$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft File: 221D17C6CE30682D7329C49D1F803292269A742A.mft (raw, json) Hash identifier: kCYjO9Avjsu/zWfuUJ7CqOizLxD895QKsXhUgdKTCuE= Subject key identifier: 4E:EE:48:AE:BF:B1:7B:FF:34:C7:22:83:19:7D:11:5B:56:34:EC:59 Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A Certificate issuer: /CN=221D17C6CE30682D7329C49D1F803292269A742A Certificate serial: 4D0332F0091C831A8C29560463F63716534CFDBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft Manifest number: CA Signing time: Tue 29 Sep 2026 13:31:12 +0000 Manifest this update: Tue 29 Sep 2026 13:26:12 +0000 Manifest next update: Wed 30 Sep 2026 14:01:12 +0000 Files and hashes: 1: 221D17C6CE30682D7329C49D1F803292269A742A.crl (hash: lyu8EjildSYQ0fl3oJmm5sU/X2m7cZ7UaQaXaH3ZLlY=) 2: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: uCL8hU03zGsiNeckLg3taG50LeWxCsa9pcNoxXuQ5KM=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: Lt2+hrkcbaTE1hrTjRZ7aEwzbnRpAkFNEq82KpPU4LQ=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:03:32:f0:09:1c:83:1a:8c:29:56:04:63:f6:37:16:53:4c:fd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A Validity Not Before: Sep 29 13:26:12 2026 GMT Not After : Sep 30 14:01:12 2026 GMT Subject: CN=4EEE48AEBFB17BFF34C72283197D115B5634EC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:f1:8c:4c:4b:be:84:ed:54:11:ec:ff:46: 00:4d:87:fc:99:60:e9:9d:4f:4b:38:d7:1d:76:b2: fb:10:69:35:b9:84:f7:ac:1f:f9:89:8f:a2:61:0f: 13:55:d6:1c:e3:7a:d3:bc:e0:1b:6c:1a:8b:12:08: 1e:f7:c0:91:d0:03:6b:c0:e1:79:ff:f5:96:bd:1f: 0e:2f:da:3f:27:cf:98:07:2b:3c:28:80:2b:ec:94: dd:6d:38:40:66:48:28:37:68:34:38:fa:63:d2:f4: 22:80:c2:b2:ad:6e:6d:a8:64:b7:1a:41:f1:83:b4: f0:98:58:fa:ca:fe:0c:5e:2d:ab:99:2b:64:bb:63: c7:94:96:98:c5:b2:34:c1:6f:14:d6:83:83:61:90: 7c:04:23:6e:53:d0:d2:e9:4b:fd:b7:0d:81:fc:57: b6:97:f1:f7:01:0b:32:48:b5:7c:eb:fe:b1:ad:37: a1:fa:9d:bd:5b:dc:76:ea:db:02:62:96:e6:2e:3f: a5:70:32:f5:c2:d4:e4:1b:89:5d:db:c0:9c:9e:cc: 9f:d8:2c:37:22:d0:6c:ca:04:4e:10:7b:12:d5:75: ec:a6:1b:82:71:b3:74:36:3e:66:9a:d0:82:f9:8c: 89:9f:8e:3d:48:5e:04:09:09:2c:53:d4:69:95:9c: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:48:AE:BF:B1:7B:FF:34:C7:22:83:19:7D:11:5B:56:34:EC:59 X509v3 Authority Key Identifier: keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a8:ba:f9:29:f5:c3:c4:f2:1e:db:3e:4e:e6:74:7d:d9:ff: bd:ce:90:85:af:a1:53:3e:d6:24:a4:7a:50:7e:09:66:21:7f: 76:0b:5f:f8:60:2a:c2:68:73:a3:a1:ee:75:91:b2:65:f4:bc: e4:1d:26:0b:fe:e3:6a:a4:f2:2a:7c:f2:96:5d:a3:04:35:e5: 70:48:6a:66:d7:c6:1c:2d:b8:f1:f7:ca:28:72:15:72:b3:f1: 2d:11:92:75:7d:3a:15:02:5a:d9:23:8c:63:1b:72:7d:de:75: 5e:1d:4d:b3:d7:af:cb:98:c9:ef:73:eb:01:96:37:42:00:3e: 97:76:aa:8f:cc:a4:d9:6e:c9:0d:2b:78:83:f9:6b:f8:85:9f: 4b:ff:70:95:6e:5a:40:de:aa:25:d2:96:1c:cc:9a:d5:fe:af: 3c:55:60:be:b8:30:4f:86:2d:9a:6b:1a:e1:da:b7:e5:a5:df: 32:70:ce:d7:96:f6:ec:1b:b0:c7:1a:37:c3:76:97:00:05:f6: 17:3e:a0:70:f0:bf:1d:46:c0:fe:1f:0f:2e:2a:5d:99:28:8b: 6c:8d:5d:f8:4d:e8:1d:4a:10:7b:b0:a4:74:43:80:de:8a:77: 66:f5:4c:9a:96:2d:7b:19:fe:85:ab:5e:87:dd:88:a6:59:88: 26:c8:ed:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQMy8AkcgxqMKVYEY/Y3FlNM/b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMyOTIy NjlBNzQyQTAeFw0yNjA5MjkxMzI2MTJaFw0yNjA5MzAxNDAxMTJaMDMxMTAvBgNV BAMTKDRFRUU0OEFFQkZCMTdCRkYzNEM3MjI4MzE5N0QxMTVCNTYzNEVDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFPGMTEu+hO1UEez/RgBNh/yZ YOmdT0s41x12svsQaTW5hPesH/mJj6JhDxNV1hzjetO84BtsGosSCB73wJHQA2vA 4Xn/9Za9Hw4v2j8nz5gHKzwogCvslN1tOEBmSCg3aDQ4+mPS9CKAwrKtbm2oZLca QfGDtPCYWPrK/gxeLauZK2S7Y8eUlpjFsjTBbxTWg4NhkHwEI25T0NLpS/23DYH8 V7aX8fcBCzJItXzr/rGtN6H6nb1b3Hbq2wJiluYuP6VwMvXC1OQbiV3bwJyezJ/Y LDci0GzKBE4QexLVdeymG4Jxs3Q2Pmaa0IL5jImfjj1IXgQJCSxT1GmVnCJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTu5Irr+xe/80xyKDGX0RW1Y07FkwHwYDVR0j BBgwFoAUIh0Xxs4waC1zKcSdH4AykiaadCowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmJlMDQwMzgtYTFiNi00MzJjLTg1NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZD RTMwNjgyRDczMjlDNDlEMUY4MDMyOTIyNjlBNzQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjFEMTdDNkNFMzA2ODJENzMyOUM0OUQxRjgwMzI5MjI2OUE3 NDJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvMjIxRDE3QzZDRTMwNjgyRDczMjlDNDlEMUY4MDMy OTIyNjlBNzQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOouvkp9cPE8h7bPk7mdH3Z/73OkIWvoVM+ 1iSkelB+CWYhf3YLX/hgKsJoc6Oh7nWRsmX0vOQdJgv+42qk8ip88pZdowQ15XBI ambXxhwtuPH3yihyFXKz8S0RknV9OhUCWtkjjGMbcn3edV4dTbPXr8uYye9z6wGW N0IAPpd2qo/MpNluyQ0reIP5a/iFn0v/cJVuWkDeqiXSlhzMmtX+rzxVYL64ME+G LZprGuHat+Wl3zJwzteW9uwbsMcaN8N2lwAF9hc+oHDwvx1GwP4fDy4qXZkoi2yN XfhN6B1KEHuwpHRDgN6Kd2b1TJqWLXsZ/oWrXofdiKZZiCbI7dQ= -----END CERTIFICATE-----Generated at Tue Sep 29 17:32:59 2026 by rpki-client