$ rpki-client -vvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: BteLjjik1qfUXEwfJO/NbwqwGNBdPolSE78WDgAzwQc= Subject key identifier: 78:F5:50:7D:DE:E4:81:19:05:D5:32:4E:EC:E4:20:82:EA:AA:1A:1A Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 2B187F73CFA3908FFC86939BA58655C9D83EF05F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:45:41 +0000 Manifest this update: Wed 03 Jun 2026 00:40:41 +0000 Manifest next update: Thu 04 Jun 2026 03:29:41 +0000 Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: FhG5QtmzILGj+pNjAESoRxWapUF1NIC4JV0xU1Ljgus=) 2: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: Rc4BFj4y6RGkFn0WAk8rFOAFVZI+3uw4JgjTpfnBtzQ=) 3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: WrSJd5YUGq7YYnOq5t3g7z49xRPwMhZ81C68sNOoXaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:18:7f:73:cf:a3:90:8f:fc:86:93:9b:a5:86:55:c9:d8:3e:f0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Jun 3 00:40:41 2026 GMT Not After : Jun 4 03:29:41 2026 GMT Subject: CN=78F5507DDEE4811905D5324EECE42082EAAA1A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:f2:a7:a1:3f:60:c6:63:f0:5f:08:3b:99: bc:06:2d:0a:da:50:68:27:4c:4c:c4:f7:b0:04:e6: 3b:a2:ee:35:92:ac:de:64:c8:bb:ab:ea:5c:53:d9: d8:52:90:e3:02:a4:0d:69:3e:de:ec:a2:a9:6d:cc: bf:c8:99:65:db:1e:11:1d:8c:7a:92:f7:36:a7:6f: dc:d5:72:fd:a7:dd:f0:cc:50:dc:9f:cb:4d:0a:10: a1:0c:71:11:dc:7a:19:05:a4:86:de:8d:52:f3:97: 84:c4:7c:a0:47:6b:6c:2f:7a:8c:99:ad:95:15:70: 87:47:53:6e:06:ea:bb:e0:53:73:0e:e6:a7:e9:c1: da:98:39:85:91:29:e1:85:dc:01:52:14:0b:91:03: 9a:5c:c7:b1:2f:65:3b:35:6b:5e:6d:40:ab:47:f3: 4f:cb:cb:57:e4:73:55:15:d7:04:1e:e5:70:c6:cb: ad:25:a3:36:b9:e3:c5:07:19:66:f7:57:49:8f:38: a0:58:ae:4c:2f:51:4a:59:fa:8b:66:17:f1:bb:a2: 8b:98:64:40:73:1e:db:82:db:3b:d7:7a:3f:54:95: db:68:43:2c:ab:13:19:6d:4c:94:0b:b5:ee:00:06: ff:84:0f:38:7a:ff:06:94:8f:d1:a4:84:59:85:57: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F5:50:7D:DE:E4:81:19:05:D5:32:4E:EC:E4:20:82:EA:AA:1A:1A X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:ad:32:04:15:51:44:85:b7:ea:46:7c:d2:76:b3:86:c2: 5d:fb:a3:46:19:65:78:e9:1d:cc:fb:26:2a:bf:da:19:bd:63: 11:a5:b7:ba:02:60:39:1c:00:a0:c5:18:d0:5e:26:90:e7:4b: e6:11:36:5b:35:49:1c:60:0f:17:bd:eb:6c:21:4a:71:ed:ee: 2b:0b:7f:46:01:b3:68:9a:63:f3:5a:52:f1:73:7d:b8:29:56: c3:81:3f:ff:ad:bf:ad:b4:a0:b0:9f:0b:b7:e7:ba:1e:9a:c2: 54:af:95:14:98:86:fc:83:1d:12:29:a7:52:d0:8f:91:6c:7b: bf:bb:f1:3c:b1:2a:05:19:17:35:3b:bf:27:62:4c:0c:5d:68: 25:06:83:85:ee:f6:d5:a3:27:38:3d:21:5b:87:f2:f3:a4:70: 1d:1d:6f:f8:ff:ad:a1:c9:a8:be:84:d0:b8:78:f5:d8:84:0f: 61:a2:2a:5f:dc:cf:e2:ba:f5:86:92:ca:4e:7d:45:cb:97:aa: d5:eb:ef:c3:1e:f0:49:19:42:32:d6:63:f7:33:bc:a4:6a:67: 84:4f:9b:ff:15:5c:1c:74:39:00:1b:11:3c:23:24:38:41:80: 11:68:a6:75:3a:0d:23:69:0c:9f:b4:99:2c:88:6b:91:fa:70: 08:2f:4e:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxh/c8+jkI/8hpObpYZVydg+8F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA2MDMwMDQwNDFaFw0yNjA2MDQwMzI5NDFaMDMxMTAvBgNV BAMTKDc4RjU1MDdEREVFNDgxMTkwNUQ1MzI0RUVDRTQyMDgyRUFBQTFBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjK/KnoT9gxmPwXwg7mbwGLQra UGgnTEzE97AE5jui7jWSrN5kyLur6lxT2dhSkOMCpA1pPt7soqltzL/ImWXbHhEd jHqS9zanb9zVcv2n3fDMUNyfy00KEKEMcRHcehkFpIbejVLzl4TEfKBHa2wveoyZ rZUVcIdHU24G6rvgU3MO5qfpwdqYOYWRKeGF3AFSFAuRA5pcx7EvZTs1a15tQKtH 80/Ly1fkc1UV1wQe5XDGy60loza548UHGWb3V0mPOKBYrkwvUUpZ+otmF/G7oouY ZEBzHtuC2zvXej9UldtoQyyrExltTJQLte4ABv+EDzh6/waUj9GkhFmFV9DPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUePVQfd7kgRkF1TJO7OQgguqqGhowHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTJrTIEFVFEhbfqRnzSdrOGwl37o0YZZXjp Hcz7Jiq/2hm9YxGlt7oCYDkcAKDFGNBeJpDnS+YRNls1SRxgDxe962whSnHt7isL f0YBs2iaY/NaUvFzfbgpVsOBP/+tv620oLCfC7fnuh6awlSvlRSYhvyDHRIpp1LQ j5Fse7+78TyxKgUZFzU7vydiTAxdaCUGg4Xu9tWjJzg9IVuH8vOkcB0db/j/raHJ qL6E0Lh49diED2GiKl/cz+K69YaSyk59RcuXqtXr78Me8EkZQjLWY/czvKRqZ4RP m/8VXBx0OQAbETwjJDhBgBFopnU6DSNpDJ+0mSyIa5H6cAgvTuA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:54 2026 by rpki-client