$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json) Hash identifier: o2xgtyMEJlZmQwyBhwC9Ddvu6RyN5bPMvFM9lTzOYk8= Subject key identifier: 63:33:A4:0C:7B:BA:C0:ED:32:7F:EC:30:88:3C:A2:9E:7D:71:63:BD Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Certificate serial: 50997258FEDE562A66715CC965E0EF1F8705E007 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 01:41:15 +0000 Manifest this update: Sun 15 Nov 2026 01:36:15 +0000 Manifest next update: Mon 16 Nov 2026 04:44:15 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=) 2: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: xnf+V8/p77Yke/ZzHpY63yWjTbPOXfjuyLa0uBhEZnA=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:99:72:58:fe:de:56:2a:66:71:5c:c9:65:e0:ef:1f:87:05:e0:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04 Validity Not Before: Nov 15 01:36:15 2026 GMT Not After : Nov 16 04:44:15 2026 GMT Subject: CN=6333A40C7BBAC0ED327FEC30883CA29E7D7163BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:ef:2d:cf:7c:85:a7:ce:f1:64:b1:bb:ce: 3c:2e:08:92:55:06:2b:b8:af:ac:96:dd:0e:95:c0: 0b:a7:b0:12:8e:4d:e3:3e:05:33:52:77:12:7e:2c: e5:53:b4:29:70:af:d5:39:51:b3:e0:ca:2d:16:29: 83:61:0a:34:9d:b2:6c:72:29:a9:1e:42:c1:57:d4: 06:a2:be:bb:ef:ff:3d:07:69:6d:3e:85:1f:e3:6a: 61:eb:dd:ca:77:f0:bc:2d:b1:9a:41:b7:0c:bc:12: 45:05:25:d4:ff:3e:37:56:17:4f:94:33:07:61:56: a8:70:ef:0b:ae:9e:6f:28:68:5e:68:e2:45:79:f2: 47:56:fd:9c:62:e1:e9:2c:cc:05:f9:e9:86:1e:88: ee:10:cb:c5:79:bd:4d:58:69:92:97:35:ff:ab:35: aa:15:5d:f5:5a:20:12:88:38:6f:14:82:ae:8e:04: c3:13:aa:0f:81:32:18:65:59:48:94:0f:3f:19:7f: 5b:93:68:9f:6a:79:0c:b8:e8:11:95:16:16:54:25: d6:4d:c0:89:34:fc:0a:ee:f5:ef:b1:f6:3f:ee:5f: 6e:83:5d:e4:25:4a:56:74:a7:71:bb:ec:71:68:63: c7:ed:a2:cd:37:fa:08:22:f3:ef:ca:0a:42:f1:fe: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:A4:0C:7B:BA:C0:ED:32:7F:EC:30:88:3C:A2:9E:7D:71:63:BD X509v3 Authority Key Identifier: keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9e:ab:ff:c5:b0:a4:36:04:77:af:03:13:24:22:4d:04:08: b9:4d:4d:af:e2:47:15:ec:85:9f:52:f5:32:7c:af:d4:e6:8e: 27:3c:1f:19:c4:32:b0:3c:34:a0:74:28:ec:aa:78:79:94:f6: 77:fa:4c:22:c2:93:cb:92:1b:ca:26:4b:65:8e:8e:ff:37:29: 3f:d0:ac:0f:6f:96:3a:b9:29:4d:22:43:54:3d:99:73:8c:8f: 35:77:a1:9e:aa:e8:99:d3:7a:12:10:30:a5:81:6d:61:8b:1c: ac:22:bd:73:c9:f7:8f:4b:77:2a:33:42:58:da:6f:2e:e6:ac: 4f:a5:5e:01:6e:c8:d6:b7:f7:95:03:57:54:c5:20:dc:52:25: 8e:8d:65:dd:c2:41:34:99:1f:3d:6f:97:4f:99:a9:ea:79:16: b2:d4:5f:b2:f6:7e:f8:05:e7:25:24:31:39:5b:3d:7f:07:13: a1:c7:80:53:91:6c:16:f7:ef:35:eb:21:07:75:38:21:68:2e: 83:5a:e7:34:a3:c3:21:e5:b9:3f:f5:8b:8b:74:17:9d:d7:22: 0f:1e:9e:8b:31:00:e0:42:76:0d:f1:4d:8e:e4:4a:68:d3:3b: 79:ab:ea:d7:bc:f1:27:b3:1b:f9:83:99:ba:bc:be:f5:d3:75: 0b:75:b9:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJlyWP7eVipmcVzJZeDvH4cF4AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYyQUFE OUVBQkUwNDAeFw0yNjExMTUwMTM2MTVaFw0yNjExMTYwNDQ0MTVaMDMxMTAvBgNV BAMTKDYzMzNBNDBDN0JCQUMwRUQzMjdGRUMzMDg4M0NBMjlFN0Q3MTYzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeou8tz3yFp87xZLG7zjwuCJJV Biu4r6yW3Q6VwAunsBKOTeM+BTNSdxJ+LOVTtClwr9U5UbPgyi0WKYNhCjSdsmxy KakeQsFX1Aaivrvv/z0HaW0+hR/jamHr3cp38LwtsZpBtwy8EkUFJdT/PjdWF0+U MwdhVqhw7wuunm8oaF5o4kV58kdW/Zxi4ekszAX56YYeiO4Qy8V5vU1YaZKXNf+r NaoVXfVaIBKIOG8Ugq6OBMMTqg+BMhhlWUiUDz8Zf1uTaJ9qeQy46BGVFhZUJdZN wIk0/Aru9e+x9j/uX26DXeQlSlZ0p3G77HFoY8ftos03+ggi8+/KCkLx/j2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzOkDHu6wO0yf+wwiDyinn1xY70wHwYDVR0j BBgwFoAURCK0KxzKW2EYKtQdNbTyqtnqvgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmM3NTQ3ZmMtNDhkNC00MTY5LWFlMzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIx Q0NBNUI2MTE4MkFENDFEMzVCNEYyQUFEOUVBQkUwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDIyQjQyQjFDQ0E1QjYxMTgyQUQ0MUQzNUI0RjJBQUQ5RUFC RTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvNDQyMkI0MkIxQ0NBNUI2MTE4MkFENDFEMzVCNEYy QUFEOUVBQkUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGueq//FsKQ2BHevAxMkIk0ECLlNTa/iRxXs hZ9S9TJ8r9Tmjic8HxnEMrA8NKB0KOyqeHmU9nf6TCLCk8uSG8omS2WOjv83KT/Q rA9vljq5KU0iQ1Q9mXOMjzV3oZ6q6JnTehIQMKWBbWGLHKwivXPJ949LdyozQlja by7mrE+lXgFuyNa395UDV1TFINxSJY6NZd3CQTSZHz1vl0+Zqep5FrLUX7L2fvgF 5yUkMTlbPX8HE6HHgFORbBb37zXrIQd1OCFoLoNa5zSjwyHluT/1i4t0F53XIg8e nosxAOBCdg3xTY7kSmjTO3mr6te88SezG/mDmbq8vvXTdQt1uU4= -----END CERTIFICATE-----Generated at Sun Nov 15 14:27:32 2026 by rpki-client