$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: fMN5BzYY8QaKY3MY+ko5P9YhgrNGOjSCMMWsg16a1r8= Subject key identifier: 15:5E:12:08:56:10:12:01:B5:78:DA:36:D3:1C:3B:4F:58:09:36:27 Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 3B16FC6E1ECB00B86B741DDA0DAD8B8FF08158B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: BB Signing time: Sun 20 Sep 2026 21:38:45 +0000 Manifest this update: Sun 20 Sep 2026 21:33:45 +0000 Manifest next update: Tue 22 Sep 2026 00:07:45 +0000 Files and hashes: 1: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) 2: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: on2Hpkyptap18IS+3CBFIzxNNsUUTB/VbKvSQeGuxog=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) 4: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:fc:6e:1e:cb:00:b8:6b:74:1d:da:0d:ad:8b:8f:f0:81:58:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: Sep 20 21:33:45 2026 GMT Not After : Sep 22 00:07:45 2026 GMT Subject: CN=155E120856101201B578DA36D31C3B4F58093627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:83:00:9e:11:f6:a2:96:ee:46:4e:42:c3: fb:84:13:e8:af:7a:46:c0:e9:43:8d:0f:37:25:fb: f2:1a:b8:0a:1f:3d:98:58:7c:48:67:06:5e:63:9a: 94:c0:48:11:56:0d:1f:b3:70:9d:ea:b3:70:08:a3: 8d:eb:d3:eb:cd:73:fc:7a:92:22:e1:e0:c5:83:1f: 4a:31:fb:43:c2:36:d7:2b:9d:a4:be:60:0b:f5:35: 89:34:41:f5:fb:55:2d:38:56:22:11:21:ee:5c:45: 93:56:a7:34:53:f6:5c:7a:b1:fe:fd:1f:c7:59:54: b2:85:b5:01:f6:6a:ed:1e:72:d4:04:48:de:d0:d2: b7:28:8f:d9:e7:34:41:2e:66:c3:16:8e:d9:cd:0d: e4:e6:49:9c:30:5e:64:93:e4:f5:1d:64:c1:6e:a2: 9b:56:9f:99:a6:22:7f:c7:c8:3b:dc:a6:65:0c:bd: b4:b2:d7:fb:eb:fd:1a:38:d3:9e:a0:3e:63:e3:a6: 22:2c:96:a6:91:5c:aa:39:a1:47:dc:92:67:0c:a1: 5e:18:d3:b4:e7:03:00:c6:22:70:25:3f:45:ea:cf: 33:61:7e:b5:38:df:11:32:60:3b:39:5c:7e:0e:f4: 35:2b:34:b1:97:33:31:d2:39:a7:2b:f3:2a:5d:de: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:12:08:56:10:12:01:B5:78:DA:36:D3:1C:3B:4F:58:09:36:27 X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6f:59:2d:57:49:25:ea:ed:76:75:20:56:64:27:be:5c:0f: 70:57:2c:21:91:a7:fa:9a:36:59:f3:43:64:91:cc:91:ec:7f: 4d:e8:48:ff:b8:cf:62:22:45:02:cd:a4:74:68:fe:ff:d5:be: 75:23:7b:09:74:ed:bc:1a:24:df:4d:f8:ca:02:55:e9:49:e0: 1f:da:1c:fd:2b:a4:42:ea:b1:2f:5e:ef:bf:26:16:ef:dc:c3: 9d:5c:e3:de:11:1f:0a:a4:84:2c:7b:c9:80:55:87:58:dc:6a: fb:c7:a6:d0:1d:0f:f6:f4:21:c5:5b:d8:85:d4:20:e8:41:30: cc:81:dc:4c:15:2f:d0:fe:5e:c8:e0:8f:f6:b8:3d:4f:80:41: e7:1e:21:5d:13:c1:a2:f8:06:f1:45:20:53:0a:ca:00:88:22: da:ea:92:37:b7:f2:36:8f:d6:cf:ae:bc:8f:7e:a3:a9:70:0b: 6b:3c:67:5d:37:a2:c1:ff:f8:cd:d2:94:34:2b:ff:28:f7:52: f8:a3:06:98:aa:0e:76:01:9a:fb:04:0e:36:6d:cd:39:ba:f8: 1f:c8:5b:a1:db:e6:77:ca:c4:e3:d4:9a:bb:1a:2b:bf:3e:40: 3f:16:14:d9:c7:19:b5:a9:9c:0c:e5:9d:26:fc:a4:ce:d5:d6: 01:cb:93:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxb8bh7LALhrdB3aDa2Lj/CBWLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA5MjAyMTMzNDVaFw0yNjA5MjIwMDA3NDVaMDMxMTAvBgNV BAMTKDE1NUUxMjA4NTYxMDEyMDFCNTc4REEzNkQzMUMzQjRGNTgwOTM2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqYMAnhH2opbuRk5Cw/uEE+iv ekbA6UONDzcl+/IauAofPZhYfEhnBl5jmpTASBFWDR+zcJ3qs3AIo43r0+vNc/x6 kiLh4MWDH0ox+0PCNtcrnaS+YAv1NYk0QfX7VS04ViIRIe5cRZNWpzRT9lx6sf79 H8dZVLKFtQH2au0ectQESN7Q0rcoj9nnNEEuZsMWjtnNDeTmSZwwXmST5PUdZMFu optWn5mmIn/HyDvcpmUMvbSy1/vr/Ro4056gPmPjpiIslqaRXKo5oUfckmcMoV4Y 07TnAwDGInAlP0XqzzNhfrU43xEyYDs5XH4O9DUrNLGXMzHSOacr8ypd3gSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFV4SCFYQEgG1eNo20xw7T1gJNicwHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFvWS1XSSXq7XZ1IFZkJ75cD3BXLCGRp/qa NlnzQ2SRzJHsf03oSP+4z2IiRQLNpHRo/v/VvnUjewl07bwaJN9N+MoCVelJ4B/a HP0rpELqsS9e778mFu/cw51c494RHwqkhCx7yYBVh1jcavvHptAdD/b0IcVb2IXU IOhBMMyB3EwVL9D+Xsjgj/a4PU+AQeceIV0TwaL4BvFFIFMKygCIItrqkje38jaP 1s+uvI9+o6lwC2s8Z103osH/+M3SlDQr/yj3UvijBpiqDnYBmvsEDjZtzTm6+B/I W6Hb5nfKxOPUmrsaK78+QD8WFNnHGbWpnAzlnSb8pM7V1gHLk3s= -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:09 2026 by rpki-client