$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: 5ec0JzD8Gnvk513wmBkLasaYvsJhk9g/d8kv6c6U/Ow= Subject key identifier: 6A:49:BB:52:12:CD:48:81:F3:9A:4A:6D:A4:E4:1F:2B:08:E4:43:D1 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 01E4BC04E8CCE417663A3603998964C223D1CA8F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: BA Signing time: Thu 17 Sep 2026 03:32:49 +0000 Manifest this update: Thu 17 Sep 2026 03:27:49 +0000 Manifest next update: Fri 18 Sep 2026 06:22:49 +0000 Files and hashes: 1: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: v+57xJ4OGCUoCIi3ePUzCOVY1gm2wP3yPq0SfP8tEKs=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e4:bc:04:e8:cc:e4:17:66:3a:36:03:99:89:64:c2:23:d1:ca:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Sep 17 03:27:49 2026 GMT Not After : Sep 18 06:22:49 2026 GMT Subject: CN=6A49BB5212CD4881F39A4A6DA4E41F2B08E443D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d0:1d:30:84:bf:40:a2:77:34:3c:2d:20:ff: ad:31:f3:e9:6b:33:91:90:b6:f3:bb:64:d3:f6:7c: 00:dc:d4:d9:86:c7:31:8d:6c:f3:40:39:5d:be:b1: 9b:89:26:fe:26:b3:82:87:9b:df:0b:1e:64:eb:7a: 43:08:8f:a1:6c:4a:95:b0:ed:57:03:3f:11:96:16: e4:8c:a7:5d:bc:c3:af:8f:66:5b:28:ca:c9:93:87: 29:c5:c9:9b:8a:7a:ce:7b:98:f2:21:51:7a:9b:2d: 78:73:49:76:dd:8b:b7:7f:a4:6d:40:72:b8:7b:a1: af:2d:f2:8e:81:66:22:60:97:5c:c1:4e:cd:2d:88: 74:92:a1:2c:42:d2:e7:6a:18:d6:98:eb:c8:05:2e: f6:04:5e:a6:98:75:47:eb:94:c4:5b:85:a6:f9:53: 3d:2e:cb:5e:19:1e:2e:17:31:04:15:66:62:9d:00: 98:a3:7c:bc:95:4f:4c:f9:41:b6:80:54:0a:ba:aa: c3:08:f0:a6:30:e4:ab:ea:23:ce:7a:f1:65:dd:a5: d6:29:b1:e3:fb:d1:fa:0f:9e:ce:26:e6:10:6b:d7: b7:30:58:1a:42:f2:41:b0:e9:ff:13:68:e2:00:12: 8d:a3:06:07:67:86:d3:ab:12:3c:cf:ee:b1:cd:41: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:BB:52:12:CD:48:81:F3:9A:4A:6D:A4:E4:1F:2B:08:E4:43:D1 X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c1:fd:2b:a7:33:64:69:3f:11:31:3f:bf:77:11:a8:f7:37: 8c:f7:72:7f:71:6c:90:64:34:1d:8e:27:37:04:1f:f9:e7:13: 07:b3:21:30:82:0d:55:f2:8c:fa:8c:6b:e3:1c:1c:8c:7f:21: 02:08:fe:92:ae:de:f7:68:c5:be:51:26:f1:5a:ac:f3:f6:b2: f1:69:df:96:a6:d0:0d:67:f0:74:11:54:48:69:40:43:b1:7c: 60:4e:fe:0e:8a:19:54:72:d9:98:71:8a:c5:f5:a8:a1:bc:2b: 50:5e:63:70:7d:26:1e:d0:b8:64:e1:c2:34:0c:5e:b8:8f:64: db:ce:07:75:f1:ec:99:51:a1:e9:d2:98:64:a9:f4:27:46:61: f9:c0:7e:6c:1b:34:78:c0:eb:fb:2a:fe:fa:8d:99:c3:3f:fb: c4:bd:d3:4a:e3:1a:15:28:8e:7a:0b:e3:05:7b:4e:be:29:f6: 32:d4:65:cf:4c:68:6d:f2:ac:f8:ee:87:9f:a9:c9:14:fd:c9: 68:98:28:a2:eb:ff:54:01:9a:02:80:e1:53:43:30:53:28:96: 7f:8a:b0:c0:46:75:20:ca:c6:7b:84:b7:ec:7e:51:de:a1:74: dd:6b:e5:8b:28:67:7d:3a:4c:9c:cf:78:98:04:51:c5:5e:1d: 14:b9:b1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeS8BOjM5BdmOjYDmYlkwiPRyo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA5MTcwMzI3NDlaFw0yNjA5MTgwNjIyNDlaMDMxMTAvBgNV BAMTKDZBNDlCQjUyMTJDRDQ4ODFGMzlBNEE2REE0RTQxRjJCMDhFNDQzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0B0whL9Aonc0PC0g/60x8+lr M5GQtvO7ZNP2fADc1NmGxzGNbPNAOV2+sZuJJv4ms4KHm98LHmTrekMIj6FsSpWw 7VcDPxGWFuSMp128w6+PZlsoysmThynFyZuKes57mPIhUXqbLXhzSXbdi7d/pG1A crh7oa8t8o6BZiJgl1zBTs0tiHSSoSxC0udqGNaY68gFLvYEXqaYdUfrlMRbhab5 Uz0uy14ZHi4XMQQVZmKdAJijfLyVT0z5QbaAVAq6qsMI8KYw5KvqI8568WXdpdYp seP70foPns4m5hBr17cwWBpC8kGw6f8TaOIAEo2jBgdnhtOrEjzP7rHNQcxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUakm7UhLNSIHzmkptpOQfKwjkQ9EwHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTB/SunM2RpPxExP793Eaj3N4z3cn9xbJBk NB2OJzcEH/nnEwezITCCDVXyjPqMa+McHIx/IQII/pKu3vdoxb5RJvFarPP2svFp 35am0A1n8HQRVEhpQEOxfGBO/g6KGVRy2ZhxisX1qKG8K1BeY3B9Jh7QuGThwjQM XriPZNvOB3Xx7JlRoenSmGSp9CdGYfnAfmwbNHjA6/sq/vqNmcM/+8S900rjGhUo jnoL4wV7Tr4p9jLUZc9MaG3yrPjuh5+pyRT9yWiYKKLr/1QBmgKA4VNDMFMoln+K sMBGdSDKxnuEt+x+Ud6hdN1r5YsoZ306TJzPeJgEUcVeHRS5sXo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:02 2026 by rpki-client