$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: MQZPBrjFqje4hq2DvL8oawlwI1VL9RUvi/cD8C21sxg= Subject key identifier: 52:BE:06:BF:54:7B:3A:CE:83:98:31:E1:D3:5D:4C:6D:F0:66:4C:5E Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 30519A77532DD5EF0C6E55AE85844139AB4C0401 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:56:28 +0000 Manifest this update: Mon 21 Sep 2026 07:51:28 +0000 Manifest next update: Tue 22 Sep 2026 11:19:28 +0000 Files and hashes: 1: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: yff6LzgxFLVjrqGZn7jYS+ny/7x6aFb9KAwjqjZiLNg=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:51:9a:77:53:2d:d5:ef:0c:6e:55:ae:85:84:41:39:ab:4c:04:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: Sep 21 07:51:28 2026 GMT Not After : Sep 22 11:19:28 2026 GMT Subject: CN=52BE06BF547B3ACE839831E1D35D4C6DF0664C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:42:40:d0:7c:28:39:fc:5f:79:d2:50:d6: 50:7f:1d:d7:57:67:c8:e5:2f:8d:cc:0f:1d:2d:ee: 75:35:44:3f:6f:c9:f9:fc:7a:71:8a:95:bc:9f:c8: 2f:d6:b0:c0:83:bc:9e:3e:0f:01:f9:55:c0:07:36: 07:9b:fd:02:5e:05:8d:26:5d:92:2f:2a:9f:f2:ac: d4:0c:2a:5a:c6:48:df:98:6a:e3:da:63:d7:45:18: 7e:a1:64:e8:14:2d:aa:bf:29:2e:56:1a:5b:13:9e: 9b:9f:e1:c9:16:6d:10:c9:69:27:23:36:08:ae:51: 25:4a:b8:f0:da:7a:e8:d2:ee:58:78:cb:c3:3d:85: d8:ce:2e:86:45:7a:26:94:c9:64:45:5f:27:3e:52: 8e:ab:40:e3:9b:1e:46:5c:3c:18:8f:2a:74:2f:4c: 3c:80:76:cb:92:29:a9:fe:e5:f8:7e:02:31:53:6b: b6:cc:10:a6:36:ca:05:33:fb:6c:c3:b7:a4:3b:f7: 40:7d:de:ef:42:02:23:fc:72:03:48:35:cc:5f:ad: 6a:ef:7e:e0:98:5c:44:c2:9e:9c:6f:84:c0:c4:12: 7c:d3:4a:18:e1:99:9d:a8:d8:d0:da:2b:27:0d:06: 7e:9f:aa:6a:54:c8:60:0f:74:50:2b:4a:53:06:0f: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:06:BF:54:7B:3A:CE:83:98:31:E1:D3:5D:4C:6D:F0:66:4C:5E X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ec:22:d2:56:a0:4c:b5:55:fe:75:6d:ca:5e:46:64:d5:c5: 43:fb:9c:ee:26:60:5e:44:ad:d9:ed:53:89:16:05:d6:21:fc: e6:d3:1d:a8:3b:3d:6a:bb:92:ef:65:2f:f6:56:2c:71:81:8b: 61:9f:81:bf:a9:f4:50:3a:a0:25:0b:6c:a4:c4:3d:10:96:3c: 8c:60:e9:a8:c4:29:b3:ba:1a:d8:03:20:ce:0d:8d:f6:bb:00: c6:4b:cf:6a:a8:7b:53:ce:24:73:93:4a:52:cb:54:a2:70:32: 2d:5b:f7:50:45:00:1f:3d:a4:ec:d1:5c:db:99:8b:93:9d:95: d0:c3:86:84:75:e0:ec:b6:8b:a2:92:b5:82:de:20:d8:1c:eb: c9:b5:5c:c7:3d:dd:3c:7f:40:e5:bd:bd:ec:f8:cc:ca:2e:63: 00:58:b8:25:a1:6c:6d:dd:2d:12:46:de:ff:be:3a:68:16:57: 6e:5a:09:b6:52:76:16:57:a8:57:fb:de:2b:60:56:a9:59:38: dd:43:23:9e:d9:b9:0d:f8:1e:df:1e:08:02:f8:61:88:0a:40: 87:5a:a6:5c:8a:0b:db:2c:9d:e0:ad:3c:19:8d:7a:09:dd:a2: 3d:50:c6:fe:e1:77:43:28:0b:62:c5:aa:f4:a8:1c:9c:09:0a: 3a:d7:c8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFGad1Mt1e8MblWuhYRBOatMBAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjA5MjEwNzUxMjhaFw0yNjA5MjIxMTE5MjhaMDMxMTAvBgNV BAMTKDUyQkUwNkJGNTQ3QjNBQ0U4Mzk4MzFFMUQzNUQ0QzZERjA2NjRDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrUJA0HwoOfxfedJQ1lB/HddX Z8jlL43MDx0t7nU1RD9vyfn8enGKlbyfyC/WsMCDvJ4+DwH5VcAHNgeb/QJeBY0m XZIvKp/yrNQMKlrGSN+YauPaY9dFGH6hZOgULaq/KS5WGlsTnpuf4ckWbRDJaScj NgiuUSVKuPDaeujS7lh4y8M9hdjOLoZFeiaUyWRFXyc+Uo6rQOObHkZcPBiPKnQv TDyAdsuSKan+5fh+AjFTa7bMEKY2ygUz+2zDt6Q790B93u9CAiP8cgNINcxfrWrv fuCYXETCnpxvhMDEEnzTShjhmZ2o2NDaKycNBn6fqmpUyGAPdFArSlMGD3KfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUr4Gv1R7Os6DmDHh011MbfBmTF4wHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvsItJWoEy1Vf51bcpeRmTVxUP7nO4mYF5E rdntU4kWBdYh/ObTHag7PWq7ku9lL/ZWLHGBi2Gfgb+p9FA6oCULbKTEPRCWPIxg 6ajEKbO6GtgDIM4Njfa7AMZLz2qoe1POJHOTSlLLVKJwMi1b91BFAB89pOzRXNuZ i5OdldDDhoR14Oy2i6KStYLeINgc68m1XMc93Tx/QOW9vez4zMouYwBYuCWhbG3d LRJG3v++OmgWV25aCbZSdhZXqFf73itgVqlZON1DI57ZuQ34Ht8eCAL4YYgKQIda plyKC9ssneCtPBmNegndoj1Qxv7hd0MoC2LFqvSoHJwJCjrXyDM= -----END CERTIFICATE-----Generated at Mon Sep 21 20:08:24 2026 by rpki-client