$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: plYabVmPrAc0VoOsTVZlmRECR3wPxjlVvvz+9u0yeGI= Subject key identifier: 43:4A:B0:E5:66:AC:EC:B0:EF:3A:8C:E0:FD:74:40:9F:EF:5F:76:68 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 694A636DDB46ED7106B1C3238BFCDBD974DA1301 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 9B Signing time: Tue 25 Aug 2026 16:47:49 +0000 Manifest this update: Tue 25 Aug 2026 16:42:49 +0000 Manifest next update: Wed 26 Aug 2026 17:43:49 +0000 Files and hashes: 1: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) 4: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: mm41GIzZPgpW9YKEQ2rCIIEdWkeZVKcVSC6G9Z/r3/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 17:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4a:63:6d:db:46:ed:71:06:b1:c3:23:8b:fc:db:d9:74:da:13:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Aug 25 16:42:49 2026 GMT Not After : Aug 26 17:43:49 2026 GMT Subject: CN=434AB0E566ACECB0EF3A8CE0FD74409FEF5F7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:18:f9:cf:61:86:b8:b0:0c:c0:3d:62:80: d9:cf:80:54:58:b2:cf:c3:7b:4b:11:c2:7f:e2:81: 67:0c:f0:d0:8a:bd:fd:ed:63:9e:0d:d7:1f:f5:28: ee:45:d8:2d:7c:1e:f7:2f:19:85:55:cc:a1:f3:26: dd:df:d8:78:bd:da:63:fa:9b:30:e4:e4:0e:86:65: fc:f6:fb:6b:b2:1a:69:7f:28:68:7e:3b:95:b0:ee: f4:29:f7:1d:16:dc:8f:5f:78:70:92:e6:3e:43:a6: ac:f8:e3:d0:7c:7c:f3:a5:25:25:a2:79:01:5c:df: f7:ea:ec:30:9c:da:38:93:57:8f:74:5f:1f:94:c8: bb:8a:ab:20:25:4a:b2:72:2f:a9:1f:06:18:13:a0: 87:98:19:b3:d9:1d:5f:9b:76:9d:a3:0d:69:ec:d3: 7f:68:42:8b:ed:1c:65:39:76:4f:94:05:b7:fd:21: 4f:2c:89:8b:6f:95:f8:db:14:5b:4a:a8:e4:41:56: 0f:33:dd:5e:93:27:73:75:6b:1b:62:d5:12:f3:cf: f4:a6:9a:46:98:16:25:ea:fe:5f:b1:71:cb:0a:17: b3:c6:82:a3:15:b3:0f:6b:af:45:69:57:3d:2d:01: 80:dc:07:5c:f9:49:4b:f9:91:33:e1:b9:7c:2c:05: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4A:B0:E5:66:AC:EC:B0:EF:3A:8C:E0:FD:74:40:9F:EF:5F:76:68 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:a6:75:3f:27:09:07:af:be:b4:b2:b5:d7:a0:47:66:5a:e9: c0:ff:27:f3:03:25:b8:00:40:64:ae:0a:a0:6d:7a:97:64:26: a0:cb:1c:c1:6a:83:ed:ea:c4:c2:7d:45:06:d4:70:68:ef:fc: 90:0d:6f:c6:2c:bd:8c:14:79:08:5b:fd:52:55:2d:bf:e8:ca: f6:cc:a8:ae:17:15:71:a3:10:65:42:bd:4b:2a:30:be:48:42: ee:b9:57:b9:2d:fd:cf:42:f7:ac:f9:f3:b6:e7:b9:45:83:be: 6d:dd:ec:80:bf:ce:ec:d4:5b:d3:3b:5c:6f:48:d0:03:1f:44: 9e:b7:ad:1f:6d:d4:0c:be:25:65:b5:16:d7:7d:49:99:6a:99: c9:78:36:a1:aa:d4:8b:dc:3b:2e:cf:19:50:57:f1:d5:07:30: 06:7d:2f:15:7c:98:13:15:d2:cf:18:ab:83:86:d9:2b:02:49: be:3c:b3:22:e6:24:34:28:f3:04:f7:98:8d:1e:e3:7b:e4:ad: a5:bc:b4:c5:c3:11:93:85:bf:4e:20:02:16:8b:24:cd:ca:95: fd:dc:de:eb:95:ea:c4:ed:16:4a:bb:2c:8e:28:63:89:4b:7e: d6:80:11:a1:d0:e0:eb:79:b4:20:9b:94:be:20:17:37:c6:04: 2f:3e:da:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaUpjbdtG7XEGscMji/zb2XTaEwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA4MjUxNjQyNDlaFw0yNjA4MjYxNzQzNDlaMDMxMTAvBgNV BAMTKDQzNEFCMEU1NjZBQ0VDQjBFRjNBOENFMEZENzQ0MDlGRUY1Rjc2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rxj5z2GGuLAMwD1igNnPgFRY ss/De0sRwn/igWcM8NCKvf3tY54N1x/1KO5F2C18HvcvGYVVzKHzJt3f2Hi92mP6 mzDk5A6GZfz2+2uyGml/KGh+O5Ww7vQp9x0W3I9feHCS5j5Dpqz449B8fPOlJSWi eQFc3/fq7DCc2jiTV490Xx+UyLuKqyAlSrJyL6kfBhgToIeYGbPZHV+bdp2jDWns 039oQovtHGU5dk+UBbf9IU8siYtvlfjbFFtKqORBVg8z3V6TJ3N1axti1RLzz/Sm mkaYFiXq/l+xccsKF7PGgqMVsw9rr0VpVz0tAYDcB1z5SUv5kTPhuXwsBUW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0qw5Was7LDvOozg/XRAn+9fdmgwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKimdT8nCQevvrSytdegR2Za6cD/J/MDJbgA QGSuCqBtepdkJqDLHMFqg+3qxMJ9RQbUcGjv/JANb8YsvYwUeQhb/VJVLb/oyvbM qK4XFXGjEGVCvUsqML5IQu65V7kt/c9C96z587bnuUWDvm3d7IC/zuzUW9M7XG9I 0AMfRJ63rR9t1Ay+JWW1Ftd9SZlqmcl4NqGq1IvcOy7PGVBX8dUHMAZ9LxV8mBMV 0s8Yq4OG2SsCSb48syLmJDQo8wT3mI0e43vkraW8tMXDEZOFv04gAhaLJM3Klf3c 3uuV6sTtFkq7LI4oY4lLftaAEaHQ4Ot5tCCblL4gFzfGBC8+2tQ= -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:28 2026 by rpki-client