$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: SWoK/7PAD762gNn2ii32lIwunDY7sUZu6U78ULeZDSI= Subject key identifier: E3:F3:A2:41:14:F6:F5:74:A7:82:4E:99:F7:A8:7B:5D:79:74:1C:A4 Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 2B00916622FB04FCE588BF84A3A8DCEDB2E4E836 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 11:31:11 +0000 Manifest this update: Thu 03 Sep 2026 11:26:11 +0000 Manifest next update: Fri 04 Sep 2026 11:39:11 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) 2: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) 3: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) 4: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: KgJWyp8mKDqIzpAwewoiLcIIQSIq/x6zI7PxqVIXLWQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:00:91:66:22:fb:04:fc:e5:88:bf:84:a3:a8:dc:ed:b2:e4:e8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: Sep 3 11:26:11 2026 GMT Not After : Sep 4 11:39:11 2026 GMT Subject: CN=E3F3A24114F6F574A7824E99F7A87B5D79741CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:bd:6d:ac:81:66:11:36:37:30:26:10:91: 0c:90:ba:f2:71:1c:31:6e:ef:9e:2a:63:0b:7d:92: d9:84:d1:bd:ec:f4:21:0e:be:11:6b:c5:90:0e:7d: be:e4:ad:22:3b:ab:e7:f1:9d:29:96:f3:1b:16:a0: 5a:d8:a9:c9:ce:59:1f:5a:fc:02:f4:e2:80:0b:9a: 16:c4:11:51:db:32:be:93:ad:d0:a0:c5:21:45:22: 6a:fd:79:6d:5d:e4:1a:a5:8f:22:30:8f:9c:ce:1b: c6:b8:85:7b:6e:2e:97:6e:ac:51:cd:9c:d6:e7:bf: 4f:b8:26:fd:98:67:63:6b:db:60:c6:2d:76:4c:bd: 0b:37:3c:d0:ca:07:a9:f2:14:32:32:3d:32:22:15: 40:76:c3:d6:05:c9:4a:1b:36:5f:46:fd:a6:23:c6: 5e:bc:bd:be:0a:25:d6:cf:1a:80:21:bf:29:eb:0b: 59:3b:1d:11:97:3a:b6:5b:ac:d0:d9:fa:0b:6c:da: fa:31:d6:6b:5a:6d:b2:77:24:97:ec:1d:c2:c5:2d: 69:4f:b4:4b:52:4d:32:99:fc:b5:c6:dd:fd:fa:bc: df:b2:b9:c1:09:63:e4:69:6b:3b:ed:33:87:c9:99: e0:fe:b7:4c:c4:ab:c3:6a:03:d1:49:5c:cd:5b:bc: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F3:A2:41:14:F6:F5:74:A7:82:4E:99:F7:A8:7B:5D:79:74:1C:A4 X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6e:72:20:0d:ee:9e:a9:4c:f9:96:96:a6:e6:48:37:ec:dc: f5:eb:68:80:a4:f2:9a:dc:b9:b3:b7:cf:c0:a0:48:93:a4:3e: 1a:e6:8a:86:00:ae:b1:bf:31:d6:3d:74:bf:b6:e2:c1:e3:f9: aa:87:e2:a7:b8:27:23:65:bd:c4:ea:d9:74:08:ff:9f:84:c7: eb:d9:a6:57:de:76:40:b1:fb:39:ac:80:ed:3f:de:06:24:f3: 9f:f8:0e:d4:2d:dc:22:00:2e:2d:1e:33:fb:05:04:a9:01:4d: 8f:a7:fa:88:83:01:de:96:3d:7a:2e:81:3b:c6:e5:aa:a1:38: ac:c9:64:04:df:52:72:6b:09:6b:f2:12:1e:b7:96:e0:5f:bd: 2e:86:7d:7b:ee:1a:a4:fa:29:bf:0e:3e:37:1a:fa:1e:a5:9e: 62:15:91:04:9e:bc:74:87:b4:a0:af:07:07:6f:ab:8b:b8:38: 86:31:62:44:d7:4b:c7:cf:0e:9f:74:4a:09:3e:24:79:61:62: 38:0a:78:9f:e3:a0:02:be:be:49:f2:0e:20:9c:05:3f:8d:17: 3c:aa:56:a4:9c:c2:41:2b:25:ae:ba:24:9a:1a:0c:ac:0a:9e: f3:83:b7:ac:4f:d6:78:2b:3d:8a:8c:3e:19:43:90:bd:55:23: 4f:0a:2f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwCRZiL7BPzliL+Eo6jc7bLk6DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA5MDMxMTI2MTFaFw0yNjA5MDQxMTM5MTFaMDMxMTAvBgNV BAMTKEUzRjNBMjQxMTRGNkY1NzRBNzgyNEU5OUY3QTg3QjVENzk3NDFDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gr1trIFmETY3MCYQkQyQuvJx HDFu754qYwt9ktmE0b3s9CEOvhFrxZAOfb7krSI7q+fxnSmW8xsWoFrYqcnOWR9a /AL04oALmhbEEVHbMr6TrdCgxSFFImr9eW1d5BqljyIwj5zOG8a4hXtuLpdurFHN nNbnv0+4Jv2YZ2Nr22DGLXZMvQs3PNDKB6nyFDIyPTIiFUB2w9YFyUobNl9G/aYj xl68vb4KJdbPGoAhvynrC1k7HRGXOrZbrNDZ+gts2vox1mtabbJ3JJfsHcLFLWlP tEtSTTKZ/LXG3f36vN+yucEJY+RpazvtM4fJmeD+t0zEq8NqA9FJXM1bvND3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/OiQRT29XSngk6Z96h7XXl0HKQwHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBuciAN7p6pTPmWlqbmSDfs3PXraICk8prc ubO3z8CgSJOkPhrmioYArrG/MdY9dL+24sHj+aqH4qe4JyNlvcTq2XQI/5+Ex+vZ plfedkCx+zmsgO0/3gYk85/4DtQt3CIALi0eM/sFBKkBTY+n+oiDAd6WPXougTvG 5aqhOKzJZATfUnJrCWvyEh63luBfvS6GfXvuGqT6Kb8OPjca+h6lnmIVkQSevHSH tKCvBwdvq4u4OIYxYkTXS8fPDp90Sgk+JHlhYjgKeJ/joAK+vknyDiCcBT+NFzyq VqScwkErJa66JJoaDKwKnvODt6xP1ngrPYqMPhlDkL1VI08KLzc= -----END CERTIFICATE-----Generated at Thu Sep 3 18:06:45 2026 by rpki-client