$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft File: F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft (raw, json) Hash identifier: iijiUJjbyNL7mxyAVy+SIRn9LUp/TX5Cgjs/mYMgt4Q= Subject key identifier: AF:3A:8E:3F:D1:43:AD:F3:97:25:66:DA:BE:CD:0C:2A:28:C6:90:ED Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E Certificate issuer: /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Certificate serial: 29FACA18A0ADB6022E9ADBA15E8B6B6F8D744F0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:39:44 +0000 Manifest this update: Sat 24 Oct 2026 12:34:44 +0000 Manifest next update: Sun 25 Oct 2026 14:09:44 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: gX3SrmHuIFxjATXp8t+HZx8aCultQoPEMzsPd4px2h0=) 3: F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl (hash: WSngxrNoDWZfYmvR0NTfWDa3w+tNQmIGyppzfeBiCzU=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: qpcV4Pf7cNXRuQrRMlgmCsKcJG4eLr1f/Ludu6hvhtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:ca:18:a0:ad:b6:02:2e:9a:db:a1:5e:8b:6b:6f:8d:74:4f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Validity Not Before: Oct 24 12:34:44 2026 GMT Not After : Oct 25 14:09:44 2026 GMT Subject: CN=AF3A8E3FD143ADF3972566DABECD0C2A28C690ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:bd:f5:03:3d:5d:5f:51:73:3c:e5:df:80: 1f:cc:67:e7:ad:b4:e9:40:2d:df:56:84:79:33:57: 79:75:16:47:1f:16:7f:a9:d7:88:e2:06:45:aa:81: e1:97:4b:b2:99:62:42:11:01:b5:b0:a1:50:22:26: dc:f2:c5:19:1c:ca:3d:61:6f:5a:f1:20:64:e9:70: 50:9d:d1:05:99:12:65:c6:96:ea:ba:bd:26:18:98: 10:ac:f8:be:76:09:7d:54:96:ee:8a:42:fe:db:2e: 2b:23:48:9c:84:c5:38:0d:a0:f5:ca:38:88:88:28: e4:4f:38:87:7e:7a:44:6d:84:94:d2:91:f1:83:05: 1d:72:b2:01:53:e4:c4:78:63:bc:7f:3e:5a:6d:da: 45:a5:5e:3e:4b:5c:25:80:94:5b:3a:ce:38:f0:d5: e1:72:6d:83:dd:d7:44:90:61:7f:a0:a5:fa:5d:e5: 1e:7d:0d:93:ee:9d:59:a4:72:72:28:00:75:85:d1: 1e:6c:73:ae:23:6f:47:ba:09:83:2a:61:28:75:17: 80:01:4e:a5:35:bd:08:03:ce:80:75:a6:2f:f8:eb: 9a:17:52:05:ed:10:99:7c:cc:28:4a:5f:2f:e8:28: 7c:ac:57:89:18:45:39:26:0b:2a:aa:cb:ab:ed:81: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:8E:3F:D1:43:AD:F3:97:25:66:DA:BE:CD:0C:2A:28:C6:90:ED X509v3 Authority Key Identifier: keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:28:9e:b4:6b:41:97:8a:fc:ad:56:77:21:13:65:82:cd:71: 4d:ed:7a:14:65:68:ae:b6:d6:5d:40:65:40:4f:45:8a:6b:f0: ad:04:55:da:9d:c0:4b:fc:66:81:25:cf:0b:c3:74:9d:1b:8a: f7:ee:ba:87:24:e7:b7:30:26:65:9d:d5:4b:db:0f:e1:ca:b0: 29:c9:01:56:ca:7e:3e:ea:01:62:bd:21:e1:00:af:e4:12:1d: 86:ec:0d:1d:89:6b:6e:ef:77:f7:31:52:b3:36:9a:f0:a5:a4: 45:50:f4:80:a8:83:96:b8:80:6f:6c:27:f8:53:54:79:aa:f9: b7:b5:00:29:87:16:45:56:b9:7f:e9:a4:05:fc:ab:c9:fe:7d: 0a:fc:11:ab:85:91:9b:ce:21:a0:5a:56:2d:a8:17:7f:71:74: 03:6d:75:37:ef:7d:a0:e9:07:b4:85:82:23:f2:df:32:62:75: 49:30:95:62:ea:9f:95:05:17:6a:c0:c3:b2:37:be:6c:92:38: 4c:64:48:92:06:39:d1:72:00:e1:9b:1b:9b:31:a2:74:4e:ad: 0d:5f:4f:39:4c:52:3d:e6:3a:fc:bc:30:f4:61:f6:c3:54:21: 1a:4a:4f:e2:2b:b5:4f:b6:49:37:d9:7b:8d:84:86:3e:1b:d7: 5e:d4:0a:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfrKGKCttgIumtuhXotrb410TwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERE NEY1MUIyRTAeFw0yNjEwMjQxMjM0NDRaFw0yNjEwMjUxNDA5NDRaMDMxMTAvBgNV BAMTKEFGM0E4RTNGRDE0M0FERjM5NzI1NjZEQUJFQ0QwQzJBMjhDNjkwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJb31Az1dX1FzPOXfgB/MZ+et tOlALd9WhHkzV3l1FkcfFn+p14jiBkWqgeGXS7KZYkIRAbWwoVAiJtzyxRkcyj1h b1rxIGTpcFCd0QWZEmXGluq6vSYYmBCs+L52CX1Ulu6KQv7bLisjSJyExTgNoPXK OIiIKORPOId+ekRthJTSkfGDBR1ysgFT5MR4Y7x/Plpt2kWlXj5LXCWAlFs6zjjw 1eFybYPd10SQYX+gpfpd5R59DZPunVmkcnIoAHWF0R5sc64jb0e6CYMqYSh1F4AB TqU1vQgDzoB1pi/465oXUgXtEJl8zChKXy/oKHysV4kYRTkmCyqqy6vtgWdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrzqOP9FDrfOXJWbavs0MKijGkO0wHwYDVR0j BBgwFoAU8i0zXlj+RIDGMAKK/aCJ3dT1Gy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI3ODBmODUtZWYyZi00Y2Y4LWE0YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1 OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERENEY1MUIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjJEMzM1RTU4RkU0NDgwQzYzMDAyOEFGREEwODlEREQ0RjUx QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5 RERENEY1MUIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAonrRrQZeK/K1WdyETZYLNcU3tehRlaK62 1l1AZUBPRYpr8K0EVdqdwEv8ZoElzwvDdJ0bivfuuock57cwJmWd1UvbD+HKsCnJ AVbKfj7qAWK9IeEAr+QSHYbsDR2Ja27vd/cxUrM2mvClpEVQ9ICog5a4gG9sJ/hT VHmq+be1ACmHFkVWuX/ppAX8q8n+fQr8EauFkZvOIaBaVi2oF39xdANtdTfvfaDp B7SFgiPy3zJidUkwlWLqn5UFF2rAw7I3vmySOExkSJIGOdFyAOGbG5sxonROrQ1f TzlMUj3mOvy8MPRh9sNUIRpKT+IrtU+2STfZe42Ehj4b117UCqc= -----END CERTIFICATE-----Generated at Sun Oct 25 01:34:56 2026 by rpki-client