$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: XCYvdXHBo2tnq3FG6NT8rU1Vs8/COjhCfIfquZp/SKQ= Subject key identifier: 39:31:74:CE:2D:3B:6E:F7:9B:48:40:56:8B:17:64:A8:83:C0:C2:40 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 4E32AE50094E09444C838588791513CB01BD866E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 50 Signing time: Tue 30 Jun 2026 08:20:43 +0000 Manifest this update: Tue 30 Jun 2026 08:15:43 +0000 Manifest next update: Wed 01 Jul 2026 10:10:43 +0000 Files and hashes: 1: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 2: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) 3: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: Cb9R+J0CO4dcKeW9wAUwUMAVi+E7Aees9WlCNKcQOTA=) 4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 09:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:32:ae:50:09:4e:09:44:4c:83:85:88:79:15:13:cb:01:bd:86:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Jun 30 08:15:43 2026 GMT Not After : Jul 1 10:10:43 2026 GMT Subject: CN=393174CE2D3B6EF79B4840568B1764A883C0C240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:52:40:1e:ed:c3:00:e9:7d:2b:56:83:f9: ed:e0:ed:1f:41:a7:b1:a0:28:89:e9:30:2c:db:31: 0e:9b:f5:ce:6f:2a:3c:a5:e5:04:9c:ad:1d:68:17: 31:d0:9a:3d:38:0b:c2:1c:5b:64:8c:78:e2:61:73: af:14:1a:e4:e4:a2:62:68:f9:bb:38:3f:ff:28:8b: 23:50:b6:b5:81:66:c6:6a:e9:ad:ed:81:d1:79:66: 27:df:64:f0:a2:3c:90:34:c4:64:e4:dc:df:20:fb: 69:ac:df:54:10:52:c8:5f:4a:c1:f7:71:1c:13:a3: bc:53:76:4e:63:7b:1c:15:89:4a:3c:59:b6:ba:5d: d2:b0:94:90:1b:14:f7:ec:81:fc:54:ee:51:3a:34: 51:6a:27:de:b1:af:2d:7e:89:60:3e:0e:55:8a:17: 59:9f:4a:e0:83:c7:05:47:22:52:bc:6d:b1:1a:a9: ca:0c:36:28:73:ef:4f:dc:32:b5:9e:20:9c:26:5d: 4e:2b:c0:73:f1:9f:f1:5b:f9:c3:96:69:c1:cf:67: 79:b1:21:51:fc:3a:51:b0:d5:f0:6d:5b:10:3d:dc: 4c:c3:2e:be:ba:84:2c:33:3a:30:43:e4:39:13:33: 2f:ca:0d:fc:a9:f1:7d:06:f8:54:49:97:63:54:a7: fd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:31:74:CE:2D:3B:6E:F7:9B:48:40:56:8B:17:64:A8:83:C0:C2:40 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2b:92:53:fa:9e:47:73:9e:38:b1:66:46:2b:6d:97:9b:14: 42:ae:4d:c0:d4:9c:81:9b:87:c8:5b:8d:0b:06:32:6a:0c:ff: 04:1e:6e:27:f5:c9:71:12:15:db:e6:90:13:79:c1:34:22:a4: ad:e0:08:5d:12:18:18:f1:6b:c2:bf:d7:b0:6d:3c:e3:e5:47: 8d:ab:20:52:43:0a:7f:c1:e6:f2:2a:45:7d:5c:d3:e0:5a:22: f5:51:f5:d2:14:a7:d9:bb:7f:42:2d:61:43:86:ea:47:bd:e5: 94:28:53:8d:3e:eb:a3:52:2b:5c:50:33:5d:70:9f:bb:7e:27: f8:0d:79:07:fd:01:3b:a4:a9:53:39:84:de:4e:4b:66:c5:d4: 0d:1c:5a:91:2f:5c:a5:35:f0:35:63:e3:2c:8f:6b:f1:76:6d: 21:67:73:01:89:2d:2a:80:1d:70:59:ca:47:d0:ca:a2:e9:82: ee:c2:9b:17:35:33:e2:b9:0a:29:f9:bb:ae:c5:2b:fe:fb:ff: d7:4f:d4:1d:1b:71:64:5b:0b:fe:09:17:18:58:44:75:c4:7d: 85:a7:e2:10:82:0a:95:00:fd:6d:2b:9c:49:11:05:5c:12:f6: b5:08:97:38:54:da:54:f0:1c:b6:6b:5b:86:48:4e:75:c7:c9: 47:e7:db:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjKuUAlOCURMg4WIeRUTywG9hm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA2MzAwODE1NDNaFw0yNjA3MDExMDEwNDNaMDMxMTAvBgNV BAMTKDM5MzE3NENFMkQzQjZFRjc5QjQ4NDA1NjhCMTc2NEE4ODNDMEMyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDntVJAHu3DAOl9K1aD+e3g7R9B p7GgKInpMCzbMQ6b9c5vKjyl5QScrR1oFzHQmj04C8IcW2SMeOJhc68UGuTkomJo +bs4P/8oiyNQtrWBZsZq6a3tgdF5ZiffZPCiPJA0xGTk3N8g+2ms31QQUshfSsH3 cRwTo7xTdk5jexwViUo8Wba6XdKwlJAbFPfsgfxU7lE6NFFqJ96xry1+iWA+DlWK F1mfSuCDxwVHIlK8bbEaqcoMNihz70/cMrWeIJwmXU4rwHPxn/Fb+cOWacHPZ3mx IVH8OlGw1fBtWxA93EzDLr66hCwzOjBD5DkTMy/KDfyp8X0G+FRJl2NUp/3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTF0zi07bvebSEBWixdkqIPAwkAwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQrklP6nkdznjixZkYrbZebFEKuTcDUnIGb h8hbjQsGMmoM/wQebif1yXESFdvmkBN5wTQipK3gCF0SGBjxa8K/17BtPOPlR42r IFJDCn/B5vIqRX1c0+BaIvVR9dIUp9m7f0ItYUOG6ke95ZQoU40+66NSK1xQM11w n7t+J/gNeQf9ATukqVM5hN5OS2bF1A0cWpEvXKU18DVj4yyPa/F2bSFncwGJLSqA HXBZykfQyqLpgu7Cmxc1M+K5Cin5u67FK/77/9dP1B0bcWRbC/4JFxhYRHXEfYWn 4hCCCpUA/W0rnEkRBVwS9rUIlzhU2lTwHLZrW4ZITnXHyUfn2zo= -----END CERTIFICATE-----Generated at Tue Jun 30 14:19:58 2026 by rpki-client