$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: DbO6hlAx2olDQk1Fv9u4HlBrWY+s2MhWJqF1ShiW0S4= Subject key identifier: 42:05:5D:04:80:15:E9:E0:08:1C:AA:BF:34:8E:3C:37:21:BE:74:B0 Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 08723A5C47A4B8A1917A710422F52C94B7770664 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:31:34 +0000 Manifest this update: Tue 02 Jun 2026 13:26:34 +0000 Manifest next update: Wed 03 Jun 2026 14:59:34 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) 4: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: M0VRkaZUvxQZZeQRwIiP5XHTDZo2Htfzd6rNfKdOKXg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:72:3a:5c:47:a4:b8:a1:91:7a:71:04:22:f5:2c:94:b7:77:06:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: Jun 2 13:26:34 2026 GMT Not After : Jun 3 14:59:34 2026 GMT Subject: CN=42055D048015E9E0081CAABF348E3C3721BE74B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:7b:ca:ac:4e:d5:84:42:e7:e8:75:05:dc: eb:80:ae:33:55:7f:1a:0a:61:7b:f4:7a:b0:3f:0d: dc:0b:54:8f:8d:43:dd:3e:52:eb:8c:40:68:84:a3: 47:05:b1:db:af:29:6f:0b:0d:70:b4:e7:04:6f:da: a5:ec:ad:7c:b4:a9:42:ee:1d:4c:be:63:bb:80:0d: 9f:29:a8:46:6f:92:05:19:4a:33:50:86:f3:0c:31: 45:f8:9f:5d:96:ca:b6:0d:18:3c:96:f6:3c:6e:64: bb:2c:d0:b7:fd:13:64:23:ad:c4:07:2f:c4:8e:c6: 27:e7:8f:53:ef:0e:bd:52:3a:87:0f:e8:61:58:2a: 4b:64:b6:80:ba:4d:b1:9e:04:c0:d9:0e:c2:52:eb: 0b:e6:c9:b8:84:e4:fc:4b:75:94:8f:4e:c4:49:4b: ed:98:56:4a:a0:95:57:ec:ba:a1:64:62:ff:24:75: 9c:79:d0:07:fb:20:ad:06:27:e3:15:b8:43:0b:10: 79:3d:f2:3d:6f:ef:5a:1b:8e:f5:06:4b:94:4b:7e: de:cf:8a:97:aa:f9:97:ef:63:dc:30:b1:ed:85:3d: e2:24:4d:47:2a:2d:4c:25:26:57:ee:19:2b:4d:64: 40:c7:3d:f5:c2:dd:fd:50:47:a3:37:a8:d2:71:7a: 6d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:05:5D:04:80:15:E9:E0:08:1C:AA:BF:34:8E:3C:37:21:BE:74:B0 X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2e:b8:a9:cd:88:ba:98:57:22:f9:4b:ba:83:36:57:ba:4c: 19:30:1d:93:46:76:63:79:36:78:15:00:4f:5a:ec:3e:8f:6a: 3d:4f:17:7f:08:b0:91:4d:87:6b:3c:90:8a:05:83:ac:17:77: 44:1e:48:c3:62:c7:4f:7c:2c:b9:06:4b:f8:34:d2:95:6a:65: bd:88:d3:91:3d:7f:6e:cf:11:fd:92:46:3e:31:21:81:17:9f: f6:25:c7:d7:11:fb:74:77:6f:87:42:05:7e:b4:9a:7d:c2:e4: f8:66:2a:ae:90:b8:b1:23:47:1f:eb:31:97:5e:0d:7c:ac:ff: 03:11:f8:1a:65:84:b3:b6:e9:1a:87:6f:27:65:7d:f7:83:f8: 01:4e:57:8c:02:e8:b1:93:89:b4:96:aa:f0:59:92:63:e7:81: 6f:13:8b:41:cc:f8:40:0b:8e:38:8a:d4:53:5c:3b:a3:82:66: 6f:0d:99:65:51:46:d7:70:f4:cb:c6:7b:df:55:65:71:b3:7d: 86:0f:82:d4:eb:ea:2f:52:6c:56:ab:ca:59:d0:1a:fa:c5:26: bb:c6:7f:36:65:ea:a9:62:63:4f:a0:aa:1c:ba:6a:9b:9c:33: ab:31:fd:8b:19:5e:fe:e8:59:8d:b3:74:c7:0d:bc:77:92:fb: 98:b3:01:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHI6XEekuKGRenEEIvUslLd3BmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA2MDIxMzI2MzRaFw0yNjA2MDMxNDU5MzRaMDMxMTAvBgNV BAMTKDQyMDU1RDA0ODAxNUU5RTAwODFDQUFCRjM0OEUzQzM3MjFCRTc0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVXvKrE7VhELn6HUF3OuArjNV fxoKYXv0erA/DdwLVI+NQ90+UuuMQGiEo0cFsduvKW8LDXC05wRv2qXsrXy0qULu HUy+Y7uADZ8pqEZvkgUZSjNQhvMMMUX4n12WyrYNGDyW9jxuZLss0Lf9E2QjrcQH L8SOxifnj1PvDr1SOocP6GFYKktktoC6TbGeBMDZDsJS6wvmybiE5PxLdZSPTsRJ S+2YVkqglVfsuqFkYv8kdZx50Af7IK0GJ+MVuEMLEHk98j1v71objvUGS5RLft7P ipeq+ZfvY9wwse2FPeIkTUcqLUwlJlfuGStNZEDHPfXC3f1QR6M3qNJxem2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgVdBIAV6eAIHKq/NI48NyG+dLAwHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkuuKnNiLqYVyL5S7qDNle6TBkwHZNGdmN5 NngVAE9a7D6Paj1PF38IsJFNh2s8kIoFg6wXd0QeSMNix098LLkGS/g00pVqZb2I 05E9f27PEf2SRj4xIYEXn/Ylx9cR+3R3b4dCBX60mn3C5PhmKq6QuLEjRx/rMZde DXys/wMR+BplhLO26RqHbydlffeD+AFOV4wC6LGTibSWqvBZkmPngW8Ti0HM+EAL jjiK1FNcO6OCZm8NmWVRRtdw9MvGe99VZXGzfYYPgtTr6i9SbFarylnQGvrFJrvG fzZl6qliY0+gqhy6apucM6sx/YsZXv7oWY2zdMcNvHeS+5izAck= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:03 2026 by rpki-client