$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: GI6m/Wx6s1+PIJdFTpPibbNgNFyf+RFQol6XkkUymTw= Subject key identifier: D5:73:8C:81:B5:02:23:20:12:51:CA:2F:0A:AB:36:27:50:7B:CD:F1 Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 61AF7D54372D726324C15A43317CE5C175A2452C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 08:54:37 +0000 Manifest this update: Sat 13 Jun 2026 08:49:37 +0000 Manifest next update: Sun 14 Jun 2026 12:02:37 +0000 Files and hashes: 1: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) 3: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: jWlaIuquhZEvbqLjQHuPqGOCQBoMhsFvHah7lyPGJVE=) 4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:af:7d:54:37:2d:72:63:24:c1:5a:43:31:7c:e5:c1:75:a2:45:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: Jun 13 08:49:37 2026 GMT Not After : Jun 14 12:02:37 2026 GMT Subject: CN=D5738C81B50223201251CA2F0AAB3627507BCDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:8c:5c:b2:2c:d7:1a:ac:fe:00:33:2f:ff: 43:4d:e5:c4:96:a9:47:22:c1:e8:27:21:a1:7c:91: 06:db:43:85:6c:32:cf:1a:13:98:46:13:e8:36:68: 54:25:42:24:02:21:d6:cb:bf:1e:7b:78:64:f1:87: ec:f7:ed:63:22:07:90:4f:25:be:69:90:27:00:0f: d7:13:79:6e:10:87:28:65:ca:11:8f:a7:fb:50:7d: d8:77:32:1a:ef:ba:e6:20:88:3b:c1:0e:a5:60:cc: 28:a5:9f:e6:7b:06:05:4a:d9:27:56:f6:56:f1:c4: 8e:b3:55:8e:9b:43:e7:7b:4b:a3:50:25:62:e7:b5: 8d:20:8b:8d:d1:fe:22:37:ca:05:6a:76:32:9f:6a: 46:c5:43:e8:12:c9:fa:2f:b7:e2:32:ef:2a:ad:96: 9b:f3:5d:ef:60:04:47:60:b3:41:71:9d:6a:26:ed: c7:30:4a:eb:fb:cb:24:80:33:d9:89:97:0d:af:8d: 13:e2:29:df:75:2a:e5:eb:93:f4:91:d8:ba:3a:e4: 13:59:99:5e:c7:8d:d5:a3:3d:a4:d8:f7:b7:e3:11: 07:af:f8:fb:e3:28:f1:d3:10:98:52:e3:32:26:c6: 8f:07:f2:9d:7b:8e:74:21:1f:95:fe:d5:2d:5f:cd: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:73:8C:81:B5:02:23:20:12:51:CA:2F:0A:AB:36:27:50:7B:CD:F1 X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:30:2f:fa:b3:4b:10:26:0c:00:d1:fc:8a:7a:d6:c9:9e:66: bd:dc:87:25:bf:d1:73:2a:8d:d3:5b:fb:74:46:a0:81:d5:90: 58:f4:ef:e2:c7:67:d9:c4:15:c2:a9:5a:e7:1b:cb:22:8d:4b: 87:95:0b:a8:4b:11:bd:9f:60:33:c2:88:18:02:a2:d9:68:21: 84:7a:67:f5:c8:e9:42:67:cb:12:73:59:1b:b7:d6:1d:61:5c: 4f:42:ec:c4:6b:a9:83:d8:0d:45:ef:55:74:d7:fc:de:81:4e: e0:10:21:31:a5:ba:0e:5b:a5:47:db:a3:14:5b:45:eb:32:3a: 37:03:d2:87:b0:85:d0:a8:c5:bc:95:9e:2a:ff:c3:e9:20:90: a5:97:48:d6:85:7e:26:23:10:a6:f1:e0:86:1e:a5:c4:2d:a1: 8c:ff:9b:d0:70:c7:6a:0d:d4:6a:0e:69:af:0a:50:a1:94:fd: f7:93:5a:d6:e6:af:7c:9c:86:42:b4:8f:25:00:76:5f:ce:71: 7c:cb:7e:97:4a:ef:36:7b:ff:c5:d2:74:4a:b8:d9:74:df:e3: ed:af:7a:d9:e8:3e:52:00:26:c2:96:43:b8:a4:dc:53:f2:69: 02:40:64:d9:fd:40:55:45:00:b7:84:0d:e9:43:03:ee:b0:1c: 5c:08:81:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa99VDctcmMkwVpDMXzlwXWiRSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA2MTMwODQ5MzdaFw0yNjA2MTQxMjAyMzdaMDMxMTAvBgNV BAMTKEQ1NzM4QzgxQjUwMjIzMjAxMjUxQ0EyRjBBQUIzNjI3NTA3QkNERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHIxcsizXGqz+ADMv/0NN5cSW qUciwegnIaF8kQbbQ4VsMs8aE5hGE+g2aFQlQiQCIdbLvx57eGTxh+z37WMiB5BP Jb5pkCcAD9cTeW4QhyhlyhGPp/tQfdh3MhrvuuYgiDvBDqVgzCiln+Z7BgVK2SdW 9lbxxI6zVY6bQ+d7S6NQJWLntY0gi43R/iI3ygVqdjKfakbFQ+gSyfovt+Iy7yqt lpvzXe9gBEdgs0FxnWom7ccwSuv7yySAM9mJlw2vjRPiKd91KuXrk/SR2Lo65BNZ mV7HjdWjPaTY97fjEQev+PvjKPHTEJhS4zImxo8H8p17jnQhH5X+1S1fzbzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XOMgbUCIyASUcovCqs2J1B7zfEwHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUwL/qzSxAmDADR/Ip61smeZr3chyW/0XMq jdNb+3RGoIHVkFj07+LHZ9nEFcKpWucbyyKNS4eVC6hLEb2fYDPCiBgCotloIYR6 Z/XI6UJnyxJzWRu31h1hXE9C7MRrqYPYDUXvVXTX/N6BTuAQITGlug5bpUfboxRb ResyOjcD0oewhdCoxbyVnir/w+kgkKWXSNaFfiYjEKbx4IYepcQtoYz/m9Bwx2oN 1GoOaa8KUKGU/feTWtbmr3ychkK0jyUAdl/OcXzLfpdK7zZ7/8XSdEq42XTf4+2v etnoPlIAJsKWQ7ik3FPyaQJAZNn9QFVFALeEDelDA+6wHFwIgcw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:32 2026 by rpki-client