$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft File: D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json) Hash identifier: 1p09twyYhscjbo7oLwayvM7xJSqLsRsyjV/sriOA/pw= Subject key identifier: 02:3B:E1:5C:80:24:7D:1C:16:6F:4A:DF:A2:8B:52:F2:24:BC:0E:CB Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Certificate serial: 3159860B3C9F5561DAA5EE7D5ACFD62243777BAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 10:40:14 +0000 Manifest this update: Thu 03 Sep 2026 10:35:14 +0000 Manifest next update: Fri 04 Sep 2026 12:24:14 +0000 Files and hashes: 1: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: +N7FFrv0G/vEYIp0EoejsBoKktFccQiqmdZxidcSLtQ=) 2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:59:86:0b:3c:9f:55:61:da:a5:ee:7d:5a:cf:d6:22:43:77:7b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Validity Not Before: Sep 3 10:35:14 2026 GMT Not After : Sep 4 12:24:14 2026 GMT Subject: CN=023BE15C80247D1C166F4ADFA28B52F224BC0ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:9d:d7:34:6f:e7:3f:b1:f0:fc:8e:87:77: d3:6f:6b:53:65:76:de:7d:b0:a1:b6:f4:fe:9a:4c: 1c:0d:50:4b:82:cb:5e:18:a3:92:5f:3c:b3:4d:b5: 43:5d:44:3e:52:8e:56:cd:25:1e:ed:4c:ad:dc:b2: ff:da:51:d5:ca:38:4f:8b:1f:bd:fe:c2:d0:36:d7: 29:48:22:2e:59:24:77:91:cc:d6:55:b3:a0:ad:62: 17:5f:f5:72:cf:94:93:29:96:3f:8a:57:1b:4a:96: c1:d6:82:29:bb:44:29:62:01:f5:ed:63:bc:85:bd: ad:08:9c:5a:7e:bc:29:c5:61:cd:90:c6:50:b7:ac: 27:9a:c4:ea:2f:d9:3f:c6:f9:d5:7d:8d:2b:6a:5b: 3b:d3:25:0b:f7:5c:33:73:c2:e6:c5:2d:b0:b5:9b: b1:54:c9:3e:9c:c9:a1:e6:d7:1d:3d:86:76:1a:0e: 60:f1:3f:11:4b:31:84:70:be:84:b2:71:b1:ae:6a: 1c:96:fa:1b:ad:df:58:09:ef:84:b0:18:f6:06:7d: da:d5:73:10:dd:f7:08:0f:40:6e:3e:81:c2:34:ce: 1f:4b:d0:96:8f:56:b5:91:af:de:50:f4:07:5c:0f: e5:35:74:85:45:57:d1:5a:49:c9:db:0f:a7:b4:9f: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:E1:5C:80:24:7D:1C:16:6F:4A:DF:A2:8B:52:F2:24:BC:0E:CB X509v3 Authority Key Identifier: keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:00:18:38:5d:6f:9f:cc:09:fa:e0:1f:58:0e:07:59:cf: 7e:04:c8:41:12:cf:06:1e:a0:fb:46:ec:c0:f1:79:82:22:96: 46:00:94:9c:38:b8:83:f8:67:1a:13:72:1c:66:25:21:1c:a3: df:f5:8e:dd:44:73:ed:3f:a5:9b:de:f8:bb:6e:e8:59:29:d9: 6c:38:e6:b8:0d:9c:98:78:9f:89:c9:bd:1b:3f:7e:c2:6d:b1: 8d:38:e1:ab:1b:9c:32:9c:37:46:50:8d:e7:5b:cd:8d:68:25: fe:fd:46:e6:fc:3f:4c:7d:58:b6:0d:f9:4d:95:bb:1d:7e:19: 9c:88:95:95:c2:43:a1:9f:7c:67:6b:d5:00:f6:7c:eb:af:f3: 29:f3:65:fb:ae:76:fd:7e:42:16:ae:3e:0a:14:76:7f:e5:40: 68:96:0f:4f:e4:1a:33:40:fb:4f:54:f3:d9:48:b0:4d:2f:ef: 0a:e0:a7:fe:c6:f8:eb:e5:52:11:1c:38:f1:a2:42:e9:2e:04: f8:a0:b6:bd:d0:a3:8e:46:f9:e3:78:5f:52:65:3d:19:1e:5a: 29:ab:37:68:0c:4d:0f:76:e6:84:01:bf:c4:24:a9:1e:17:58: 7b:18:e5:db:da:6b:52:a2:b8:e7:fc:f5:46:2c:83:31:1a:2a: dd:4b:e8:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVmGCzyfVWHape59Ws/WIkN3e64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz QUQ2NkEzODAeFw0yNjA5MDMxMDM1MTRaFw0yNjA5MDQxMjI0MTRaMDMxMTAvBgNV BAMTKDAyM0JFMTVDODAyNDdEMUMxNjZGNEFERkEyOEI1MkYyMjRCQzBFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7J3XNG/nP7Hw/I6Hd9Nva1Nl dt59sKG29P6aTBwNUEuCy14Yo5JfPLNNtUNdRD5SjlbNJR7tTK3csv/aUdXKOE+L H73+wtA21ylIIi5ZJHeRzNZVs6CtYhdf9XLPlJMplj+KVxtKlsHWgim7RCliAfXt Y7yFva0InFp+vCnFYc2QxlC3rCeaxOov2T/G+dV9jStqWzvTJQv3XDNzwubFLbC1 m7FUyT6cyaHm1x09hnYaDmDxPxFLMYRwvoSycbGuahyW+hut31gJ74SwGPYGfdrV cxDd9wgPQG4+gcI0zh9L0JaPVrWRr95Q9AdcD+U1dIVFV9FaScnbD6e0n+wFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjvhXIAkfRwWb0rfootS8iS8DsswHwYDVR0j BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2 QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5 MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtZABg4XW+fzAn64B9YDgdZz34EyEESzwYe oPtG7MDxeYIilkYAlJw4uIP4ZxoTchxmJSEco9/1jt1Ec+0/pZve+Ltu6Fkp2Ww4 5rgNnJh4n4nJvRs/fsJtsY044asbnDKcN0ZQjedbzY1oJf79Rub8P0x9WLYN+U2V ux1+GZyIlZXCQ6GffGdr1QD2fOuv8ynzZfuudv1+QhauPgoUdn/lQGiWD0/kGjNA +09U89lIsE0v7wrgp/7G+OvlUhEcOPGiQukuBPigtr3Qo45G+eN4X1JlPRkeWimr N2gMTQ925oQBv8QkqR4XWHsY5dvaa1KiuOf89UYsgzEaKt1L6OQ= -----END CERTIFICATE-----Generated at Fri Sep 4 01:48:28 2026 by rpki-client