$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: +aLC4iDnnGGNCDDuj155WE5JV++zsFodnu1DWc8YOy4= Subject key identifier: 25:57:86:46:45:99:26:D4:30:79:0D:09:BB:C8:07:1A:56:D8:6D:07 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 37F99A11B40DBE9A1F364693C00FB1AA9F1079CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:55:49 +0000 Manifest this update: Thu 23 Jul 2026 12:50:49 +0000 Manifest next update: Fri 24 Jul 2026 14:49:49 +0000 Files and hashes: 1: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 3: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: wbD3RlulmKzigl0haTvqchFRcQHt6BsFzp+X2r8h/UA=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f9:9a:11:b4:0d:be:9a:1f:36:46:93:c0:0f:b1:aa:9f:10:79:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Jul 23 12:50:49 2026 GMT Not After : Jul 24 14:49:49 2026 GMT Subject: CN=25578646459926D430790D09BBC8071A56D86D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:45:35:a8:20:f9:d2:53:fd:9f:98:e1:99: 93:b6:f4:80:14:bd:b3:07:93:1a:eb:fe:d8:c3:8b: 08:25:e8:7a:c3:28:ad:79:41:28:ad:0e:36:3f:86: 48:99:bb:ba:ba:58:92:9d:c1:37:34:30:4c:14:c3: 52:63:1e:14:a5:2e:87:72:9e:75:ed:e3:35:3e:be: 23:66:4e:30:60:8f:41:4b:0b:25:79:26:fc:e6:f4: 54:04:8c:f8:48:09:ac:44:41:bd:88:b1:90:c5:54: d0:7d:7f:3c:1a:5b:99:0c:1b:40:ac:51:f2:a2:e1: 92:2a:53:c7:bd:4d:fd:15:38:81:7f:a6:cc:13:02: 9e:78:b7:bc:a9:62:5b:b1:c3:60:bb:e3:0e:1c:3c: 55:7d:71:f1:d3:79:91:73:0c:83:07:31:17:19:67: 4d:9d:d1:01:76:9a:4d:97:dc:b8:34:1f:c1:d2:07: 67:69:38:7e:65:3a:26:13:3c:ae:2d:a2:27:93:71: 88:6c:8c:82:aa:a8:dd:cd:f8:74:1d:62:bb:da:23: 70:4a:e1:b7:8d:09:46:a1:53:c8:ff:f2:34:e7:48: 42:1b:fb:05:2a:f5:37:c5:5c:13:37:5e:2a:6c:3f: fa:79:af:85:ab:32:28:11:43:64:3f:1a:17:66:97: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:86:46:45:99:26:D4:30:79:0D:09:BB:C8:07:1A:56:D8:6D:07 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:07:ac:6d:dc:49:78:fa:45:0b:da:5b:96:a9:7e:c2:88:5f: ce:ad:3d:9d:59:f7:f2:4b:2a:4d:e2:2c:91:d0:b9:37:fb:04: 37:50:30:f8:29:90:ad:3e:3d:76:9b:05:6e:6f:c5:d3:a1:3e: ba:b3:10:68:86:97:1e:a7:30:64:45:24:73:ad:62:6e:65:78: c1:51:fe:f7:4e:d7:10:f0:bd:8a:27:48:eb:6e:26:68:ed:9c: af:c8:9e:e2:69:3e:03:7b:45:71:db:8d:3e:45:bd:9b:73:8a: 4e:95:7f:f4:d7:6c:95:de:2a:26:32:37:cc:71:b7:ba:c6:95: 7f:81:11:d0:f0:ef:ad:c3:da:76:23:b1:66:d1:2a:68:9e:40: 82:80:f5:a7:06:c0:07:9e:ec:5c:4d:69:f0:dd:01:0e:a3:fe: 05:95:e3:56:a9:63:8d:52:4a:e7:55:ad:e2:08:1b:c3:77:bf: 8b:fc:c0:bd:43:2e:22:8d:3b:25:35:a0:94:3d:ca:ab:61:3d: ae:66:db:03:cf:9e:56:92:ce:dd:9f:76:8c:66:52:83:4a:31: b2:ef:64:1b:f7:7d:3c:25:b3:63:4c:bc:29:8b:a8:47:7c:43: 45:a4:d7:af:b0:63:07:a8:25:34:04:23:f0:82:17:2f:bf:7e: b5:33:8d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/maEbQNvpofNkaTwA+xqp8QecowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA3MjMxMjUwNDlaFw0yNjA3MjQxNDQ5NDlaMDMxMTAvBgNV BAMTKDI1NTc4NjQ2NDU5OTI2RDQzMDc5MEQwOUJCQzgwNzFBNTZEODZEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyEU1qCD50lP9n5jhmZO29IAU vbMHkxrr/tjDiwgl6HrDKK15QSitDjY/hkiZu7q6WJKdwTc0MEwUw1JjHhSlLody nnXt4zU+viNmTjBgj0FLCyV5Jvzm9FQEjPhICaxEQb2IsZDFVNB9fzwaW5kMG0Cs UfKi4ZIqU8e9Tf0VOIF/pswTAp54t7ypYluxw2C74w4cPFV9cfHTeZFzDIMHMRcZ Z02d0QF2mk2X3Lg0H8HSB2dpOH5lOiYTPK4toieTcYhsjIKqqN3N+HQdYrvaI3BK 4beNCUahU8j/8jTnSEIb+wUq9TfFXBM3XipsP/p5r4WrMigRQ2Q/Ghdml5JhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJVeGRkWZJtQweQ0Ju8gHGlbYbQcwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoHrG3cSXj6RQvaW5apfsKIX86tPZ1Z9/JL Kk3iLJHQuTf7BDdQMPgpkK0+PXabBW5vxdOhPrqzEGiGlx6nMGRFJHOtYm5leMFR /vdO1xDwvYonSOtuJmjtnK/InuJpPgN7RXHbjT5FvZtzik6Vf/TXbJXeKiYyN8xx t7rGlX+BEdDw763D2nYjsWbRKmieQIKA9acGwAee7FxNafDdAQ6j/gWV41apY41S SudVreIIG8N3v4v8wL1DLiKNOyU1oJQ9yqthPa5m2wPPnlaSzt2fdoxmUoNKMbLv ZBv3fTwls2NMvCmLqEd8Q0Wk16+wYweoJTQEI/CCFy+/frUzjWs= -----END CERTIFICATE-----Generated at Fri Jul 24 04:05:37 2026 by rpki-client