$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft File: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft (raw, json) Hash identifier: 9Ao0DHQRjEofd3plDRCeIdyXWW+P3pHVubkJe7QqwL4= Subject key identifier: 70:E7:E5:7E:0C:72:B7:71:11:E4:FA:2B:B8:A6:76:8F:F7:F7:37:A8 Authority key identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 Certificate issuer: /CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4 Certificate serial: 1C8BC7C05073D0B0B2CF4ABB76409BD0ED53882C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:51:10 +0000 Manifest this update: Wed 16 Sep 2026 17:46:10 +0000 Manifest next update: Thu 17 Sep 2026 21:37:10 +0000 Files and hashes: 1: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl (hash: 2Isc8pA5ZMBXDi6IJKtBB7XdLJWl+nOeIugLeIxHygc=) 2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: 9nR8f+NKs+GCy2BCUqqfXP6eNr2a6TnGK4mv1oCv2Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8b:c7:c0:50:73:d0:b0:b2:cf:4a:bb:76:40:9b:d0:ed:53:88:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4 Validity Not Before: Sep 16 17:46:10 2026 GMT Not After : Sep 17 21:37:10 2026 GMT Subject: CN=70E7E57E0C72B77111E4FA2BB8A6768FF7F737A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:52:e6:9b:56:a4:57:bf:d3:ca:2b:85:d1:a7: 9c:33:42:f1:45:cc:e3:db:1f:2e:f2:05:c8:7f:2f: 61:0b:0b:65:5a:d8:d2:5a:d3:52:0f:36:e3:71:d5: 6e:f8:9a:06:3f:ac:15:58:2c:23:e5:b2:52:9c:49: 1a:e8:59:ed:83:bd:70:66:c3:85:c1:7c:dc:6c:68: 2f:ec:30:b5:f8:7b:cc:c6:07:24:28:91:71:ef:6e: a6:45:3d:c3:26:0f:6a:26:8d:c2:a2:b2:bc:aa:c3: 1c:32:e8:2f:66:f9:ca:54:7c:8d:51:5c:2f:18:2c: 4f:2a:38:a0:ed:95:53:a6:99:8a:30:c5:71:d5:5f: 1e:ab:20:05:ce:72:7f:80:15:9b:ab:74:28:b5:8d: 8e:98:c5:9c:af:ee:95:82:ac:97:9d:3d:5b:98:43: b6:4b:db:0e:24:81:cc:94:25:8b:34:7e:b8:8b:fc: f4:d7:12:21:b0:93:54:64:71:fb:64:8d:b4:37:1e: 82:a1:83:7b:18:91:62:fd:d9:bc:6a:5f:4c:d9:4d: a0:43:be:44:d3:b3:a6:90:f4:aa:ec:91:da:e6:a0: 17:e6:ed:3b:2c:ca:a6:d2:80:d2:47:21:08:c3:fa: 8f:d2:9c:48:c1:14:eb:0d:ce:72:6e:d1:0b:0c:98: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E7:E5:7E:0C:72:B7:71:11:E4:FA:2B:B8:A6:76:8F:F7:F7:37:A8 X509v3 Authority Key Identifier: keyid:23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:23:a2:c0:2c:c0:ae:52:f3:62:1c:05:23:0d:7b:3b:d8: 6f:ae:a4:91:7d:30:e1:6c:50:71:5d:31:92:d9:81:9b:36:eb: af:de:3e:9e:37:df:13:aa:51:9c:ec:04:e6:0e:d8:71:7b:48: 1d:b4:63:e2:c8:37:a2:84:ba:c1:3c:9f:d2:a9:a4:b7:11:51: f9:dd:5c:02:65:a7:8b:0b:19:f1:1a:f6:30:cb:ee:41:f1:4e: 0c:8f:5d:43:fb:1e:03:a4:12:b3:2b:b8:77:3c:db:0f:30:ed: 33:e7:01:a2:9b:13:42:54:82:2f:11:d7:7a:7e:10:4c:78:16: 56:51:65:7a:70:1f:31:8c:60:38:3b:1b:0f:77:2a:a8:9c:8c: df:3b:d1:d5:6a:59:24:b6:ec:88:0f:d0:47:9f:a5:a4:a7:89: c4:d2:a6:c0:15:a7:80:38:7d:5c:a5:b7:e7:89:0f:6f:6e:42: 4d:d3:13:24:ab:74:0d:17:a0:33:a4:54:d2:0d:2e:9a:a8:04: a7:f7:5e:2c:26:7e:4c:14:89:5a:48:a3:72:1d:21:9e:75:ba: d0:10:3f:3c:56:0c:b6:12:36:11:e0:e8:a9:f0:18:e9:3d:19: a9:4b:1a:cb:4b:e2:5d:5d:1d:08:63:b6:6b:c2:14:3f:b8:f8: 85:93:bc:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIvHwFBz0LCyz0q7dkCb0O1TiCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM2RkRGRkY0ODM3MDQ5QTAzNTc0RjBBM0Y1QjBFOUI2 Q0M4RTNBNDAeFw0yNjA5MTYxNzQ2MTBaFw0yNjA5MTcyMTM3MTBaMDMxMTAvBgNV BAMTKDcwRTdFNTdFMEM3MkI3NzExMUU0RkEyQkI4QTY3NjhGRjdGNzM3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUuabVqRXv9PKK4XRp5wzQvFF zOPbHy7yBch/L2ELC2Va2NJa01IPNuNx1W74mgY/rBVYLCPlslKcSRroWe2DvXBm w4XBfNxsaC/sMLX4e8zGByQokXHvbqZFPcMmD2omjcKisryqwxwy6C9m+cpUfI1R XC8YLE8qOKDtlVOmmYowxXHVXx6rIAXOcn+AFZurdCi1jY6YxZyv7pWCrJedPVuY Q7ZL2w4kgcyUJYs0friL/PTXEiGwk1RkcftkjbQ3HoKhg3sYkWL92bxqX0zZTaBD vkTTs6aQ9KrskdrmoBfm7TssyqbSgNJHIQjD+o/SnEjBFOsNznJu0QsMmDPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcOflfgxyt3ER5PoruKZ2j/f3N6gwHwYDVR0j BBgwFoAUI2/f/0g3BJoDV08KP1sOm2zI46QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ2OWMzZTMtN2I1OS00NDkwLTg0Y2YtZmVmMTU4NWFjNzViLzAvMjM2RkRGRkY0 ODM3MDQ5QTAzNTc0RjBBM0Y1QjBFOUI2Q0M4RTNBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzZGREZGRjQ4MzcwNDlBMDM1NzRGMEEzRjVCMEU5QjZDQzhF M0E0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvMjM2RkRGRkY0ODM3MDQ5QTAzNTc0RjBBM0Y1QjBF OUI2Q0M4RTNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYbI6LALMCuUvNiHAUjDXs72G+upJF9MOFs UHFdMZLZgZs266/ePp433xOqUZzsBOYO2HF7SB20Y+LIN6KEusE8n9KppLcRUfnd XAJlp4sLGfEa9jDL7kHxTgyPXUP7HgOkErMruHc82w8w7TPnAaKbE0JUgi8R13p+ EEx4FlZRZXpwHzGMYDg7Gw93KqicjN870dVqWSS27IgP0EefpaSnicTSpsAVp4A4 fVylt+eJD29uQk3TEySrdA0XoDOkVNINLpqoBKf3XiwmfkwUiVpIo3IdIZ51utAQ PzxWDLYSNhHg6KnwGOk9GalLGstL4l1dHQhjtmvCFD+4+IWTvCI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:26:57 2026 by rpki-client