$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft File: D22CC628B819E164A006F58EA6CF791A3AD66A38.mft (raw, json) Hash identifier: mW3+nRCeKEykEnASxnBcTud4MO3RTkZEhtioWBVLXC4= Subject key identifier: 30:FD:31:72:41:80:70:85:11:33:6D:8C:E2:9B:11:7F:0E:F6:8E:80 Authority key identifier: D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 Certificate issuer: /CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Certificate serial: 6D67A2DE114FB40038DA200B41CF34AEDAB71BBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:00:22 +0000 Manifest this update: Sun 20 Sep 2026 22:55:22 +0000 Manifest next update: Tue 22 Sep 2026 01:43:22 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: dnAkfTvHw17dHWCAlbvcfqCxpaF/acXpN4SJ7+7NKIU=) 2: D22CC628B819E164A006F58EA6CF791A3AD66A38.crl (hash: lRyegy2U5R8Vbs07ji9/KrFmI+36PI3BR3rZFcUMz6U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:67:a2:de:11:4f:b4:00:38:da:20:0b:41:cf:34:ae:da:b7:1b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D22CC628B819E164A006F58EA6CF791A3AD66A38 Validity Not Before: Sep 20 22:55:22 2026 GMT Not After : Sep 22 01:43:22 2026 GMT Subject: CN=30FD31724180708511336D8CE29B117F0EF68E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:48:6e:1f:72:a5:5f:e5:e8:a7:9c:87:f0: 0d:7f:bd:f6:42:e0:e1:35:31:6c:f1:c3:4e:44:0f: 31:63:75:18:78:4d:e5:39:32:14:f3:71:71:4d:f9: bf:16:3c:01:ca:d3:25:36:f6:e6:a4:27:30:72:a3: e2:3f:a6:eb:b8:75:80:7d:d4:8d:2f:77:76:5c:8c: 8b:09:fb:26:6a:78:a0:cd:1a:9e:b6:27:b3:2b:3e: c6:be:d2:c9:51:ec:3f:85:88:83:37:1d:b9:89:25: d3:9c:82:a0:54:33:4e:10:3d:2d:82:c0:f4:22:f8: e8:9d:6c:d8:92:19:9b:22:38:59:99:b7:ca:53:72: b9:09:2b:da:81:67:bc:4c:08:a1:e7:aa:71:26:fc: ff:2f:69:fe:a5:44:9e:d9:da:d4:ee:17:6c:00:f2: 98:a9:4f:6f:5a:05:ed:85:fe:6b:25:b8:c2:0e:a6: c2:10:8e:5c:11:64:64:e2:eb:23:a3:9c:85:48:00: fa:5d:e5:61:22:b3:7c:21:cd:0e:70:7e:c0:08:3a: e9:23:0c:df:19:5a:ce:2e:76:d3:da:fd:60:71:4b: c6:a0:c1:36:10:8d:66:65:70:81:73:21:4a:f5:ab: a8:60:d4:b4:03:74:a9:e3:bb:2e:f3:5e:22:42:77: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:31:72:41:80:70:85:11:33:6D:8C:E2:9B:11:7F:0E:F6:8E:80 X509v3 Authority Key Identifier: keyid:D2:2C:C6:28:B8:19:E1:64:A0:06:F5:8E:A6:CF:79:1A:3A:D6:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D22CC628B819E164A006F58EA6CF791A3AD66A38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/D22CC628B819E164A006F58EA6CF791A3AD66A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9d:46:bb:57:c6:f5:d6:ad:9c:cc:8a:ef:86:06:95:35:4b: 37:ae:13:88:58:d5:d0:c2:d1:88:75:45:18:d7:c1:83:a2:98: e3:87:72:29:2f:bc:ac:7c:87:47:56:fd:8c:b9:64:0c:3b:f9: 06:30:42:8d:a8:88:85:2f:00:a2:47:3c:8c:f1:fc:7a:6c:93: e9:e8:07:76:95:1e:5b:4a:d5:9c:25:b8:d7:27:56:4e:c3:d3: 5f:e8:02:7c:49:e4:63:f5:fb:62:d7:26:15:a9:4a:7d:6a:b2: 23:62:ce:e3:38:b3:3f:e0:6e:dd:16:18:86:56:f5:e9:b6:e9: 5b:0a:13:fa:c4:32:c8:44:4f:0f:b2:ef:6c:a4:7e:5c:b8:f6: 7e:11:c1:80:58:22:aa:60:ee:d3:09:70:72:6f:74:64:a8:01: fd:aa:91:86:be:4b:b8:3c:8c:eb:39:71:92:71:71:71:13:08: 7d:09:88:b4:c7:77:19:12:d4:d7:20:38:4e:da:6b:40:bb:2c: 75:d8:c3:f9:f5:44:b1:27:8f:d2:c3:d1:fb:c2:df:c4:4f:83: ca:c0:41:c4:61:0e:d1:7f:40:0a:a2:8c:65:69:b5:91:11:22: 28:c7:45:14:fa:85:85:f7:57:29:c9:d7:47:d3:2c:d6:ff:c9: 7d:49:39:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWei3hFPtAA42iALQc80rtq3G70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5MUEz QUQ2NkEzODAeFw0yNjA5MjAyMjU1MjJaFw0yNjA5MjIwMTQzMjJaMDMxMTAvBgNV BAMTKDMwRkQzMTcyNDE4MDcwODUxMTMzNkQ4Q0UyOUIxMTdGMEVGNjhFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWp0huH3KlX+Xop5yH8A1/vfZC 4OE1MWzxw05EDzFjdRh4TeU5MhTzcXFN+b8WPAHK0yU29uakJzByo+I/puu4dYB9 1I0vd3ZcjIsJ+yZqeKDNGp62J7MrPsa+0slR7D+FiIM3HbmJJdOcgqBUM04QPS2C wPQi+OidbNiSGZsiOFmZt8pTcrkJK9qBZ7xMCKHnqnEm/P8vaf6lRJ7Z2tTuF2wA 8pipT29aBe2F/msluMIOpsIQjlwRZGTi6yOjnIVIAPpd5WEis3whzQ5wfsAIOukj DN8ZWs4udtPa/WBxS8agwTYQjWZlcIFzIUr1q6hg1LQDdKnjuy7zXiJCd8JpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMP0xckGAcIURM22M4psRfw72joAwHwYDVR0j BBgwFoAU0izGKLgZ4WSgBvWOps95GjrWajgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGIwMTYwODUtMmY5NC00MGZmLTgwY2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhC ODE5RTE2NEEwMDZGNThFQTZDRjc5MUEzQUQ2NkEzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjJDQzYyOEI4MTlFMTY0QTAwNkY1OEVBNkNGNzkxQTNBRDY2 QTM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvRDIyQ0M2MjhCODE5RTE2NEEwMDZGNThFQTZDRjc5 MUEzQUQ2NkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJidRrtXxvXWrZzMiu+GBpU1SzeuE4hY1dDC 0Yh1RRjXwYOimOOHcikvvKx8h0dW/Yy5ZAw7+QYwQo2oiIUvAKJHPIzx/Hpsk+no B3aVHltK1ZwluNcnVk7D01/oAnxJ5GP1+2LXJhWpSn1qsiNizuM4sz/gbt0WGIZW 9em26VsKE/rEMshETw+y72ykfly49n4RwYBYIqpg7tMJcHJvdGSoAf2qkYa+S7g8 jOs5cZJxcXETCH0JiLTHdxkS1NcgOE7aa0C7LHXYw/n1RLEnj9LD0fvC38RPg8rA QcRhDtF/QAqijGVptZERIijHRRT6hYX3VynJ10fTLNb/yX1JOWA= -----END CERTIFICATE-----Generated at Mon Sep 21 04:16:20 2026 by rpki-client