$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: V7ixVEr4NiKICT+Cb5tr/EiCRELylH4oP9hmCfPi7Do= Subject key identifier: 54:A7:56:E5:19:E2:40:DC:BB:0A:29:88:CF:08:54:42:AF:59:B4:38 Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 0D84897D11B4DB59A676D6DD6594307F51904918 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:18:00 +0000 Manifest this update: Mon 21 Sep 2026 21:13:00 +0000 Manifest next update: Tue 22 Sep 2026 23:46:00 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: ZKcQLNcPkjJtNk4SiMnYx3wNc6HLdulzjy4tyubKxVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:84:89:7d:11:b4:db:59:a6:76:d6:dd:65:94:30:7f:51:90:49:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Sep 21 21:13:00 2026 GMT Not After : Sep 22 23:46:00 2026 GMT Subject: CN=54A756E519E240DCBB0A2988CF085442AF59B438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:43:ef:fb:91:95:7d:42:b2:2b:18:87:6a: 24:2b:ab:19:6b:8e:bd:c6:08:8f:88:f8:08:b3:7a: 50:e1:a3:2c:7b:f5:4d:61:9b:57:7b:39:eb:19:45: a5:ee:62:c9:31:48:0b:00:7d:eb:55:e0:ec:28:4f: a0:24:42:5c:15:f0:7c:52:97:cf:c0:e4:51:47:ad: 7c:07:44:3b:b3:bb:4d:64:5e:3b:86:d6:04:40:78: 8a:82:f8:d8:e2:db:75:17:66:2c:ae:2a:ac:8c:1b: 45:82:08:31:4c:54:e4:d2:2e:4b:9e:db:4e:e0:88: ea:91:ee:68:8f:32:6d:50:b3:4b:f9:40:66:6d:69: 30:b5:c6:c3:7d:4f:de:a5:1c:22:02:b6:65:58:75: d6:4b:78:e9:50:1c:2d:1c:31:81:c2:20:a9:12:b9: b5:a0:62:26:c8:5d:4a:22:94:d8:64:ea:fd:86:8e: 19:f4:81:20:c7:ee:c7:7b:7c:91:dc:91:d3:63:92: 73:17:04:c1:9b:77:9f:c1:25:e1:f3:e8:33:bb:16: 14:0b:3d:8a:8a:96:3a:21:6e:07:df:75:29:bd:c8: d9:f2:85:66:e9:98:d3:7d:d1:b8:f6:16:63:38:1d: e0:0c:5d:f6:34:c4:f5:2d:86:8a:4f:9c:c7:95:c7: 06:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A7:56:E5:19:E2:40:DC:BB:0A:29:88:CF:08:54:42:AF:59:B4:38 X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e7:be:fb:c7:16:d4:33:cf:c6:39:54:1d:bb:77:07:70:8e: 64:42:4c:af:18:1f:a4:4a:88:87:a2:94:4c:00:92:5d:a7:9c: 5b:ea:61:ea:33:4b:79:f8:ff:0d:32:22:75:e7:a2:ca:3e:27: b0:09:ed:e6:38:ff:83:43:b9:31:33:ed:97:ac:ce:93:14:36: 17:e4:18:a8:5f:2e:46:0a:b2:80:78:9a:89:41:3a:9a:7b:93: 34:79:cf:f6:49:f4:1a:25:8d:81:86:ab:32:8c:80:24:bd:e0: ec:9c:60:d3:44:e1:fc:db:32:58:21:f4:e4:4a:6b:87:23:40: 46:87:dd:1b:c9:69:cd:b6:27:6e:b5:d9:c5:f3:1e:10:2e:91: 21:db:a0:70:97:d0:f6:0d:b5:b2:d0:87:3f:2b:76:3c:17:80: d8:54:bf:7e:cd:19:da:8d:c6:3d:6a:cc:ec:9b:40:eb:f1:19: 07:a4:64:07:bc:4e:dc:77:5c:60:37:92:d4:59:75:94:3b:5a: b7:49:8a:7b:ae:3f:bb:fa:09:51:5b:2f:75:92:6f:ee:ed:9f: fa:36:db:d0:e9:ac:ee:37:24:ee:32:21:bf:00:e9:bb:dc:f6: 05:40:1d:f2:ee:f5:55:ba:0f:b7:43:12:4b:b1:b4:1e:9a:47: 4f:50:1f:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYSJfRG021mmdtbdZZQwf1GQSRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA5MjEyMTEzMDBaFw0yNjA5MjIyMzQ2MDBaMDMxMTAvBgNV BAMTKDU0QTc1NkU1MTlFMjQwRENCQjBBMjk4OENGMDg1NDQyQUY1OUI0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlEPv+5GVfUKyKxiHaiQrqxlr jr3GCI+I+AizelDhoyx79U1hm1d7OesZRaXuYskxSAsAfetV4OwoT6AkQlwV8HxS l8/A5FFHrXwHRDuzu01kXjuG1gRAeIqC+Nji23UXZiyuKqyMG0WCCDFMVOTSLkue 207giOqR7miPMm1Qs0v5QGZtaTC1xsN9T96lHCICtmVYddZLeOlQHC0cMYHCIKkS ubWgYibIXUoilNhk6v2Gjhn0gSDH7sd7fJHckdNjknMXBMGbd5/BJeHz6DO7FhQL PYqKljohbgffdSm9yNnyhWbpmNN90bj2FmM4HeAMXfY0xPUthopPnMeVxwbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVKdW5RniQNy7CimIzwhUQq9ZtDgwHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALnvvvHFtQzz8Y5VB27dwdwjmRCTK8YH6RK iIeilEwAkl2nnFvqYeozS3n4/w0yInXnoso+J7AJ7eY4/4NDuTEz7ZeszpMUNhfk GKhfLkYKsoB4molBOpp7kzR5z/ZJ9BoljYGGqzKMgCS94OycYNNE4fzbMlgh9ORK a4cjQEaH3RvJac22J2612cXzHhAukSHboHCX0PYNtbLQhz8rdjwXgNhUv37NGdqN xj1qzOybQOvxGQekZAe8Ttx3XGA3ktRZdZQ7WrdJinuuP7v6CVFbL3WSb+7tn/o2 29DprO43JO4yIb8A6bvc9gVAHfLu9VW6D7dDEkuxtB6aR09QH+Q= -----END CERTIFICATE-----Generated at Tue Sep 22 09:12:44 2026 by rpki-client