$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: zzIW+T6w0mW9vUm9AKHLBhM8iadti0UDRGr1pV8kHv4= Subject key identifier: 2B:74:99:64:85:D1:83:E2:D5:50:B9:6E:90:96:2C:6B:E2:DC:E9:00 Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 28CDF8582FFA0FF9ADED1051F95D620C4B60D23A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:26:22 +0000 Manifest this update: Wed 23 Sep 2026 16:21:22 +0000 Manifest next update: Thu 24 Sep 2026 17:41:22 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) 3: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: i52ocaqRTd9my6qHhuB02GPLfxwJMJg3OBOJJvBQPX0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cd:f8:58:2f:fa:0f:f9:ad:ed:10:51:f9:5d:62:0c:4b:60:d2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: Sep 23 16:21:22 2026 GMT Not After : Sep 24 17:41:22 2026 GMT Subject: CN=2B74996485D183E2D550B96E90962C6BE2DCE900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:e4:48:6e:8e:9d:60:94:5e:e7:57:bd:a7: 27:a7:ba:2c:70:55:a1:8e:91:01:9a:45:d4:e8:d1: 23:3d:b7:6e:8f:10:e9:df:67:d4:3c:ba:0a:c5:bb: 19:4f:55:48:f9:6b:d8:67:00:04:1a:12:00:67:d2: fc:d9:0f:9d:74:8b:c4:34:8c:cf:80:44:1e:ac:fe: c2:6a:1f:98:de:75:75:88:6a:cc:49:1f:d2:40:f0: f3:a2:56:9f:a8:fb:c8:4d:d2:6a:2b:75:12:7c:7f: 9d:58:0e:ec:4b:f4:a9:9b:a1:73:94:1b:43:2f:c4: b5:15:45:80:54:d5:be:a5:1c:26:01:09:54:7a:78: 2a:be:17:da:21:58:0a:9f:40:8f:dd:1f:a0:e0:70: 25:75:bc:c5:1a:79:b1:93:f6:3e:76:45:f7:e3:a5: 58:02:a4:ac:f8:9d:69:5e:97:70:11:99:9a:d8:ab: 31:d2:15:21:e8:ce:1b:18:6d:a1:a7:76:c5:5f:5e: a3:d9:82:c2:7c:4e:cf:96:31:fd:0d:0d:58:a0:ea: bf:b8:ba:52:f6:31:55:8c:fe:32:6b:17:a6:74:da: 15:25:1f:14:89:43:5d:bc:65:99:06:32:73:76:68: 9d:b4:2e:fc:3b:db:56:59:92:cb:22:0a:e4:84:94: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:74:99:64:85:D1:83:E2:D5:50:B9:6E:90:96:2C:6B:E2:DC:E9:00 X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:51:b2:db:96:48:30:f6:97:45:54:4f:d8:2f:b9:dd:78:42: c4:db:d5:f7:77:f2:5f:e7:f9:3b:fc:f1:9b:83:3a:84:b7:77: c2:e7:18:d9:d7:b3:5b:9d:45:47:9b:aa:53:d9:6d:e6:bf:d7: bc:3a:40:3d:00:c3:0e:3c:91:03:24:d1:68:f7:de:8f:4b:3f: 0c:e7:fd:10:c6:c1:0b:aa:ad:17:63:9b:ec:78:8f:c6:cd:81: 3b:fd:b3:74:f0:1b:7c:6d:98:fd:2d:06:05:1a:8f:f6:8a:8e: 7c:1c:26:b4:1f:a8:c0:dd:ae:99:04:97:e0:57:ec:3f:3f:02: 47:a7:4b:8d:a7:e2:94:1e:34:bb:d9:e2:62:6b:d0:b6:af:21: 0e:c4:5f:10:ba:fb:42:b8:d4:ad:43:ee:8a:87:ac:c1:94:92: fa:9a:ac:27:ae:ce:00:02:4b:a1:0e:46:69:59:10:d3:15:ba: 41:dc:f8:e5:6e:4c:e1:20:aa:ce:b2:1e:a8:aa:cb:d8:5c:5a: 62:ad:84:ed:2b:68:a8:7a:e9:e0:8e:13:6d:5f:58:73:e4:c0: 8b:9e:72:2a:85:93:f4:23:2a:fb:31:34:b2:40:84:3f:ba:59: 43:f5:d3:8e:87:83:aa:39:82:c3:2c:44:19:3e:34:e5:de:d1: 89:ba:cb:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKM34WC/6D/mt7RBR+V1iDEtg0jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjA5MjMxNjIxMjJaFw0yNjA5MjQxNzQxMjJaMDMxMTAvBgNV BAMTKDJCNzQ5OTY0ODVEMTgzRTJENTUwQjk2RTkwOTYyQzZCRTJEQ0U5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQW+RIbo6dYJRe51e9pyenuixw VaGOkQGaRdTo0SM9t26PEOnfZ9Q8ugrFuxlPVUj5a9hnAAQaEgBn0vzZD510i8Q0 jM+ARB6s/sJqH5jedXWIasxJH9JA8POiVp+o+8hN0mordRJ8f51YDuxL9KmboXOU G0MvxLUVRYBU1b6lHCYBCVR6eCq+F9ohWAqfQI/dH6DgcCV1vMUaebGT9j52Rffj pVgCpKz4nWlel3ARmZrYqzHSFSHozhsYbaGndsVfXqPZgsJ8Ts+WMf0NDVig6r+4 ulL2MVWM/jJrF6Z02hUlHxSJQ128ZZkGMnN2aJ20Lvw721ZZkssiCuSElMOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3SZZIXRg+LVULlukJYsa+Lc6QAwHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpRstuWSDD2l0VUT9gvud14QsTb1fd38l/n +Tv88ZuDOoS3d8LnGNnXs1udRUebqlPZbea/17w6QD0Aww48kQMk0Wj33o9LPwzn /RDGwQuqrRdjm+x4j8bNgTv9s3TwG3xtmP0tBgUaj/aKjnwcJrQfqMDdrpkEl+BX 7D8/AkenS42n4pQeNLvZ4mJr0LavIQ7EXxC6+0K41K1D7oqHrMGUkvqarCeuzgAC S6EORmlZENMVukHc+OVuTOEgqs6yHqiqy9hcWmKthO0raKh66eCOE21fWHPkwIue ciqFk/QjKvsxNLJAhD+6WUP1046Hg6o5gsMsRBk+NOXe0Ym6y6I= -----END CERTIFICATE-----Generated at Wed Sep 23 19:47:50 2026 by rpki-client