$ rpki-client -vvvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: 1adNRJjoXLkZtDkOLAzmIjE2PKaYPU/qWmHqFW3ZRy4= Subject key identifier: AB:5C:50:7D:62:EF:86:59:4A:2C:77:E6:CF:3B:7C:A1:03:53:ED:52 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 3CFDEA1014D228B318DF75D8052D82FC670AD72E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 23:10:08 +0000 Manifest this update: Tue 22 Sep 2026 23:05:08 +0000 Manifest next update: Thu 24 Sep 2026 00:06:08 +0000 Files and hashes: 1: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: PU4RY5UfO4XwseCWJcixZDwJIF48I90uTLxPDqN83qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:ea:10:14:d2:28:b3:18:df:75:d8:05:2d:82:fc:67:0a:d7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Sep 22 23:05:08 2026 GMT Not After : Sep 24 00:06:08 2026 GMT Subject: CN=AB5C507D62EF86594A2C77E6CF3B7CA10353ED52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:f0:4d:b8:4e:e6:7e:d4:f8:7c:a1:00:38: 3f:8d:cc:75:7c:06:b3:c2:e6:1e:b4:b7:41:ab:e7: bf:a9:50:a2:87:0e:51:4b:79:f8:ee:52:df:6b:65: 83:da:f1:1c:02:0d:d0:84:10:24:38:91:cb:fb:e0: 77:90:c9:0a:70:0d:36:c5:e6:99:9a:39:7b:43:e0: 2b:6c:0e:c7:c1:d0:b0:a8:16:7d:0a:dc:ac:f3:3d: d2:bf:e6:0f:4c:ab:32:64:49:2e:63:b5:26:f7:72: 97:ba:e7:72:12:99:cc:66:cf:4e:d6:6b:b7:33:71: 50:e4:0f:1f:df:6a:e1:9b:72:46:01:15:b8:ca:1b: b3:75:77:44:e1:ae:45:13:a7:54:89:9d:b4:7c:d9: b8:6d:34:7d:18:24:15:22:45:cf:1b:2b:59:1d:73: 87:ea:6b:3a:88:c9:14:68:3c:12:12:4a:51:d8:c5: 1f:63:12:a1:e0:79:64:8b:c6:a9:1b:43:2f:32:4e: 16:e8:bc:38:41:c5:4f:45:85:63:e8:c2:bf:f3:e2: 0b:45:bd:c8:68:84:0a:03:84:f1:1b:de:b4:60:d3: 87:3f:fd:fb:1e:e2:b7:9e:82:14:ee:0d:02:f2:f8: a9:85:06:76:8b:5a:91:48:4d:5a:cc:37:ea:28:4f: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5C:50:7D:62:EF:86:59:4A:2C:77:E6:CF:3B:7C:A1:03:53:ED:52 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:42:7d:81:44:ac:f2:97:7c:1d:5f:b0:01:fe:9a:d2:63:0e: d3:e6:ab:ae:23:a9:b0:38:22:39:45:22:37:87:2e:91:52:4c: a1:13:23:b7:b9:a3:12:13:6f:bc:c8:3d:f5:f4:25:e2:bd:e5: d4:29:ed:65:d4:ed:ae:8a:f2:cf:7a:5a:91:a4:30:ac:e8:85: fe:00:0f:63:1b:a9:08:b1:45:bd:b7:55:c1:5b:44:33:d1:13: 0b:26:60:9d:99:9a:67:3f:9f:64:41:70:fe:8e:bd:48:66:9e: 3d:4c:84:87:b9:5a:0d:85:77:5b:9c:a4:cb:e9:33:43:09:56: 52:81:88:5c:98:24:8b:d7:43:1b:ec:a4:a7:06:36:44:75:38: 32:e6:98:a1:a9:89:50:cb:cf:f8:58:ed:f0:31:7e:1e:a8:64: cf:19:32:a2:7f:2d:78:d1:32:ab:63:e2:1f:7c:98:3d:e0:48: 38:89:0a:67:45:a3:41:1b:8c:51:63:bd:ba:3a:5f:a7:20:11: 4d:e8:59:fb:2e:0e:c0:7e:71:04:3b:87:6b:e8:18:ff:06:89: 04:f3:f0:83:a8:24:a4:eb:76:5f:27:49:1f:ee:bd:f0:05:7d: ae:f9:05:ff:bb:04:3c:21:3b:0c:79:a9:e8:3d:03:9d:83:87: 9d:c5:b6:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP3qEBTSKLMY33XYBS2C/GcK1y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjA5MjIyMzA1MDhaFw0yNjA5MjQwMDA2MDhaMDMxMTAvBgNV BAMTKEFCNUM1MDdENjJFRjg2NTk0QTJDNzdFNkNGM0I3Q0ExMDM1M0VENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1PBNuE7mftT4fKEAOD+NzHV8 BrPC5h60t0Gr57+pUKKHDlFLefjuUt9rZYPa8RwCDdCEECQ4kcv74HeQyQpwDTbF 5pmaOXtD4CtsDsfB0LCoFn0K3KzzPdK/5g9MqzJkSS5jtSb3cpe653ISmcxmz07W a7czcVDkDx/fauGbckYBFbjKG7N1d0ThrkUTp1SJnbR82bhtNH0YJBUiRc8bK1kd c4fqazqIyRRoPBISSlHYxR9jEqHgeWSLxqkbQy8yThbovDhBxU9FhWPowr/z4gtF vchohAoDhPEb3rRg04c//fse4reeghTuDQLy+KmFBnaLWpFITVrMN+ooT8GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1xQfWLvhllKLHfmzzt8oQNT7VIwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFCfYFErPKXfB1fsAH+mtJjDtPmq64jqbA4 IjlFIjeHLpFSTKETI7e5oxITb7zIPfX0JeK95dQp7WXU7a6K8s96WpGkMKzohf4A D2MbqQixRb23VcFbRDPREwsmYJ2Zmmc/n2RBcP6OvUhmnj1MhIe5Wg2Fd1ucpMvp M0MJVlKBiFyYJIvXQxvspKcGNkR1ODLmmKGpiVDLz/hY7fAxfh6oZM8ZMqJ/LXjR Mqtj4h98mD3gSDiJCmdFo0EbjFFjvbo6X6cgEU3oWfsuDsB+cQQ7h2voGP8GiQTz 8IOoJKTrdl8nSR/uvfAFfa75Bf+7BDwhOwx5qeg9A52Dh53FtiI= -----END CERTIFICATE-----Generated at Wed Sep 23 02:57:41 2026 by rpki-client