$ rpki-client -vvvf rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft File: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft (raw, json) Hash identifier: khe08JAFkCz4BJyPeaPUutooc4FvQzqPRlingXjxh4U= Subject key identifier: 56:27:27:A6:63:3B:0E:77:84:05:68:A1:D8:0C:4F:50:E5:C1:65:63 Authority key identifier: 22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 Certificate issuer: /CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Certificate serial: 19ACF0C31958064D5757C7D5FFA260657DD879B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft Manifest number: EE Signing time: Mon 26 Oct 2026 01:08:11 +0000 Manifest this update: Mon 26 Oct 2026 01:03:11 +0000 Manifest next update: Tue 27 Oct 2026 02:11:11 +0000 Files and hashes: 1: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: GZ2/sYXm8mn6l79+sWeTVBLDtiFjEldYgeqXYA/mkHs=) 2: 22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl (hash: 9BaVSwl5Xm9+z6zNZ4HdFq2BG0xcNqFEfS0ccUoY/PM=) 3: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: iaDIctPMB1cb8jRuozs+7fq0LvdviMyJlcS3OgZDYDM=) 4: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: x6q8v1sq7gPnj36cQqjz3ENhVrIMCaudmUGFR0TJWTE=) 5: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Ctn3mxVihWEQWfZTzb0YPQIateGW/rElkgUhKfXEfc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 02:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ac:f0:c3:19:58:06:4d:57:57:c7:d5:ff:a2:60:65:7d:d8:79:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22419BEC88196CA2A5AABF54304B6104EB7A9BD0 Validity Not Before: Oct 26 01:03:11 2026 GMT Not After : Oct 27 02:11:11 2026 GMT Subject: CN=562727A6633B0E77840568A1D80C4F50E5C16563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:7a:63:12:8c:0f:81:96:ed:24:b0:09:6f: fb:dd:9d:e4:e0:6e:f6:8d:05:d7:79:ab:3d:30:5b: ab:b8:4d:34:2a:fc:e4:a1:4d:41:9e:09:e5:66:f7: c7:76:37:da:88:90:68:8b:1e:92:c4:9e:a6:0c:76: 34:d2:75:73:68:d8:a3:60:c9:a1:d5:b8:eb:1d:73: a2:bf:a7:1b:47:99:7b:c6:20:2e:2a:be:3d:5b:41: 8e:4a:97:c3:24:6f:3d:7b:06:3d:b1:cd:90:4d:c5: 0b:54:86:54:90:d9:0a:94:22:59:37:4b:2b:21:ef: c1:55:d4:d9:27:50:72:10:60:24:ac:da:66:1b:0a: ad:f9:c8:82:f5:f6:1e:d7:da:95:c4:62:84:24:de: 67:44:13:08:6a:68:3e:cc:b9:d6:f0:73:7d:3f:ac: f9:94:a9:0a:e6:a6:38:d8:cc:31:d9:0b:12:36:43: 14:5e:52:d4:d3:23:43:e7:be:bc:3e:a4:c0:7f:c8: 48:34:f2:66:5d:22:85:b2:1a:28:90:3e:df:a9:dc: be:c0:a6:d9:2c:36:29:70:50:62:6f:d0:ac:54:de: 33:06:48:42:11:57:78:aa:b9:ca:25:52:32:fc:ed: 83:1f:81:6a:63:f2:b2:9e:ce:b3:4d:dd:89:1a:72: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:27:A6:63:3B:0E:77:84:05:68:A1:D8:0C:4F:50:E5:C1:65:63 X509v3 Authority Key Identifier: keyid:22:41:9B:EC:88:19:6C:A2:A5:AA:BF:54:30:4B:61:04:EB:7A:9B:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/22419BEC88196CA2A5AABF54304B6104EB7A9BD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:08:70:3f:74:85:f2:45:cc:1e:52:cd:4e:2d:1d:41:b7:60: 83:2a:07:81:45:96:d1:e3:ce:ff:71:1c:e0:ae:64:62:cf:e4: b8:fc:04:14:0a:03:51:3c:5d:44:c1:42:47:c2:81:4b:04:7d: f5:17:fb:3b:f9:93:8a:ad:28:4b:8d:37:cf:15:33:23:2c:ca: 3a:b2:13:23:a3:1d:e8:0d:05:b3:f3:61:ac:bb:36:93:f8:76: 91:9c:57:06:dd:1f:26:0a:6f:62:f1:44:a3:e3:5e:27:d3:17: 87:4c:f0:3c:8c:cb:06:9d:aa:78:cf:a3:2b:19:7f:c2:13:0a: 30:14:ae:84:44:40:74:8c:0b:5b:33:9b:4e:e0:eb:6f:3d:0d: e4:a7:42:fc:da:a9:4e:19:6c:fc:cf:1b:6b:4e:6a:ca:98:f9: 1e:2d:6e:47:9e:70:fa:b8:25:16:fb:11:3e:31:52:2d:e6:e3: 8f:aa:b8:0f:7b:18:e7:8a:e7:3a:76:bb:72:39:bb:06:9b:b4: 0d:83:fa:29:39:01:4f:f4:63:2c:be:08:f2:ba:5f:74:5f:97: 7e:28:c8:2c:93:6d:9a:f0:5b:7d:f1:64:db:e1:a0:19:a1:32: 70:9c:ad:b0:76:fa:ea:fa:e7:e5:a9:a2:62:30:03:2c:7a:23: 44:b3:b7:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGazwwxlYBk1XV8fV/6JgZX3YebcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRF QjdBOUJEMDAeFw0yNjEwMjYwMTAzMTFaFw0yNjEwMjcwMjExMTFaMDMxMTAvBgNV BAMTKDU2MjcyN0E2NjMzQjBFNzc4NDA1NjhBMUQ4MEM0RjUwRTVDMTY1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTv3pjEowPgZbtJLAJb/vdneTg bvaNBdd5qz0wW6u4TTQq/OShTUGeCeVm98d2N9qIkGiLHpLEnqYMdjTSdXNo2KNg yaHVuOsdc6K/pxtHmXvGIC4qvj1bQY5Kl8Mkbz17Bj2xzZBNxQtUhlSQ2QqUIlk3 Sysh78FV1NknUHIQYCSs2mYbCq35yIL19h7X2pXEYoQk3mdEEwhqaD7Mudbwc30/ rPmUqQrmpjjYzDHZCxI2QxReUtTTI0Pnvrw+pMB/yEg08mZdIoWyGiiQPt+p3L7A ptksNilwUGJv0KxU3jMGSEIRV3iqucolUjL87YMfgWpj8rKezrNN3Ykact3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVicnpmM7DneEBWih2AxPUOXBZWMwHwYDVR0j BBgwFoAUIkGb7IgZbKKlqr9UMEthBOt6m9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQxYmMzZWMtODZiOC00YWZiLThhOGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4 ODE5NkNBMkE1QUFCRjU0MzA0QjYxMDRFQjdBOUJEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjQxOUJFQzg4MTk2Q0EyQTVBQUJGNTQzMDRCNjEwNEVCN0E5 QkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMjI0MTlCRUM4ODE5NkNBMkE1QUFCRjU0MzA0QjYx MDRFQjdBOUJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYIcD90hfJFzB5SzU4tHUG3YIMqB4FFltHj zv9xHOCuZGLP5Lj8BBQKA1E8XUTBQkfCgUsEffUX+zv5k4qtKEuNN88VMyMsyjqy EyOjHegNBbPzYay7NpP4dpGcVwbdHyYKb2LxRKPjXifTF4dM8DyMywadqnjPoysZ f8ITCjAUroREQHSMC1szm07g6289DeSnQvzaqU4ZbPzPG2tOasqY+R4tbkeecPq4 JRb7ET4xUi3m44+quA97GOeK5zp2u3I5uwabtA2D+ik5AU/0Yyy+CPK6X3Rfl34o yCyTbZrwW33xZNvhoBmhMnCcrbB2+ur65+WpomIwAyx6I0Sztzs= -----END CERTIFICATE-----Generated at Mon Oct 26 08:35:32 2026 by rpki-client