$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: 5EshphrN5yQAIJTthjtQ4+BSrIV15V6TTxIBYpFesvY= Subject key identifier: E9:50:81:A1:35:71:FA:A9:F6:89:FE:79:27:D2:72:7D:3C:F3:5E:01 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 3A5156363C8564BFB4CCCCE112CE9E4B8A6177FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 04:34:54 +0000 Manifest this update: Sun 27 Sep 2026 04:29:54 +0000 Manifest next update: Mon 28 Sep 2026 08:22:54 +0000 Files and hashes: 1: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 3: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: kiYSO1JNBCBWRoCFof98DfxGpCLfdJaECw17D+0dKj0=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:51:56:36:3c:85:64:bf:b4:cc:cc:e1:12:ce:9e:4b:8a:61:77:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Sep 27 04:29:54 2026 GMT Not After : Sep 28 08:22:54 2026 GMT Subject: CN=E95081A13571FAA9F689FE7927D2727D3CF35E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:91:0e:f3:31:38:76:44:0f:75:59:78:3a: ab:fa:0b:79:64:ba:66:15:ed:39:61:f4:63:01:17: 57:8a:d4:1e:44:95:9e:84:4d:a8:4f:76:56:d7:1c: b0:e3:76:35:7a:b9:eb:f6:78:15:c8:98:a2:16:ab: a7:a2:8a:f7:1f:a1:ce:d8:27:aa:f4:d6:fe:97:80: f6:54:a2:28:7b:0e:71:2c:35:b3:ea:48:cc:16:59: de:24:b7:1a:50:e3:d8:da:7e:db:13:d6:4f:55:32: 6c:af:99:29:a3:87:c8:9d:13:67:a0:48:97:cc:50: e7:e3:9c:f7:24:fa:13:0a:fe:5e:c8:b0:67:7d:2b: 51:f3:bb:59:0e:ac:e6:6a:c5:6d:f4:96:21:ec:82: c6:22:a7:02:88:c9:c2:50:81:b9:7f:ba:1c:52:dd: f6:9f:cd:c0:59:c0:e6:68:24:4d:6a:a6:9f:d7:b5: f2:0f:7a:82:27:1d:a0:80:b1:55:fd:b6:42:7f:ee: 52:13:8f:82:ec:eb:bf:b8:41:f3:5b:f3:60:dc:b6: 4b:53:d3:68:ee:81:ce:68:31:27:90:78:d1:8a:71: 3e:00:25:9f:9f:94:35:69:d8:34:ef:8d:60:c4:d9: ae:a3:d5:b0:75:3a:31:11:75:7d:41:e5:92:a1:3a: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:50:81:A1:35:71:FA:A9:F6:89:FE:79:27:D2:72:7D:3C:F3:5E:01 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f1:50:a6:d6:6b:cc:0f:f7:e8:a1:dc:be:20:d9:f4:6f:8b: fb:af:79:c7:49:3e:34:54:5e:55:3e:7d:7b:81:32:af:23:30: dc:f1:37:07:59:53:a7:40:34:0c:f8:67:45:bf:70:0c:af:62: 9f:83:16:be:73:9a:c9:e6:87:9c:f8:28:e7:c0:f3:9d:73:ec: 9d:f4:b8:43:e2:1d:7d:90:a5:8f:97:bf:30:2c:d8:d5:25:ff: 67:02:5d:23:02:1e:43:14:9c:50:06:fd:b4:c9:65:e4:ff:55: 5a:ab:7e:b3:b2:f2:56:81:84:05:86:a0:bb:81:36:76:56:de: 7f:73:6c:27:f5:f2:f6:54:ba:d3:55:93:ab:e8:b0:35:88:e8: 6e:64:ea:ca:c3:fb:90:bd:a5:b1:d6:90:e0:62:66:19:c4:c5: 2c:bd:f1:6e:eb:39:b1:9f:3e:99:56:21:45:0c:1b:a7:ed:dd: 44:ad:df:c1:38:b7:b9:f8:04:95:c3:bb:25:3d:37:d5:90:4b: 38:ac:fa:c5:48:d6:13:dc:0a:cc:26:04:31:43:76:f8:97:60: 9d:96:80:0d:70:dc:53:c7:99:bb:5a:c9:c4:43:2c:51:2a:07: 5b:98:c7:f3:ea:b8:9f:86:d5:e2:79:9e:94:b6:a2:7e:e8:bc: 67:31:8d:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlFWNjyFZL+0zMzhEs6eS4phd/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA5MjcwNDI5NTRaFw0yNjA5MjgwODIyNTRaMDMxMTAvBgNV BAMTKEU5NTA4MUExMzU3MUZBQTlGNjg5RkU3OTI3RDI3MjdEM0NGMzVFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpZEO8zE4dkQPdVl4Oqv6C3lk umYV7Tlh9GMBF1eK1B5ElZ6ETahPdlbXHLDjdjV6uev2eBXImKIWq6eiivcfoc7Y J6r01v6XgPZUoih7DnEsNbPqSMwWWd4ktxpQ49jaftsT1k9VMmyvmSmjh8idE2eg SJfMUOfjnPck+hMK/l7IsGd9K1Hzu1kOrOZqxW30liHsgsYipwKIycJQgbl/uhxS 3fafzcBZwOZoJE1qpp/XtfIPeoInHaCAsVX9tkJ/7lITj4Ls67+4QfNb82DctktT 02jugc5oMSeQeNGKcT4AJZ+flDVp2DTvjWDE2a6j1bB1OjERdX1B5ZKhOkv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6VCBoTVx+qn2if55J9JyfTzzXgEwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLxUKbWa8wP9+ih3L4g2fRvi/uvecdJPjRU XlU+fXuBMq8jMNzxNwdZU6dANAz4Z0W/cAyvYp+DFr5zmsnmh5z4KOfA851z7J30 uEPiHX2QpY+XvzAs2NUl/2cCXSMCHkMUnFAG/bTJZeT/VVqrfrOy8laBhAWGoLuB NnZW3n9zbCf18vZUutNVk6vosDWI6G5k6srD+5C9pbHWkOBiZhnExSy98W7rObGf PplWIUUMG6ft3USt38E4t7n4BJXDuyU9N9WQSzis+sVI1hPcCswmBDFDdviXYJ2W gA1w3FPHmbtaycRDLFEqB1uYx/PquJ+G1eJ5npS2on7ovGcxjZY= -----END CERTIFICATE-----Generated at Sun Sep 27 10:07:36 2026 by rpki-client