$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft File: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft (raw, json) Hash identifier: eJo2r4mdZjVnGk9Aylu+/JpFlU2nXaKn0FJUe4VBs2s= Subject key identifier: 2A:2F:BA:37:0C:EA:25:42:BC:CE:EE:E9:84:BF:41:C4:DB:5C:3D:1B Authority key identifier: 53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 Certificate issuer: /CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Certificate serial: 6B5C91C53E6FB901C20F4EA599F2D661B4293EA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:45:49 +0000 Manifest this update: Wed 16 Sep 2026 21:40:49 +0000 Manifest next update: Thu 17 Sep 2026 22:26:49 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: sGKE5Fi9WNAXy6MtGSBzO3fsWvU5EdeEKi1Fq0HGEPY=) 2: 53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl (hash: hz/ndgESs5au30Hej6hze6UBLR+cSqviCSFL9249bj4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5c:91:c5:3e:6f:b9:01:c2:0f:4e:a5:99:f2:d6:61:b4:29:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1 Validity Not Before: Sep 16 21:40:49 2026 GMT Not After : Sep 17 22:26:49 2026 GMT Subject: CN=2A2FBA370CEA2542BCCEEEE984BF41C4DB5C3D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:ce:fe:9a:cc:12:53:6b:c4:20:c3:72:bf: b0:6c:d6:4c:96:a5:b5:d5:28:e7:54:74:53:93:8b: 28:47:d0:05:e0:8f:9a:79:b6:29:d1:19:21:29:4c: 61:7c:4b:53:84:e7:58:ea:bc:25:60:43:d9:43:fd: 7f:46:d5:be:1d:2f:f3:5d:6f:a8:85:34:2c:2d:80: b0:cd:74:79:bd:41:52:c8:e6:9d:a1:32:0f:fb:52: b5:b5:d4:36:03:1d:59:45:ae:6c:c1:eb:21:44:eb: ce:ef:27:68:82:73:70:43:f0:c5:1f:89:93:ab:cd: 85:8d:fa:98:e4:96:4f:a3:d8:ce:db:05:50:61:9a: 0d:71:f4:5c:c6:70:76:a2:75:2a:9d:38:d8:ff:68: d4:d7:aa:e6:17:e6:e5:66:7c:7a:37:01:a6:ef:ac: 0a:ba:fe:91:95:cf:bd:7c:48:7a:49:94:df:96:0b: 56:8f:96:dc:c3:12:74:94:46:52:82:5d:02:35:fb: f5:48:37:b9:6c:58:15:a6:84:0f:1e:2a:e6:a3:e2: 13:74:92:dd:42:30:f8:52:a5:08:cb:9b:73:95:fa: 9b:71:3c:23:d2:ee:36:30:eb:04:d2:fd:a1:b8:d0: 3e:22:ff:4d:29:35:5f:e4:63:77:93:81:56:3c:b7: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:BA:37:0C:EA:25:42:BC:CE:EE:E9:84:BF:41:C4:DB:5C:3D:1B X509v3 Authority Key Identifier: keyid:53:AB:7D:32:5B:35:CB:89:AC:FA:1B:63:C2:2B:EA:9E:19:33:5D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/53AB7D325B35CB89ACFA1B63C22BEA9E19335DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:72:45:b1:59:6f:da:cc:05:20:68:40:40:a3:bc:ac:99:39: 74:a2:94:c7:cd:b4:1c:9d:80:a9:1f:a8:bb:08:3b:1e:e4:c3: 92:a4:2f:76:46:a6:d1:30:c8:c3:ac:e6:33:12:fe:38:fa:71: 91:91:4d:7b:75:26:cd:4e:d7:ff:f7:0b:3e:7a:15:67:e7:f5: bf:09:de:f5:81:ad:79:d3:ce:6b:5c:1f:ab:95:b3:e7:2a:e2: d4:b0:d7:61:4f:2a:7f:47:b7:d6:dc:81:76:4e:a9:21:e6:4d: 58:2a:02:7e:69:47:e1:06:bb:10:01:30:fa:88:63:5e:24:2a: bd:ab:9b:c3:e2:51:7a:bd:f4:5d:10:af:22:f5:5f:cb:21:48: 95:40:a3:86:2c:d5:7b:11:93:cb:86:5a:07:f8:72:d2:ae:05: 73:6b:5d:ab:23:d1:38:8d:c3:04:9a:00:17:eb:9c:a4:02:9c: 23:56:85:06:7e:ac:02:69:9f:f8:d9:6e:71:39:bf:65:59:4f: 23:0c:eb:84:86:f1:57:40:c5:e9:eb:dd:96:f2:45:1b:48:e9: 55:16:01:ed:d3:26:00:f1:ab:d1:18:d4:b1:dd:80:cf:bc:ba: b9:e9:bf:93:eb:fb:32:44:22:ff:a4:25:a6:20:9f:4a:71:28: 10:92:35:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1yRxT5vuQHCD06lmfLWYbQpPqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUx OTMzNURBMTAeFw0yNjA5MTYyMTQwNDlaFw0yNjA5MTcyMjI2NDlaMDMxMTAvBgNV BAMTKDJBMkZCQTM3MENFQTI1NDJCQ0NFRUVFOTg0QkY0MUM0REI1QzNEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWs7+mswSU2vEIMNyv7Bs1kyW pbXVKOdUdFOTiyhH0AXgj5p5tinRGSEpTGF8S1OE51jqvCVgQ9lD/X9G1b4dL/Nd b6iFNCwtgLDNdHm9QVLI5p2hMg/7UrW11DYDHVlFrmzB6yFE687vJ2iCc3BD8MUf iZOrzYWN+pjklk+j2M7bBVBhmg1x9FzGcHaidSqdONj/aNTXquYX5uVmfHo3Aabv rAq6/pGVz718SHpJlN+WC1aPltzDEnSURlKCXQI1+/VIN7lsWBWmhA8eKuaj4hN0 kt1CMPhSpQjLm3OV+ptxPCPS7jYw6wTS/aG40D4i/00pNV/kY3eTgVY8t8enAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKi+6NwzqJUK8zu7phL9BxNtcPRswHwYDVR0j BBgwFoAUU6t9Mls1y4ms+htjwivqnhkzXaEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY5ZmQ1YTEtNjAyNi00YmZhLWE2NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1 QjM1Q0I4OUFDRkExQjYzQzIyQkVBOUUxOTMzNURBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81M0FCN0QzMjVCMzVDQjg5QUNGQTFCNjNDMjJCRUE5RTE5MzM1 REExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvNTNBQjdEMzI1QjM1Q0I4OUFDRkExQjYzQzIyQkVB OUUxOTMzNURBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRyRbFZb9rMBSBoQECjvKyZOXSilMfNtByd gKkfqLsIOx7kw5KkL3ZGptEwyMOs5jMS/jj6cZGRTXt1Js1O1//3Cz56FWfn9b8J 3vWBrXnTzmtcH6uVs+cq4tSw12FPKn9Ht9bcgXZOqSHmTVgqAn5pR+EGuxABMPqI Y14kKr2rm8PiUXq99F0QryL1X8shSJVAo4Ys1XsRk8uGWgf4ctKuBXNrXasj0TiN wwSaABfrnKQCnCNWhQZ+rAJpn/jZbnE5v2VZTyMM64SG8VdAxenr3ZbyRRtI6VUW Ae3TJgDxq9EY1LHdgM+8urnpv5Pr+zJEIv+kJaYgn0pxKBCSNXE= -----END CERTIFICATE-----Generated at Thu Sep 17 11:32:45 2026 by rpki-client