$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: hY/wPKX4WA+6zs2C0W3xGuIXnvWBqp5ZR6pgFyKz3uc= Subject key identifier: 5A:BD:1E:5A:0F:F8:E3:B6:47:7E:A5:E2:4F:16:4E:29:1A:21:C4:FA Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 6DE39B49D02189E48F83E98A584F046FA1DDCC9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 17:50:42 +0000 Manifest this update: Tue 16 Jun 2026 17:45:42 +0000 Manifest next update: Wed 17 Jun 2026 21:40:42 +0000 Files and hashes: 1: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 2: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: clI2N08SLaex/jQlh4u9yU8WIjvch95krCqOVHjda28=) 3: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) 4: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e3:9b:49:d0:21:89:e4:8f:83:e9:8a:58:4f:04:6f:a1:dd:cc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Jun 16 17:45:42 2026 GMT Not After : Jun 17 21:40:42 2026 GMT Subject: CN=5ABD1E5A0FF8E3B6477EA5E24F164E291A21C4FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:6e:80:72:be:41:40:81:8a:d2:e6:23:46: 33:bb:1d:f0:a8:c3:3d:04:5a:49:da:1e:48:cb:aa: 16:23:cc:ba:12:e3:e7:3a:ef:8c:d6:ff:77:c6:12: dc:06:03:58:25:0c:09:f6:4a:36:fd:f0:51:df:c1: 0a:7e:d7:67:30:c6:f2:cc:69:27:65:94:97:6c:51: d1:02:60:29:1f:92:4d:28:b8:a1:d2:57:d9:5a:35: 7b:2c:01:89:8f:ee:cf:df:d7:40:fe:7e:59:6a:d9: 95:aa:f7:83:4b:38:d6:b0:57:97:3c:8a:13:7e:c7: dc:63:69:5b:fb:8a:a6:f8:d9:93:0a:b4:32:ec:b8: 60:0d:89:84:42:03:b5:6a:1e:6f:e1:b0:5a:af:4a: b1:76:ee:bb:b9:bc:9b:10:c8:1b:a6:e0:85:7c:57: 07:f1:2a:a1:12:17:04:ac:ff:85:3f:75:0d:54:2b: b6:48:b0:6b:96:c5:da:60:71:6c:28:2a:b1:37:db: 0f:88:2d:5e:31:40:4d:fa:b5:8d:ce:97:b2:c9:98: 8e:a2:d7:d3:14:03:2b:86:ab:56:f8:ad:c3:29:99: c1:10:7c:b3:41:f1:03:66:67:bc:3c:44:fd:7a:d4: d7:d6:4f:e4:6d:bf:6d:cc:ec:09:bd:c3:a8:7b:33: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BD:1E:5A:0F:F8:E3:B6:47:7E:A5:E2:4F:16:4E:29:1A:21:C4:FA X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:8d:18:4a:bf:e6:f9:74:da:af:fc:5e:ee:48:f0:38:de:4f: ba:58:5b:ee:db:a1:67:cb:6c:08:00:4c:fd:19:1c:3c:8f:d1: ed:ac:25:3e:52:a2:81:a5:e8:59:8c:5d:46:f1:82:2c:9e:96: 40:e5:23:1f:78:bd:af:d2:7f:c9:f4:30:06:9b:86:95:9f:94: 29:d2:69:5a:26:92:87:bc:1c:76:a3:11:46:1e:eb:ec:9e:51: ce:46:f0:df:47:d7:41:96:ca:b7:c4:d6:0e:79:01:aa:85:15: b7:59:29:a2:07:17:ca:f0:1f:3e:ee:46:9b:86:fa:f4:09:c4: 88:83:13:f4:6b:74:e0:2e:1f:8c:95:3b:4c:b0:4a:e8:7f:18: 8a:95:eb:10:15:61:0b:61:9c:d4:cb:99:32:da:d4:a3:60:33: 5d:be:b1:06:22:cc:e5:c0:54:ae:1d:91:f8:62:a8:2f:d3:34: dc:5b:8f:0b:1e:b4:6b:88:94:0b:b7:61:6b:46:5d:f8:41:34: a5:3a:1e:ec:49:18:33:d8:2a:6e:e8:25:d6:b6:6f:6d:d0:c1: 88:9e:13:0a:58:e7:d1:72:ef:47:c0:09:c9:15:f3:25:98:b2: ff:d2:a6:57:4f:1c:f6:f9:14:7b:73:e6:33:95:79:28:a4:4e: 11:d5:a1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbeObSdAhieSPg+mKWE8Eb6HdzJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjA2MTYxNzQ1NDJaFw0yNjA2MTcyMTQwNDJaMDMxMTAvBgNV BAMTKDVBQkQxRTVBMEZGOEUzQjY0NzdFQTVFMjRGMTY0RTI5MUEyMUM0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZm6Acr5BQIGK0uYjRjO7HfCo wz0EWknaHkjLqhYjzLoS4+c674zW/3fGEtwGA1glDAn2Sjb98FHfwQp+12cwxvLM aSdllJdsUdECYCkfkk0ouKHSV9laNXssAYmP7s/f10D+fllq2ZWq94NLONawV5c8 ihN+x9xjaVv7iqb42ZMKtDLsuGANiYRCA7VqHm/hsFqvSrF27ru5vJsQyBum4IV8 VwfxKqESFwSs/4U/dQ1UK7ZIsGuWxdpgcWwoKrE32w+ILV4xQE36tY3Ol7LJmI6i 19MUAyuGq1b4rcMpmcEQfLNB8QNmZ7w8RP161NfWT+Rtv23M7Am9w6h7M/HvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWr0eWg/447ZHfqXiTxZOKRohxPowHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyNGEq/5vl02q/8Xu5I8DjeT7pYW+7boWfL bAgATP0ZHDyP0e2sJT5SooGl6FmMXUbxgiyelkDlIx94va/Sf8n0MAabhpWflCnS aVomkoe8HHajEUYe6+yeUc5G8N9H10GWyrfE1g55AaqFFbdZKaIHF8rwHz7uRpuG +vQJxIiDE/RrdOAuH4yVO0ywSuh/GIqV6xAVYQthnNTLmTLa1KNgM12+sQYizOXA VK4dkfhiqC/TNNxbjwsetGuIlAu3YWtGXfhBNKU6HuxJGDPYKm7oJda2b23QwYie EwpY59Fy70fACckV8yWYsv/SpldPHPb5FHtz5jOVeSikThHVobk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:14:49 2026 by rpki-client