$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: PP2mQl6qZSRtaB+nSH6vW2u3s4snZqCpLyWkSs+mZ70= Subject key identifier: 09:B3:AE:CD:CC:85:DD:02:DB:50:E9:69:7E:64:F0:A1:72:87:2E:53 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 5DC299A6601535217D52A4D299EC28192E92C15E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: BF Signing time: Tue 22 Sep 2026 13:28:02 +0000 Manifest this update: Tue 22 Sep 2026 13:23:02 +0000 Manifest next update: Wed 23 Sep 2026 15:50:02 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: Tv9K/I3Wq7ShDr3Fanv67Ff7KiOaMr0ieye/o805Xfg=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c2:99:a6:60:15:35:21:7d:52:a4:d2:99:ec:28:19:2e:92:c1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Sep 22 13:23:02 2026 GMT Not After : Sep 23 15:50:02 2026 GMT Subject: CN=09B3AECDCC85DD02DB50E9697E64F0A172872E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:44:13:1a:00:2d:68:67:38:b1:97:82:94: a0:e2:d3:64:cb:4b:36:51:c6:a6:69:f4:7a:b6:28: 4b:c6:24:44:e2:3c:05:8b:43:a0:a1:e0:cc:c0:0b: 0d:a2:3c:dc:95:e3:88:bf:ba:ba:8d:f8:10:c8:31: 26:e9:0d:42:4d:c5:0f:02:9a:a5:4f:6d:12:24:ec: c2:7f:40:f7:1c:e1:54:e1:a0:65:52:28:bc:d2:a2: 44:c0:1c:f7:a1:a7:4b:91:87:ac:52:c0:cd:f4:0a: 46:61:10:c0:4f:0f:44:48:4a:42:07:56:5b:b8:e5: dc:68:3b:7e:46:de:95:a3:12:7c:b6:b4:40:8c:f3: f0:81:5e:5a:74:e6:8c:e2:3a:d5:47:bc:42:8a:e0: 94:6e:6b:63:8d:b2:57:d0:6b:67:f2:6d:ba:f0:f1: 65:c8:3a:ab:6a:26:3e:94:30:0b:5c:6c:10:03:3a: ff:7e:16:37:f6:dc:2e:25:b6:3d:98:62:61:08:6a: d4:27:28:d4:cf:67:15:0a:ea:4e:ad:53:7b:ac:db: db:40:23:23:5e:68:ea:df:da:ad:4e:3d:59:84:59: 0f:a2:b6:8b:c2:99:7f:ee:26:44:3f:f6:6c:fc:05: e2:c3:02:e8:84:64:82:f4:b3:fd:e3:e1:a2:26:ee: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:AE:CD:CC:85:DD:02:DB:50:E9:69:7E:64:F0:A1:72:87:2E:53 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:99:f1:36:cc:b1:b9:46:03:96:4e:bf:e9:f4:08:86:83:2f: 5a:19:8e:ff:38:3f:d2:c8:09:b2:d4:3c:96:be:7f:a0:38:df: 69:19:16:c8:e2:db:9c:1b:70:ed:db:a9:bd:74:ff:95:10:a1: bc:48:81:33:46:1f:7b:fa:d7:aa:2a:bc:77:fc:e8:2f:22:9b: 8f:4c:ac:01:82:66:f6:4e:e5:8d:8c:98:28:04:54:4e:e2:0d: 01:04:5c:5c:9b:47:ea:b8:83:c5:fd:4e:ea:d2:48:2e:e9:bc: 52:36:34:e5:d8:e9:fc:6c:5c:9c:e1:f7:29:c2:82:08:64:0e: ee:e6:cd:c7:b0:bd:bc:93:58:d9:a9:93:7b:b8:2b:1a:08:ec: f0:1f:4b:83:71:56:67:cf:0a:83:03:07:27:74:2d:fe:9b:44: 5d:87:39:f4:b9:12:bc:ef:df:5d:07:b4:07:84:7e:f7:1e:e8: 10:4d:52:fc:76:d2:4e:88:1d:69:9f:b8:03:6d:f0:c4:c1:5c: f3:c5:af:9b:8d:4f:a5:68:24:8d:1e:86:58:0a:c9:5b:fb:17: d4:27:c1:84:d8:07:be:ad:36:b8:b5:98:76:68:8c:18:fc:ef: a3:2d:e3:a8:da:d3:43:ef:a1:39:a3:1e:6a:62:a1:fc:5f:4e: f5:17:ef:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcKZpmAVNSF9UqTSmewoGS6SwV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA5MjIxMzIzMDJaFw0yNjA5MjMxNTUwMDJaMDMxMTAvBgNV BAMTKDA5QjNBRUNEQ0M4NUREMDJEQjUwRTk2OTdFNjRGMEExNzI4NzJFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjEQTGgAtaGc4sZeClKDi02TL SzZRxqZp9Hq2KEvGJETiPAWLQ6Ch4MzACw2iPNyV44i/urqN+BDIMSbpDUJNxQ8C mqVPbRIk7MJ/QPcc4VThoGVSKLzSokTAHPehp0uRh6xSwM30CkZhEMBPD0RISkIH Vlu45dxoO35G3pWjEny2tECM8/CBXlp05oziOtVHvEKK4JRua2ONslfQa2fybbrw 8WXIOqtqJj6UMAtcbBADOv9+Fjf23C4ltj2YYmEIatQnKNTPZxUK6k6tU3us29tA IyNeaOrf2q1OPVmEWQ+itovCmX/uJkQ/9mz8BeLDAuiEZIL0s/3j4aIm7o4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbOuzcyF3QLbUOlpfmTwoXKHLlMwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6Z8TbMsblGA5ZOv+n0CIaDL1oZjv84P9LI CbLUPJa+f6A432kZFsji25wbcO3bqb10/5UQobxIgTNGH3v616oqvHf86C8im49M rAGCZvZO5Y2MmCgEVE7iDQEEXFybR+q4g8X9TurSSC7pvFI2NOXY6fxsXJzh9ynC gghkDu7mzcewvbyTWNmpk3u4KxoI7PAfS4NxVmfPCoMDByd0Lf6bRF2HOfS5Erzv 310HtAeEfvce6BBNUvx20k6IHWmfuANt8MTBXPPFr5uNT6VoJI0ehlgKyVv7F9Qn wYTYB76tNri1mHZojBj876Mt46ja00PvoTmjHmpiofxfTvUX73g= -----END CERTIFICATE-----Generated at Wed Sep 23 01:19:22 2026 by rpki-client