$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft File: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft (raw, json) Hash identifier: cEQL3xYM52xdBwXp+cJRafAzbXpXTlqwdaZICpC/xbA= Subject key identifier: 10:5C:EE:35:05:ED:A4:10:8A:DF:15:F7:C6:9E:00:25:66:D9:75:DA Authority key identifier: 53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE Certificate issuer: /CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Certificate serial: 2E4662EF3EF777F1ED1F462A7130498E2122D793 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft Manifest number: EA Signing time: Sun 25 Oct 2026 00:55:15 +0000 Manifest this update: Sun 25 Oct 2026 00:50:15 +0000 Manifest next update: Mon 26 Oct 2026 03:48:15 +0000 Files and hashes: 1: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: 2MukM/v9aFusn7PyNb19gRvoMiBXFptvUWQBjx4XUa4=) 2: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: TSYU0iwD60Xe34QfPIACUkCgRuYurT05KHU1s0QtGmw=) 3: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: +rJFOvb4bPx8zpBXNTS78swcOdCdtndICUOjgWGGCws=) 4: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: BL3YV8OyoAQ7j+EF73e3LAhx4M4vSUgHtEhY9UKiKNQ=) 5: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: ezm2UyLDROJssp5IVp01JQcXbqSnetzdwENXlkiCFfE=) 6: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: m05tCCtHoncngpxhcE+KAOaSWn3A5TCSdMi96lfmrtI=) 7: 53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl (hash: ud+oeujICkdbfhw809WrbZG0UIRlkpU9XJOcTteYXqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:46:62:ef:3e:f7:77:f1:ed:1f:46:2a:71:30:49:8e:21:22:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ACB45E4656FA3376DE7D38E028658733AFBFAE Validity Not Before: Oct 25 00:50:15 2026 GMT Not After : Oct 26 03:48:15 2026 GMT Subject: CN=105CEE3505EDA4108ADF15F7C69E002566D975DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:25:0d:e9:af:99:7c:59:17:35:96:53:d9: 4e:3e:27:8a:5d:1d:2a:48:25:46:22:9b:fc:72:49: 49:0f:c4:1d:5b:91:5a:36:e2:1f:fb:53:07:7b:aa: ab:80:8b:ab:15:6e:d5:26:3a:c4:6a:bd:c8:8c:f2: 20:1c:e2:59:ba:dd:ad:e8:75:32:47:49:d8:21:fe: 0b:19:1c:3e:b1:33:c9:35:12:f0:88:6c:a3:73:d2: a3:3c:f7:48:1e:ee:58:13:e0:3b:10:7a:c8:fd:a8: 74:10:8f:96:fc:e2:6d:17:af:6a:bd:d0:ca:8c:ea: 7a:39:f1:a6:ac:ce:ca:80:c4:b0:1e:3f:fc:c0:14: fd:21:09:99:f0:62:0c:98:d8:f2:71:cd:36:82:8a: 81:65:24:e2:9c:b6:a1:16:ab:83:d3:67:03:6d:26: d3:9e:6c:76:9d:0a:13:20:85:c0:e7:8a:f3:8c:25: d1:d3:89:a5:76:ef:b0:0a:ae:d1:e9:01:98:eb:77: c9:85:0f:f6:a2:af:10:ce:96:0d:d9:17:fd:5d:69: 64:ec:8f:2c:b6:29:e7:9e:b1:b7:42:1e:80:28:87: f5:94:e4:2a:0b:54:68:5a:4d:70:81:63:cb:5e:13: e4:d9:0e:46:05:03:2e:44:91:c3:5e:c7:71:9b:fe: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:EE:35:05:ED:A4:10:8A:DF:15:F7:C6:9E:00:25:66:D9:75:DA X509v3 Authority Key Identifier: keyid:53:AC:B4:5E:46:56:FA:33:76:DE:7D:38:E0:28:65:87:33:AF:BF:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53ACB45E4656FA3376DE7D38E028658733AFBFAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/53ACB45E4656FA3376DE7D38E028658733AFBFAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:33:36:7b:3e:80:a5:da:bd:9c:6c:a2:49:47:fe:c4:02:1e: c8:22:a6:d9:0a:20:a7:65:60:d6:ee:5a:b5:67:51:c6:42:dc: 29:2a:23:6f:ec:22:bd:2f:30:a9:1f:41:76:5f:39:fd:42:cf: 55:f7:40:2e:93:b1:06:f9:35:88:3f:23:09:b8:67:ef:a5:0a: 44:dc:0b:dd:34:81:7c:08:cb:ec:c2:f1:db:c2:25:e7:d8:3e: 7d:2b:25:21:b0:c7:ee:4f:f7:0c:fa:7e:bf:e0:3a:aa:f6:71: c2:06:d2:b3:44:84:2c:96:ae:44:5b:72:bb:74:ff:fe:05:86: 32:79:b0:d2:84:40:80:b8:1c:6e:d5:0e:96:b4:92:23:2f:4c: cf:4b:af:ee:30:7b:6d:6c:18:44:4f:66:ff:61:a5:bb:fa:69: 43:6f:f8:82:62:18:9f:b9:a7:1f:3b:14:47:7f:7b:69:65:13: e9:5c:8a:a1:75:5b:f5:f9:9d:8e:52:05:18:09:22:df:c6:de: eb:27:96:5a:1c:78:63:87:7a:b2:2a:5d:8e:2b:f0:72:46:8c: cd:75:41:89:85:bc:3b:10:1c:12:11:d4:e7:1b:ec:fd:ff:2f: c4:6e:81:3c:c4:11:a2:6b:b8:49:20:95:96:1e:5e:79:c3:d5: 4c:0d:77:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkZi7z73d/HtH0YqcTBJjiEi15MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1ODcz M0FGQkZBRTAeFw0yNjEwMjUwMDUwMTVaFw0yNjEwMjYwMzQ4MTVaMDMxMTAvBgNV BAMTKDEwNUNFRTM1MDVFREE0MTA4QURGMTVGN0M2OUUwMDI1NjZEOTc1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfSUN6a+ZfFkXNZZT2U4+J4pd HSpIJUYim/xySUkPxB1bkVo24h/7Uwd7qquAi6sVbtUmOsRqvciM8iAc4lm63a3o dTJHSdgh/gsZHD6xM8k1EvCIbKNz0qM890ge7lgT4DsQesj9qHQQj5b84m0Xr2q9 0MqM6no58aaszsqAxLAeP/zAFP0hCZnwYgyY2PJxzTaCioFlJOKctqEWq4PTZwNt JtOebHadChMghcDnivOMJdHTiaV277AKrtHpAZjrd8mFD/airxDOlg3ZF/1daWTs jyy2KeeesbdCHoAoh/WU5CoLVGhaTXCBY8teE+TZDkYFAy5EkcNex3Gb/u3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEFzuNQXtpBCK3xX3xp4AJWbZddowHwYDVR0j BBgwFoAUU6y0XkZW+jN23n044ChlhzOvv64wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGM3NmM4NWYtOWE0Zi00YWZjLTk2OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0 NjU2RkEzMzc2REU3RDM4RTAyODY1ODczM0FGQkZBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FDQjQ1RTQ2NTZGQTMzNzZERTdEMzhFMDI4NjU4NzMzQUZC RkFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGM3NmM4NWYtOWE0Zi00YWZjLTk2 OWItOGRhMjUzNmM1YzI0LzAvNTNBQ0I0NUU0NjU2RkEzMzc2REU3RDM4RTAyODY1 ODczM0FGQkZBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABozNns+gKXavZxsoklH/sQCHsgiptkKIKdl YNbuWrVnUcZC3CkqI2/sIr0vMKkfQXZfOf1Cz1X3QC6TsQb5NYg/Iwm4Z++lCkTc C900gXwIy+zC8dvCJefYPn0rJSGwx+5P9wz6fr/gOqr2ccIG0rNEhCyWrkRbcrt0 //4FhjJ5sNKEQIC4HG7VDpa0kiMvTM9Lr+4we21sGERPZv9hpbv6aUNv+IJiGJ+5 px87FEd/e2llE+lciqF1W/X5nY5SBRgJIt/G3usnlloceGOHerIqXY4r8HJGjM11 QYmFvDsQHBIR1Ocb7P3/L8RugTzEEaJruEkglZYeXnnD1UwNdw4= -----END CERTIFICATE-----Generated at Sun Oct 25 20:07:19 2026 by rpki-client