
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json)
Hash identifier: nWPw58YGoNbj/vZNc5eTdblYaeznvH/vMJHvTEZAOQ0=
Subject key identifier: 06:F9:D1:C7:19:AD:A1:2C:DA:80:C6:1C:CD:6C:A7:9A:16:67:88:A7
Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Certificate serial: EB328343E5725800A387851B01425425DC5FC7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
Manifest number: E3
Signing time: Wed 21 Oct 2026 02:01:39 +0000
Manifest this update: Wed 21 Oct 2026 01:56:39 +0000
Manifest next update: Thu 22 Oct 2026 04:54:39 +0000
Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=)
2: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: X9M4dCUgfg4mYHCiDxUK01siwSdkR9SQ0ZzAJn1ZCYg=)
3: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=)
4: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 04:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
eb:32:83:43:e5:72:58:00:a3:87:85:1b:01:42:54:25:dc:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Validity
Not Before: Oct 21 01:56:39 2026 GMT
Not After : Oct 22 04:54:39 2026 GMT
Subject: CN=06F9D1C719ADA12CDA80C61CCD6CA79A166788A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:8a:52:93:81:8d:bb:25:00:28:23:c0:71:
0b:a4:3e:69:62:aa:a7:30:78:f5:b6:5f:a0:6d:8f:
b5:dc:da:97:3e:4f:7a:c0:18:98:e8:3a:86:78:f5:
69:92:18:ef:04:17:8e:49:47:ce:71:9d:cd:89:19:
67:52:f2:d7:12:07:6c:15:71:43:14:61:2e:47:f3:
61:89:50:bb:c0:e8:48:8b:46:fc:6a:66:eb:44:a8:
6e:af:dc:3f:ce:7d:18:e9:1a:c9:23:6a:f6:2b:bf:
04:03:de:ee:6e:95:70:3c:a6:1f:70:d9:fd:70:fd:
d2:aa:b9:7d:93:88:eb:77:bd:7d:8e:34:a5:68:54:
66:e5:90:fa:59:f6:b1:18:af:ee:e6:d6:2b:e7:c7:
40:64:7d:c0:c4:7f:3a:8c:4c:93:a3:ee:17:e5:4f:
47:33:fd:d3:29:03:56:fc:4d:2d:75:b7:1a:a6:b6:
f7:a9:91:c2:95:6e:92:26:b9:be:8c:01:42:01:ca:
cf:05:92:f4:90:41:f3:a5:54:9e:ae:11:e5:07:44:
74:38:ec:26:d3:42:3c:b4:32:f3:e9:b7:97:1d:0f:
b4:b5:59:f2:13:c6:bb:83:a2:e7:45:7f:7f:37:31:
00:ad:32:e9:6d:9a:ce:58:16:4d:5c:4a:93:02:9a:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:D1:C7:19:AD:A1:2C:DA:80:C6:1C:CD:6C:A7:9A:16:67:88:A7
X509v3 Authority Key Identifier:
keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:71:c2:ce:21:81:e0:ac:76:f5:b9:b1:58:4f:c5:60:14:
59:e5:b9:29:f2:81:c4:0c:d9:79:20:e2:59:08:64:f1:6c:ae:
fc:b0:ac:80:68:38:4a:d2:0b:22:13:71:db:14:85:3c:81:39:
ec:f3:b3:90:18:61:79:0e:45:c5:2d:e2:83:f7:0a:03:b9:77:
b0:13:fa:14:6e:7e:03:fc:f9:ce:03:9e:62:4c:89:1d:bf:65:
69:05:3e:39:58:9c:06:a1:c4:2a:db:12:d6:1c:ef:69:68:1c:
25:3b:63:1d:53:6f:86:b2:ad:75:3e:01:70:c6:9d:b4:dc:76:
fb:8d:db:2a:50:0e:ec:3d:a9:5d:9f:cd:11:74:4c:a0:7f:3f:
f6:0c:9a:10:6f:84:96:a2:9b:23:fc:49:c3:2d:0d:ea:70:98:
95:c9:16:d2:ef:e6:ad:a2:d5:e0:02:12:10:b1:5a:90:91:4a:
bb:bd:5a:c5:b1:61:aa:c3:1c:a2:60:d1:61:19:cb:18:17:a3:
99:11:6c:62:39:dc:2a:12:1a:cf:a6:d3:aa:a9:f6:a7:4e:15:
a0:96:0c:3e:48:fa:47:45:5b:77:a2:1d:a8:d6:b7:45:a0:d5:
3d:c6:d4:7d:29:d3:ba:c2:16:19:2f:c4:1d:8e:63:d9:78:cb:
f5:c9:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:29:26 2026 by rpki-client