67:ac:a4:f5:e1:82:41: 60:5f:c9:59:2e:7d:3c:2f:8f:1f:06:1b:e6:bc:03: d8:6d:65:d3:3c:89:6d:9a:83:37:81:58:1a:43:ce: e0:c0:8b:2e:4c:5e:3a:87:12:c2:20:e2:7d:5c:58: 78:18:df:e7:26:85:6d:5d:6f:c5:75:0e:8b:1e:7d: 97:17:5f:d9:46:08:32:a9:f9:99:af:7a:8a:8d:7c: 16:8b:bc:69:40:69:cd:ad:fd:66:4a:87:f0:d7:e3: 3d:fd:b8:f9:bf:f1:f4:5e:8d:eb:a2:a3:ae:b1:63: 7a:ab:7a:e6:08:6d:66:c8:c6:6a:86:25:67:44:32: 96:8d:93:51:17:72:7a:df:7f:89:9b:65:3e:8b:a3: 66:0e:f8:e5:2b:7b:24:c1:32:4a:e3:64:e2:e5:7c: 92:6f:ee:cc:6c:0e:21:98:c0:52:d8:0a:5c:3c:24: 9e:d7:4c:7c:ca:5b:63:df:96:ab:15:24:f0:f6:49: c2:2a:62:41:44:cc:a3:cc:9e:e4:36:6f:11:ac:fa: 87:97:0c:70:8e:2d:57:fa:cc:1a:41:1a:5f:09:04: be:b2:15:b0:0a:57:2c:d8:f0:79:87:00:55:65:05: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:57:70:AE:1A:03:7D:05:4B:DB:C0:68:C7:5D:B6:1F:94:A3:8F X509v3 Authority Key Identifier: keyid:53:A7:C1:EF:D7:33:AC:5F:5B:FF:90:D3:FD:6A:C0:8C:A3:0F:7B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/53A7C1EFD733AC5F5BFF90D3FD6AC08CA30F7B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:45:3d:09:e5:b7:8f:c9:2a:d4:dc:27:49:74:21:bd:c7:96: e5:5f:7c:b9:6b:08:88:eb:4d:83:0e:75:48:04:c7:38:5d:86: df:17:1e:09:5d:6a:73:b8:a3:1f:09:0d:65:59:3a:ea:d2:c9: 4b:8a:4e:32:79:81:f6:37:91:5c:04:2a:d9:ba:81:34:c4:60: a7:b9:87:a2:57:aa:ce:db:69:67:f0:30:a0:f5:8a:f5:6d:59: 24:33:31:7a:86:48:17:62:46:a7:33:9a:30:7e:a7:b2:de:18: e2:32:ff:b5:5f:fc:b7:b3:dd:f1:55:b2:1e:e1:c3:96:46:15: 57:2a:dd:39:09:fc:1a:74:a0:a4:bb:a5:5b:e2:e2:f0:a5:c5: de:8e:9a:09:06:6d:7d:ae:b8:0d:61:aa:31:62:3e:8a:fc:33: 2d:e0:7f:36:03:76:02:9a:53:89:38:9b:bf:c6:73:39:f5:f0: 91:bd:89:bb:83:81:af:f9:1b:89:9d:f4:c2:96:6c:3f:53:06: ee:60:88:4c:58:43:24:7a:7c:bc:44:39:54:a9:63:ab:81:fb: a2:a6:85:c3:da:a9:a9:70:2a:f3:8f:27:e4:5b:b0:7f:10:5b: 0e:fd:13:ce:e7:de:d7:83:05:4b:40:ad:0c:21:3a:f6:01:7b: b4:ea:ac:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR928ffWByJmcM5I7xBOm+FTElowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENB MzBGN0I2NjAeFw0yNjA5MTcwNzMyNThaFw0yNjA5MTgxMDI1NThaMDMxMTAvBgNV BAMTKDRFMkE1NzcwQUUxQTAzN0QwNTRCREJDMDY4Qzc1REI2MUY5NEEzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGjfwbo3PmhkUAU3plu3JYmoS BCrUZ6yk9eGCQWBfyVkufTwvjx8GG+a8A9htZdM8iW2agzeBWBpDzuDAiy5MXjqH EsIg4n1cWHgY3+cmhW1db8V1DosefZcXX9lGCDKp+ZmveoqNfBaLvGlAac2t/WZK h/DX4z39uPm/8fRejeuio66xY3qreuYIbWbIxmqGJWdEMpaNk1EXcnrff4mbZT6L o2YO+OUreyTBMkrjZOLlfJJv7sxsDiGYwFLYClw8JJ7XTHzKW2PflqsVJPD2ScIq YkFEzKPMnuQ2bxGs+oeXDHCOLVf6zBpBGl8JBL6yFbAKVyzY8HmHAFVlBZfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTipXcK4aA30FS9vAaMddth+Uo48wHwYDVR0j BBgwFoAUU6fB79czrF9b/5DT/WrAjKMPe2YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZE NzMzQUM1RjVCRkY5MEQzRkQ2QUMwOENBMzBGN0I2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0E3QzFFRkQ3MzNBQzVGNUJGRjkwRDNGRDZBQzA4Q0EzMEY3 QjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzAvNTNBN0MxRUZENzMzQUM1RjVCRkY5MEQzRkQ2QUMw OENBMzBGN0I2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9FPQnlt4/JKtTcJ0l0Ib3HluVffLlrCIjr TYMOdUgExzhdht8XHgldanO4ox8JDWVZOurSyUuKTjJ5gfY3kVwEKtm6gTTEYKe5 h6JXqs7baWfwMKD1ivVtWSQzMXqGSBdiRqczmjB+p7LeGOIy/7Vf/Lez3fFVsh7h w5ZGFVcq3TkJ/Bp0oKS7pVvi4vClxd6OmgkGbX2uuA1hqjFiPor8My3gfzYDdgKa U4k4m7/Gczn18JG9ibuDga/5G4md9MKWbD9TBu5giExYQyR6fLxEOVSpY6uB+6Km hcPaqalwKvOPJ+RbsH8QWw79E87n3teDBUtArQwhOvYBe7TqrAQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:26:48 2026 by rpki-client