
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json)
Hash identifier: ex4dpWJNCI9I/fcjMFhOW1f8cIPTW4HmH6Rgbf1gVU4=
Subject key identifier: B4:AA:73:D7:F9:E3:77:F5:71:7B:00:32:81:F5:A4:16:89:33:E8:54
Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Certificate serial: 1FDBDFB9F62E8535B7945EF1A14ED9489A2F7AE1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 13:23:18 +0000
Manifest this update: Sun 25 Oct 2026 13:18:18 +0000
Manifest next update: Mon 26 Oct 2026 15:52:18 +0000
Files and hashes: 1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=)
2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=)
3: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: cU+TFlz+uDLN7aKJs2ghbam8JdWV2U/Ej9h0FI6Ikqw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:db:df:b9:f6:2e:85:35:b7:94:5e:f1:a1:4e:d9:48:9a:2f:7a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5
Validity
Not Before: Oct 25 13:18:18 2026 GMT
Not After : Oct 26 15:52:18 2026 GMT
Subject: CN=B4AA73D7F9E377F5717B003281F5A4168933E854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:14:a1:42:94:19:04:f9:8d:5a:f7:20:be:
7e:98:6b:91:be:5f:43:14:0f:e1:84:6f:44:79:06:
26:01:96:f4:10:78:97:6a:80:cb:0d:c4:bf:c9:3e:
cd:8b:62:8d:e3:74:95:1e:6c:b0:4c:1d:79:02:81:
79:90:be:b7:90:06:ec:34:8c:7a:04:43:3c:06:bc:
32:ec:e6:2b:d4:4e:bd:be:fb:59:a6:1d:77:3f:e0:
59:39:a9:66:ef:ff:2b:4e:46:8b:41:ee:0e:f7:2c:
60:a5:6c:05:d7:b7:6c:12:3e:6f:75:04:5d:07:9d:
18:f4:f3:d1:2e:77:51:7b:8b:06:d2:8a:c1:b0:78:
85:84:28:2d:46:b6:91:d9:9a:20:5d:b8:a0:ab:ce:
f6:b1:c9:2e:85:85:5a:1a:51:96:ea:49:10:a3:ee:
33:f0:fb:74:84:40:10:46:d8:ea:9b:8a:f0:60:ae:
be:e2:3a:e6:de:2a:aa:aa:38:d2:b7:a6:4f:5e:a8:
12:d2:fb:f1:c3:d3:23:b4:f1:dc:5a:2a:f8:3b:18:
7c:59:35:ee:9e:3b:47:75:43:ea:db:60:91:a9:b6:
f3:59:cb:9e:6e:02:33:fa:fc:e9:5c:e8:5a:54:af:
28:c9:b8:0a:5d:2e:65:4f:fc:bc:c6:da:bc:fc:13:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:73:D7:F9:E3:77:F5:71:7B:00:32:81:F5:A4:16:89:33:E8:54
X509v3 Authority Key Identifier:
keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:6b:4f:c0:4c:0b:5d:54:4d:28:91:d1:2b:5f:1d:53:c7:
08:c3:ba:1b:3d:3a:24:83:8e:ba:99:89:a9:d5:d3:71:d5:98:
78:4e:b0:bd:fe:cc:27:75:96:9d:78:ca:a4:a6:13:bd:ee:16:
43:55:3b:85:b7:5f:7d:05:48:3c:2a:fc:8f:e5:a9:1e:4a:19:
c9:9f:f1:04:fc:d3:54:9f:e7:b6:b9:ed:de:be:13:c4:94:83:
02:7f:63:ed:e2:91:99:21:71:23:a2:52:c3:b1:fa:af:16:59:
b6:a7:0e:16:bd:0c:59:4b:f0:69:6e:78:41:76:78:ea:36:7a:
b0:3f:d7:db:12:a4:2c:97:1d:8b:a1:a3:16:02:b3:0c:49:51:
24:83:9b:27:d6:46:81:a3:bb:50:6f:63:50:cf:fa:1c:95:68:
53:bd:6c:97:ee:31:83:2e:00:44:da:11:eb:38:d0:0d:15:33:
82:1e:76:79:76:72:00:aa:4b:1b:86:43:1f:36:91:b5:be:5a:
fb:24:2f:16:c4:02:ad:8a:48:3b:aa:22:64:ba:67:d3:e5:77:
b1:1d:be:ca:a1:0f:de:e8:31:58:9a:e1:76:8f:55:c3:06:4f:
39:fd:f0:ba:ba:45:f5:4e:aa:85:a8:f8:75:4a:78:a6:55:60:
12:e6:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:35 2026 by rpki-client