$ rpki-client -vvvf rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft File: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft (raw, json) Hash identifier: /TbhXKNukGSK+sFbCZC3A14r1qlxgDZkUpEfL3iOV9U= Subject key identifier: 63:CF:4A:48:5D:46:72:53:66:3B:4C:A0:27:B3:8D:77:64:33:4D:90 Authority key identifier: 52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 Certificate issuer: /CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Certificate serial: 0C445D55976857F565715D894C869E97DF5DB798 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 07:48:57 +0000 Manifest this update: Sun 15 Nov 2026 07:43:57 +0000 Manifest next update: Mon 16 Nov 2026 09:36:57 +0000 Files and hashes: 1: 522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl (hash: Ipe5WIvY/2a7NGlCmXdtNKVsm+zrr5yPVrhfpVIXiOo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:44:5d:55:97:68:57:f5:65:71:5d:89:4c:86:9e:97:df:5d:b7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1 Validity Not Before: Nov 15 07:43:57 2026 GMT Not After : Nov 16 09:36:57 2026 GMT Subject: CN=63CF4A485D467253663B4CA027B38D7764334D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:97:a2:7d:84:65:d6:3d:90:d0:3f:56:eb: 5d:b0:55:d7:82:a4:aa:26:4a:0e:9d:5d:79:f9:76: a2:92:27:9c:1a:d4:58:4c:a8:be:60:06:b0:1b:ba: e6:ef:e4:a5:c7:3d:43:d1:b6:9f:b8:db:2b:9e:e6: 5f:f6:5b:08:bd:ea:85:21:a0:84:70:42:df:e4:57: 8d:b2:1f:cf:cd:93:0c:c7:6c:f8:ec:9c:f1:a8:46: 0a:7f:5f:0f:de:96:1d:e5:b6:0f:21:49:01:9d:fc: 66:38:0d:e9:79:55:35:6c:78:c0:9d:df:c7:e9:ec: 53:88:b8:ae:7c:d3:2f:a7:8c:f7:4b:0b:1b:d8:14: ea:2c:32:1b:9d:99:7b:fb:51:ad:c3:b8:68:ac:80: d6:e3:e4:bc:da:27:6a:ae:8d:5d:bc:17:d2:70:ec: 63:ee:cd:a8:9e:40:df:f3:f1:86:94:6c:ff:d9:f9: 3f:41:7e:60:c5:c0:f3:6e:99:0f:d5:5c:56:3c:de: 0c:e6:6b:d5:e7:dd:f5:f7:f8:99:55:c7:ec:11:6e: e7:28:74:6e:d6:cf:80:fa:ae:22:c9:8c:c2:a6:7a: 98:35:71:4d:42:de:24:ad:34:0f:38:c2:27:52:80: b0:61:c9:4b:39:ae:57:c7:af:89:df:9c:e3:6e:94: cb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:4A:48:5D:46:72:53:66:3B:4C:A0:27:B3:8D:77:64:33:4D:90 X509v3 Authority Key Identifier: keyid:52:2A:E2:3C:F8:ED:B1:30:CB:8C:F5:BD:BB:1A:41:3C:88:A0:7F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/522AE23CF8EDB130CB8CF5BDBB1A413C88A07FB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:da:2f:95:d6:59:62:89:cb:8e:7a:73:2b:a0:52:50:69:a4: dd:1e:21:1d:ae:31:3a:02:3c:50:90:b7:85:7e:9d:03:dd:29: e4:51:36:64:86:44:02:58:55:e7:d4:27:12:25:40:08:7a:e6: 9b:de:fc:6a:2d:f5:cd:ff:33:bf:e9:b0:14:45:1e:bf:aa:d4: 74:e4:d3:d6:05:b5:cf:71:7a:2b:6f:28:3c:19:46:a8:e2:16: 29:cb:0c:f4:c9:4a:6d:a8:a1:c1:75:48:8c:7d:fb:06:07:61: 07:31:49:e6:d4:5e:89:1b:ce:fc:7b:d2:be:42:de:67:6c:3e: 0a:d1:8e:9c:22:f4:61:74:cc:fd:48:88:f7:05:86:3c:e1:6c: 11:19:ca:77:4d:29:75:f2:1b:bb:fc:79:59:ac:9c:5c:72:9e: 90:1b:b9:cc:b1:2a:cb:9b:f2:af:8f:87:5f:cc:05:83:a8:d6: ee:21:f3:22:59:55:1e:6c:24:b9:b5:65:f0:6a:46:dd:e5:43: a5:83:a4:e5:e4:ae:59:c0:3c:a9:6b:3b:75:fb:90:ad:66:2f: c2:0e:c9:d7:a4:d9:9f:b3:30:e3:59:55:33:73:fe:c1:34:8d: a4:0c:9c:11:0b:bc:9d:c7:af:f9:c1:ab:f6:c5:e8:6c:f9:92: 3b:69:bb:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDERdVZdoV/VlcV2JTIael99dt5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQxM0M4 OEEwN0ZCMTAeFw0yNjExMTUwNzQzNTdaFw0yNjExMTYwOTM2NTdaMDMxMTAvBgNV BAMTKDYzQ0Y0QTQ4NUQ0NjcyNTM2NjNCNENBMDI3QjM4RDc3NjQzMzREOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlJeifYRl1j2Q0D9W612wVdeC pKomSg6dXXn5dqKSJ5wa1FhMqL5gBrAbuubv5KXHPUPRtp+42yue5l/2Wwi96oUh oIRwQt/kV42yH8/NkwzHbPjsnPGoRgp/Xw/elh3ltg8hSQGd/GY4Del5VTVseMCd 38fp7FOIuK580y+njPdLCxvYFOosMhudmXv7Ua3DuGisgNbj5LzaJ2qujV28F9Jw 7GPuzaieQN/z8YaUbP/Z+T9BfmDFwPNumQ/VXFY83gzma9Xn3fX3+JlVx+wRbuco dG7Wz4D6riLJjMKmepg1cU1C3iStNA84widSgLBhyUs5rlfHr4nfnONulMtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY89KSF1GclNmO0ygJ7ONd2QzTZAwHwYDVR0j BBgwFoAUUiriPPjtsTDLjPW9uxpBPIigf7EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDM1YmMxMzAtOTY0YS00N2I4LTkyMmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NG OEVEQjEzMENCOENGNUJEQkIxQTQxM0M4OEEwN0ZCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MjJBRTIzQ0Y4RURCMTMwQ0I4Q0Y1QkRCQjFBNDEzQzg4QTA3 RkIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvNTIyQUUyM0NGOEVEQjEzMENCOENGNUJEQkIxQTQx M0M4OEEwN0ZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfaL5XWWWKJy456cyugUlBppN0eIR2uMToC PFCQt4V+nQPdKeRRNmSGRAJYVefUJxIlQAh65pve/Got9c3/M7/psBRFHr+q1HTk 09YFtc9xeitvKDwZRqjiFinLDPTJSm2oocF1SIx9+wYHYQcxSebUXokbzvx70r5C 3mdsPgrRjpwi9GF0zP1IiPcFhjzhbBEZyndNKXXyG7v8eVmsnFxynpAbucyxKsub 8q+Ph1/MBYOo1u4h8yJZVR5sJLm1ZfBqRt3lQ6WDpOXkrlnAPKlrO3X7kK1mL8IO ydek2Z+zMONZVTNz/sE0jaQMnBELvJ3Hr/nBq/bF6Gz5kjtpu6k= -----END CERTIFICATE-----Generated at Sun Nov 15 14:27:58 2026 by rpki-client