$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft File: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft (raw, json) Hash identifier: SAN5S26FpxGfYzR2gXpCEn6E+smIKAYPE8uN57+tdTw= Subject key identifier: D4:5A:CB:E8:6E:E6:6C:5A:1A:47:F1:C0:72:74:53:3A:30:35:97:42 Authority key identifier: 53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 Certificate issuer: /CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Certificate serial: 1EBF7F7586A10505277644DAC790383F20C18D9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft Manifest number: 9E Signing time: Thu 27 Aug 2026 17:11:43 +0000 Manifest this update: Thu 27 Aug 2026 17:06:43 +0000 Manifest next update: Fri 28 Aug 2026 18:05:43 +0000 Files and hashes: 1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: aaKY+MlBIUGtoYrPuIo9eQvpF3POtIeNeOCAoDOkoyU=) 2: 53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl (hash: KhFjFBlhMmZKtMhAz/7E9ijpqaKq29rMFGHeUoTtWbc=) 3: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: NrWFwcjJtF0+pFV8eK8O+MJouNSPXjIKPbKv/xdaZv8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bf:7f:75:86:a1:05:05:27:76:44:da:c7:90:38:3f:20:c1:8d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BEE8B1C845E0437DA1BA3CD186763028EF64F5 Validity Not Before: Aug 27 17:06:43 2026 GMT Not After : Aug 28 18:05:43 2026 GMT Subject: CN=D45ACBE86EE66C5A1A47F1C07274533A30359742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:9c:3d:f6:b1:39:f9:9f:73:d9:2b:60:b6: 47:50:b8:eb:c9:da:c4:63:b7:0e:b3:62:b2:e8:09: e7:45:e7:6b:79:43:bf:34:14:08:ce:91:a9:7d:08: 6c:d4:17:e3:f7:e3:3c:bb:a1:09:eb:30:d3:89:18: 3e:57:95:17:3e:e4:d0:5d:e6:7d:66:d4:51:a7:bf: df:eb:1b:61:88:91:ae:3e:95:49:80:31:eb:02:5e: 49:f2:0c:2a:5b:0b:2f:d5:70:98:ca:44:dc:18:48: 2e:da:76:e4:48:63:d2:35:1a:d7:5a:e6:c7:90:05: 2f:49:a6:1c:04:ee:bf:1c:70:28:34:91:64:ff:b1: 74:3c:4c:8d:87:26:60:4c:07:7d:bb:cf:20:1a:21: 39:d6:72:b1:7c:9e:02:8e:fc:6f:c7:43:87:e4:dd: 00:f7:2f:11:b3:97:5b:dc:81:7f:ad:dd:47:87:36: 28:ef:12:3e:a2:37:bf:e0:b5:95:85:e0:0d:93:4a: a1:6d:57:78:6d:65:b9:4e:3b:10:11:3a:00:35:5f: 4e:71:2e:d2:eb:f1:79:70:dc:51:a1:5e:44:69:70: bd:46:28:91:74:4f:a6:ed:14:07:73:de:44:71:c5: 4e:d3:67:bd:63:0b:b2:c4:d0:13:b4:60:c5:35:93: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5A:CB:E8:6E:E6:6C:5A:1A:47:F1:C0:72:74:53:3A:30:35:97:42 X509v3 Authority Key Identifier: keyid:53:BE:E8:B1:C8:45:E0:43:7D:A1:BA:3C:D1:86:76:30:28:EF:64:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/53BEE8B1C845E0437DA1BA3CD186763028EF64F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:cc:84:27:dc:b1:9b:37:9b:8c:06:1a:96:a7:e4:cc:f5:f7: d4:45:b5:cb:b9:76:6a:4b:37:52:d2:7a:3b:82:d0:e4:3b:25: 2a:75:0d:54:60:4f:73:82:b6:5a:b5:5f:7a:a5:a7:51:5d:a7: 70:62:1a:43:52:c4:0e:85:b4:57:50:ad:f4:34:3e:bc:b5:85: dd:97:91:08:58:8a:57:26:05:0f:87:39:76:75:04:b2:fe:2d: 45:87:55:2b:fc:ab:63:26:0e:4e:46:b5:27:0e:3f:3f:2b:25: 9c:bd:ae:da:87:05:b9:7a:bb:3a:4c:7f:f0:bc:93:df:25:87: ed:c0:c1:de:73:33:7f:7e:f5:b3:68:50:38:15:12:c4:5f:68: 91:fd:08:46:17:4e:7b:66:2d:1a:af:f3:b4:fc:2d:05:03:95: d0:ca:70:d3:39:22:1d:76:44:71:ad:be:6a:ff:20:89:be:ab: 15:a3:bf:cb:3a:58:4b:31:05:7f:fe:9b:08:2d:9e:08:1e:3d: 8a:f6:b3:2b:14:7d:87:d4:7c:7c:64:d0:c2:3c:e0:9b:22:98: e0:77:38:b6:15:43:04:bc:0c:48:b0:f0:99:de:9b:bd:d2:7d: 54:4c:64:f8:b7:43:4e:4f:12:3b:63:c4:4e:a6:4a:3b:16:a9: 0d:6a:79:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHr9/dYahBQUndkTax5A4PyDBjZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAy OEVGNjRGNTAeFw0yNjA4MjcxNzA2NDNaFw0yNjA4MjgxODA1NDNaMDMxMTAvBgNV BAMTKEQ0NUFDQkU4NkVFNjZDNUExQTQ3RjFDMDcyNzQ1MzNBMzAzNTk3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84pw99rE5+Z9z2StgtkdQuOvJ 2sRjtw6zYrLoCedF52t5Q780FAjOkal9CGzUF+P34zy7oQnrMNOJGD5XlRc+5NBd 5n1m1FGnv9/rG2GIka4+lUmAMesCXknyDCpbCy/VcJjKRNwYSC7aduRIY9I1Gtda 5seQBS9JphwE7r8ccCg0kWT/sXQ8TI2HJmBMB327zyAaITnWcrF8ngKO/G/HQ4fk 3QD3LxGzl1vcgX+t3UeHNijvEj6iN7/gtZWF4A2TSqFtV3htZblOOxAROgA1X05x LtLr8Xlw3FGhXkRpcL1GKJF0T6btFAdz3kRxxU7TZ71jC7LE0BO0YMU1kxeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1FrL6G7mbFoaR/HAcnRTOjA1l0IwHwYDVR0j BBgwFoAUU77oschF4EN9obo80YZ2MCjvZPUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTk5MGRhNDktOTg2Mi00MWRlLTgzM2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFD ODQ1RTA0MzdEQTFCQTNDRDE4Njc2MzAyOEVGNjRGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0JFRThCMUM4NDVFMDQzN0RBMUJBM0NEMTg2NzYzMDI4RUY2 NEY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvNTNCRUU4QjFDODQ1RTA0MzdEQTFCQTNDRDE4Njc2 MzAyOEVGNjRGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfMhCfcsZs3m4wGGpan5Mz199RFtcu5dmpL N1LSejuC0OQ7JSp1DVRgT3OCtlq1X3qlp1Fdp3BiGkNSxA6FtFdQrfQ0Pry1hd2X kQhYilcmBQ+HOXZ1BLL+LUWHVSv8q2MmDk5GtScOPz8rJZy9rtqHBbl6uzpMf/C8 k98lh+3Awd5zM39+9bNoUDgVEsRfaJH9CEYXTntmLRqv87T8LQUDldDKcNM5Ih12 RHGtvmr/IIm+qxWjv8s6WEsxBX/+mwgtnggePYr2sysUfYfUfHxk0MI84JsimOB3 OLYVQwS8DEiw8Jnem73SfVRMZPi3Q05PEjtjxE6mSjsWqQ1qeeA= -----END CERTIFICATE-----Generated at Thu Aug 27 18:23:31 2026 by rpki-client