$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: ajWIK2uwpcOi8HcEWcGu8jCG/rYJqEiZlZDksqCjMzM= Subject key identifier: 65:DF:0D:0D:61:4C:6F:9A:FA:49:95:C4:9F:22:20:3B:57:D4:97:BD Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 02924DE461D2279DFCEDD1EDB41CF66AB77E1431 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:26:29 +0000 Manifest this update: Mon 20 Jul 2026 20:21:29 +0000 Manifest next update: Tue 21 Jul 2026 20:30:29 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) 2: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: mw4ycMhZvdU9EXA9u2yOg51V2ymGEbuebu5r8EctcGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:92:4d:e4:61:d2:27:9d:fc:ed:d1:ed:b4:1c:f6:6a:b7:7e:14:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Jul 20 20:21:29 2026 GMT Not After : Jul 21 20:30:29 2026 GMT Subject: CN=65DF0D0D614C6F9AFA4995C49F22203B57D497BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:9a:09:a7:df:ad:b4:4d:4c:65:98:a3:18: bb:92:22:a1:62:f9:36:81:4d:de:ea:a8:36:d1:fc: 66:bd:20:5e:dc:9c:c0:ec:0c:82:6b:19:44:b8:a8: 4e:2f:b7:8d:5d:29:52:a9:2d:cd:d5:32:0b:c4:15: 15:67:46:fb:88:1c:9b:99:85:01:8c:be:41:81:a8: 96:12:9b:93:49:87:fd:c2:61:13:e7:b4:1e:9a:53: 04:c4:8b:d0:91:19:37:fa:e2:33:ee:f4:a1:a5:d1: 33:8c:c5:73:5c:3c:cc:0e:fc:43:95:99:28:fd:6c: 8b:77:d1:f8:d5:20:f6:30:c0:1f:ee:d8:d5:e3:00: 43:01:36:b0:4e:8a:75:af:79:95:25:5f:3b:8b:55: a3:50:da:ce:75:15:1d:f9:4d:de:e0:56:63:41:d9: 9e:4a:fe:28:64:b1:aa:87:e8:7c:fa:1d:41:2b:f4: 0d:58:2c:ea:c8:a7:2b:90:f3:8a:d8:6e:f5:21:dc: 69:40:d3:cd:f4:83:eb:d3:b6:ea:37:10:46:4a:be: 88:bf:cf:1a:ee:a8:56:8c:84:2e:9f:45:3e:c9:5e: 4a:83:15:fd:79:77:58:ea:68:f7:4c:c2:ca:90:91: e3:e7:58:0c:d8:83:70:bd:e6:78:37:9b:73:98:4f: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DF:0D:0D:61:4C:6F:9A:FA:49:95:C4:9F:22:20:3B:57:D4:97:BD X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:6a:d0:67:e9:74:de:20:a4:cc:2f:9e:8c:b1:a5:c9:18: 4f:40:78:f9:20:cd:15:8b:77:7b:49:2d:03:48:4a:22:78:90: 84:cf:0e:0c:fb:10:cb:4e:79:77:8c:31:da:53:18:68:a5:67: 2b:fd:d4:86:5b:be:e5:89:3d:e3:e0:be:f5:7a:ac:b1:66:34: 82:51:51:ce:ea:6b:bc:e4:e8:8e:7e:4a:59:b4:fc:32:95:b4: 35:27:dd:45:17:6a:13:10:8e:3e:9d:a7:ea:48:b3:c7:a7:34: de:58:fa:05:01:7f:35:e0:7c:ce:c4:66:34:42:88:b1:22:e8: f3:ee:b9:d3:9b:55:47:0f:42:ee:d6:be:f1:d5:a4:59:7b:f7: ec:82:f8:df:b1:ae:57:59:35:c6:28:40:1a:ff:67:c8:e4:f0: c6:0d:e8:4e:0c:90:b8:df:0e:39:00:ef:e1:de:6c:cf:54:3c: ec:aa:7a:f5:91:98:47:f9:6b:23:5c:38:78:70:fa:91:db:6b: a8:81:e5:da:96:31:8f:6a:1b:e7:ee:81:4e:96:b9:9a:e7:58: aa:36:d2:38:f1:1b:c6:8c:db:bb:4e:af:8e:e8:9f:d6:8f:34: 71:16:77:77:64:a8:d5:83:7c:69:fd:78:c7:35:e0:bb:41:2e: 82:00:ee:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApJN5GHSJ5387dHttBz2ard+FDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA3MjAyMDIxMjlaFw0yNjA3MjEyMDMwMjlaMDMxMTAvBgNV BAMTKDY1REYwRDBENjE0QzZGOUFGQTQ5OTVDNDlGMjIyMDNCNTdENDk3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUgJoJp9+ttE1MZZijGLuSIqFi +TaBTd7qqDbR/Ga9IF7cnMDsDIJrGUS4qE4vt41dKVKpLc3VMgvEFRVnRvuIHJuZ hQGMvkGBqJYSm5NJh/3CYRPntB6aUwTEi9CRGTf64jPu9KGl0TOMxXNcPMwO/EOV mSj9bIt30fjVIPYwwB/u2NXjAEMBNrBOinWveZUlXzuLVaNQ2s51FR35Td7gVmNB 2Z5K/ihksaqH6Hz6HUEr9A1YLOrIpyuQ84rYbvUh3GlA0830g+vTtuo3EEZKvoi/ zxruqFaMhC6fRT7JXkqDFf15d1jqaPdMwsqQkePnWAzYg3C95ng3m3OYTzJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZd8NDWFMb5r6SZXEnyIgO1fUl70wHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJujatBn6XTeIKTML56MsaXJGE9AePkgzRWL d3tJLQNISiJ4kITPDgz7EMtOeXeMMdpTGGilZyv91IZbvuWJPePgvvV6rLFmNIJR Uc7qa7zk6I5+Slm0/DKVtDUn3UUXahMQjj6dp+pIs8enNN5Y+gUBfzXgfM7EZjRC iLEi6PPuudObVUcPQu7WvvHVpFl79+yC+N+xrldZNcYoQBr/Z8jk8MYN6E4MkLjf DjkA7+HebM9UPOyqevWRmEf5ayNcOHhw+pHba6iB5dqWMY9qG+fugU6WuZrnWKo2 0jjxG8aM27tOr47on9aPNHEWd3dkqNWDfGn9eMc14LtBLoIA7mk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:24 2026 by rpki-client