$ rpki-client -vvvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: zoA13vvMQuPyCJe1n1eeAqZzykH29+R7FJmCsyuR74E= Subject key identifier: 19:D9:BB:34:32:EA:63:45:65:5E:EF:4D:54:D3:01:CD:83:F2:18:C9 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 17BF78BCDBCEF5F496F87EEE68FB1120439B07EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: FA Signing time: Wed 04 Nov 2026 13:55:29 +0000 Manifest this update: Wed 04 Nov 2026 13:50:29 +0000 Manifest next update: Thu 05 Nov 2026 14:17:29 +0000 Files and hashes: 1: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: fkOnfL5/UTl6ugJXmc8DzsNXHoNs62+Z4VzwAuOB+X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 14:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bf:78:bc:db:ce:f5:f4:96:f8:7e:ee:68:fb:11:20:43:9b:07:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Nov 4 13:50:29 2026 GMT Not After : Nov 5 14:17:29 2026 GMT Subject: CN=19D9BB3432EA6345655EEF4D54D301CD83F218C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:de:fc:b2:93:4b:d9:f3:20:c4:39:5f:81: 9e:c0:5c:1f:28:c9:4c:8c:6e:97:8a:8f:40:06:3e: 03:fa:44:a4:17:dd:24:92:41:67:4a:79:39:3e:1a: 12:55:c3:8b:45:8c:56:13:90:60:4c:42:09:c0:42: d0:16:cb:f8:eb:64:87:19:12:55:f8:aa:aa:40:65: b9:26:3d:be:98:d5:e6:d3:7a:88:36:70:12:f6:fc: 5a:c3:9a:67:2c:7c:2f:13:e4:c7:cb:3a:04:73:9d: 30:99:0d:e8:bd:42:ab:1b:01:23:e1:6e:58:53:58: 7d:02:4a:53:87:e3:37:a3:ae:02:8f:4f:41:78:be: 56:e2:bc:55:b8:67:55:a5:08:7d:0d:34:36:4b:f1: ae:34:0c:2f:90:ef:17:6a:45:57:8a:c6:0c:39:f9: 5c:38:99:ae:d8:de:b7:49:d9:8a:9d:e3:c6:49:db: 80:08:38:df:b1:56:1e:84:9a:56:d0:aa:8c:d6:e3: 66:c8:d6:23:60:e2:ee:97:64:94:7b:1e:f8:6b:f2: 35:65:0e:09:39:e6:b7:18:82:df:55:7b:47:41:f4: a1:c0:95:ae:b9:18:8f:a0:64:62:45:28:ea:e3:c7: 25:b4:d9:88:d9:b3:cf:d9:9e:2d:a0:eb:3d:85:10: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:BB:34:32:EA:63:45:65:5E:EF:4D:54:D3:01:CD:83:F2:18:C9 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:34:42:1a:03:66:06:b5:62:71:c8:e8:75:52:a3:d4:0e:ee: 62:f9:b2:ca:d0:0b:7d:0b:bc:ae:b7:cb:03:08:36:37:cf:c3: de:a6:ae:03:96:22:f2:7f:78:c6:d9:eb:ab:aa:df:3f:cd:78: 68:24:c4:4e:9f:01:91:41:71:2e:30:26:43:c1:39:a7:11:89: b2:06:15:be:f0:3d:91:60:f4:6f:1d:dd:12:71:76:1e:31:fa: 94:f8:a8:c5:de:f8:64:2b:a9:f2:a8:26:fa:28:1e:08:3b:06: 55:10:04:0b:cc:70:a3:39:30:e0:15:55:79:be:90:f0:40:5a: aa:07:56:69:b0:83:69:5e:10:3a:bb:4d:db:19:69:b1:72:f7: 78:92:eb:fe:63:61:ce:dd:71:90:e2:4e:52:38:2a:1f:18:27: c7:ae:56:d9:56:75:b1:c8:9f:59:ef:bb:e4:d9:79:06:be:4a: d8:fc:97:dd:02:f3:af:9e:ff:8a:0f:af:d5:88:06:37:16:4a: ea:65:f0:59:4f:e0:32:16:47:26:56:dc:55:62:b0:a4:74:cf: 4b:4a:2b:fc:4f:84:87:53:2d:05:40:27:34:37:57:b2:32:d5: c1:84:f5:4b:6b:d9:1c:40:50:dc:f1:0b:40:eb:fe:04:af:49: de:c1:61:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF794vNvO9fSW+H7uaPsRIEObB+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjExMDQxMzUwMjlaFw0yNjExMDUxNDE3MjlaMDMxMTAvBgNV BAMTKDE5RDlCQjM0MzJFQTYzNDU2NTVFRUY0RDU0RDMwMUNEODNGMjE4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e978spNL2fMgxDlfgZ7AXB8o yUyMbpeKj0AGPgP6RKQX3SSSQWdKeTk+GhJVw4tFjFYTkGBMQgnAQtAWy/jrZIcZ ElX4qqpAZbkmPb6Y1ebTeog2cBL2/FrDmmcsfC8T5MfLOgRznTCZDei9QqsbASPh blhTWH0CSlOH4zejrgKPT0F4vlbivFW4Z1WlCH0NNDZL8a40DC+Q7xdqRVeKxgw5 +Vw4ma7Y3rdJ2Yqd48ZJ24AION+xVh6EmlbQqozW42bI1iNg4u6XZJR7Hvhr8jVl Dgk55rcYgt9Ve0dB9KHAla65GI+gZGJFKOrjxyW02YjZs8/Zni2g6z2FEAKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdm7NDLqY0VlXu9NVNMBzYPyGMkwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk0QhoDZga1YnHI6HVSo9QO7mL5ssrQC30L vK63ywMINjfPw96mrgOWIvJ/eMbZ66uq3z/NeGgkxE6fAZFBcS4wJkPBOacRibIG Fb7wPZFg9G8d3RJxdh4x+pT4qMXe+GQrqfKoJvooHgg7BlUQBAvMcKM5MOAVVXm+ kPBAWqoHVmmwg2leEDq7TdsZabFy93iS6/5jYc7dcZDiTlI4Kh8YJ8euVtlWdbHI n1nvu+TZeQa+Stj8l90C86+e/4oPr9WIBjcWSupl8FlP4DIWRyZW3FVisKR0z0tK K/xPhIdTLQVAJzQ3V7Iy1cGE9Utr2RxAUNzxC0Dr/gSvSd7BYcI= -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:42 2026 by rpki-client