$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: YFkAbDkbltXcvoA5Vqg2YWnl+oli4/V3YK1/6ZJiwyg= Subject key identifier: 2B:E9:05:1A:64:C1:B3:A2:1C:16:BB:22:60:5E:CB:10:D0:65:BE:5D Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 4250032A7B4676A353B666CEC7B65D4212F38740 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:22:42 +0000 Manifest this update: Thu 17 Sep 2026 03:17:42 +0000 Manifest next update: Fri 18 Sep 2026 06:11:42 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: 0nBnvxMJweEUkk3dG0RbrLJluSYpyYlWxZXvZA1DJUA=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:50:03:2a:7b:46:76:a3:53:b6:66:ce:c7:b6:5d:42:12:f3:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Sep 17 03:17:42 2026 GMT Not After : Sep 18 06:11:42 2026 GMT Subject: CN=2BE9051A64C1B3A21C16BB22605ECB10D065BE5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:ed:9b:33:05:d4:53:ca:2c:54:44:8b:87: 01:0c:74:4c:f2:b3:f9:22:31:e5:69:45:b5:b6:a9: 2e:e9:1c:da:99:82:9f:59:a9:9d:f8:f4:61:17:0c: a0:ab:e1:fd:49:7a:05:f4:47:cd:c1:b8:dd:08:d3: 80:df:2b:62:99:b2:f0:2a:c5:a6:a3:ee:dd:c9:11: 8a:69:b9:ce:42:9f:3f:01:23:fd:0f:f4:e6:66:47: af:be:9e:9b:3f:25:28:33:a1:fa:b1:7d:d0:99:bc: 91:b2:1c:3c:8b:6f:06:21:14:59:d6:d0:c2:ed:3b: d4:ef:e3:cb:b0:cd:1f:7a:4f:ac:c7:8f:b4:06:31: a4:31:8e:ab:79:b1:31:9f:8e:8b:0f:d4:6c:59:aa: 73:68:b3:f5:e4:77:d7:d2:9f:12:ad:b8:78:47:7d: 0c:be:31:40:a5:81:59:3d:ce:b1:c7:ba:4c:1c:f2: 91:78:33:b9:43:55:96:92:90:b4:44:43:01:fa:76: 5b:b4:dc:24:f2:c3:10:be:59:4a:90:c4:be:97:73: e7:ea:b0:5e:b3:fa:d5:0b:66:d9:b4:a9:87:6f:dd: 1e:7d:80:b4:f6:d8:b9:61:f1:ab:b1:f5:1e:9a:e6: cc:86:ed:21:fb:3d:50:fb:11:d4:43:44:b2:4f:ba: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:05:1A:64:C1:B3:A2:1C:16:BB:22:60:5E:CB:10:D0:65:BE:5D X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:96:7d:03:34:fa:b0:1f:dc:b4:cb:31:be:83:08:a2:68:42: 21:8a:95:b5:25:4f:a3:ab:e0:09:cf:79:b1:d7:8e:07:f5:6f: 1f:ed:ca:32:25:ca:f6:ba:1e:58:93:4a:8d:5e:a5:8f:e0:a4: 64:f6:36:07:75:f3:06:49:01:f6:72:65:95:e9:43:82:5a:08: 37:30:99:6a:87:d2:2b:93:a9:7d:9d:46:f4:ac:af:76:b6:10: 55:d3:76:99:59:b8:ab:e6:23:6a:0b:a8:4d:ac:9c:58:df:5c: 5c:08:68:bc:69:bb:57:a8:df:af:b9:71:b6:a9:30:76:e8:47: 1c:12:1a:ab:40:bd:1f:59:15:fe:13:e3:45:27:c4:09:7d:33: c7:39:87:04:17:ee:1e:8f:e8:37:bc:a0:f5:6d:05:9c:f6:3d: 9a:0c:6c:21:3f:33:3e:26:d7:65:37:7a:bc:fb:b3:09:31:e7: a7:27:d3:ac:b8:1a:a8:91:2e:a6:a9:a1:9b:cd:01:b1:7c:6f: e2:70:1d:27:7b:cd:d7:55:f8:a4:df:be:fe:c5:22:0c:82:ea: 7d:cf:33:d0:1c:b5:73:42:72:91:2c:ad:67:98:22:de:e4:a8: 17:bd:7f:dc:6d:5a:b3:92:77:1b:eb:e7:fc:03:ca:98:bf:49: 5e:9c:c7:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlADKntGdqNTtmbOx7ZdQhLzh0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA5MTcwMzE3NDJaFw0yNjA5MTgwNjExNDJaMDMxMTAvBgNV BAMTKDJCRTkwNTFBNjRDMUIzQTIxQzE2QkIyMjYwNUVDQjEwRDA2NUJFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCu2bMwXUU8osVESLhwEMdEzy s/kiMeVpRbW2qS7pHNqZgp9ZqZ349GEXDKCr4f1JegX0R83BuN0I04DfK2KZsvAq xaaj7t3JEYppuc5Cnz8BI/0P9OZmR6++nps/JSgzofqxfdCZvJGyHDyLbwYhFFnW 0MLtO9Tv48uwzR96T6zHj7QGMaQxjqt5sTGfjosP1GxZqnNos/Xkd9fSnxKtuHhH fQy+MUClgVk9zrHHukwc8pF4M7lDVZaSkLREQwH6dlu03CTywxC+WUqQxL6Xc+fq sF6z+tULZtm0qYdv3R59gLT22Llh8aux9R6a5syG7SH7PVD7EdRDRLJPuqobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK+kFGmTBs6IcFrsiYF7LENBlvl0wHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2WfQM0+rAf3LTLMb6DCKJoQiGKlbUlT6Or 4AnPebHXjgf1bx/tyjIlyva6HliTSo1epY/gpGT2Ngd18wZJAfZyZZXpQ4JaCDcw mWqH0iuTqX2dRvSsr3a2EFXTdplZuKvmI2oLqE2snFjfXFwIaLxpu1eo36+5cbap MHboRxwSGqtAvR9ZFf4T40UnxAl9M8c5hwQX7h6P6De8oPVtBZz2PZoMbCE/Mz4m 12U3erz7swkx56cn06y4GqiRLqapoZvNAbF8b+JwHSd7zddV+KTfvv7FIgyC6n3P M9ActXNCcpEsrWeYIt7kqBe9f9xtWrOSdxvr5/wDypi/SV6cx7Q= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:51 2026 by rpki-client