$ rpki-client -vvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: jS6SZFi8q6zx9qUoPrAHa6sD39vRCNO+H+QCzDSZAnU= Subject key identifier: A0:F0:9A:07:96:F1:D2:50:9C:E0:16:B8:E4:0A:08:6F:15:BF:BE:53 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 1913F949DE03C78666006A03634AF7AA3DE84F5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:56:11 +0000 Manifest this update: Wed 17 Jun 2026 06:51:11 +0000 Manifest next update: Thu 18 Jun 2026 07:16:11 +0000 Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: FhG5QtmzILGj+pNjAESoRxWapUF1NIC4JV0xU1Ljgus=) 2: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: 6LYKPsnMgyxtfn3/MLAN+3buXJtFaj/3VZ+IQ1RlPec=) 3: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: WrSJd5YUGq7YYnOq5t3g7z49xRPwMhZ81C68sNOoXaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:13:f9:49:de:03:c7:86:66:00:6a:03:63:4a:f7:aa:3d:e8:4f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Jun 17 06:51:11 2026 GMT Not After : Jun 18 07:16:11 2026 GMT Subject: CN=A0F09A0796F1D2509CE016B8E40A086F15BFBE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:98:a2:41:f1:1c:c8:79:07:c2:22:4d:53:98: 4e:26:c8:65:f8:09:f6:cd:52:54:9c:4b:21:0a:75: 0a:88:59:91:28:19:15:8a:ad:31:2d:c6:09:76:c0: 4c:13:b8:4b:a2:07:56:f3:b8:6f:1b:5e:35:fd:e2: fa:87:bc:02:b3:4d:13:41:49:8a:58:e7:8a:ad:0d: 96:aa:61:0d:2f:c7:8c:0f:9e:54:6c:ad:cc:7b:3c: 14:c7:cc:df:da:a9:91:df:b2:ca:23:4e:9d:54:13: 4c:a1:2e:b2:ec:87:d5:33:6c:0d:ae:88:5c:ba:4e: 60:ae:f6:a0:ff:82:dd:ff:cb:03:77:4b:b4:6a:ef: 23:bb:3f:c7:5e:34:a4:49:4f:4f:8a:41:90:c1:b5: cc:d3:56:81:eb:c7:06:22:c3:d4:4a:c9:af:42:67: 28:e7:be:23:fc:0a:b4:6a:f2:bb:f5:23:e4:d2:9e: cc:96:00:59:b5:bf:7d:51:76:26:36:d2:cf:82:0f: 3f:32:73:94:5d:52:90:08:a3:4f:79:48:b0:17:3c: ab:2b:df:15:b5:97:c2:6c:7b:1f:76:f8:db:d3:42: ee:95:45:59:dc:9a:ee:3d:63:40:ba:06:5f:d1:68: 8c:40:a9:4b:dc:6b:f8:53:fb:03:13:e9:d8:7b:e7: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:9A:07:96:F1:D2:50:9C:E0:16:B8:E4:0A:08:6F:15:BF:BE:53 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c1:82:7f:f0:29:00:f6:b4:1e:65:0c:77:40:c0:78:93:a9: cc:f1:c1:f9:7f:d9:79:c4:28:04:26:50:7f:6c:a6:79:97:58: b3:e3:9f:62:b3:2a:94:2a:ca:55:48:32:98:ab:e9:2d:4c:bc: 34:89:e4:93:e1:09:1b:12:bf:11:41:01:7a:07:6f:1e:72:5f: bb:41:8c:a6:08:01:dc:4e:df:e5:63:19:3b:50:9e:20:f5:c5: 3f:2a:32:c8:8d:f1:26:f0:d6:00:d8:12:2b:3b:38:d6:d7:fb: 32:e0:93:28:f3:35:47:2b:9f:52:02:94:70:17:97:6d:42:6c: d1:77:d6:d9:d1:1b:2c:ae:ce:ee:f3:da:68:48:20:42:5b:02: f1:7d:18:01:67:5c:5f:88:52:f1:25:dd:44:01:3d:67:81:3e: 7c:83:99:22:5c:7e:53:bb:08:9d:47:50:b7:f8:7b:9b:4a:b5: 7f:ec:3e:82:53:9e:59:9c:11:15:4d:25:3d:9f:f0:45:5c:3e: 47:b1:bb:e9:fe:72:6d:fb:92:ef:ac:86:0d:36:94:bc:cf:f5: 55:e6:0a:7f:9f:b0:80:a0:ff:26:52:77:df:18:5a:04:f5:49: 3d:bc:08:b1:df:90:67:21:8c:f5:09:9e:a6:a3:b4:a3:e0:4c: 71:da:34:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRP5Sd4Dx4ZmAGoDY0r3qj3oT14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA2MTcwNjUxMTFaFw0yNjA2MTgwNzE2MTFaMDMxMTAvBgNV BAMTKEEwRjA5QTA3OTZGMUQyNTA5Q0UwMTZCOEU0MEEwODZGMTVCRkJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpmKJB8RzIeQfCIk1TmE4myGX4 CfbNUlScSyEKdQqIWZEoGRWKrTEtxgl2wEwTuEuiB1bzuG8bXjX94vqHvAKzTRNB SYpY54qtDZaqYQ0vx4wPnlRsrcx7PBTHzN/aqZHfssojTp1UE0yhLrLsh9UzbA2u iFy6TmCu9qD/gt3/ywN3S7Rq7yO7P8deNKRJT0+KQZDBtczTVoHrxwYiw9RKya9C ZyjnviP8CrRq8rv1I+TSnsyWAFm1v31RdiY20s+CDz8yc5RdUpAIo095SLAXPKsr 3xW1l8Jsex92+NvTQu6VRVncmu49Y0C6Bl/RaIxAqUvca/hT+wMT6dh753KBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPCaB5bx0lCc4Ba45AoIbxW/vlMwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHBgn/wKQD2tB5lDHdAwHiTqczxwfl/2XnE KAQmUH9spnmXWLPjn2KzKpQqylVIMpir6S1MvDSJ5JPhCRsSvxFBAXoHbx5yX7tB jKYIAdxO3+VjGTtQniD1xT8qMsiN8Sbw1gDYEis7ONbX+zLgkyjzNUcrn1IClHAX l21CbNF31tnRGyyuzu7z2mhIIEJbAvF9GAFnXF+IUvEl3UQBPWeBPnyDmSJcflO7 CJ1HULf4e5tKtX/sPoJTnlmcERVNJT2f8EVcPkexu+n+cm37ku+shg02lLzP9VXm Cn+fsICg/yZSd98YWgT1ST28CLHfkGchjPUJnqajtKPgTHHaNPA= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:38 2026 by rpki-client