$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft File: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft (raw, json) Hash identifier: zTCGCM66DG0Y6zsbMBMo0+T37A6lLpe6L2i4eMKq/zw= Subject key identifier: F3:F2:2E:8D:74:B2:3F:34:BF:21:7A:A2:E7:CE:46:CD:F7:66:73:29 Authority key identifier: 22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE Certificate issuer: /CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Certificate serial: 60EB2563616B91E9E660E67466E61CF726F40DF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft Manifest number: CF Signing time: Sun 04 Oct 2026 03:09:09 +0000 Manifest this update: Sun 04 Oct 2026 03:04:09 +0000 Manifest next update: Mon 05 Oct 2026 05:11:09 +0000 Files and hashes: 1: 3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (hash: 2a4Hf3YDF56s5qb6zxqWnvgc6eyNq3cFFHnQ7nNqXq8=) 2: 22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl (hash: 0U831YxbOCxG3J+FQWQY6vak/nfUULIsXc6isfTCXFc=) 3: 3130332e3133362e3137302e302f32332d3233203d3e203538333639.roa (hash: BTC7YzwbdoGAbmcrsnbzNKCpEK4Zt6hEW7QOy7PH3X4=) 4: 3130332e3133362e3137312e302f32342d3234203d3e203538333639.roa (hash: eCWXC4LVVw9/xb/M2VWb2tLlazigP6Bh0q5irNMrIT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:eb:25:63:61:6b:91:e9:e6:60:e6:74:66:e6:1c:f7:26:f4:0d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DD8401AC6B88A597E903CFD7604417E9CFAFBE Validity Not Before: Oct 4 03:04:09 2026 GMT Not After : Oct 5 05:11:09 2026 GMT Subject: CN=F3F22E8D74B23F34BF217AA2E7CE46CDF7667329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:20:fe:08:67:21:e2:4f:69:7f:4b:b1:72: 7b:ac:fa:16:57:8f:bb:73:df:ca:54:44:89:b7:1d: 9e:9d:c2:8f:6d:c4:2a:29:08:92:8d:6b:6a:8e:3e: f1:58:72:32:60:7f:8b:18:15:04:b6:b8:1b:cb:e5: 82:51:2b:36:08:ed:47:23:40:a2:a7:4b:91:d0:cc: a0:f7:c1:1b:c3:e6:cb:d8:c1:b7:a8:9e:c4:42:59: e1:82:30:f9:c4:62:a7:c0:ed:fe:73:b2:5a:e3:74: 19:3c:76:b6:52:5d:9b:32:2f:b0:1c:b1:9b:6d:58: 3b:94:4b:0e:ab:30:71:a3:34:1a:db:5a:62:f7:a9: 06:57:52:24:f9:cb:20:ba:96:3a:ab:30:c7:82:b1: c3:01:2d:16:4e:95:fa:d3:bc:3a:6e:31:4e:f8:09: e8:e8:36:e9:49:7d:02:f3:0b:ba:f0:f8:6a:6e:95: 44:7a:fc:05:f3:8d:1c:32:c3:1c:cd:78:f6:ae:7f: 88:06:e8:e6:0c:4c:80:88:13:10:dd:ef:8e:ff:51: 47:f0:fe:d3:b6:8e:04:c3:8f:b5:43:05:99:2a:1b: 0c:34:f5:ca:59:34:58:fb:53:ec:d2:a0:c0:2b:ca: 62:28:b0:72:62:f1:f2:f2:7d:cf:6b:74:1d:13:78: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:2E:8D:74:B2:3F:34:BF:21:7A:A2:E7:CE:46:CD:F7:66:73:29 X509v3 Authority Key Identifier: keyid:22:DD:84:01:AC:6B:88:A5:97:E9:03:CF:D7:60:44:17:E9:CF:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/22DD8401AC6B88A597E903CFD7604417E9CFAFBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:09:cc:8a:4e:f2:13:70:e1:3d:8c:f8:c1:d3:96:28:ad:d1: fe:36:6f:a8:1e:d7:4a:ba:6e:c6:f9:00:47:c4:a5:fa:3a:dd: f2:bd:db:a3:f3:da:1b:32:75:70:b0:b1:ac:73:c5:77:63:56: cc:bb:aa:aa:31:48:3c:62:f2:50:b9:c5:2a:0b:14:6b:17:a2: b6:45:60:4b:06:42:64:04:a6:79:69:e9:10:ab:84:69:0e:2f: 10:2d:58:74:28:80:87:a8:7d:79:1b:fc:0e:16:cd:d6:d3:9c: 20:1d:82:11:ae:cc:7f:46:10:2e:04:95:35:14:01:7b:38:56: 59:03:ff:86:a9:f0:17:df:af:3f:44:26:2b:9b:27:d9:e8:d5: 66:dc:ff:ad:a8:a1:4d:5a:49:54:8c:4c:09:6f:79:fe:91:6e: 7e:1d:f7:48:5c:f2:fa:ac:08:83:0c:48:f9:c3:dd:be:57:0f: ed:5d:43:94:02:0e:f0:a0:dc:47:00:79:94:c0:af:16:e7:72: b6:34:5b:a1:79:86:d8:d3:fb:77:48:c2:84:10:36:9f:58:5c: 93:5c:b4:cb:ac:3e:eb:af:9d:6a:96:13:c5:af:e1:42:19:0d: 38:a6:82:c8:e4:da:b9:a2:00:9a:0e:af:33:24:74:ca:6e:62: 5b:b2:a9:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOslY2FrkenmYOZ0ZuYc9yb0DfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdF OUNGQUZCRTAeFw0yNjEwMDQwMzA0MDlaFw0yNjEwMDUwNTExMDlaMDMxMTAvBgNV BAMTKEYzRjIyRThENzRCMjNGMzRCRjIxN0FBMkU3Q0U0NkNERjc2NjczMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiFiD+CGch4k9pf0uxcnus+hZX j7tz38pURIm3HZ6dwo9txCopCJKNa2qOPvFYcjJgf4sYFQS2uBvL5YJRKzYI7Ucj QKKnS5HQzKD3wRvD5svYwbeonsRCWeGCMPnEYqfA7f5zslrjdBk8drZSXZsyL7Ac sZttWDuUSw6rMHGjNBrbWmL3qQZXUiT5yyC6ljqrMMeCscMBLRZOlfrTvDpuMU74 CejoNulJfQLzC7rw+GpulUR6/AXzjRwywxzNePauf4gG6OYMTICIExDd747/UUfw /tO2jgTDj7VDBZkqGww09cpZNFj7U+zSoMArymIosHJi8fLyfc9rdB0TeNghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8/IujXSyPzS/IXqi585GzfdmcykwHwYDVR0j BBgwFoAUIt2EAaxriKWX6QPP12BEF+nPr74wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGY2MWYwNGQtMThlNy00MmZmLWFlODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFB QzZCODhBNTk3RTkwM0NGRDc2MDQ0MTdFOUNGQUZCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMkREODQwMUFDNkI4OEE1OTdFOTAzQ0ZENzYwNDQxN0U5Q0ZB RkJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGY2MWYwNGQtMThlNy00MmZmLWFl ODItZDU2NTU0ZjkyNjRjLzAvMjJERDg0MDFBQzZCODhBNTk3RTkwM0NGRDc2MDQ0 MTdFOUNGQUZCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAJzIpO8hNw4T2M+MHTliit0f42b6ge10q6 bsb5AEfEpfo63fK926Pz2hsydXCwsaxzxXdjVsy7qqoxSDxi8lC5xSoLFGsXorZF YEsGQmQEpnlp6RCrhGkOLxAtWHQogIeofXkb/A4WzdbTnCAdghGuzH9GEC4ElTUU AXs4VlkD/4ap8Bffrz9EJiubJ9no1Wbc/62ooU1aSVSMTAlvef6Rbn4d90hc8vqs CIMMSPnD3b5XD+1dQ5QCDvCg3EcAeZTArxbncrY0W6F5htjT+3dIwoQQNp9YXJNc tMusPuuvnWqWE8Wv4UIZDTimgsjk2rmiAJoOrzMkdMpuYluyqWE= -----END CERTIFICATE-----Generated at Sun Oct 4 10:26:30 2026 by rpki-client