$ rpki-client -vvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: CPa6KtBUdKPjETKNaQgGMnzF+I62M8gr11wwkNpn68g= Subject key identifier: 80:20:65:AD:FC:82:16:14:9B:5D:9D:C7:98:6D:A5:19:DD:9D:81:7F Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 2F7100A81D410CBE834417E174CB591A579648E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:46:12 +0000 Manifest this update: Tue 12 May 2026 02:41:12 +0000 Manifest next update: Wed 13 May 2026 06:01:12 +0000 Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: FhG5QtmzILGj+pNjAESoRxWapUF1NIC4JV0xU1Ljgus=) 2: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: g+Bn4OwdDSPh0QF9Baihb+CvFN1Nh8/bxMfT1Qnl02E=) 3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: WrSJd5YUGq7YYnOq5t3g7z49xRPwMhZ81C68sNOoXaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:71:00:a8:1d:41:0c:be:83:44:17:e1:74:cb:59:1a:57:96:48:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: May 12 02:41:12 2026 GMT Not After : May 13 06:01:12 2026 GMT Subject: CN=802065ADFC8216149B5D9DC7986DA519DD9D817F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:90:6b:80:2e:b0:9c:41:32:8b:b7:4f:5d: f3:ec:43:a0:3a:34:67:b9:cd:7f:17:68:aa:3c:d5: 96:ad:12:a6:77:9f:9c:13:44:77:c5:5a:d8:6a:30: 9c:7c:05:fc:52:d2:0b:e3:da:a6:c8:1a:47:4f:91: 88:7c:72:0e:09:cb:95:28:ab:69:f2:07:cd:a7:b1: 8b:2b:be:14:85:b6:e0:60:b3:a4:15:94:3a:d4:3d: a3:72:0b:81:82:f9:44:a8:c5:6f:81:92:3d:80:81: 34:c4:20:c5:2f:03:36:4c:bb:5d:b0:55:97:c5:8e: 0e:c7:48:71:69:f6:ac:64:3b:6d:70:4a:1c:78:b7: 42:ca:18:a0:c4:95:c1:cc:1f:f6:0f:1e:57:6f:cb: c8:2f:a7:aa:bc:1b:81:cc:60:e3:16:b5:8b:65:13: e9:ef:78:7b:ce:e9:2e:99:e3:b8:d6:69:03:59:9f: 85:77:7b:97:f7:17:07:af:26:93:69:18:3d:eb:54: 9e:38:93:d7:37:d4:60:ee:30:5a:40:3c:7d:c0:cd: 8b:68:73:e0:3d:04:56:5e:f8:21:80:d3:bf:29:66: 3e:06:de:07:82:47:ef:d8:0c:55:ee:48:32:f9:f8: df:5e:29:e2:25:4c:50:d3:ef:c8:51:b6:6b:bd:00: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:20:65:AD:FC:82:16:14:9B:5D:9D:C7:98:6D:A5:19:DD:9D:81:7F X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b6:d0:8f:20:5c:04:68:2d:35:2c:63:6c:f0:cb:04:ca:29: 37:3a:f4:e4:f9:8c:50:7a:06:36:21:f6:26:ef:40:30:b2:82: eb:0f:fe:e5:d3:71:95:5f:92:9f:ce:2d:22:8a:ad:63:e8:ce: 26:87:fc:a7:96:2b:07:a3:9c:13:11:1e:40:e4:d0:b3:73:10: 47:0f:99:0d:a7:4e:cf:35:04:69:bd:b6:e6:05:87:f8:28:aa: e7:08:36:5b:57:61:fe:b1:53:85:09:f5:a8:03:b1:dd:dd:ca: 82:65:19:32:bb:05:b7:aa:31:a0:35:42:22:40:2f:b2:2c:f6: 9a:b5:f8:a7:ec:62:35:b2:4a:a3:d0:0d:5e:b7:af:b0:ea:28: 66:66:d5:c0:59:2c:a5:5c:91:70:44:43:43:0a:f0:01:f4:a1: c0:08:50:b6:f6:35:78:8d:81:67:83:e2:89:5a:49:0f:7b:44: 5d:ed:f6:09:51:66:42:02:19:78:ae:5c:a1:0b:b2:1b:88:f1: d9:00:1f:05:ae:30:e8:07:ba:dd:b0:7a:77:31:5f:7c:2e:c7: d0:67:df:39:93:c9:10:b8:c3:af:34:45:76:44:3b:50:12:0c: 88:d8:e0:a6:e1:8a:73:a5:fa:49:14:a1:49:11:1e:a5:12:63: 7b:71:34:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3EAqB1BDL6DRBfhdMtZGleWSOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA1MTIwMjQxMTJaFw0yNjA1MTMwNjAxMTJaMDMxMTAvBgNV BAMTKDgwMjA2NUFERkM4MjE2MTQ5QjVEOURDNzk4NkRBNTE5REQ5RDgxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXR5BrgC6wnEEyi7dPXfPsQ6A6 NGe5zX8XaKo81ZatEqZ3n5wTRHfFWthqMJx8BfxS0gvj2qbIGkdPkYh8cg4Jy5Uo q2nyB82nsYsrvhSFtuBgs6QVlDrUPaNyC4GC+USoxW+Bkj2AgTTEIMUvAzZMu12w VZfFjg7HSHFp9qxkO21wShx4t0LKGKDElcHMH/YPHldvy8gvp6q8G4HMYOMWtYtl E+nveHvO6S6Z47jWaQNZn4V3e5f3FwevJpNpGD3rVJ44k9c31GDuMFpAPH3AzYto c+A9BFZe+CGA078pZj4G3geCR+/YDFXuSDL5+N9eKeIlTFDT78hRtmu9AOQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCBlrfyCFhSbXZ3HmG2lGd2dgX8wHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW20I8gXARoLTUsY2zwywTKKTc69OT5jFB6 BjYh9ibvQDCygusP/uXTcZVfkp/OLSKKrWPoziaH/KeWKwejnBMRHkDk0LNzEEcP mQ2nTs81BGm9tuYFh/goqucINltXYf6xU4UJ9agDsd3dyoJlGTK7BbeqMaA1QiJA L7Is9pq1+KfsYjWySqPQDV63r7DqKGZm1cBZLKVckXBEQ0MK8AH0ocAIULb2NXiN gWeD4olaSQ97RF3t9glRZkICGXiuXKELshuI8dkAHwWuMOgHut2wencxX3wux9Bn 3zmTyRC4w680RXZEO1ASDIjY4KbhinOl+kkUoUkRHqUSY3txNMQ= -----END CERTIFICATE-----Generated at Tue May 12 22:49:40 2026 by rpki-client