$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: 2M/iXD09uFa1TQSvBQkdzF4RkvN5ZzURI7PUP4kNCLU= Subject key identifier: 76:01:C7:41:FE:10:69:ED:2F:D8:DB:D2:9A:8C:E5:B5:4A:7A:21:FA Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 64425F03444648F7F9A4679B9C05C97E834B9350 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:48:12 +0000 Manifest this update: Thu 17 Sep 2026 03:43:12 +0000 Manifest next update: Fri 18 Sep 2026 06:52:12 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: 7eVXEjGwleFF5OW9AD/PxCnovRp+BrwxAk+D1wufsGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:42:5f:03:44:46:48:f7:f9:a4:67:9b:9c:05:c9:7e:83:4b:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Sep 17 03:43:12 2026 GMT Not After : Sep 18 06:52:12 2026 GMT Subject: CN=7601C741FE1069ED2FD8DBD29A8CE5B54A7A21FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:2f:34:e8:cd:9e:7a:9c:a0:8f:11:f8:4f: bd:ec:6f:4d:af:7d:08:92:68:de:65:fd:9b:74:a5: 04:65:25:ae:4d:8b:aa:54:3a:fc:f5:62:ef:53:c0: 05:a8:82:a9:8e:ce:d8:09:87:7a:1d:12:29:40:20: 91:8a:c4:a2:c3:4d:6e:17:e3:1c:ca:b7:93:eb:9e: 16:08:e4:6e:20:94:5c:66:ad:41:bc:88:d6:ae:d9: 8e:3c:4b:b3:ad:3e:bd:b0:46:2b:c9:c1:8a:f4:d9: 7a:60:8d:e5:c4:68:b1:fe:11:81:62:71:9b:4d:11: 65:c2:d3:3a:f4:f4:d8:2f:af:02:c0:7d:c7:54:3e: 3d:9c:0c:72:a2:80:af:42:86:80:fa:10:4c:47:66: f2:9d:38:26:e0:58:f6:9f:f8:07:e0:b2:c6:0e:cf: d2:62:6a:22:fe:48:94:a9:0b:c5:4d:34:e3:d8:07: 0f:e3:a0:72:a6:73:0e:d8:26:75:32:f2:69:eb:54: f1:d2:c1:56:29:af:ec:ee:91:ae:d2:07:98:5b:3e: 22:a7:88:10:a9:a2:3e:84:0e:c6:f1:06:ee:25:dd: 7c:87:27:05:5b:ce:6e:7c:d8:1d:07:ac:4f:57:b1: fa:62:8e:8e:7a:75:69:d7:02:37:e3:3f:fe:e3:a5: 3b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:C7:41:FE:10:69:ED:2F:D8:DB:D2:9A:8C:E5:B5:4A:7A:21:FA X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f7:9f:03:a6:d3:90:e7:30:76:dc:f2:3e:f9:21:26:bb:0b: bf:c1:a7:a9:3e:e6:d4:1f:76:a3:d0:b3:c4:b2:7c:2d:28:c7: 2e:ba:04:fb:16:8c:4d:e6:66:f0:7d:f6:9b:ba:02:3d:6e:f8: fb:05:68:4f:82:4b:a3:75:41:5f:cd:11:d3:a2:7c:6f:73:47: 90:e5:43:f8:22:00:e4:15:b1:28:54:d8:c1:ef:6f:43:42:4a: 92:f3:8c:5e:68:b7:5b:95:6d:17:17:c2:88:0b:1d:57:52:67: 10:cf:0a:95:08:b1:fd:32:5c:dc:16:93:0f:c9:8d:28:95:d3: e1:3d:c9:62:bb:f8:de:5c:ae:c6:ba:47:b9:2c:b9:84:9c:40: b8:73:a4:e8:e1:b8:86:65:e9:8c:83:6b:b3:ec:08:de:7b:40: fd:8d:59:1f:50:d2:25:eb:61:31:7c:ed:2b:62:63:60:22:e0: 02:0c:87:01:46:06:a1:75:3e:ac:ce:0d:3c:5a:a3:d2:7b:d9: b9:b5:90:83:e4:6d:00:a1:60:b1:6f:c8:5c:be:61:19:e8:46: 51:1b:ca:46:d1:6a:b6:9a:74:86:b2:76:96:aa:32:ce:6c:4a: 6e:21:55:9f:93:39:77:f0:a4:0e:fd:d8:7a:c0:c8:20:85:a1: 2b:1c:1e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEJfA0RGSPf5pGebnAXJfoNLk1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA5MTcwMzQzMTJaFw0yNjA5MTgwNjUyMTJaMDMxMTAvBgNV BAMTKDc2MDFDNzQxRkUxMDY5RUQyRkQ4REJEMjlBOENFNUI1NEE3QTIxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nC806M2eepygjxH4T73sb02v fQiSaN5l/Zt0pQRlJa5Ni6pUOvz1Yu9TwAWogqmOztgJh3odEilAIJGKxKLDTW4X 4xzKt5PrnhYI5G4glFxmrUG8iNau2Y48S7OtPr2wRivJwYr02XpgjeXEaLH+EYFi cZtNEWXC0zr09NgvrwLAfcdUPj2cDHKigK9ChoD6EExHZvKdOCbgWPaf+AfgssYO z9JiaiL+SJSpC8VNNOPYBw/joHKmcw7YJnUy8mnrVPHSwVYpr+zuka7SB5hbPiKn iBCpoj6EDsbxBu4l3XyHJwVbzm582B0HrE9Xsfpijo56dWnXAjfjP/7jpTs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgHHQf4Qae0v2NvSmozltUp6IfowHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL3nwOm05DnMHbc8j75ISa7C7/Bp6k+5tQf dqPQs8SyfC0oxy66BPsWjE3mZvB99pu6Aj1u+PsFaE+CS6N1QV/NEdOifG9zR5Dl Q/giAOQVsShU2MHvb0NCSpLzjF5ot1uVbRcXwogLHVdSZxDPCpUIsf0yXNwWkw/J jSiV0+E9yWK7+N5crsa6R7ksuYScQLhzpOjhuIZl6YyDa7PsCN57QP2NWR9Q0iXr YTF87StiY2Ai4AIMhwFGBqF1PqzODTxao9J72bm1kIPkbQChYLFvyFy+YRnoRlEb ykbRaraadIaydpaqMs5sSm4hVZ+TOXfwpA792HrAyCCFoSscHkQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:28:03 2026 by rpki-client