$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: Iy9XkjzfHH4h+L0TFbtkBM0CFi83Cc+f9Kro5iFUECw= Subject key identifier: EE:4C:CA:47:7C:B2:E8:60:1F:5D:4D:FA:17:52:46:D7:D2:FF:18:E7 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 3A1EF95C4E22E624B91546B1E88E8D2B925A5B62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 11 Signing time: Thu 14 May 2026 06:08:03 +0000 Manifest this update: Thu 14 May 2026 06:03:03 +0000 Manifest next update: Fri 15 May 2026 06:30:03 +0000 Files and hashes: 1: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: 9/NLNYIbfXl6IqPylRgQ4vnLITJiEgxwJyxKye02JfU=) 2: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) 4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1e:f9:5c:4e:22:e6:24:b9:15:46:b1:e8:8e:8d:2b:92:5a:5b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: May 14 06:03:03 2026 GMT Not After : May 15 06:30:03 2026 GMT Subject: CN=EE4CCA477CB2E8601F5D4DFA175246D7D2FF18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:5c:d4:c1:50:d4:67:0a:e5:8c:77:e6:28: bd:81:ab:d5:cf:a2:36:1f:00:e9:48:59:ba:1b:27: a1:7a:4e:5c:ef:c0:c9:5d:af:2c:f1:12:84:b5:b9: ae:f0:57:45:30:c4:ad:b6:d0:c3:55:2f:72:b1:cb: 6f:80:8e:13:17:88:75:94:8c:a2:a1:c9:e3:7f:61: b7:9c:78:2c:61:5c:12:4e:6a:9c:94:d3:7f:41:75: f3:82:b0:f1:19:cd:86:94:e3:86:57:dc:90:e4:b8: f5:e7:63:d7:91:9e:72:a2:fb:ea:4f:6c:21:6f:8c: 84:b5:42:25:91:e7:ae:ee:64:81:a9:80:7d:33:b3: f5:b7:de:74:3d:85:6d:6a:fa:cc:80:29:8d:eb:95: 14:c6:b1:3d:2c:e2:0f:0b:c1:9d:49:28:bf:32:2d: 00:c7:a5:15:c2:42:62:e0:3d:27:8c:3d:3e:8a:1f: 2b:f1:a2:43:01:f2:b1:47:bc:12:77:7a:fa:11:32: 85:4b:34:43:a3:7b:cd:82:65:3e:85:80:4c:33:8a: 8a:b5:2d:20:0d:ec:4c:62:1d:92:69:04:54:40:ab: 7b:cf:56:33:43:bd:53:63:bf:a2:88:a8:63:78:97: 7d:23:01:97:12:71:d9:bd:8b:d2:30:b9:42:ab:eb: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:CA:47:7C:B2:E8:60:1F:5D:4D:FA:17:52:46:D7:D2:FF:18:E7 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d4:ea:10:38:0a:12:23:03:d8:ea:f4:27:84:41:5a:d7:7d: d6:aa:0a:5f:a4:f2:6a:ba:4f:34:4b:5e:73:da:78:27:85:88: 46:29:e2:f7:de:55:aa:79:67:fc:2a:6c:6b:9b:c5:10:8b:48: 28:6e:e1:60:6a:c9:09:9a:03:e9:ba:5a:73:72:cf:26:66:e2: fc:5b:e5:2c:9e:76:3c:e3:56:6d:28:f9:37:61:b3:72:61:39: aa:63:12:ff:14:fe:b2:88:15:f8:76:e0:fd:9b:75:e0:94:81: c2:aa:4a:9e:7a:e5:a6:9e:1d:4d:91:08:fb:bf:aa:f9:19:e7: 50:3c:54:79:87:59:fd:2b:8e:52:a6:d4:9c:a3:6e:41:57:60: 86:24:45:ca:fd:91:b9:f4:b8:1a:c2:5c:d8:23:b6:90:20:9d: cf:92:32:e8:ce:fd:69:81:93:76:61:46:14:7a:2b:6f:f6:41: 20:67:18:2e:1b:b2:6d:ca:40:c8:29:2e:36:6c:eb:67:cf:a2: cd:ab:b6:53:6e:b2:a4:d6:98:fe:a7:96:eb:f5:2a:26:e3:83: d7:ce:0e:e9:b6:dc:af:a9:a1:fb:d5:13:31:b7:4c:fe:80:60: a9:31:3d:5a:ac:91:63:71:11:4b:9f:66:9f:a3:1b:0d:db:ae: 6c:41:1e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOh75XE4i5iS5FUax6I6NK5JaW2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA1MTQwNjAzMDNaFw0yNjA1MTUwNjMwMDNaMDMxMTAvBgNV BAMTKEVFNENDQTQ3N0NCMkU4NjAxRjVENERGQTE3NTI0NkQ3RDJGRjE4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB61zUwVDUZwrljHfmKL2Bq9XP ojYfAOlIWbobJ6F6TlzvwMldryzxEoS1ua7wV0UwxK220MNVL3Kxy2+AjhMXiHWU jKKhyeN/YbeceCxhXBJOapyU039BdfOCsPEZzYaU44ZX3JDkuPXnY9eRnnKi++pP bCFvjIS1QiWR567uZIGpgH0zs/W33nQ9hW1q+syAKY3rlRTGsT0s4g8LwZ1JKL8y LQDHpRXCQmLgPSeMPT6KHyvxokMB8rFHvBJ3evoRMoVLNEOje82CZT6FgEwzioq1 LSAN7ExiHZJpBFRAq3vPVjNDvVNjv6KIqGN4l30jAZcScdm9i9IwuUKr6ybvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7kzKR3yy6GAfXU36F1JG19L/GOcwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjU6hA4ChIjA9jq9CeEQVrXfdaqCl+k8mq6 TzRLXnPaeCeFiEYp4vfeVap5Z/wqbGubxRCLSChu4WBqyQmaA+m6WnNyzyZm4vxb 5SyedjzjVm0o+Tdhs3JhOapjEv8U/rKIFfh24P2bdeCUgcKqSp565aaeHU2RCPu/ qvkZ51A8VHmHWf0rjlKm1JyjbkFXYIYkRcr9kbn0uBrCXNgjtpAgnc+SMujO/WmB k3ZhRhR6K2/2QSBnGC4bsm3KQMgpLjZs62fPos2rtlNusqTWmP6nluv1Kibjg9fO Dum23K+pofvVEzG3TP6AYKkxPVqskWNxEUufZp+jGw3brmxBHi8= -----END CERTIFICATE-----Generated at Thu May 14 09:09:57 2026 by rpki-client