$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft File: 53A00628F6956E756C477A3B4A12344C34B5F1A8.mft (raw, json) Hash identifier: h6vL/C6xH2P5LE+dGZaWvDCstOAuLLp8HIp26LwS5EQ= Subject key identifier: 2C:B5:13:8A:89:D9:87:69:A5:63:8D:B6:6F:3E:12:59:39:1E:B5:76 Authority key identifier: 53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 Certificate issuer: /CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Certificate serial: 212C9B2B68C854D14192B32364D5574EDC6AD91F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft Manifest number: EC Signing time: Sun 25 Oct 2026 08:52:31 +0000 Manifest this update: Sun 25 Oct 2026 08:47:31 +0000 Manifest next update: Mon 26 Oct 2026 11:36:31 +0000 Files and hashes: 1: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: yc/0oBt8KMkJ6BObdlHua7S5LWTiZ2ieDOyIo2p9JR8=) 2: 53A00628F6956E756C477A3B4A12344C34B5F1A8.crl (hash: LlwLpit+3yIvtQQjWrHmm8XDYjHM7UITbzqmD7XCADs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2c:9b:2b:68:c8:54:d1:41:92:b3:23:64:d5:57:4e:dc:6a:d9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53A00628F6956E756C477A3B4A12344C34B5F1A8 Validity Not Before: Oct 25 08:47:31 2026 GMT Not After : Oct 26 11:36:31 2026 GMT Subject: CN=2CB5138A89D98769A5638DB66F3E1259391EB576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:aa:2b:3b:a4:50:d4:8b:48:39:94:b4:f1: 87:b5:46:6f:cd:a6:1c:35:94:aa:02:40:b8:c8:10: 6f:50:89:c0:bf:4c:93:b1:2f:c1:2b:9e:27:94:0e: 73:46:a0:48:95:3c:32:be:74:6a:0f:8e:16:26:0e: 70:34:bd:50:91:06:3d:cf:5b:57:b0:c5:22:96:0f: 41:c3:ff:ec:39:7c:68:ef:e9:1b:f9:b1:ff:ec:8a: e5:10:d8:0b:c5:2d:da:f6:ff:ae:dd:49:fb:3c:e1: d5:63:07:dc:c7:e0:3b:94:d3:26:08:1f:ce:80:7e: 28:32:7e:76:01:1f:af:cf:2e:8f:bf:1a:17:05:1d: 5c:56:eb:b8:8e:67:15:d4:f5:10:da:d2:b1:f2:f7: 8b:a5:9c:bf:52:17:a5:da:83:d0:9d:20:fb:cc:ee: bd:80:6a:ce:34:e9:47:c8:18:fc:5c:bd:54:fc:90: 18:3e:30:c5:2a:36:ff:1f:76:97:ef:46:fa:f6:38: 65:1c:a7:df:82:a7:f2:74:ba:b2:a1:14:19:de:d9: 18:4e:d3:66:1d:4c:ca:1e:6d:72:1a:34:67:d4:de: ca:8a:1b:13:96:ab:91:36:23:c2:70:12:82:34:51: f0:7c:ac:b8:ce:a8:8d:5c:75:aa:91:3b:6d:ec:47: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B5:13:8A:89:D9:87:69:A5:63:8D:B6:6F:3E:12:59:39:1E:B5:76 X509v3 Authority Key Identifier: keyid:53:A0:06:28:F6:95:6E:75:6C:47:7A:3B:4A:12:34:4C:34:B5:F1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53A00628F6956E756C477A3B4A12344C34B5F1A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/53A00628F6956E756C477A3B4A12344C34B5F1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3e:92:d9:b1:7c:e5:5b:e8:ab:ad:15:8e:74:af:2d:93:3a: 0a:a6:d5:23:49:29:d7:f8:a6:88:63:9d:58:f6:7d:1e:26:6b: 97:d0:a0:be:9a:62:55:3b:a7:c9:84:9c:03:a1:a2:8c:c6:10: 8d:86:60:87:60:f5:3c:fa:ae:01:23:57:b2:47:46:aa:7c:c3: e5:c8:4b:03:9c:6e:4c:03:f6:f1:49:9f:4a:c3:3b:80:2e:95: 3a:fe:98:76:d1:6d:37:bf:25:39:8a:cf:c5:ee:14:33:54:f0: 04:5c:e9:88:66:b6:e5:f4:1c:e0:32:53:96:f5:34:dc:d1:09: d5:9c:e8:d3:a7:c3:ed:4e:cc:f3:c4:20:f0:3a:b9:86:9a:bb: e8:8b:c2:2e:db:c4:7f:16:86:fd:f1:d0:a5:ab:49:1a:f0:98: c3:fa:ae:65:ec:97:ea:c9:0e:15:1c:6f:ae:37:10:44:17:92: af:d6:57:d9:32:b0:9b:d5:b4:42:2e:b6:f4:3a:13:da:1f:2d: 8e:81:5d:74:06:62:b5:fe:c4:80:c2:a8:ea:f2:d7:ff:1f:66: 2e:da:17:a7:3b:26:c5:71:31:14:93:21:c0:d2:2a:98:86:50: 1b:08:99:f1:4a:fb:af:f5:2a:ba:cd:d6:88:f2:d6:5b:cc:47: 4b:f4:0a:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISybK2jIVNFBkrMjZNVXTtxq2R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0NEMz NEI1RjFBODAeFw0yNjEwMjUwODQ3MzFaFw0yNjEwMjYxMTM2MzFaMDMxMTAvBgNV BAMTKDJDQjUxMzhBODlEOTg3NjlBNTYzOERCNjZGM0UxMjU5MzkxRUI1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrDqorO6RQ1ItIOZS08Ye1Rm/N phw1lKoCQLjIEG9QicC/TJOxL8ErnieUDnNGoEiVPDK+dGoPjhYmDnA0vVCRBj3P W1ewxSKWD0HD/+w5fGjv6Rv5sf/siuUQ2AvFLdr2/67dSfs84dVjB9zH4DuU0yYI H86AfigyfnYBH6/PLo+/GhcFHVxW67iOZxXU9RDa0rHy94ulnL9SF6Xag9CdIPvM 7r2Aas406UfIGPxcvVT8kBg+MMUqNv8fdpfvRvr2OGUcp9+Cp/J0urKhFBne2RhO 02YdTMoebXIaNGfU3sqKGxOWq5E2I8JwEoI0UfB8rLjOqI1cdaqRO23sR4UbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLUTionZh2mlY422bz4SWTketXYwHwYDVR0j BBgwFoAUU6AGKPaVbnVsR3o7ShI0TDS18agwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDI2MWZhYmItZDQ2Zi00ZjhjLTgxMDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhG Njk1NkU3NTZDNDc3QTNCNEExMjM0NEMzNEI1RjFBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0EwMDYyOEY2OTU2RTc1NkM0NzdBM0I0QTEyMzQ0QzM0QjVG MUE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvNTNBMDA2MjhGNjk1NkU3NTZDNDc3QTNCNEExMjM0 NEMzNEI1RjFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA+ktmxfOVb6KutFY50ry2TOgqm1SNJKdf4 pohjnVj2fR4ma5fQoL6aYlU7p8mEnAOhoozGEI2GYIdg9Tz6rgEjV7JHRqp8w+XI SwOcbkwD9vFJn0rDO4AulTr+mHbRbTe/JTmKz8XuFDNU8ARc6YhmtuX0HOAyU5b1 NNzRCdWc6NOnw+1OzPPEIPA6uYaau+iLwi7bxH8Whv3x0KWrSRrwmMP6rmXsl+rJ DhUcb643EEQXkq/WV9kysJvVtEIutvQ6E9ofLY6BXXQGYrX+xIDCqOry1/8fZi7a F6c7JsVxMRSTIcDSKpiGUBsImfFK+6/1KrrN1ojy1lvMR0v0CoM= -----END CERTIFICATE-----Generated at Sun Oct 25 19:51:31 2026 by rpki-client