$ rpki-client -vvvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: 4vHfCFak7rwB0zytRb/kHvjllyfA8x9BjQJkjbYT9BU= Subject key identifier: C9:1C:33:67:B3:07:A3:59:83:6C:1C:B4:5E:3E:0C:B8:8A:E0:7C:D2 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 22837EAC3E3B595E464D2C6CFC1DC18EDBB261E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:11:02 +0000 Manifest this update: Wed 23 Sep 2026 16:06:02 +0000 Manifest next update: Thu 24 Sep 2026 19:22:02 +0000 Files and hashes: 1: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: ZeQxkXAGLohCONv7kbVKioBcColmgcEhlhsPJiG5IYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:83:7e:ac:3e:3b:59:5e:46:4d:2c:6c:fc:1d:c1:8e:db:b2:61:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Sep 23 16:06:02 2026 GMT Not After : Sep 24 19:22:02 2026 GMT Subject: CN=C91C3367B307A359836C1CB45E3E0CB88AE07CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:cc:82:f6:69:0f:c1:09:48:0b:b1:2d:48: 6c:ae:16:0a:11:2d:99:df:34:83:1c:f3:dd:ab:fd: f5:b3:40:33:22:e4:4b:28:6e:ab:b8:66:7d:40:b5: 0e:d4:56:fb:b1:ec:ca:9f:f4:e2:cc:63:be:33:2d: 06:a0:89:a3:11:27:d8:44:14:55:9a:92:64:84:3f: ae:df:e5:b2:ff:c1:48:d2:a7:79:bb:61:51:d3:a5: 90:8c:86:1a:8d:ca:87:e4:04:8b:7d:37:d1:59:2d: 5b:79:b2:70:2a:e1:4e:ec:1a:13:63:e0:5f:58:2e: 66:66:67:46:ce:5a:94:9e:80:38:28:ad:39:c7:5b: 92:4b:45:62:53:ac:28:b6:75:1c:4f:d2:0a:19:de: f9:a4:7d:f3:21:b8:40:d5:94:b2:a6:63:5a:63:97: 9e:1e:0f:24:16:ef:7b:6e:64:38:3e:ea:07:d5:f8: 12:af:d6:b4:8e:d8:9f:78:ef:02:90:90:93:c8:93: 4c:bd:4f:a7:48:91:99:56:9a:a8:0b:d5:4b:90:40: b3:93:e6:e2:e7:af:a9:2c:a3:e3:4a:10:97:fc:f2: 37:2f:3a:2b:aa:15:fa:7b:83:68:6d:d2:53:1d:7c: e4:0c:55:ed:23:d6:a0:e8:48:df:9f:b8:d7:11:7e: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1C:33:67:B3:07:A3:59:83:6C:1C:B4:5E:3E:0C:B8:8A:E0:7C:D2 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:81:37:5e:04:b9:f2:6e:0d:83:12:4c:12:cb:3c:24:49:41: 64:4a:7c:76:da:2f:be:67:db:54:46:63:5f:34:07:34:20:74: 88:7f:8d:3c:76:cd:06:0b:82:c9:71:05:f1:1b:d3:4c:7a:ac: da:bc:af:87:ec:b5:04:76:93:ca:26:32:fe:0d:11:60:fe:0e: 81:c1:d3:21:45:46:4e:dc:b0:4d:e7:d8:88:02:fe:19:32:2b: ac:ce:ee:6b:90:bd:71:ce:40:82:e7:35:ea:d3:c8:47:5f:4e: 51:bb:09:df:e5:b7:ed:42:32:f2:4a:9a:38:23:57:3d:45:d8: 35:9f:98:bc:8f:d7:d5:76:34:43:87:dc:7a:f1:27:93:2c:9b: 17:6a:c2:16:bc:1d:98:35:5e:c6:f7:9a:1a:4d:bc:19:7b:7d: f6:6f:92:d6:22:23:c2:82:b1:42:83:fc:6a:eb:5b:14:c1:db: a6:3c:f7:f7:53:0c:33:03:ff:75:9b:f1:d4:9c:54:da:ca:92: e4:c1:3a:d2:fd:b7:db:af:e7:06:29:93:b0:78:4e:05:fd:19: b2:52:8f:07:59:d4:fd:aa:dd:2a:b9:8c:a0:82:b9:69:fb:a8: 39:cf:38:55:30:7d:bb:5f:46:2d:6d:24:e8:c3:79:c6:09:97: c9:11:86:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoN+rD47WV5GTSxs/B3BjtuyYeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA5MjMxNjA2MDJaFw0yNjA5MjQxOTIyMDJaMDMxMTAvBgNV BAMTKEM5MUMzMzY3QjMwN0EzNTk4MzZDMUNCNDVFM0UwQ0I4OEFFMDdDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikcyC9mkPwQlIC7EtSGyuFgoR LZnfNIMc892r/fWzQDMi5Esobqu4Zn1AtQ7UVvux7Mqf9OLMY74zLQagiaMRJ9hE FFWakmSEP67f5bL/wUjSp3m7YVHTpZCMhhqNyofkBIt9N9FZLVt5snAq4U7sGhNj 4F9YLmZmZ0bOWpSegDgorTnHW5JLRWJTrCi2dRxP0goZ3vmkffMhuEDVlLKmY1pj l54eDyQW73tuZDg+6gfV+BKv1rSO2J947wKQkJPIk0y9T6dIkZlWmqgL1UuQQLOT 5uLnr6kso+NKEJf88jcvOiuqFfp7g2ht0lMdfOQMVe0j1qDoSN+fuNcRfp9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRwzZ7MHo1mDbBy0Xj4MuIrgfNIwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeBN14EufJuDYMSTBLLPCRJQWRKfHbaL75n 21RGY180BzQgdIh/jTx2zQYLgslxBfEb00x6rNq8r4fstQR2k8omMv4NEWD+DoHB 0yFFRk7csE3n2IgC/hkyK6zO7muQvXHOQILnNerTyEdfTlG7Cd/lt+1CMvJKmjgj Vz1F2DWfmLyP19V2NEOH3HrxJ5Msmxdqwha8HZg1Xsb3mhpNvBl7ffZvktYiI8KC sUKD/GrrWxTB26Y89/dTDDMD/3Wb8dScVNrKkuTBOtL9t9uv5wYpk7B4TgX9GbJS jwdZ1P2q3Sq5jKCCuWn7qDnPOFUwfbtfRi1tJOjDecYJl8kRhoM= -----END CERTIFICATE-----Generated at Thu Sep 24 10:56:11 2026 by rpki-client