$ rpki-client -vvvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: R76o/WOVrvgIHHOdYBFEYUN2jwe1EqQ0aHmhpfatcco= Subject key identifier: DE:BA:DD:31:E8:F4:9F:53:F9:27:2B:8C:4D:F4:8E:B4:97:6E:17:44 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 0E1C8436E06B058DCF40177F01AC882B553C5AE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 19:02:42 +0000 Manifest this update: Wed 16 Sep 2026 18:57:42 +0000 Manifest next update: Thu 17 Sep 2026 21:10:42 +0000 Files and hashes: 1: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: GFC2J5O4tGcTmsCio2YPG6smcc4qN26zRniwqvtUO9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1c:84:36:e0:6b:05:8d:cf:40:17:7f:01:ac:88:2b:55:3c:5a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Sep 16 18:57:42 2026 GMT Not After : Sep 17 21:10:42 2026 GMT Subject: CN=DEBADD31E8F49F53F9272B8C4DF48EB4976E1744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:51:cf:0c:2a:67:b1:cd:4d:f1:73:42:10: 40:e3:36:51:76:bd:69:b9:45:06:f9:93:02:86:25: 5c:81:f9:6b:06:d8:af:c9:e9:0a:d3:f1:6e:77:f6: a8:25:7a:c8:d6:5a:99:4f:b6:81:86:04:8a:00:ec: 3d:5d:59:b3:35:32:3d:e8:3d:ab:1c:d5:8c:02:ff: ab:f7:61:e8:32:27:fa:2b:63:ee:89:ca:f0:ea:06: 74:a5:c9:23:c2:9c:ad:18:68:55:f8:91:92:93:49: e2:93:5b:a2:b6:e7:45:d0:5b:22:00:22:e5:b8:72: 4e:41:7a:b2:c4:01:96:08:b6:2d:a2:0a:96:a3:d9: 10:05:21:c9:e0:99:16:9d:9f:07:90:c2:db:15:ef: e3:20:87:47:7d:65:fb:d0:cf:ac:ec:ee:c6:44:04: 5a:76:e9:70:a8:1c:c2:63:37:26:3c:00:f0:38:46: 9e:be:55:0f:ef:c2:60:ab:f8:29:e9:78:28:56:ba: 13:77:c5:a6:e1:7e:18:38:74:f0:f8:ae:ef:7d:e4: 44:79:14:f5:76:77:e6:a4:81:43:ed:02:2e:3e:44: 4e:a7:e4:88:d2:42:5e:2f:c6:0f:7a:22:77:e7:55: f4:f1:5d:d3:47:9f:0d:00:b0:67:6b:c8:66:77:63: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:DD:31:E8:F4:9F:53:F9:27:2B:8C:4D:F4:8E:B4:97:6E:17:44 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5f:a5:82:84:99:77:ad:fa:9d:13:8b:0d:4d:8d:ce:a3:9a: d4:57:b1:62:13:aa:d8:79:b3:1a:9c:68:c6:48:52:3e:7f:b3: 1e:de:be:2d:2b:f3:95:f4:c1:bc:c4:9e:be:be:dc:1d:dd:58: 2e:81:20:de:1f:34:93:16:9c:1f:2f:3f:f4:d3:78:33:80:bc: 29:29:cf:c5:a6:3a:73:3f:19:5a:80:11:8c:17:6c:72:a3:9b: b2:6a:a0:65:ad:8b:4c:b5:1a:52:55:11:96:ff:93:c0:71:6f: 3e:1a:00:ce:76:cc:43:c5:97:6b:cd:54:48:49:8e:9f:2c:54: 7c:7f:ef:52:02:dc:95:4b:a7:88:f2:54:d1:93:5a:02:05:aa: 3b:09:a5:7e:17:2f:43:21:4f:dd:c3:19:70:62:82:22:24:64: d6:20:81:ff:b7:b6:c0:a6:d1:39:8d:b9:24:b1:66:ca:86:d0: 83:e9:7e:9a:f8:95:1e:c3:03:36:00:3e:26:1e:00:72:54:fd: b6:21:19:2c:16:76:8d:78:11:f0:da:7b:d6:59:16:37:59:79: ec:ba:a7:de:03:4a:9b:47:57:6f:ed:31:41:6f:97:3d:b8:98: 74:57:f5:14:82:0a:01:5f:b9:a3:60:f7:d4:d2:9b:dc:8e:d2: c2:1e:cf:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhyENuBrBY3PQBd/AayIK1U8WuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA5MTYxODU3NDJaFw0yNjA5MTcyMTEwNDJaMDMxMTAvBgNV BAMTKERFQkFERDMxRThGNDlGNTNGOTI3MkI4QzRERjQ4RUI0OTc2RTE3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3lHPDCpnsc1N8XNCEEDjNlF2 vWm5RQb5kwKGJVyB+WsG2K/J6QrT8W539qglesjWWplPtoGGBIoA7D1dWbM1Mj3o Pasc1YwC/6v3YegyJ/orY+6JyvDqBnSlySPCnK0YaFX4kZKTSeKTW6K250XQWyIA IuW4ck5BerLEAZYIti2iCpaj2RAFIcngmRadnweQwtsV7+Mgh0d9ZfvQz6zs7sZE BFp26XCoHMJjNyY8APA4Rp6+VQ/vwmCr+CnpeChWuhN3xabhfhg4dPD4ru995ER5 FPV2d+akgUPtAi4+RE6n5IjSQl4vxg96InfnVfTxXdNHnw0AsGdryGZ3Y3MTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rrdMej0n1P5JyuMTfSOtJduF0QwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENfpYKEmXet+p0Tiw1Njc6jmtRXsWITqth5 sxqcaMZIUj5/sx7evi0r85X0wbzEnr6+3B3dWC6BIN4fNJMWnB8vP/TTeDOAvCkp z8WmOnM/GVqAEYwXbHKjm7JqoGWti0y1GlJVEZb/k8Bxbz4aAM52zEPFl2vNVEhJ jp8sVHx/71IC3JVLp4jyVNGTWgIFqjsJpX4XL0MhT93DGXBigiIkZNYggf+3tsCm 0TmNuSSxZsqG0IPpfpr4lR7DAzYAPiYeAHJU/bYhGSwWdo14EfDae9ZZFjdZeey6 p94DSptHV2/tMUFvlz24mHRX9RSCCgFfuaNg99TSm9yO0sIez4U= -----END CERTIFICATE-----Generated at Thu Sep 17 10:11:21 2026 by rpki-client