$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: BkTv3LZpN6tMhb0L0FFBaU7T1IQkGcE5hQBh/KsB/3I= Subject key identifier: BA:0C:02:22:67:7A:C7:30:A0:28:88:AF:CB:2A:67:A7:D0:3D:3A:4E Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 4EF8883A42D23B5304A000FC90E0C9863056B4F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: EE Signing time: Tue 27 Oct 2026 22:38:06 +0000 Manifest this update: Tue 27 Oct 2026 22:33:06 +0000 Manifest next update: Thu 29 Oct 2026 00:00:06 +0000 Files and hashes: 1: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: 2kPOVkbCd/EhPxdHpB/ntSloH90MFPunIY9JW33GA9Y=) 2: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) 4: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 11:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:88:3a:42:d2:3b:53:04:a0:00:fc:90:e0:c9:86:30:56:b4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Oct 27 22:33:06 2026 GMT Not After : Oct 29 00:00:06 2026 GMT Subject: CN=BA0C0222677AC730A02888AFCB2A67A7D03D3A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:0f:6f:4c:ff:79:cf:89:a5:28:4a:fa:5a: 59:1e:e5:7e:ef:7c:ac:9f:ce:9a:71:fc:ba:f6:f1: 68:c5:8d:82:a6:3b:64:67:45:ec:a9:6e:76:c6:32: 5b:2a:7d:8e:8c:2d:25:49:26:94:26:42:b9:57:21: 59:fb:de:ad:5e:79:81:be:81:ef:74:f7:45:ed:6e: 56:b3:f7:79:71:c4:85:4e:a1:04:7e:62:8d:43:f6: d5:9a:21:85:bd:e2:8f:bf:46:10:98:f4:4a:c6:75: e5:ee:01:fa:45:49:d9:f1:8f:32:ed:62:63:a3:f4: 70:6e:ed:c9:f1:63:8a:58:a7:02:6d:bf:b4:33:01: 27:32:dc:e5:21:e0:e9:9f:51:61:c2:76:41:35:b9: fa:bd:23:83:b1:72:a2:fd:4d:ab:d1:49:c6:d5:61: b1:f5:60:ab:85:86:41:02:d8:f6:51:fa:79:24:ea: f4:fc:69:8f:c9:c3:6f:4b:7f:77:2b:2a:fc:10:3d: 74:5e:cb:a8:76:07:03:06:7d:6c:6c:3f:aa:66:4c: 00:c7:96:2e:bb:fb:06:47:f6:55:2b:50:22:3c:61: b9:97:8a:70:83:0a:5a:9a:8d:1a:bf:66:0e:8d:97: 4b:3a:d3:1e:29:4a:de:19:81:26:31:9b:a0:86:31: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:02:22:67:7A:C7:30:A0:28:88:AF:CB:2A:67:A7:D0:3D:3A:4E X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1f:15:a8:72:6f:69:a8:9f:92:0b:b4:5c:0e:7a:3d:60:80: 74:3c:87:53:67:d8:18:35:d6:67:5b:4b:cc:37:cd:63:1a:39: 70:a5:9a:a9:43:17:e9:1e:be:f6:91:8f:fe:f8:2d:d2:17:ae: bb:89:32:c6:66:5e:3a:24:6c:1e:86:5c:ba:be:c0:8a:03:27: 0f:94:73:9d:78:10:cb:20:5f:90:ef:e7:af:c8:22:59:4e:23: 70:7f:93:48:46:f2:e7:cf:0c:2d:1e:0b:11:e2:28:ff:6b:23: d4:63:af:66:8c:cc:28:78:19:8d:e6:6f:c2:b9:1a:ac:17:93: 11:7c:f7:19:0f:9d:97:3b:35:ce:06:70:40:53:53:89:a2:03: d9:26:e0:03:e9:7b:62:9d:64:84:1b:39:d5:61:85:6e:7a:e7: 15:cb:ab:76:70:68:ce:88:c9:50:85:93:54:58:19:59:cd:aa: 55:98:3b:a4:57:37:ad:45:2e:b9:65:d1:67:12:54:28:08:ab: 7a:d9:7f:bc:63:cb:15:7f:ef:43:a2:94:0c:c4:97:80:45:44: 30:2a:3a:b5:c2:6e:61:3f:dc:f3:9c:47:01:e1:22:b5:48:d9: 57:11:69:97:0b:4d:af:f5:c9:2d:47:46:a9:da:4d:35:6b:35: 00:82:f5:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTviIOkLSO1MEoAD8kODJhjBWtPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjEwMjcyMjMzMDZaFw0yNjEwMjkwMDAwMDZaMDMxMTAvBgNV BAMTKEJBMEMwMjIyNjc3QUM3MzBBMDI4ODhBRkNCMkE2N0E3RDAzRDNBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjA9vTP95z4mlKEr6Wlke5X7v fKyfzppx/Lr28WjFjYKmO2RnReypbnbGMlsqfY6MLSVJJpQmQrlXIVn73q1eeYG+ ge9090Xtblaz93lxxIVOoQR+Yo1D9tWaIYW94o+/RhCY9ErGdeXuAfpFSdnxjzLt YmOj9HBu7cnxY4pYpwJtv7QzAScy3OUh4OmfUWHCdkE1ufq9I4OxcqL9TavRScbV YbH1YKuFhkEC2PZR+nkk6vT8aY/Jw29Lf3crKvwQPXRey6h2BwMGfWxsP6pmTADH li67+wZH9lUrUCI8YbmXinCDClqajRq/Zg6Nl0s60x4pSt4ZgSYxm6CGMf4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugwCImd6xzCgKIivyypnp9A9Ok4wHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEfFahyb2mon5ILtFwOej1ggHQ8h1Nn2Bg1 1mdbS8w3zWMaOXClmqlDF+kevvaRj/74LdIXrruJMsZmXjokbB6GXLq+wIoDJw+U c514EMsgX5Dv56/IIllOI3B/k0hG8ufPDC0eCxHiKP9rI9Rjr2aMzCh4GY3mb8K5 GqwXkxF89xkPnZc7Nc4GcEBTU4miA9km4APpe2KdZIQbOdVhhW565xXLq3ZwaM6I yVCFk1RYGVnNqlWYO6RXN61FLrll0WcSVCgIq3rZf7xjyxV/70OilAzEl4BFRDAq OrXCbmE/3POcRwHhIrVI2VcRaZcLTa/1yS1HRqnaTTVrNQCC9Ws= -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:46 2026 by rpki-client