$ rpki-client -vvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft File: D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json) Hash identifier: QV9P3Yg1J0dJ2bqO+qXRNCxBYmKy751XhfNw5cU8jnE= Subject key identifier: 5A:9C:0C:E3:C6:48:6F:97:38:A0:57:A1:03:86:5A:1A:40:AE:EE:5E Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Certificate serial: 66A9A7C54647DFD317B1B7DC212AFF87EE555032 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:08 +0000 Manifest this update: Tue 12 May 2026 16:26:08 +0000 Manifest next update: Wed 13 May 2026 19:52:08 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=) 2: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: A8CJ+i98CA0NyTmgYTXpNlNECfaSMnK4CxER2YtrLnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a9:a7:c5:46:47:df:d3:17:b1:b7:dc:21:2a:ff:87:ee:55:50:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Validity Not Before: May 12 16:26:08 2026 GMT Not After : May 13 19:52:08 2026 GMT Subject: CN=5A9C0CE3C6486F9738A057A103865A1A40AEEE5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:0b:52:62:17:5d:ed:07:0d:b8:d0:5a:6b: ef:ea:c9:af:93:37:9a:4d:c0:7d:16:83:cd:12:00: a3:45:ca:4b:7a:b0:46:8f:68:59:99:32:8d:b5:d2: 03:00:3a:00:22:ab:b6:f4:42:17:7f:b5:df:0a:22: 8d:4f:0d:f9:45:d3:ab:bd:75:8d:f9:13:92:19:51: 12:fd:7e:aa:12:55:73:53:7b:7a:ad:11:2d:d5:d8: 9e:27:0c:e8:b0:cc:07:02:0c:7d:3a:a1:da:78:f4: 30:21:a1:bc:a0:9a:af:e2:80:bf:51:32:4e:8e:3d: de:99:c9:52:94:85:1e:87:44:b7:a9:a4:61:61:d8: 51:9a:4f:28:99:a0:69:a6:76:02:34:ba:44:4a:72: 3f:80:77:ee:8a:a4:b1:33:b4:0b:03:06:3a:b1:5c: f5:ce:b1:d8:04:84:6c:b6:79:2a:eb:b6:c8:c8:f7: db:3d:cc:78:45:cc:b9:9a:0c:16:71:0b:fa:da:28: 95:46:45:d8:e6:72:0b:91:15:13:9d:b4:75:b6:13: ec:d0:9f:ae:5f:93:38:6e:74:fb:21:c5:df:82:69: d4:ca:e3:77:f3:9e:9f:05:27:16:b5:45:a3:1e:36: 37:4c:97:5e:5f:8a:88:da:fb:a9:79:e1:fc:cf:d4: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:0C:E3:C6:48:6F:97:38:A0:57:A1:03:86:5A:1A:40:AE:EE:5E X509v3 Authority Key Identifier: keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:21:03:ee:27:1c:5e:09:d6:79:27:cb:aa:6c:ad:cc:37:4f: 9a:08:41:71:6d:ca:16:6f:60:de:12:a0:b9:69:02:40:b9:ff: b3:30:e2:e9:cb:a0:22:5b:79:51:6c:8c:f4:66:34:59:d3:82: 1c:ea:b3:33:f3:86:d1:00:d7:0d:49:c9:94:84:48:24:68:f0: ea:24:1b:d9:c8:51:de:80:f3:38:54:8f:85:93:5f:84:d3:7a: 30:5e:af:bf:a4:9e:8a:17:0c:de:b7:0c:74:f7:75:b7:5c:36: 86:be:1a:41:7e:10:ac:e6:9b:48:fc:23:d7:7f:4c:aa:ed:e4: af:b5:ad:af:10:f5:e4:6b:34:04:74:c6:fb:db:c5:af:b6:97: 96:03:01:8b:fa:94:a7:d9:e3:a7:15:c9:dd:d0:0e:1a:5f:67: 76:85:0c:69:b8:34:81:f6:d1:5a:13:6d:1f:0b:d9:db:7e:e9: 48:44:d7:1c:dd:27:ea:b9:93:a4:41:5c:7d:8b:74:16:2d:37: 3d:71:26:b3:f0:fc:d3:19:05:35:9e:2c:24:91:0e:40:f3:ad: 97:6b:7b:5c:26:e7:bd:73:f0:a7:8c:5a:cc:8c:ed:02:17:9b: f7:91:26:dd:4a:a9:f6:4c:d9:e8:6c:8c:ea:c6:61:24:a0:78: a3:3f:88:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqmnxUZH39MXsbfcISr/h+5VUDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz QUQ2NkEzODAeFw0yNjA1MTIxNjI2MDhaFw0yNjA1MTMxOTUyMDhaMDMxMTAvBgNV BAMTKDVBOUMwQ0UzQzY0ODZGOTczOEEwNTdBMTAzODY1QTFBNDBBRUVFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxAtSYhdd7QcNuNBaa+/qya+T N5pNwH0Wg80SAKNFykt6sEaPaFmZMo210gMAOgAiq7b0Qhd/td8KIo1PDflF06u9 dY35E5IZURL9fqoSVXNTe3qtES3V2J4nDOiwzAcCDH06odp49DAhobygmq/igL9R Mk6OPd6ZyVKUhR6HRLeppGFh2FGaTyiZoGmmdgI0ukRKcj+Ad+6KpLEztAsDBjqx XPXOsdgEhGy2eSrrtsjI99s9zHhFzLmaDBZxC/raKJVGRdjmcguRFROdtHW2E+zQ n65fkzhudPshxd+CadTK43fznp8FJxa1RaMeNjdMl15fioja+6l54fzP1PBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWpwM48ZIb5c4oFehA4ZaGkCu7l4wHwYDVR0j BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2 QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5 MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwhA+4nHF4J1nkny6psrcw3T5oIQXFtyhZv YN4SoLlpAkC5/7Mw4unLoCJbeVFsjPRmNFnTghzqszPzhtEA1w1JyZSESCRo8Ook G9nIUd6A8zhUj4WTX4TTejBer7+knooXDN63DHT3dbdcNoa+GkF+EKzmm0j8I9d/ TKrt5K+1ra8Q9eRrNAR0xvvbxa+2l5YDAYv6lKfZ46cVyd3QDhpfZ3aFDGm4NIH2 0VoTbR8L2dt+6UhE1xzdJ+q5k6RBXH2LdBYtNz1xJrPw/NMZBTWeLCSRDkDzrZdr e1wm571z8KeMWsyM7QIXm/eRJt1KqfZM2ehsjOrGYSSgeKM/iK0= -----END CERTIFICATE-----Generated at Tue May 12 22:19:32 2026 by rpki-client