$ rpki-client -vvf rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft File: 2263B33A6F6C2144A5A070C3383941C2821ED962.mft (raw, json) Hash identifier: S5AA01/sUrsNsvvLuwEawy0BI4/UMJ6leAaEQPs3uaE= Subject key identifier: 3A:EE:49:AD:93:E2:41:AE:DC:AA:74:F8:2E:67:41:BB:72:B9:C0:8D Authority key identifier: 22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 Certificate issuer: /CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Certificate serial: 6C43621900E993F15A2EA2963B47C13ECE53E4DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:41:10 +0000 Manifest this update: Tue 12 May 2026 05:36:10 +0000 Manifest next update: Wed 13 May 2026 07:08:10 +0000 Files and hashes: 1: 2263B33A6F6C2144A5A070C3383941C2821ED962.crl (hash: qUstbJo/n+OpDDPXfjuAAFUA2PQnKoKPpsDsz9jmGCg=) 2: 3130332e39362e3134362e302f32332d3233203d3e20313430343536.roa (hash: JJKBNFfmi5TeypIXaugZUFNvsvBgBx21iFbTS9ehBxM=) 3: 3130332e39362e3134362e302f32342d3234203d3e20313430343536.roa (hash: 89fLtqOmCV2WQMqfN7MsQbRKwF8HqVSv3FwljEApP9c=) 4: 3130332e39362e3134372e302f32342d3234203d3e20313430343536.roa (hash: 7iLfl1DbUfmRWBLGhFE8psVWKDH6pMFRQ0PQbLGmOck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:43:62:19:00:e9:93:f1:5a:2e:a2:96:3b:47:c1:3e:ce:53:e4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2263B33A6F6C2144A5A070C3383941C2821ED962 Validity Not Before: May 12 05:36:10 2026 GMT Not After : May 13 07:08:10 2026 GMT Subject: CN=3AEE49AD93E241AEDCAA74F82E6741BB72B9C08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:20:58:03:57:43:6f:c0:8c:1c:58:27:2e: a9:db:f9:63:21:f3:db:af:82:75:61:d3:b5:44:2c: 8f:57:48:b6:3d:90:79:40:28:cf:7d:32:b0:9f:8b: 7f:37:a6:b2:aa:9e:a4:be:0f:12:a4:6e:59:66:20: 4e:9f:dc:f3:7e:dc:c1:1f:8f:2b:56:c9:bd:b9:3a: 86:18:39:25:bc:9a:f2:88:1c:b4:47:81:d8:e6:03: ad:87:22:1f:1d:c7:96:55:fe:55:5a:e7:9f:8d:ba: 93:40:09:d9:7d:e8:a2:07:8a:85:61:29:d6:3d:5b: c4:8f:d0:2c:82:22:d1:5c:51:5c:0e:d8:c7:1a:0f: ad:c6:be:1e:02:6f:7d:09:3d:de:bc:ab:16:28:b5: 70:84:77:8d:d3:e1:75:36:bc:cd:91:8d:7c:07:49: 13:a1:80:57:99:08:fa:2e:cc:86:37:c1:76:f8:fd: 16:17:95:17:bb:fa:28:a3:1b:a7:10:f4:ae:c6:1a: ec:a6:5d:18:4a:35:e7:01:bb:fe:e4:d0:78:76:95: 7d:1a:ec:9b:e4:67:05:32:48:31:5e:33:a5:bf:29: 43:de:4c:8a:a6:d2:ab:77:8f:15:70:73:ff:20:b4: 57:7f:9a:44:3e:07:a8:e4:d6:cc:f8:a4:fe:25:fd: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:49:AD:93:E2:41:AE:DC:AA:74:F8:2E:67:41:BB:72:B9:C0:8D X509v3 Authority Key Identifier: keyid:22:63:B3:3A:6F:6C:21:44:A5:A0:70:C3:38:39:41:C2:82:1E:D9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2263B33A6F6C2144A5A070C3383941C2821ED962.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/2263B33A6F6C2144A5A070C3383941C2821ED962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:36:23:b1:1b:98:e9:af:33:71:90:a8:36:16:93:7d:4f: d6:4b:a5:f1:34:2f:29:85:35:32:1e:46:d9:83:68:58:6d:17: 1c:24:77:f3:8b:4f:4a:88:93:54:84:1e:53:d6:c0:0f:9a:88: c5:86:90:00:89:50:0d:c8:8c:92:8d:cf:59:91:3c:a8:5c:51: de:14:33:b3:09:a2:cf:e5:78:83:ea:3d:d0:7f:f5:ae:77:14: 52:80:3d:3a:ad:2a:6f:8a:24:4a:2a:24:d0:bd:b6:5b:c5:ee: d5:3b:52:17:12:69:40:cd:49:05:d8:bd:0a:76:be:85:54:e6: cf:bb:3a:b1:9d:1e:6f:cd:80:dd:6c:50:3e:5d:bb:d9:db:f1: 1d:9d:34:7c:fc:34:e3:fa:1f:b0:4b:0d:97:eb:aa:04:99:3f: 7e:93:f8:93:24:35:90:19:0c:d2:92:d8:dc:1b:3a:76:6e:bc: 8a:f8:10:0a:3c:88:30:ef:6e:f9:62:a7:8c:ca:55:6b:56:07: 60:9f:75:ff:f5:70:36:c8:b2:a7:9c:29:d5:11:84:95:cb:3c: 76:69:15:aa:ef:81:f4:3a:ea:38:5e:c3:30:d0:8b:bd:df:57: b8:f0:c3:c3:39:fc:e0:5e:c4:51:1c:26:b9:a1:3d:56:23:60: 74:9c:22:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbENiGQDpk/FaLqKWO0fBPs5T5NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4 MjFFRDk2MjAeFw0yNjA1MTIwNTM2MTBaFw0yNjA1MTMwNzA4MTBaMDMxMTAvBgNV BAMTKDNBRUU0OUFEOTNFMjQxQUVEQ0FBNzRGODJFNjc0MUJCNzJCOUMwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxyBYA1dDb8CMHFgnLqnb+WMh 89uvgnVh07VELI9XSLY9kHlAKM99MrCfi383prKqnqS+DxKkbllmIE6f3PN+3MEf jytWyb25OoYYOSW8mvKIHLRHgdjmA62HIh8dx5ZV/lVa55+NupNACdl96KIHioVh KdY9W8SP0CyCItFcUVwO2McaD63Gvh4Cb30JPd68qxYotXCEd43T4XU2vM2RjXwH SROhgFeZCPouzIY3wXb4/RYXlRe7+iijG6cQ9K7GGuymXRhKNecBu/7k0Hh2lX0a 7JvkZwUySDFeM6W/KUPeTIqm0qt3jxVwc/8gtFd/mkQ+B6jk1sz4pP4l/TSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOu5JrZPiQa7cqnT4LmdBu3K5wI0wHwYDVR0j BBgwFoAUImOzOm9sIUSloHDDODlBwoIe2WIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGE0NzQ2YjctNWZmMi00NTU2LThhM2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2 RjZDMjE0NEE1QTA3MEMzMzgzOTQxQzI4MjFFRDk2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMjYzQjMzQTZGNkMyMTQ0QTVBMDcwQzMzODM5NDFDMjgyMUVE OTYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE0NzQ2YjctNWZmMi00NTU2LThh M2UtNWE4NmNiY2M4NTk4LzAvMjI2M0IzM0E2RjZDMjE0NEE1QTA3MEMzMzgzOTQx QzI4MjFFRDk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8wNiOxG5jprzNxkKg2FpN9T9ZLpfE0LymF NTIeRtmDaFhtFxwkd/OLT0qIk1SEHlPWwA+aiMWGkACJUA3IjJKNz1mRPKhcUd4U M7MJos/leIPqPdB/9a53FFKAPTqtKm+KJEoqJNC9tlvF7tU7UhcSaUDNSQXYvQp2 voVU5s+7OrGdHm/NgN1sUD5du9nb8R2dNHz8NOP6H7BLDZfrqgSZP36T+JMkNZAZ DNKS2NwbOnZuvIr4EAo8iDDvbvlip4zKVWtWB2Cfdf/1cDbIsqecKdURhJXLPHZp FarvgfQ66jhewzDQi73fV7jww8M5/OBexFEcJrmhPVYjYHScIsw= -----END CERTIFICATE-----Generated at Wed May 13 00:21:45 2026 by rpki-client