
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json)
Hash identifier: tE1jpU8i0xgdCWtxi1ualuiwmIf0cIpyk3W8GUM6lPI=
Subject key identifier: EF:D6:94:DC:83:72:D8:E9:57:4D:BB:AF:25:F2:84:9E:67:AD:B7:05
Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Certificate serial: 7BF8AE138C56772DB7B688FBF7EC59F2E13BC83A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
Manifest number: BF
Signing time: Thu 24 Sep 2026 00:36:21 +0000
Manifest this update: Thu 24 Sep 2026 00:31:21 +0000
Manifest next update: Fri 25 Sep 2026 03:59:21 +0000
Files and hashes: 1: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=)
2: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=)
3: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: SAt0id9WTAlvrTRqFdOmITUGvl25MRHLpp0fx4eUgk8=)
4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f8:ae:13:8c:56:77:2d:b7:b6:88:fb:f7:ec:59:f2:e1:3b:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962
Validity
Not Before: Sep 24 00:31:21 2026 GMT
Not After : Sep 25 03:59:21 2026 GMT
Subject: CN=EFD694DC8372D8E9574DBBAF25F2849E67ADB705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:41:b5:db:3a:af:3d:18:60:df:01:bf:32:
27:de:72:20:bf:59:65:7f:b2:23:58:0c:f4:eb:3e:
0b:83:58:e4:8d:0f:45:35:f6:da:39:02:b4:00:01:
70:18:87:05:8e:8c:57:51:8d:2c:2e:ac:24:76:c9:
d4:39:76:71:b4:5d:11:26:2e:35:52:11:ce:a5:4b:
e9:87:ed:6b:74:ff:65:3b:03:f3:4c:d0:ff:19:e2:
73:3c:8d:ca:ea:30:c9:3a:2c:33:97:3f:9f:95:93:
22:83:1b:08:53:87:93:09:17:04:48:ca:f3:cb:d6:
e0:17:b4:1c:80:97:a9:27:11:96:42:f8:9f:46:cb:
a9:00:af:78:17:0f:1c:5f:47:de:d9:43:3b:84:22:
8a:c6:24:a8:5e:50:3c:01:ef:cf:88:cd:cb:c2:d7:
7d:17:5a:85:c2:c6:91:d6:bb:a3:6a:d4:27:44:43:
07:ed:29:23:60:b9:36:8f:76:48:37:d0:ac:2d:78:
d4:18:25:c9:a8:d0:82:1a:f6:6f:e0:19:f6:8d:67:
8c:b4:3c:5a:0f:66:f5:95:1a:47:d5:ea:b2:6f:d9:
69:24:87:64:a3:eb:35:9f:4c:f4:b2:6e:cf:3e:24:
37:be:f2:d8:21:ef:d5:ae:04:08:1c:38:29:56:a3:
a4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:94:DC:83:72:D8:E9:57:4D:BB:AF:25:F2:84:9E:67:AD:B7:05
X509v3 Authority Key Identifier:
keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:70:64:a7:66:aa:88:73:c4:f6:16:fb:a4:93:6e:0a:3b:
10:e4:49:46:7b:d1:e7:78:ed:f2:a3:61:e6:73:b1:b3:b3:f7:
a9:35:29:f4:0d:e5:cf:43:9e:bf:c8:88:27:0f:2b:65:20:6d:
4d:9f:21:73:09:0b:39:bb:81:94:55:bf:55:34:de:58:6d:9a:
a2:36:6a:4e:9e:fd:51:f3:09:a3:e9:0a:c2:af:fe:5f:59:2d:
37:51:79:db:75:35:1f:2f:e8:3e:f0:13:65:dc:e7:21:93:4a:
8b:66:d1:32:a7:03:5f:cd:6a:5a:85:57:b8:2d:99:c7:4c:d9:
a7:02:16:1b:a6:0f:b0:b9:23:8f:04:4c:bf:55:61:90:3b:15:
30:03:4c:cf:86:ac:04:6c:f3:63:c3:b0:3f:35:98:8f:af:cd:
65:fc:14:f0:b0:ab:fa:9f:e9:ef:e5:04:78:e7:d4:a6:0c:14:
b0:b2:4d:ba:d7:ae:f1:23:28:60:b1:7b:64:ca:8e:78:31:a6:
e6:14:ab:8a:87:40:1c:e7:3c:2a:b3:3e:00:f8:6c:7f:4b:dd:
aa:82:e7:12:cf:74:a0:8b:92:95:e3:74:47:54:f6:11:79:d6:
0b:02:6e:2b:57:e9:6a:db:23:4b:fe:c5:a3:d5:ce:38:42:59:
0a:24:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:45:24 2026 by rpki-client