$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft File: F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft (raw, json) Hash identifier: 0sn8qlTwDi/omw0AMhg5lDPShHkUpYEXbG3X2UMa33w= Subject key identifier: B4:18:48:2C:DE:87:B6:7F:C0:9E:7B:2C:4F:40:3B:90:62:A6:E7:9B Authority key identifier: F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E Certificate issuer: /CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Certificate serial: 7894E4B36B699693506011913F851B81D982DA93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:30:56 +0000 Manifest this update: Sun 20 Sep 2026 19:25:56 +0000 Manifest next update: Mon 21 Sep 2026 21:07:56 +0000 Files and hashes: 1: F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl (hash: NOUb26PGA1lut6b/hpq5fFpzGsfj+jVPvI6YdOgGYkQ=) 2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: wxFKBpn9qVN9lrWfCaIxYIWmbSnlJkTDNrnGXIX7Yog=) 3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: gX3SrmHuIFxjATXp8t+HZx8aCultQoPEMzsPd4px2h0=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: qpcV4Pf7cNXRuQrRMlgmCsKcJG4eLr1f/Ludu6hvhtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:94:e4:b3:6b:69:96:93:50:60:11:91:3f:85:1b:81:d9:82:da:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F22D335E58FE4480C630028AFDA089DDD4F51B2E Validity Not Before: Sep 20 19:25:56 2026 GMT Not After : Sep 21 21:07:56 2026 GMT Subject: CN=B418482CDE87B67FC09E7B2C4F403B9062A6E79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ea:90:96:4f:b8:02:c8:7b:ce:51:8d:92:c9: 18:c2:e6:80:a6:7c:0c:43:dd:cd:68:a3:ce:52:ab: aa:27:9d:57:70:4d:fa:38:ca:94:2a:9e:1e:61:64: f1:1a:df:75:c2:4c:02:50:7c:6b:75:b4:f7:cb:41: f7:c8:92:19:8d:74:b5:4c:30:0d:2a:f7:37:83:a6: 99:99:17:48:e0:c4:33:24:4f:e3:99:35:b9:69:f9: bd:1f:67:a3:4d:ab:c2:1e:7b:50:9a:09:62:6d:6c: e7:d2:62:4a:d1:2d:d3:b0:31:99:5e:fb:25:8a:76: 0b:f4:80:8c:8d:aa:7c:0f:a7:7c:e4:40:0a:a1:35: de:6e:6a:de:ae:37:74:4b:72:b7:f9:33:ef:df:e1: 87:e0:0a:db:65:33:b0:5b:dc:74:e2:c5:ad:11:ce: 9a:8d:39:33:13:f8:97:e8:19:b6:4f:d7:47:d9:da: 36:c6:84:de:dd:28:6b:ef:3c:36:30:a8:f3:60:27: 96:a3:79:5d:a4:26:75:ed:90:c6:a4:49:45:6d:fb: 59:80:6e:a2:63:eb:25:36:ac:92:c0:83:89:92:c0: 18:d4:fc:5c:95:ae:e2:fd:45:98:9a:77:e5:08:3f: 89:f1:29:19:16:76:ea:8e:6e:18:86:d4:7f:0e:7e: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:18:48:2C:DE:87:B6:7F:C0:9E:7B:2C:4F:40:3B:90:62:A6:E7:9B X509v3 Authority Key Identifier: keyid:F2:2D:33:5E:58:FE:44:80:C6:30:02:8A:FD:A0:89:DD:D4:F5:1B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F22D335E58FE4480C630028AFDA089DDD4F51B2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/F22D335E58FE4480C630028AFDA089DDD4F51B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3d:9c:2e:c9:b5:c7:9e:42:cb:b1:dc:0f:23:45:22:25:80: 97:8d:f6:6a:2c:8e:9a:50:8f:4c:d1:01:d7:c9:4a:1a:23:67: b5:32:f0:cd:02:e1:e9:2d:1d:6f:50:08:0a:51:27:d6:99:02: bd:68:3e:dd:ca:c7:02:d3:91:93:3a:2c:94:c1:91:88:fa:db: 99:09:70:38:83:e8:7d:9f:40:77:76:c6:c8:6f:9b:9e:5b:6a: e6:4b:09:d3:9a:81:8b:49:2f:6b:51:f7:44:d3:f0:49:78:40: 94:95:d1:fb:6b:06:57:f5:3c:c3:b8:29:f5:c7:b4:e8:70:1b: 6a:15:0c:31:66:18:12:5d:2b:e9:45:38:68:36:00:f9:3f:27: f4:7e:d9:33:1d:bd:8d:02:2b:a9:0f:22:81:38:4e:32:a4:af: 4f:75:ea:ea:59:08:6b:1a:42:ce:6b:7f:6b:1e:d6:2a:2b:ad: 0c:ae:8e:7d:02:b4:73:8f:a3:65:a5:1e:a2:fb:9f:75:fe:5a: 59:2d:f0:84:f6:29:a4:04:58:28:fb:11:c6:94:a1:67:90:6e: 18:a0:31:eb:40:ae:c6:4d:93:5e:76:a1:e0:25:47:57:86:32: 2f:28:05:97:00:c6:f4:65:aa:c3:60:34:85:ec:c3:38:a8:03: 5b:bf:60:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJTks2tplpNQYBGRP4UbgdmC2pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERE NEY1MUIyRTAeFw0yNjA5MjAxOTI1NTZaFw0yNjA5MjEyMTA3NTZaMDMxMTAvBgNV BAMTKEI0MTg0ODJDREU4N0I2N0ZDMDlFN0IyQzRGNDAzQjkwNjJBNkU3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY6pCWT7gCyHvOUY2SyRjC5oCm fAxD3c1oo85Sq6onnVdwTfo4ypQqnh5hZPEa33XCTAJQfGt1tPfLQffIkhmNdLVM MA0q9zeDppmZF0jgxDMkT+OZNblp+b0fZ6NNq8Iee1CaCWJtbOfSYkrRLdOwMZle +yWKdgv0gIyNqnwPp3zkQAqhNd5uat6uN3RLcrf5M+/f4YfgCttlM7Bb3HTixa0R zpqNOTMT+JfoGbZP10fZ2jbGhN7dKGvvPDYwqPNgJ5ajeV2kJnXtkMakSUVt+1mA bqJj6yU2rJLAg4mSwBjU/FyVruL9RZiad+UIP4nxKRkWduqObhiG1H8Ofk1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBhILN6Htn/AnnssT0A7kGKm55swHwYDVR0j BBgwFoAU8i0zXlj+RIDGMAKK/aCJ3dT1Gy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI3ODBmODUtZWYyZi00Y2Y4LWE0YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1 OEZFNDQ4MEM2MzAwMjhBRkRBMDg5RERENEY1MUIyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMjJEMzM1RTU4RkU0NDgwQzYzMDAyOEFGREEwODlEREQ0RjUx QjJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvRjIyRDMzNUU1OEZFNDQ4MEM2MzAwMjhBRkRBMDg5 RERENEY1MUIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHY9nC7JtceeQsux3A8jRSIlgJeN9mosjppQ j0zRAdfJShojZ7Uy8M0C4ektHW9QCApRJ9aZAr1oPt3KxwLTkZM6LJTBkYj625kJ cDiD6H2fQHd2xshvm55bauZLCdOagYtJL2tR90TT8El4QJSV0ftrBlf1PMO4KfXH tOhwG2oVDDFmGBJdK+lFOGg2APk/J/R+2TMdvY0CK6kPIoE4TjKkr0916upZCGsa Qs5rf2se1iorrQyujn0CtHOPo2WlHqL7n3X+Wlkt8IT2KaQEWCj7EcaUoWeQbhig MetArsZNk152oeAlR1eGMi8oBZcAxvRlqsNgNIXswzioA1u/YGo= -----END CERTIFICATE-----Generated at Mon Sep 21 05:35:33 2026 by rpki-client