$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft File: D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json) Hash identifier: SdupeNS3YSgJfNlWi4oL1/JYdM2hAqqfoa689gNp3Tc= Subject key identifier: 44:33:8A:1C:47:34:72:6D:F7:88:BB:E0:0C:49:B7:A4:73:DC:E3:CE Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Certificate serial: 26B60D43E3F401A7600EC29A6EFA0FC85A344FBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft Manifest number: E8 Signing time: Sat 24 Oct 2026 06:06:32 +0000 Manifest this update: Sat 24 Oct 2026 06:01:32 +0000 Manifest next update: Sun 25 Oct 2026 06:13:32 +0000 Files and hashes: 1: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: XmDe/74cwE17c4PKtbDFAKv2PKFmkGqL1p5nhKnZBPc=) 2: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 06:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b6:0d:43:e3:f4:01:a7:60:0e:c2:9a:6e:fa:0f:c8:5a:34:4f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Validity Not Before: Oct 24 06:01:32 2026 GMT Not After : Oct 25 06:13:32 2026 GMT Subject: CN=44338A1C4734726DF788BBE00C49B7A473DCE3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:6c:88:b8:03:9d:23:17:8e:96:67:bf:a2: 80:33:1c:7e:b0:0d:aa:19:ad:44:52:c5:c3:99:ca: ee:60:2e:a9:0c:34:59:f5:bb:69:97:cc:23:3f:5d: 90:37:c7:6e:06:06:66:af:a8:dc:88:15:e2:be:5a: b2:58:ed:5b:91:da:59:af:eb:8b:d8:d9:62:96:4c: 74:dd:2b:92:a7:3d:b2:a6:36:a0:32:12:95:80:c5: 6a:ed:24:e7:48:d6:10:d7:91:9e:9f:32:67:08:d2: 33:72:65:a0:b4:f2:fc:cc:10:76:87:8f:23:22:58: a4:71:54:83:51:ff:c7:44:f2:5c:7a:18:8f:ad:0f: 39:dc:84:bc:7b:ee:1e:32:d8:e7:6b:8b:1c:57:ca: 94:89:34:58:79:32:30:cc:fb:e0:fa:bf:bf:a4:a3: 8d:1a:f0:7e:88:c7:ca:c9:4c:33:17:5b:b1:c0:9e: 2f:d7:4d:70:54:83:af:6a:6e:cc:e2:cd:df:2f:f8: 54:6e:0c:7c:b3:8d:97:ea:44:a9:5a:0b:d3:e3:6e: 5a:9c:5b:e2:b0:55:2a:50:4f:1a:d6:f1:fe:86:91: be:d7:96:94:ec:18:ee:db:8c:de:6b:92:4f:bb:a2: 40:26:a9:24:26:7f:a9:d8:0d:3e:cd:54:c6:a7:9e: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:33:8A:1C:47:34:72:6D:F7:88:BB:E0:0C:49:B7:A4:73:DC:E3:CE X509v3 Authority Key Identifier: keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2c:96:60:cf:e7:14:e8:43:4f:83:3d:95:93:10:a2:e4:82: f0:2e:10:7f:8c:4a:24:37:54:6e:21:05:b7:4e:66:00:87:91: 11:06:c5:47:05:5d:ee:51:1b:53:5d:fd:8a:54:2b:93:34:44: ea:b8:a8:90:a5:46:a5:ba:6a:80:57:ab:1c:00:19:eb:9f:41: f7:9a:0a:c9:66:36:ac:d8:92:a1:8d:9c:b9:bf:30:34:1c:ef: 68:4c:6c:84:d4:89:02:d9:7a:4b:67:9b:b1:d2:51:8a:4a:83: e5:8d:7e:1f:54:ae:0f:82:6e:f5:75:33:27:22:b6:61:74:f7: 13:68:cb:ad:ff:ec:35:bc:54:39:6a:f8:a4:81:aa:61:0c:3d: 50:cc:4d:a8:ec:ae:eb:62:8c:60:3d:ca:37:cb:6f:79:3f:18: 08:93:25:2e:f2:53:4a:85:bc:ba:93:00:26:32:3c:46:49:e0: 1a:33:5c:b3:9f:a9:82:36:93:54:eb:a2:e4:0f:6c:6d:7f:31: f4:3b:d4:e5:47:99:d8:9b:78:89:80:a7:4f:8c:99:81:49:61: ac:e8:3e:fb:46:7e:7f:89:80:0e:f6:de:99:5a:8d:3a:cc:cc: 6d:bb:37:5f:5d:0f:3c:fc:dd:89:49:ce:17:69:0e:a0:84:3c: d7:fc:0d:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrYNQ+P0AadgDsKabvoPyFo0T70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz QUQ2NkEzODAeFw0yNjEwMjQwNjAxMzJaFw0yNjEwMjUwNjEzMzJaMDMxMTAvBgNV BAMTKDQ0MzM4QTFDNDczNDcyNkRGNzg4QkJFMDBDNDlCN0E0NzNEQ0UzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeGyIuAOdIxeOlme/ooAzHH6w DaoZrURSxcOZyu5gLqkMNFn1u2mXzCM/XZA3x24GBmavqNyIFeK+WrJY7VuR2lmv 64vY2WKWTHTdK5KnPbKmNqAyEpWAxWrtJOdI1hDXkZ6fMmcI0jNyZaC08vzMEHaH jyMiWKRxVINR/8dE8lx6GI+tDznchLx77h4y2OdrixxXypSJNFh5MjDM++D6v7+k o40a8H6Ix8rJTDMXW7HAni/XTXBUg69qbszizd8v+FRuDHyzjZfqRKlaC9Pjblqc W+KwVSpQTxrW8f6Gkb7XlpTsGO7bjN5rkk+7okAmqSQmf6nYDT7NVMannpy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDOKHEc0cm33iLvgDEm3pHPc484wHwYDVR0j BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2 QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5 MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAslmDP5xToQ0+DPZWTEKLkgvAuEH+MSiQ3 VG4hBbdOZgCHkREGxUcFXe5RG1Nd/YpUK5M0ROq4qJClRqW6aoBXqxwAGeufQfea CslmNqzYkqGNnLm/MDQc72hMbITUiQLZektnm7HSUYpKg+WNfh9Urg+CbvV1Myci tmF09xNoy63/7DW8VDlq+KSBqmEMPVDMTajsrutijGA9yjfLb3k/GAiTJS7yU0qF vLqTACYyPEZJ4BozXLOfqYI2k1TrouQPbG1/MfQ71OVHmdibeImAp0+MmYFJYazo PvtGfn+JgA723plajTrMzG27N19dDzz83YlJzhdpDqCEPNf8DYw= -----END CERTIFICATE-----Generated at Sat Oct 24 20:43:51 2026 by rpki-client