$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: AN2GTvRL3NbhR5/uxyWK+Ke3zBmwPUWiPCf5rv3r7Vs= Subject key identifier: 0A:D0:14:AA:D6:6E:EC:1B:9F:60:34:3E:C9:1D:69:44:3B:59:B5:C9 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 22247F9E3B49559A0D4796FFFCB490DD156CF88A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:17:46 +0000 Manifest this update: Sun 02 Aug 2026 08:12:46 +0000 Manifest next update: Mon 03 Aug 2026 10:30:46 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: Oa2c6ggLk5FY9fbIotWN10dodjDNnZYN7d0zL+uF8gA=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:24:7f:9e:3b:49:55:9a:0d:47:96:ff:fc:b4:90:dd:15:6c:f8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Aug 2 08:12:46 2026 GMT Not After : Aug 3 10:30:46 2026 GMT Subject: CN=0AD014AAD66EEC1B9F60343EC91D69443B59B5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:37:8c:3c:ed:91:9e:8a:5b:a0:d4:a4:bf: 3c:ac:12:00:c4:84:4e:16:d5:09:93:70:16:15:90: 3e:47:f4:a0:8a:b1:42:d1:bb:a9:e1:76:01:35:4b: b0:f5:38:41:6e:25:65:1e:6f:7a:74:17:72:1d:39: e1:36:92:1d:da:79:8f:94:2b:0d:c8:ca:41:b5:c9: 99:70:f5:af:a8:88:7c:b7:90:74:96:81:4d:df:0a: 70:ca:7a:2c:1c:a1:3f:0d:49:e9:11:f3:5c:1e:f5: 93:93:66:b1:28:f9:0a:ad:f2:b7:4f:1d:c2:84:28: 63:d9:cb:b3:ab:65:d2:c7:94:11:2b:a3:bf:a6:37: 8c:52:99:a5:6c:ad:bb:fc:23:33:03:23:2e:48:d2: a1:b1:3b:6d:3b:31:d1:6f:bd:cc:3c:3d:1c:0c:95: 2a:ce:cb:ca:8d:64:f3:d7:57:7f:5a:ab:66:a6:02: 15:29:da:88:86:c2:b7:e6:fd:86:26:f8:41:2c:d7: 74:ed:aa:03:19:47:56:e3:96:9f:96:e0:9d:dc:9c: cb:0b:ae:04:e9:12:33:ba:82:2b:7a:61:10:40:6d: 5d:88:c4:d4:6d:36:1a:28:94:7a:27:9f:41:06:31: 58:7c:91:03:60:d1:70:70:34:f8:42:0d:8f:ec:a7: ec:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:14:AA:D6:6E:EC:1B:9F:60:34:3E:C9:1D:69:44:3B:59:B5:C9 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:79:39:49:3e:30:6e:f5:b5:06:26:f0:e1:9f:e6:45:23:10: 9b:94:ac:40:9f:fb:e0:0e:a3:e3:cf:29:cd:a3:16:68:92:21: 37:56:aa:a2:65:28:a6:c2:7a:b2:69:fb:58:1d:ff:4c:8e:78: 55:0f:2d:83:9c:ce:d6:5f:79:bc:89:25:c9:96:87:c0:d6:c8: 7f:43:fc:93:6c:82:0a:7a:e9:6c:7f:dd:70:b8:a6:1d:c4:14: 27:62:67:45:87:1d:b9:f8:4e:88:bc:bb:9f:82:f6:8e:90:7f: 7a:ae:01:a1:65:60:76:03:26:cd:7b:8f:24:68:9a:88:c8:22: 71:f3:7b:9a:f9:f6:dc:d5:26:1f:55:f6:c3:60:23:85:85:10: 9f:cf:2f:6a:38:c6:e3:57:e2:a4:17:50:49:51:86:cd:e6:70: ba:bf:02:bc:49:75:5f:cf:ec:d8:fa:f0:03:f0:61:d5:1d:09: 04:4e:76:19:eb:f2:63:c8:a0:15:80:10:d8:9b:eb:5a:3c:04: 2c:fe:36:28:22:e3:be:e2:93:df:6e:d5:a5:53:3e:74:9f:ba: 5a:74:a0:47:3c:a3:10:f2:26:26:a9:3c:f8:52:df:b8:e1:55: 0c:ec:d8:1c:58:0f:c5:0b:bc:fb:7f:49:5d:be:1e:0f:bc:39: 7a:4c:93:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiR/njtJVZoNR5b//LSQ3RVs+IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA4MDIwODEyNDZaFw0yNjA4MDMxMDMwNDZaMDMxMTAvBgNV BAMTKDBBRDAxNEFBRDY2RUVDMUI5RjYwMzQzRUM5MUQ2OTQ0M0I1OUI1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6TeMPO2RnopboNSkvzysEgDE hE4W1QmTcBYVkD5H9KCKsULRu6nhdgE1S7D1OEFuJWUeb3p0F3IdOeE2kh3aeY+U Kw3IykG1yZlw9a+oiHy3kHSWgU3fCnDKeiwcoT8NSekR81we9ZOTZrEo+Qqt8rdP HcKEKGPZy7OrZdLHlBEro7+mN4xSmaVsrbv8IzMDIy5I0qGxO207MdFvvcw8PRwM lSrOy8qNZPPXV39aq2amAhUp2oiGwrfm/YYm+EEs13TtqgMZR1bjlp+W4J3cnMsL rgTpEjO6git6YRBAbV2IxNRtNhoolHonn0EGMVh8kQNg0XBwNPhCDY/sp+ybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCtAUqtZu7BufYDQ+yR1pRDtZtckwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh5OUk+MG71tQYm8OGf5kUjEJuUrECf++AO o+PPKc2jFmiSITdWqqJlKKbCerJp+1gd/0yOeFUPLYOcztZfebyJJcmWh8DWyH9D /JNsggp66Wx/3XC4ph3EFCdiZ0WHHbn4Toi8u5+C9o6Qf3quAaFlYHYDJs17jyRo mojIInHze5r59tzVJh9V9sNgI4WFEJ/PL2o4xuNX4qQXUElRhs3mcLq/ArxJdV/P 7Nj68APwYdUdCQROdhnr8mPIoBWAENib61o8BCz+Nigi477ik99u1aVTPnSfulp0 oEc8oxDyJiapPPhS37jhVQzs2BxYD8ULvPt/SV2+Hg+8OXpMk1Y= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:33 2026 by rpki-client