$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: N96qmVXZjb7dgJYgwnhyBYch0kGicmuvatBPDx+VxVk= Subject key identifier: 2F:15:BC:1E:74:F9:9A:C4:50:F1:D4:74:9A:58:E9:5B:C6:7B:67:D4 Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 387A4D3F36106F601C5F18333C2CD46338C18D24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:52:31 +0000 Manifest this update: Wed 16 Sep 2026 18:47:31 +0000 Manifest next update: Thu 17 Sep 2026 21:06:31 +0000 Files and hashes: 1: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: Xqs6aMpVrJnREet1Fg9w+hz/W7XNco3A2LDklZLUqRc=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7a:4d:3f:36:10:6f:60:1c:5f:18:33:3c:2c:d4:63:38:c1:8d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: Sep 16 18:47:31 2026 GMT Not After : Sep 17 21:06:31 2026 GMT Subject: CN=2F15BC1E74F99AC450F1D4749A58E95BC67B67D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:c9:3b:3c:4d:03:07:66:33:65:bd:a5:88: 6e:91:41:a3:32:5f:7d:a6:31:b7:81:19:54:9d:7b: 2b:da:2c:7c:57:24:a2:61:99:e4:ae:30:a3:68:e0: c5:c7:b9:16:44:ce:71:73:c3:e0:a4:25:00:bc:b6: 70:88:21:8b:d0:40:1d:4f:68:3e:b6:9e:ce:8d:c1: aa:37:63:ea:76:42:c2:fc:ec:a5:26:bb:6e:f2:47: 09:30:93:56:9b:44:74:4e:04:0e:f4:94:e2:15:8b: 68:55:c2:6c:a7:55:3e:d5:c2:3e:5b:00:b2:a9:37: 9a:15:f6:19:f6:d1:34:71:cf:aa:7c:98:1d:d3:11: ee:8d:d5:ac:2c:89:e8:70:97:da:2d:4a:b2:5e:ff: 7f:93:3e:bd:fd:1f:a1:c8:46:17:40:c7:9a:4c:8a: 49:86:c9:6c:89:04:45:2b:b7:22:da:33:63:58:c3: f2:3a:d5:09:14:d1:e3:74:07:e8:b8:f4:f0:b4:0f: e3:23:0f:cb:93:18:f7:a8:b8:2b:36:60:61:52:4b: 60:37:d4:eb:7a:8c:36:34:6a:d3:7f:48:55:f8:be: a8:b2:91:a7:78:29:cb:0d:fa:aa:0d:37:05:c4:b2: 5b:ad:d2:01:5a:5a:09:2d:eb:dd:9c:a8:eb:0b:00: 73:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:BC:1E:74:F9:9A:C4:50:F1:D4:74:9A:58:E9:5B:C6:7B:67:D4 X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:43:63:27:33:b4:e4:5e:16:3f:60:cf:b0:9b:c5:9c:30:f8: d9:9b:e7:35:56:50:24:9f:6e:ee:8b:00:32:ed:56:a4:2a:4d: 0d:07:f1:c8:30:0b:6c:0c:ad:59:8c:2a:bb:c6:a8:cc:58:ff: e8:71:8b:0c:45:18:f4:f7:8a:22:9c:58:aa:cc:66:71:1f:20: 55:4d:90:7c:c2:23:81:59:e4:f6:62:10:f8:98:52:ae:f5:9b: e6:71:31:21:00:02:a9:71:bc:cd:50:5c:2a:5d:b1:32:76:00: fd:93:32:11:2b:cf:02:eb:26:52:c8:2f:78:8c:56:3f:f7:63: 1b:f1:18:58:4e:a3:0a:fd:75:c9:62:5c:cf:9b:dd:22:51:c7: 74:14:ef:63:0b:76:db:23:6c:1f:5d:8a:57:cb:b4:57:ec:5b: 94:0c:88:b3:63:58:b3:fa:19:72:37:39:93:2c:10:35:4e:21: 40:75:bc:1e:02:43:6d:b0:42:15:44:a4:b5:2e:62:74:3b:7f: 2b:eb:ae:97:e4:43:41:a4:12:a3:04:4e:6e:cd:30:48:d7:72: ed:d5:bc:63:b1:8f:4e:b6:cd:7a:ff:32:ac:37:3e:f2:07:4e: 51:c4:0f:cd:0a:0e:63:ac:ad:13:b5:a2:d1:69:ac:4b:d7:40: 2b:4d:1a:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHpNPzYQb2AcXxgzPCzUYzjBjSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjA5MTYxODQ3MzFaFw0yNjA5MTcyMTA2MzFaMDMxMTAvBgNV BAMTKDJGMTVCQzFFNzRGOTlBQzQ1MEYxRDQ3NDlBNThFOTVCQzY3QjY3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFck7PE0DB2YzZb2liG6RQaMy X32mMbeBGVSdeyvaLHxXJKJhmeSuMKNo4MXHuRZEznFzw+CkJQC8tnCIIYvQQB1P aD62ns6Nwao3Y+p2QsL87KUmu27yRwkwk1abRHROBA70lOIVi2hVwmynVT7Vwj5b ALKpN5oV9hn20TRxz6p8mB3TEe6N1awsiehwl9otSrJe/3+TPr39H6HIRhdAx5pM ikmGyWyJBEUrtyLaM2NYw/I61QkU0eN0B+i49PC0D+MjD8uTGPeouCs2YGFSS2A3 1Ot6jDY0atN/SFX4vqiykad4KcsN+qoNNwXEslut0gFaWgkt692cqOsLAHPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULxW8HnT5msRQ8dR0mljpW8Z7Z9QwHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBDYycztOReFj9gz7CbxZww+Nmb5zVWUCSf bu6LADLtVqQqTQ0H8cgwC2wMrVmMKrvGqMxY/+hxiwxFGPT3iiKcWKrMZnEfIFVN kHzCI4FZ5PZiEPiYUq71m+ZxMSEAAqlxvM1QXCpdsTJ2AP2TMhErzwLrJlLIL3iM Vj/3YxvxGFhOowr9dcliXM+b3SJRx3QU72MLdtsjbB9dilfLtFfsW5QMiLNjWLP6 GXI3OZMsEDVOIUB1vB4CQ22wQhVEpLUuYnQ7fyvrrpfkQ0GkEqMETm7NMEjXcu3V vGOxj062zXr/Mqw3PvIHTlHED80KDmOsrRO1otFprEvXQCtNGm8= -----END CERTIFICATE-----Generated at Thu Sep 17 13:47:33 2026 by rpki-client