$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: 0a8EiMc/XS1EBHZr0ZGrYd7AbyaFUlYq8s7oG3HtLCc= Subject key identifier: EB:52:32:9B:1E:C5:7E:BA:BF:29:D0:B9:0E:C9:2A:3F:46:04:18:C0 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 7BC91B6DB9E06DFE86CC32C7197DA581464A88EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:30:31 +0000 Manifest this update: Tue 12 May 2026 19:25:31 +0000 Manifest next update: Wed 13 May 2026 21:45:31 +0000 Files and hashes: 1: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: heI8Q3Z1TOVBT8SzbDfpXM4HpXQEPl7O7bqhV3YukjA=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 3: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c9:1b:6d:b9:e0:6d:fe:86:cc:32:c7:19:7d:a5:81:46:4a:88:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: May 12 19:25:31 2026 GMT Not After : May 13 21:45:31 2026 GMT Subject: CN=EB52329B1EC57EBABF29D0B90EC92A3F460418C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:81:74:27:02:88:7e:b3:e0:41:8a:4a:f0: 39:54:02:9b:6e:3b:bb:ae:05:f5:e1:94:07:43:ac: b3:96:4c:c5:1b:2f:05:a4:80:f3:fb:38:be:b2:86: 47:03:cf:e1:1e:6f:67:22:f3:85:6d:58:ae:6b:39: e8:b2:a5:c4:af:24:35:6f:ac:4f:29:14:4d:a4:7e: 9c:01:9e:42:8a:03:7f:a4:99:76:c9:d1:07:3c:bd: 26:19:13:b5:28:87:20:10:a2:9d:bd:66:27:e3:b9: 2c:08:42:60:7f:18:b1:33:b4:ea:a2:c2:e1:51:48: d7:e2:b9:79:41:cb:08:f5:fb:6e:8f:41:06:a1:99: 8a:b6:2f:ab:54:ae:26:4a:81:f4:21:81:57:28:44: 0f:81:7d:a6:c6:10:42:6c:08:32:6a:80:77:c6:03: a8:99:67:a6:0b:24:16:5c:05:15:35:d9:78:48:33: f8:40:18:07:cb:1c:2c:a4:d6:7b:6c:13:15:8b:cc: e5:99:49:c8:53:51:f0:7d:3b:93:06:6a:b5:f9:24: 38:29:63:3c:42:56:20:e6:0a:aa:80:17:53:36:82: 47:0f:88:ae:34:97:22:6d:cd:3c:d2:d4:3c:33:a4: 26:ab:da:69:cf:20:9f:08:97:d8:ee:9c:6e:67:54: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:32:9B:1E:C5:7E:BA:BF:29:D0:B9:0E:C9:2A:3F:46:04:18:C0 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:27:9a:39:99:7b:3f:0f:aa:49:e0:42:be:04:20:6a:6b: e6:2a:57:96:59:12:e3:05:b9:f0:b4:3d:84:80:f9:00:e4:7d: d5:31:8c:2b:f1:28:2e:86:d8:e4:0f:28:6a:d6:cd:b5:89:b3: ee:5f:01:53:ef:69:c8:18:36:70:64:f5:73:67:49:33:b5:1b: ec:fc:a0:aa:f4:04:82:0b:2f:fe:8b:09:70:0c:77:ff:b9:b3: 40:8c:ef:f4:e3:e0:3e:07:da:e7:21:04:f9:38:78:da:5f:ea: 58:93:34:b8:70:10:6e:b1:d4:80:37:17:ed:19:c5:0a:4d:b8: ad:0d:ac:3f:0b:c0:16:14:c9:0b:5d:74:7b:c2:78:fe:25:08: a4:7c:37:80:70:fd:f6:63:a5:d9:29:00:0a:8c:83:9f:68:8f: c8:3d:6a:5d:10:05:ac:fe:39:92:46:41:d1:8e:dc:c9:6a:aa: 2f:3f:0a:41:10:5c:97:27:a8:31:7f:9e:f7:c6:95:17:a8:93: 0b:8b:57:fe:71:f0:eb:c8:c0:c9:2f:4a:29:83:8f:24:f3:94: 9f:10:f2:8a:be:a7:5f:15:1f:bb:f4:6c:b7:e3:7e:c6:32:96: c3:cd:2b:bd:ac:bf:bd:5b:e4:82:78:22:30:44:3c:cc:ce:48: 3f:c3:10:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8kbbbngbf6GzDLHGX2lgUZKiOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA1MTIxOTI1MzFaFw0yNjA1MTMyMTQ1MzFaMDMxMTAvBgNV BAMTKEVCNTIzMjlCMUVDNTdFQkFCRjI5RDBCOTBFQzkyQTNGNDYwNDE4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfIF0JwKIfrPgQYpK8DlUAptu O7uuBfXhlAdDrLOWTMUbLwWkgPP7OL6yhkcDz+Eeb2ci84VtWK5rOeiypcSvJDVv rE8pFE2kfpwBnkKKA3+kmXbJ0Qc8vSYZE7UohyAQop29ZifjuSwIQmB/GLEztOqi wuFRSNfiuXlBywj1+26PQQahmYq2L6tUriZKgfQhgVcoRA+BfabGEEJsCDJqgHfG A6iZZ6YLJBZcBRU12XhIM/hAGAfLHCyk1ntsExWLzOWZSchTUfB9O5MGarX5JDgp YzxCViDmCqqAF1M2gkcPiK40lyJtzTzS1DwzpCar2mnPIJ8Il9junG5nVPC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61Iymx7Ffrq/KdC5DskqP0YEGMAwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP6J5o5mXs/D6pJ4EK+BCBqa+YqV5ZZEuMF ufC0PYSA+QDkfdUxjCvxKC6G2OQPKGrWzbWJs+5fAVPvacgYNnBk9XNnSTO1G+z8 oKr0BIILL/6LCXAMd/+5s0CM7/Tj4D4H2uchBPk4eNpf6liTNLhwEG6x1IA3F+0Z xQpNuK0NrD8LwBYUyQtddHvCeP4lCKR8N4Bw/fZjpdkpAAqMg59oj8g9al0QBaz+ OZJGQdGO3Mlqqi8/CkEQXJcnqDF/nvfGlReokwuLV/5x8OvIwMkvSimDjyTzlJ8Q 8oq+p18VH7v0bLfjfsYylsPNK72sv71b5IJ4IjBEPMzOSD/DEOU= -----END CERTIFICATE-----Generated at Wed May 13 07:57:23 2026 by rpki-client