$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: OgBW6gEfTZA6Onf9CXNxsWpnl79luIdmW1CvO8BqQko= Subject key identifier: 84:30:E6:C5:34:60:DD:F8:A0:DC:78:3B:61:C9:A2:D6:9C:48:AC:43 Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 6135EA4A5D68F6957407EAE30D6B9883ABCE42AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:07:44 +0000 Manifest this update: Fri 19 Jun 2026 18:02:44 +0000 Manifest next update: Sat 20 Jun 2026 19:08:44 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: dWEMlFM4VAo7VLcEDQK5l5ymU6aNcdX7zzO7wLGCaeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:35:ea:4a:5d:68:f6:95:74:07:ea:e3:0d:6b:98:83:ab:ce:42:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Jun 19 18:02:44 2026 GMT Not After : Jun 20 19:08:44 2026 GMT Subject: CN=8430E6C53460DDF8A0DC783B61C9A2D69C48AC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:89:9f:1a:31:d0:2d:9e:e0:c7:b1:0d:ce: 9b:b2:91:04:d2:fb:f1:dd:a0:12:06:0d:54:96:ab: b3:3b:13:7a:07:2f:4d:76:68:e6:6b:11:b1:3d:f0: fc:d9:e8:b0:a8:bd:e9:ca:39:90:ac:38:b5:d1:00: 36:54:c9:8a:d1:81:e5:24:09:61:6e:ce:be:53:b2: 1e:fd:c9:25:3e:11:50:5b:8f:ba:9b:ab:04:be:74: d6:44:af:37:6a:71:3a:81:99:07:6e:c1:c7:92:e5: d7:4d:35:1f:b9:00:b6:5a:e9:1e:1a:39:7f:db:d4: e8:04:b8:52:39:c7:db:cf:e5:a1:3d:8f:7f:77:40: 42:84:12:dc:fd:f9:35:4a:90:63:47:ca:64:21:41: 73:af:46:b0:dd:7e:a4:2e:fe:1a:94:0a:d5:45:33: 58:5c:83:18:e9:83:59:25:db:ed:65:47:9c:64:ab: 8f:f9:a2:c3:9f:77:f4:b4:ae:cf:56:2a:15:e0:26: cf:d0:d3:07:8c:aa:ac:83:c3:e9:76:9e:d9:64:b0: 49:0e:67:05:ac:7b:c8:14:af:b8:ef:f0:3f:5c:55: 14:a8:08:51:20:36:45:05:e9:2b:29:33:fa:1f:60: 68:bc:d3:68:9a:43:47:35:f0:24:3d:47:9f:3f:ed: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:30:E6:C5:34:60:DD:F8:A0:DC:78:3B:61:C9:A2:D6:9C:48:AC:43 X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d9:d3:cd:43:d2:da:44:60:7e:d1:fc:43:27:07:e0:aa:25: fb:83:81:4d:ac:9d:c3:6b:5c:23:03:a7:d6:0b:4a:2c:74:54: 76:cb:69:aa:25:50:b6:7c:7f:d8:81:f1:67:a2:98:8f:13:01: f5:c3:e0:77:b4:63:2f:f1:32:00:6e:03:68:24:8d:b0:a6:a8: e9:c7:57:2f:57:3c:f1:0a:ac:ab:e2:f8:7f:e7:fd:31:90:e1: 77:54:93:31:de:43:25:63:2e:65:f0:bd:cc:8f:d9:2d:e9:a8: df:f7:7e:79:94:8d:72:7c:bc:52:70:75:8d:59:42:45:72:c0: 2e:50:d1:da:a9:fc:84:ef:ed:e9:88:39:cb:f7:c8:cf:d9:10: 41:6b:51:ea:fc:f9:e4:ec:55:7b:21:d4:23:9f:6e:6f:79:62: 97:44:03:72:81:98:b7:bc:02:3e:88:81:4e:6d:18:98:59:78: 99:5f:5e:40:10:42:23:f9:43:42:af:ee:61:dd:ad:99:37:23: bf:02:03:5f:46:55:20:63:62:84:8c:1e:f9:44:d4:71:b2:d0: 8c:2c:8e:8e:ba:63:56:a3:78:f3:ea:49:17:77:c5:ab:73:37: 6b:3c:a3:c8:65:c3:a9:25:22:f4:2e:4c:82:53:a7:18:4c:6d: 6e:33:f2:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTXqSl1o9pV0B+rjDWuYg6vOQq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA2MTkxODAyNDRaFw0yNjA2MjAxOTA4NDRaMDMxMTAvBgNV BAMTKDg0MzBFNkM1MzQ2MERERjhBMERDNzgzQjYxQzlBMkQ2OUM0OEFDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cYmfGjHQLZ7gx7ENzpuykQTS +/HdoBIGDVSWq7M7E3oHL012aOZrEbE98PzZ6LCovenKOZCsOLXRADZUyYrRgeUk CWFuzr5Tsh79ySU+EVBbj7qbqwS+dNZErzdqcTqBmQduwceS5ddNNR+5ALZa6R4a OX/b1OgEuFI5x9vP5aE9j393QEKEEtz9+TVKkGNHymQhQXOvRrDdfqQu/hqUCtVF M1hcgxjpg1kl2+1lR5xkq4/5osOfd/S0rs9WKhXgJs/Q0weMqqyDw+l2ntlksEkO ZwWse8gUr7jv8D9cVRSoCFEgNkUF6SspM/ofYGi802iaQ0c18CQ9R58/7WZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDDmxTRg3fig3Hg7Ycmi1pxIrEMwHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPZ081D0tpEYH7R/EMnB+CqJfuDgU2sncNr XCMDp9YLSix0VHbLaaolULZ8f9iB8WeimI8TAfXD4He0Yy/xMgBuA2gkjbCmqOnH Vy9XPPEKrKvi+H/n/TGQ4XdUkzHeQyVjLmXwvcyP2S3pqN/3fnmUjXJ8vFJwdY1Z QkVywC5Q0dqp/ITv7emIOcv3yM/ZEEFrUer8+eTsVXsh1COfbm95YpdEA3KBmLe8 Aj6IgU5tGJhZeJlfXkAQQiP5Q0Kv7mHdrZk3I78CA19GVSBjYoSMHvlE1HGy0Iws jo66Y1ajePPqSRd3xatzN2s8o8hlw6klIvQuTIJTpxhMbW4z8m4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:36 2026 by rpki-client