$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: S3/j4UjhaqElLSmKEdOArU5wN5Anhrrvm60XnYVYO1c= Subject key identifier: 70:6C:7C:07:54:4F:2A:F5:68:91:AE:11:47:F6:D8:4B:54:3B:2D:94 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 32555D1A3F6DAD683CF8F0DB825DD0AE311F957E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 19:06:39 +0000 Manifest this update: Mon 02 Nov 2026 19:01:39 +0000 Manifest next update: Tue 03 Nov 2026 22:31:39 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: 1z8JtmoXGn/LKHYEZLs7StCoGjCV3EvQRzAH2nxJ95o=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:55:5d:1a:3f:6d:ad:68:3c:f8:f0:db:82:5d:d0:ae:31:1f:95:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Nov 2 19:01:39 2026 GMT Not After : Nov 3 22:31:39 2026 GMT Subject: CN=706C7C07544F2AF56891AE1147F6D84B543B2D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:ab:9d:50:f7:92:08:b1:ac:60:87:5e:3a: 69:1a:4d:38:48:c9:84:aa:e7:06:00:97:26:b5:40: 32:04:1e:ff:95:bd:c2:ef:da:5f:ca:62:00:d0:60: d2:7d:3d:08:5c:9f:cc:8e:01:7a:e9:17:c4:da:8a: d6:10:e9:dd:b7:ab:a9:cc:12:5b:a7:87:2e:f4:68: 38:b7:3b:45:7f:73:f0:de:a1:60:45:2b:10:70:f9: e8:a6:7b:34:54:70:1f:e5:92:7c:5f:b6:03:63:e2: 04:bc:6b:ca:ba:9d:9f:ee:52:b2:2b:6a:3b:b9:93: 5e:cf:6e:09:b4:70:78:f8:53:16:50:7b:44:7e:96: 12:de:64:76:74:b9:04:1b:77:ed:c7:15:f1:be:c7: ab:4a:ac:fb:ae:f5:f6:25:18:27:6e:16:01:e2:28: 3e:6f:f7:20:0a:35:5a:71:d1:af:80:dc:16:60:0a: d2:88:25:d2:18:8a:2e:b7:a7:a4:30:be:9c:a1:f4: a8:dd:09:c3:4c:da:de:6f:d0:ef:37:b8:ef:9b:e9: 5e:9f:48:dc:d9:31:26:ae:18:16:f2:03:03:0e:bf: 71:43:14:d2:0d:25:9b:39:1a:81:73:16:59:f2:b9: 55:92:0c:3d:7a:d3:03:f5:30:02:37:2f:7a:7f:f1: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:7C:07:54:4F:2A:F5:68:91:AE:11:47:F6:D8:4B:54:3B:2D:94 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:da:5c:95:76:f9:5b:95:6a:94:55:a7:80:b8:2d:b9:9b:51: 07:31:ff:82:9d:cb:1d:b5:f0:45:37:27:9e:e1:dd:25:94:ca: 1e:bd:52:5e:12:e3:52:70:de:15:a7:e7:77:15:f8:66:a8:fd: 7c:11:00:46:ec:65:be:97:d6:be:47:e1:21:9d:69:6f:1e:67: f0:5f:ed:83:80:33:43:8b:82:1b:d1:c8:c0:d1:74:45:3f:c9: 4a:ff:e1:2a:c4:9c:a4:33:cf:c7:46:33:00:19:2f:d1:d9:af: 77:e3:80:f5:30:32:54:13:bc:e4:fd:11:6c:06:07:27:0e:61: 68:55:ee:49:4c:23:4d:f0:72:bd:6b:fc:94:23:ba:a0:65:2c: 6e:02:8d:40:7a:11:d7:f3:f0:37:cb:6d:3c:94:ad:7d:3e:8c: bf:11:3b:06:03:49:35:58:84:02:6d:02:8a:1a:58:3e:e7:27: 0d:97:04:1e:5e:d2:b6:55:73:5c:1f:d5:7d:a0:ea:79:b2:95: 31:15:06:68:97:1c:7a:8d:a9:22:91:ea:69:f6:b9:43:ae:9a: 8d:64:a9:0f:aa:7b:7a:24:c8:bc:e1:73:84:4b:04:e9:9a:f4: 16:44:6a:4d:18:73:f0:97:10:ec:33:71:45:0a:a6:48:5d:18: 61:8d:91:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlVdGj9trWg8+PDbgl3QrjEflX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjExMDIxOTAxMzlaFw0yNjExMDMyMjMxMzlaMDMxMTAvBgNV BAMTKDcwNkM3QzA3NTQ0RjJBRjU2ODkxQUUxMTQ3RjZEODRCNTQzQjJEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJYKudUPeSCLGsYIdeOmkaTThI yYSq5wYAlya1QDIEHv+VvcLv2l/KYgDQYNJ9PQhcn8yOAXrpF8TaitYQ6d23q6nM Elunhy70aDi3O0V/c/DeoWBFKxBw+eimezRUcB/lknxftgNj4gS8a8q6nZ/uUrIr aju5k17Pbgm0cHj4UxZQe0R+lhLeZHZ0uQQbd+3HFfG+x6tKrPuu9fYlGCduFgHi KD5v9yAKNVpx0a+A3BZgCtKIJdIYii63p6Qwvpyh9KjdCcNM2t5v0O83uO+b6V6f SNzZMSauGBbyAwMOv3FDFNINJZs5GoFzFlnyuVWSDD160wP1MAI3L3p/8XZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGx8B1RPKvVoka4RR/bYS1Q7LZQwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIraXJV2+VuVapRVp4C4LbmbUQcx/4Kdyx21 8EU3J57h3SWUyh69Ul4S41Jw3hWn53cV+Gao/XwRAEbsZb6X1r5H4SGdaW8eZ/Bf 7YOAM0OLghvRyMDRdEU/yUr/4SrEnKQzz8dGMwAZL9HZr3fjgPUwMlQTvOT9EWwG BycOYWhV7klMI03wcr1r/JQjuqBlLG4CjUB6Edfz8DfLbTyUrX0+jL8ROwYDSTVY hAJtAooaWD7nJw2XBB5e0rZVc1wf1X2g6nmylTEVBmiXHHqNqSKR6mn2uUOumo1k qQ+qe3okyLzhc4RLBOma9BZEak0Yc/CXEOwzcUUKpkhdGGGNkfE= -----END CERTIFICATE-----Generated at Tue Nov 3 03:53:23 2026 by rpki-client