$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: T6byF+xAIbTh89Hla7yqRlk+rfYPivd8hsq8UER6AbM= Subject key identifier: BE:C2:4D:30:3C:55:F7:58:54:6A:F2:3E:A2:25:69:82:B7:6E:88:D3 Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 255CE23E8C4ABD33374C6E7DD02FF1F8079C1512 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:42:02 +0000 Manifest this update: Tue 16 Jun 2026 14:37:02 +0000 Manifest next update: Wed 17 Jun 2026 17:07:02 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: 0GKafcjC8lf0FIMEoSYSzCNy5UoRdWuOa0rFjfkzyjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5c:e2:3e:8c:4a:bd:33:37:4c:6e:7d:d0:2f:f1:f8:07:9c:15:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Jun 16 14:37:02 2026 GMT Not After : Jun 17 17:07:02 2026 GMT Subject: CN=BEC24D303C55F758546AF23EA2256982B76E88D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:a4:f8:a6:e7:3e:ce:ef:b0:b3:04:11:b4: f3:13:fc:4e:88:e0:27:63:66:c8:cd:46:ba:a3:de: 25:4f:d9:a8:08:31:d6:2d:ee:ef:f1:27:22:5c:e7: 12:29:20:51:e3:42:6c:c2:b4:ff:c5:a4:ef:8d:dd: d1:21:a2:27:dc:2c:f2:b1:ea:93:6f:bc:21:f9:5d: 16:16:13:81:20:ac:cb:e1:18:97:c0:50:b7:75:01: 57:f8:d7:85:8f:a0:9b:90:e4:0f:f3:64:04:2c:28: e6:40:5d:63:97:ed:f7:df:c9:75:c2:81:cb:d9:df: fa:4c:8d:45:95:53:c8:2e:b7:a3:bc:0c:c1:24:67: 19:52:aa:dd:34:c7:d2:cd:e5:16:17:f3:95:f2:bb: 34:2e:3e:b1:28:86:e1:4f:e7:e4:d3:b5:7e:ed:c8: 06:c0:ba:56:c4:1f:a8:44:b9:77:bd:15:d1:b4:92: d3:35:c0:68:c2:9b:56:70:45:46:40:f7:ea:25:c8: 45:6a:b8:8d:92:50:92:2b:e8:5e:25:43:02:a3:72: 15:10:09:3e:31:f6:61:61:bb:0a:58:d3:eb:aa:8e: f4:09:d5:f2:95:a0:3a:ba:fa:ac:af:18:a2:7b:3d: a3:11:44:00:6b:48:69:b0:7b:0a:de:ba:0f:d4:d8: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C2:4D:30:3C:55:F7:58:54:6A:F2:3E:A2:25:69:82:B7:6E:88:D3 X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:82:4d:9a:7b:85:ba:4d:3f:c5:a8:4a:07:42:56:ef:92: be:ff:24:e2:b9:03:c2:b6:08:fc:c1:fb:4f:77:04:e2:d4:9a: 72:38:e0:3a:07:bd:0d:b6:7b:86:36:5e:51:54:a0:c0:9d:cc: 44:0a:c9:35:30:35:62:f1:f9:a4:f9:49:f1:e1:4f:7c:22:ed: 38:2a:5d:e7:d7:64:de:85:83:6d:de:d0:7b:8a:39:93:88:a4: 82:e8:77:7c:bb:39:f8:28:24:5b:87:2e:a3:dd:f6:0b:ed:3c: 7b:c6:98:ab:e4:3a:b5:7c:bc:48:a3:22:a5:49:29:1b:53:c1: 9f:c3:1d:81:3c:34:7b:66:43:1d:bb:0a:94:71:9c:be:db:d7: 28:bd:fe:22:9e:b1:1f:bb:64:31:f0:8f:71:c3:15:92:9e:cf: 67:c8:8a:c9:21:a1:9c:c8:44:9f:cc:5e:9b:7b:74:af:bd:0d: af:71:c2:59:2d:db:bd:c1:7c:20:3c:61:97:6f:a4:c2:b0:cb: 6f:62:c2:97:6a:41:f9:04:c5:30:e4:b6:bd:f9:e1:b3:1e:7c: b7:d4:ff:5e:1b:46:12:26:0e:24:99:d7:b0:40:b6:97:50:13: 3c:99:01:1c:c9:50:cc:a1:c8:97:d5:55:98:54:e4:39:32:54: a3:c2:8c:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVziPoxKvTM3TG590C/x+AecFRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA2MTYxNDM3MDJaFw0yNjA2MTcxNzA3MDJaMDMxMTAvBgNV BAMTKEJFQzI0RDMwM0M1NUY3NTg1NDZBRjIzRUEyMjU2OTgyQjc2RTg4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtaT4puc+zu+wswQRtPMT/E6I 4CdjZsjNRrqj3iVP2agIMdYt7u/xJyJc5xIpIFHjQmzCtP/FpO+N3dEhoifcLPKx 6pNvvCH5XRYWE4EgrMvhGJfAULd1AVf414WPoJuQ5A/zZAQsKOZAXWOX7fffyXXC gcvZ3/pMjUWVU8gut6O8DMEkZxlSqt00x9LN5RYX85XyuzQuPrEohuFP5+TTtX7t yAbAulbEH6hEuXe9FdG0ktM1wGjCm1ZwRUZA9+olyEVquI2SUJIr6F4lQwKjchUQ CT4x9mFhuwpY0+uqjvQJ1fKVoDq6+qyvGKJ7PaMRRABrSGmwewreug/U2CeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsJNMDxV91hUavI+oiVpgrduiNMwHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8ngk2ae4W6TT/FqEoHQlbvkr7/JOK5A8K2 CPzB+093BOLUmnI44DoHvQ22e4Y2XlFUoMCdzEQKyTUwNWLx+aT5SfHhT3wi7Tgq XefXZN6Fg23e0HuKOZOIpILod3y7OfgoJFuHLqPd9gvtPHvGmKvkOrV8vEijIqVJ KRtTwZ/DHYE8NHtmQx27CpRxnL7b1yi9/iKesR+7ZDHwj3HDFZKez2fIiskhoZzI RJ/MXpt7dK+9Da9xwlkt273BfCA8YZdvpMKwy29iwpdqQfkExTDktr354bMefLfU /14bRhImDiSZ17BAtpdQEzyZARzJUMyhyJfVVZhU5DkyVKPCjJI= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:08 2026 by rpki-client