$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: LxWVCDBA0QKTzpwGQN2/JK2zCkjuvW6Cvb1dz6PglYY= Subject key identifier: E4:AD:1E:78:31:94:E6:A3:E9:CE:8F:85:A9:2E:05:FA:80:7E:5F:E4 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 2E57CF61BA655E53C31778FDCDA6AE0642171E94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 11:41:15 +0000 Manifest this update: Thu 18 Jun 2026 11:36:15 +0000 Manifest next update: Fri 19 Jun 2026 11:45:15 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: SOwQmZwyTrKmDI5TCPfNBnX/SqyxuoPZNgMDxynH7cE=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:57:cf:61:ba:65:5e:53:c3:17:78:fd:cd:a6:ae:06:42:17:1e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Jun 18 11:36:15 2026 GMT Not After : Jun 19 11:45:15 2026 GMT Subject: CN=E4AD1E783194E6A3E9CE8F85A92E05FA807E5FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:e8:70:a6:c7:35:b1:68:20:a9:94:0b:9f: ce:9f:2c:0a:63:e3:f8:76:b6:d7:65:1c:5d:19:72: a1:24:de:ac:e4:2b:54:c0:ea:83:85:5f:95:ab:14: 3b:12:13:76:64:2f:78:80:0f:f8:7e:37:d6:fe:f8: 2b:5c:6e:4c:00:12:88:b7:87:24:50:cd:5d:47:49: a4:f5:62:bc:92:77:8c:fc:d4:95:2c:cc:cf:0e:cb: d8:1a:c2:25:25:b8:5e:1d:7e:ea:13:0d:d7:a7:fa: cd:d5:44:12:2e:84:1f:b4:13:9b:41:23:db:62:df: 52:3a:8a:33:34:d3:71:b7:a4:c8:36:5f:56:b7:d6: 14:5f:c2:c5:8b:1e:f9:f9:11:50:5f:d3:bb:3b:05: af:0c:7c:45:d4:a6:5a:5b:36:7a:71:ca:d2:5a:8e: a9:32:40:6f:92:58:73:7b:d7:f1:13:16:62:96:be: bb:e7:e7:13:ea:15:11:df:32:cf:92:5a:89:a5:c3: 64:35:8d:e6:5d:d9:6e:b6:d7:b3:f5:50:05:f3:a7: 9e:d8:a4:85:4f:c7:98:ce:a2:af:2d:85:8d:57:f3: 9e:b8:83:66:38:b5:2b:17:f4:de:72:25:50:f1:17: 5c:38:80:74:45:25:70:4f:de:ac:8e:ba:f5:19:72: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:1E:78:31:94:E6:A3:E9:CE:8F:85:A9:2E:05:FA:80:7E:5F:E4 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:db:59:d4:29:2d:b3:f2:16:76:5e:ad:e4:41:00:a1:59:6c: c6:ce:11:0e:78:d3:2c:46:cf:80:77:44:69:02:46:f9:94:14: 9f:16:ed:f9:e4:0f:0b:17:ff:79:9c:a4:85:61:db:79:fa:26: dc:91:52:b1:32:4c:e0:d4:66:35:ed:d3:c8:b1:81:4a:37:2d: 2e:40:81:b8:05:99:90:d9:a5:f3:ba:4c:e5:16:90:6c:74:da: 25:22:9e:de:4d:69:98:3d:45:ea:e3:42:59:5f:aa:d1:5c:4e: 6b:97:54:3a:03:2d:07:ed:dc:e8:a8:94:67:4b:b8:5c:86:fa: 92:3f:ce:7e:d9:5c:7f:d2:2a:35:fa:f7:13:38:ff:18:10:34: fa:74:8d:1e:de:fe:08:89:19:76:b9:68:18:19:c7:c1:0f:fb: 29:14:fc:f4:68:10:df:6a:3f:56:f9:7d:0f:15:e9:15:61:96: a3:5e:12:4d:ac:b9:87:94:25:0e:66:85:31:c6:2a:07:03:55: 2e:b0:62:a9:51:e9:87:40:cc:20:35:17:36:ea:89:35:55:d7: a5:c3:d3:7c:47:59:ae:2a:20:d4:a5:a5:97:69:03:ba:1c:e3: 21:d4:c9:04:95:64:9d:cf:7b:8d:19:de:65:b3:c6:4f:b9:14: cd:ed:ce:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlfPYbplXlPDF3j9zaauBkIXHpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA2MTgxMTM2MTVaFw0yNjA2MTkxMTQ1MTVaMDMxMTAvBgNV BAMTKEU0QUQxRTc4MzE5NEU2QTNFOUNFOEY4NUE5MkUwNUZBODA3RTVGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoOhwpsc1sWggqZQLn86fLApj 4/h2ttdlHF0ZcqEk3qzkK1TA6oOFX5WrFDsSE3ZkL3iAD/h+N9b++CtcbkwAEoi3 hyRQzV1HSaT1YrySd4z81JUszM8Oy9gawiUluF4dfuoTDden+s3VRBIuhB+0E5tB I9ti31I6ijM003G3pMg2X1a31hRfwsWLHvn5EVBf07s7Ba8MfEXUplpbNnpxytJa jqkyQG+SWHN71/ETFmKWvrvn5xPqFRHfMs+SWomlw2Q1jeZd2W6217P1UAXzp57Y pIVPx5jOoq8thY1X8564g2Y4tSsX9N5yJVDxF1w4gHRFJXBP3qyOuvUZcqrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5K0eeDGU5qPpzo+FqS4F+oB+X+QwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvbWdQpLbPyFnZereRBAKFZbMbOEQ540yxG z4B3RGkCRvmUFJ8W7fnkDwsX/3mcpIVh23n6JtyRUrEyTODUZjXt08ixgUo3LS5A gbgFmZDZpfO6TOUWkGx02iUint5NaZg9RerjQllfqtFcTmuXVDoDLQft3OiolGdL uFyG+pI/zn7ZXH/SKjX69xM4/xgQNPp0jR7e/giJGXa5aBgZx8EP+ykU/PRoEN9q P1b5fQ8V6RVhlqNeEk2suYeUJQ5mhTHGKgcDVS6wYqlR6YdAzCA1FzbqiTVV16XD 03xHWa4qINSlpZdpA7oc4yHUyQSVZJ3Pe40Z3mWzxk+5FM3tzkE= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:33 2026 by rpki-client