$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: N/qnO5O/SxH5tFyA7TscUfx7j5/WnESKEAXUpy2RT04= Subject key identifier: 32:66:B9:DE:D6:E4:11:B9:9E:B2:05:17:62:CC:22:AB:6C:C7:D9:0A Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 5D17F6322BECE346DB29AE98E7ED50B1A084C047 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:14:52 +0000 Manifest this update: Tue 12 May 2026 15:09:52 +0000 Manifest next update: Wed 13 May 2026 16:07:52 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) 2: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) 3: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: TVrHB37+Gm6BqHLYOt2dTSAOQ/EaBbxsn/nEDFXOXU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:17:f6:32:2b:ec:e3:46:db:29:ae:98:e7:ed:50:b1:a0:84:c0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: May 12 15:09:52 2026 GMT Not After : May 13 16:07:52 2026 GMT Subject: CN=3266B9DED6E411B99EB2051762CC22AB6CC7D90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:fc:87:31:51:32:4a:eb:73:db:18:a6:a9: ef:95:bf:d7:76:d5:a7:5d:4d:65:ef:05:70:18:32: 9b:5c:35:76:8a:ba:30:8d:75:4f:b2:f8:d5:2a:f7: 45:b8:29:dd:98:73:4a:0f:df:21:2c:48:9d:b8:23: 92:ee:24:87:1c:b0:28:19:4a:7e:c7:b6:b1:78:60: cb:98:02:16:c0:78:fc:02:1a:ff:d2:ff:3a:c9:0b: c1:f4:92:08:6f:b4:73:9c:03:4f:23:9d:ce:1a:71: 20:1c:cc:28:c4:48:d9:bb:c2:e0:cc:90:50:3d:3e: 08:c6:ce:bb:7f:31:29:e6:6b:85:aa:f3:0d:06:0c: 3b:42:1e:69:24:f1:69:ec:ee:f9:b5:4b:b9:a1:51: 0d:cc:57:91:bc:b5:21:7c:97:92:77:cf:b5:0e:40: f2:ea:22:64:70:04:f2:36:5c:cf:61:e1:ce:39:d6: bd:e9:a2:11:ea:34:fc:24:f7:1f:68:a3:da:05:6f: 2b:76:0e:d8:2f:61:d2:ed:48:26:54:a9:b1:10:c2: 9a:15:71:fa:23:c1:10:3a:0d:25:80:34:fc:89:6d: 2c:56:8e:b7:3f:b4:7e:a5:ff:bd:0f:19:99:42:e8: 61:00:69:0b:99:9c:fa:fc:1b:29:fa:07:40:31:c0: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:B9:DE:D6:E4:11:B9:9E:B2:05:17:62:CC:22:AB:6C:C7:D9:0A X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b1:2c:16:bc:29:fb:c8:87:53:ef:1a:64:79:0b:52:a5:21: 39:94:17:30:ae:5d:e3:4d:a3:36:85:ed:ff:20:51:7b:89:d3: 26:37:01:2c:ad:ec:fb:e3:9c:1f:02:b7:a3:f4:4a:01:13:51: c2:64:9c:c0:2a:b1:4d:92:3b:c6:2c:ec:65:d1:55:dd:69:8c: 85:8c:64:04:b3:dc:ce:88:16:d5:d3:48:a4:60:3a:a3:6f:e1: a5:77:bf:c6:8f:00:00:1b:b3:66:08:15:7f:37:74:ef:d7:b1: 28:23:67:c0:5d:ee:23:eb:a9:24:5f:9c:6a:d9:8b:f9:c2:66: b5:c4:5f:7e:58:c5:8b:12:9e:df:2d:ec:3b:60:91:15:b5:48: 47:05:d8:61:f0:3c:32:79:a9:0e:5d:37:6c:68:86:6e:94:e9: 4a:9c:51:fd:a7:07:45:0f:40:73:08:1f:8f:39:4d:c2:0d:d6: bc:ee:59:f7:b1:0b:4d:8a:49:ea:7b:f7:92:5e:8d:10:98:66: 06:02:ab:9f:23:95:ad:d2:17:52:d1:00:62:dd:93:5a:cb:fc: aa:dc:b2:d2:08:86:61:f7:1d:95:af:f2:cb:89:04:57:c7:45: c9:f3:e6:94:f8:c8:15:ac:b2:25:b9:79:e4:fb:36:e3:f0:de: d7:4b:0e:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRf2Mivs40bbKa6Y5+1QsaCEwEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjA1MTIxNTA5NTJaFw0yNjA1MTMxNjA3NTJaMDMxMTAvBgNV BAMTKDMyNjZCOURFRDZFNDExQjk5RUIyMDUxNzYyQ0MyMkFCNkNDN0Q5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNvyHMVEySutz2ximqe+Vv9d2 1addTWXvBXAYMptcNXaKujCNdU+y+NUq90W4Kd2Yc0oP3yEsSJ24I5LuJIccsCgZ Sn7HtrF4YMuYAhbAePwCGv/S/zrJC8H0kghvtHOcA08jnc4acSAczCjESNm7wuDM kFA9PgjGzrt/MSnma4Wq8w0GDDtCHmkk8Wns7vm1S7mhUQ3MV5G8tSF8l5J3z7UO QPLqImRwBPI2XM9h4c451r3pohHqNPwk9x9oo9oFbyt2DtgvYdLtSCZUqbEQwpoV cfojwRA6DSWANPyJbSxWjrc/tH6l/70PGZlC6GEAaQuZnPr8Gyn6B0AxwIN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMma53tbkEbmesgUXYswiq2zH2QowHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCxLBa8KfvIh1PvGmR5C1KlITmUFzCuXeNN ozaF7f8gUXuJ0yY3ASyt7PvjnB8Ct6P0SgETUcJknMAqsU2SO8Ys7GXRVd1pjIWM ZASz3M6IFtXTSKRgOqNv4aV3v8aPAAAbs2YIFX83dO/XsSgjZ8Bd7iPrqSRfnGrZ i/nCZrXEX35YxYsSnt8t7DtgkRW1SEcF2GHwPDJ5qQ5dN2xohm6U6UqcUf2nB0UP QHMIH485TcIN1rzuWfexC02KSep795JejRCYZgYCq58jla3SF1LRAGLdk1rL/Krc stIIhmH3HZWv8suJBFfHRcnz5pT4yBWssiW5eeT7NuPw3tdLDhk= -----END CERTIFICATE-----Generated at Tue May 12 22:20:00 2026 by rpki-client