$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: tOSXq0aqegXuirVFl5f/xicR1BZWeyN1YyH+DRJmtpA= Subject key identifier: F4:34:17:30:80:20:E3:B0:75:64:E8:B9:52:46:90:66:9E:2A:54:15 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 6F44AFA72ACEA304829C868447D081E2F6931FE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 21:23:02 +0000 Manifest this update: Tue 28 Jul 2026 21:18:02 +0000 Manifest next update: Wed 29 Jul 2026 21:57:02 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) 2: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: hfCFfJla3dyd08cRrcpiF0JQ3ZdF/Z3ceHsLeVfAKmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:44:af:a7:2a:ce:a3:04:82:9c:86:84:47:d0:81:e2:f6:93:1f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Jul 28 21:18:02 2026 GMT Not After : Jul 29 21:57:02 2026 GMT Subject: CN=F43417308020E3B07564E8B9524690669E2A5415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:65:3e:f9:00:70:fb:97:b8:2b:6c:d4:36: f4:95:91:58:16:00:5d:15:e2:18:13:1e:aa:8b:97: 55:ff:0c:bb:43:31:2c:f4:8f:23:e0:c6:cb:38:14: 6e:67:68:3c:5a:fe:9d:ea:44:d1:63:ce:9a:e5:9f: d0:2f:93:b2:37:95:bc:87:a8:25:78:2c:57:f7:71: d2:1c:b9:41:9b:d1:ca:46:23:c5:df:82:15:0f:a3: c7:d3:7e:80:2c:7a:61:d9:ac:1f:4f:67:8c:09:50: aa:16:40:98:20:ab:48:9a:41:20:29:a8:2f:2d:26: 3f:ff:72:7f:dc:f5:e2:15:3e:93:87:b6:24:71:76: ff:fa:65:4c:d9:50:cd:f3:dd:2b:39:a9:5f:d6:a3: 17:da:ac:10:b3:63:db:21:9e:15:ca:71:04:cb:6e: 74:75:c6:ab:df:ed:de:96:7f:7e:30:8c:85:f8:d4: 08:ad:be:55:80:d0:6f:3d:7f:99:f3:c0:2c:8c:44: 98:d3:15:6e:99:17:1e:72:a9:51:a4:d1:35:3b:bd: dc:6b:18:70:31:c5:0a:b4:9d:64:3c:5a:95:04:79: 7a:5d:01:b1:f6:ae:da:1e:2d:7b:6d:bc:2b:be:42: 9e:af:2c:7e:c6:28:8c:cd:84:27:03:d7:a9:7c:15: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:34:17:30:80:20:E3:B0:75:64:E8:B9:52:46:90:66:9E:2A:54:15 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b6:29:10:d1:9c:73:c1:47:36:cd:0a:fe:5f:ad:d2:c3:8f: a7:1e:c2:3f:a5:42:8b:6f:3b:60:6d:cf:18:bd:c1:87:d5:57: 86:a2:a0:bb:d3:92:b8:b6:13:81:ea:df:15:0e:f5:00:4b:76: cb:36:89:dd:2a:8c:a9:c2:87:8d:fe:29:35:33:2b:e4:43:ed: 5a:26:04:a0:d2:01:fb:c8:de:f8:24:1f:94:36:b5:ce:fb:c3: 8f:2e:37:9b:6a:d6:e6:e7:02:fd:88:88:f1:43:bc:d2:8e:77: 06:5b:6f:d5:0e:41:7e:e6:ed:f6:a1:29:f1:4b:6a:80:b8:d2: df:9e:5f:55:da:43:eb:1f:f6:8b:52:d5:d0:74:e1:3a:ce:07: ea:3d:b5:a7:83:4d:48:07:dc:4b:81:fe:1a:19:bb:f0:03:78: cc:62:de:46:be:58:06:aa:4d:fd:a1:10:66:b9:f8:91:57:c5: e2:3b:c5:77:1d:9f:be:26:95:ca:22:40:97:41:f6:b5:46:c7: 95:c7:a3:44:8b:d1:4e:8a:b8:93:68:4a:93:52:07:01:41:3b: b1:c3:37:97:88:1f:5c:f6:d1:ea:11:71:4c:04:67:a5:4c:7a: 09:48:03:da:dd:70:53:ec:fa:a6:30:26:a8:4a:d9:04:4d:39: b9:be:fe:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0SvpyrOowSCnIaER9CB4vaTH+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA3MjgyMTE4MDJaFw0yNjA3MjkyMTU3MDJaMDMxMTAvBgNV BAMTKEY0MzQxNzMwODAyMEUzQjA3NTY0RThCOTUyNDY5MDY2OUUyQTU0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JGU++QBw+5e4K2zUNvSVkVgW AF0V4hgTHqqLl1X/DLtDMSz0jyPgxss4FG5naDxa/p3qRNFjzprln9Avk7I3lbyH qCV4LFf3cdIcuUGb0cpGI8XfghUPo8fTfoAsemHZrB9PZ4wJUKoWQJggq0iaQSAp qC8tJj//cn/c9eIVPpOHtiRxdv/6ZUzZUM3z3Ss5qV/WoxfarBCzY9shnhXKcQTL bnR1xqvf7d6Wf34wjIX41AitvlWA0G89f5nzwCyMRJjTFW6ZFx5yqVGk0TU7vdxr GHAxxQq0nWQ8WpUEeXpdAbH2rtoeLXttvCu+Qp6vLH7GKIzNhCcD16l8FQhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DQXMIAg47B1ZOi5UkaQZp4qVBUwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJC2KRDRnHPBRzbNCv5frdLDj6cewj+lQotv O2Btzxi9wYfVV4aioLvTkri2E4Hq3xUO9QBLdss2id0qjKnCh43+KTUzK+RD7Vom BKDSAfvI3vgkH5Q2tc77w48uN5tq1ubnAv2IiPFDvNKOdwZbb9UOQX7m7fahKfFL aoC40t+eX1XaQ+sf9otS1dB04TrOB+o9taeDTUgH3EuB/hoZu/ADeMxi3ka+WAaq Tf2hEGa5+JFXxeI7xXcdn74mlcoiQJdB9rVGx5XHo0SL0U6KuJNoSpNSBwFBO7HD N5eIH1z20eoRcUwEZ6VMeglIA9rdcFPs+qYwJqhK2QRNObm+/oo= -----END CERTIFICATE-----Generated at Wed Jul 29 11:41:18 2026 by rpki-client