$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: nTopVx1LeUeH4gXvgDdJAZj3kkeL36TwFMSd/bI3PFQ= Subject key identifier: CD:F7:60:37:A2:29:9D:11:04:62:F2:C6:78:2C:A2:D3:25:7F:89:3C Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 5663085E2B7A413D4BFEC6898332A4B9C0EF758C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 15:44:06 +0000 Manifest this update: Thu 23 Jul 2026 15:39:06 +0000 Manifest next update: Fri 24 Jul 2026 17:12:06 +0000 Files and hashes: 1: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: agI/jJ7OgckqIqBQGJjkkrcFgwMT2Uaz6sBwsGxqQJE=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) 3: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) 4: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:63:08:5e:2b:7a:41:3d:4b:fe:c6:89:83:32:a4:b9:c0:ef:75:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: Jul 23 15:39:06 2026 GMT Not After : Jul 24 17:12:06 2026 GMT Subject: CN=CDF76037A2299D110462F2C6782CA2D3257F893C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:3f:a4:18:0a:b5:0d:ba:c7:81:33:5a:bd: 65:f0:52:f0:ee:c2:05:7a:18:3d:ab:a5:6f:a2:42: e9:71:67:8b:65:c9:f4:eb:16:36:f9:03:8f:2a:8d: d5:5a:f4:7b:ad:53:8d:91:c3:b9:14:85:9f:fe:0f: 21:7d:5c:f2:50:04:b3:22:5a:2c:ec:d1:05:3f:7d: 0d:f5:54:d9:5b:75:02:33:35:43:75:59:22:7f:09: cf:6a:f5:e3:98:07:65:47:8e:36:4d:a4:f3:4d:b3: aa:8f:19:b7:d1:bc:22:bc:c8:97:eb:10:70:0c:50: 2d:4e:57:b0:1e:18:d3:f1:d4:b3:fa:95:18:46:23: 0b:5c:71:7a:d6:03:37:c8:cd:f7:3f:5d:78:da:23: 79:5d:6d:0d:2a:b2:73:aa:9c:05:9a:18:ea:69:36: 05:de:5f:8f:56:5f:52:34:43:0b:16:85:74:a6:ef: 20:25:53:40:69:55:b7:92:c9:32:74:86:b4:20:3d: dc:8a:6f:3c:a4:16:a2:b5:fc:92:94:ae:2d:36:cd: a3:b8:90:7b:9a:94:ee:85:2b:99:e7:ee:53:a7:55: 48:03:c8:bd:a4:2d:ef:78:4e:a8:f2:c5:1d:a0:ab: 3c:b2:1e:a2:cf:6b:bb:4f:91:ea:04:81:c6:60:e9: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F7:60:37:A2:29:9D:11:04:62:F2:C6:78:2C:A2:D3:25:7F:89:3C X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:db:54:60:b0:f0:3b:1e:e0:81:5b:6f:63:eb:ad:2e:58: 3d:a9:20:e2:ad:e3:3f:b0:1f:9e:5d:a3:7a:ec:9d:b8:b3:c9: 4b:35:0a:ea:22:25:31:7d:b8:e5:c7:40:3d:ba:72:88:19:72: 7c:00:31:a5:5a:c1:cd:55:f7:a7:e2:9f:d1:47:f9:70:8b:a6: 9c:50:fb:ca:14:90:59:a8:6c:91:a4:93:78:52:72:2b:8d:c0: 36:d4:41:04:68:47:b7:26:29:d1:d8:bb:b7:75:c7:ba:f1:ab: 45:43:3a:e6:3d:3e:77:bb:6b:ac:10:f3:66:b2:7a:dc:de:6e: f9:68:73:a2:3f:26:f0:60:c1:72:2a:ab:60:23:3b:a3:55:13: 7d:fa:72:58:31:74:60:c5:86:9f:1f:55:c2:f2:9b:bb:ca:4b: 00:30:5b:41:d7:d2:9e:47:8e:7e:92:54:a6:99:82:bd:36:e2: c3:fe:a4:69:74:63:e7:94:88:d5:5f:3c:b0:a4:62:36:71:62: 52:57:74:c1:7c:e6:b7:15:44:ad:01:67:05:b0:11:e4:c9:a4: d1:d6:14:e7:0b:07:99:d6:da:8c:84:d8:4f:9a:e5:08:a6:72: 63:2c:28:00:20:e2:72:bb:d1:bc:30:f6:b5:a0:cd:2b:e2:c1: f1:50:50:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmMIXit6QT1L/saJgzKkucDvdYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA3MjMxNTM5MDZaFw0yNjA3MjQxNzEyMDZaMDMxMTAvBgNV BAMTKENERjc2MDM3QTIyOTlEMTEwNDYyRjJDNjc4MkNBMkQzMjU3Rjg5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaz+kGAq1DbrHgTNavWXwUvDu wgV6GD2rpW+iQulxZ4tlyfTrFjb5A48qjdVa9HutU42Rw7kUhZ/+DyF9XPJQBLMi Wizs0QU/fQ31VNlbdQIzNUN1WSJ/Cc9q9eOYB2VHjjZNpPNNs6qPGbfRvCK8yJfr EHAMUC1OV7AeGNPx1LP6lRhGIwtccXrWAzfIzfc/XXjaI3ldbQ0qsnOqnAWaGOpp NgXeX49WX1I0QwsWhXSm7yAlU0BpVbeSyTJ0hrQgPdyKbzykFqK1/JKUri02zaO4 kHualO6FK5nn7lOnVUgDyL2kLe94TqjyxR2gqzyyHqLPa7tPkeoEgcZg6R2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfdgN6IpnREEYvLGeCyi0yV/iTwwHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmg21RgsPA7HuCBW29j660uWD2pIOKt4z+w H55do3rsnbizyUs1CuoiJTF9uOXHQD26cogZcnwAMaVawc1V96fin9FH+XCLppxQ +8oUkFmobJGkk3hSciuNwDbUQQRoR7cmKdHYu7d1x7rxq0VDOuY9Pne7a6wQ82ay etzebvloc6I/JvBgwXIqq2AjO6NVE336clgxdGDFhp8fVcLym7vKSwAwW0HX0p5H jn6SVKaZgr024sP+pGl0Y+eUiNVfPLCkYjZxYlJXdMF85rcVRK0BZwWwEeTJpNHW FOcLB5nW2oyE2E+a5QimcmMsKAAg4nK70bww9rWgzSviwfFQUGk= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:09 2026 by rpki-client