$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: YaQzpClG6OnQFuaUlK1WjPx0CuARxuldG5MdE521uKY= Subject key identifier: 42:41:95:3B:E0:91:F0:AC:9F:2A:B0:29:AA:6E:DA:4A:AF:7B:7B:A9 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 2075255E823ABCDC367C2B8BA400FF58DB55174F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 12:42:00 +0000 Manifest this update: Mon 21 Sep 2026 12:37:00 +0000 Manifest next update: Tue 22 Sep 2026 12:53:00 +0000 Files and hashes: 1: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: z3txZio5hhW2K0PA3fU4YELRvZE1GNx7k9Z4BjcV3bc=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:25:5e:82:3a:bc:dc:36:7c:2b:8b:a4:00:ff:58:db:55:17:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Sep 21 12:37:00 2026 GMT Not After : Sep 22 12:53:00 2026 GMT Subject: CN=4241953BE091F0AC9F2AB029AA6EDA4AAF7B7BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:4c:c3:8d:16:d6:67:1d:79:ef:a2:7e:45: 81:4f:a2:75:73:b9:66:05:7f:40:c5:19:29:82:07: d3:7a:3e:79:b2:c2:92:a0:86:b3:b9:48:c1:c7:2c: b8:e1:b2:bc:6a:28:4d:23:7c:b0:89:93:44:dc:a8: 8e:a9:92:26:88:92:d5:16:70:f2:3c:13:ea:22:1f: bd:82:3e:40:21:e2:34:db:1a:90:ba:5a:73:de:03: 99:2e:40:2f:ca:5f:56:8e:39:b5:03:d9:be:54:f4: e8:7b:db:de:df:40:80:eb:88:d6:9c:b4:1a:0c:85: 61:01:ee:ee:55:0d:c0:6f:4c:79:87:55:4e:d7:5c: 8e:b8:8b:e3:ef:20:69:99:57:f4:44:92:8d:81:08: 37:7d:40:ab:78:a3:c0:1e:75:4c:36:a5:82:fe:36: 4a:e6:f7:fc:40:3f:c5:35:77:6e:a4:1b:88:ca:07: 25:fb:71:9e:8a:b2:3d:dd:2e:27:be:ef:4f:f6:62: de:66:16:c1:22:20:b3:95:44:e0:cc:79:ae:aa:e3: 04:21:6d:b9:0d:fb:e2:09:c7:a8:39:5b:07:a3:7c: 02:20:29:53:29:53:d2:5a:9b:d6:a4:50:07:40:27: 8e:bd:46:f7:0a:aa:36:9e:10:29:39:6e:d5:2e:2e: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:41:95:3B:E0:91:F0:AC:9F:2A:B0:29:AA:6E:DA:4A:AF:7B:7B:A9 X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:22:29:82:7f:09:85:2a:97:bb:93:ba:ac:56:30:6a:e0:fc: 35:58:97:2c:40:cb:99:48:d3:51:f3:88:00:07:cc:59:87:2b: d7:e1:58:a8:6f:be:ea:cf:65:7e:08:2f:15:ab:b3:73:6e:34: f9:6f:de:b5:6e:ec:40:30:dc:9c:ff:82:15:a0:99:c9:e8:2d: 64:c6:24:24:39:64:5f:89:f9:cd:bf:30:53:16:21:aa:b9:40: 6b:af:a8:c9:57:d7:5c:24:cc:3d:65:a1:5f:a4:bd:af:58:69: 35:8d:0c:b1:ef:8f:82:51:d1:ac:12:10:4b:6e:6b:5f:43:d7: ef:6e:8a:ee:4c:49:ba:e4:02:86:6b:ee:31:dd:ee:f4:a0:15: d0:de:9e:a4:81:46:43:91:1a:1e:09:06:8a:00:16:cc:ae:5d: 4a:94:e8:86:3b:59:7d:a7:db:2f:cc:4c:d9:89:c7:6d:d8:66: c4:a1:f4:a9:65:cc:de:a4:0b:92:2f:d6:36:95:ab:07:18:fd: 53:76:07:4b:3d:e0:c8:f8:6c:37:e2:45:da:33:56:18:1a:86: 09:11:db:a6:0c:7b:2c:ce:4c:83:73:31:f8:e6:12:e8:e2:2b: 55:a8:4d:40:19:2d:8a:40:7f:ab:11:65:e2:da:a6:03:1d:8c: f9:9d:8d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHUlXoI6vNw2fCuLpAD/WNtVF08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA5MjExMjM3MDBaFw0yNjA5MjIxMjUzMDBaMDMxMTAvBgNV BAMTKDQyNDE5NTNCRTA5MUYwQUM5RjJBQjAyOUFBNkVEQTRBQUY3QjdCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyUzDjRbWZx1576J+RYFPonVz uWYFf0DFGSmCB9N6PnmywpKghrO5SMHHLLjhsrxqKE0jfLCJk0TcqI6pkiaIktUW cPI8E+oiH72CPkAh4jTbGpC6WnPeA5kuQC/KX1aOObUD2b5U9Oh7297fQIDriNac tBoMhWEB7u5VDcBvTHmHVU7XXI64i+PvIGmZV/REko2BCDd9QKt4o8AedUw2pYL+ Nkrm9/xAP8U1d26kG4jKByX7cZ6Ksj3dLie+70/2Yt5mFsEiILOVRODMea6q4wQh bbkN++IJx6g5WwejfAIgKVMpU9Jam9akUAdAJ469RvcKqjaeECk5btUuLrYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkGVO+CR8KyfKrApqm7aSq97e6kwHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsiKYJ/CYUql7uTuqxWMGrg/DVYlyxAy5lI 01HziAAHzFmHK9fhWKhvvurPZX4ILxWrs3NuNPlv3rVu7EAw3Jz/ghWgmcnoLWTG JCQ5ZF+J+c2/MFMWIaq5QGuvqMlX11wkzD1loV+kva9YaTWNDLHvj4JR0awSEEtu a19D1+9uiu5MSbrkAoZr7jHd7vSgFdDenqSBRkORGh4JBooAFsyuXUqU6IY7WX2n 2y/MTNmJx23YZsSh9KllzN6kC5Iv1jaVqwcY/VN2B0s94Mj4bDfiRdozVhgahgkR 26YMeyzOTINzMfjmEujiK1WoTUAZLYpAf6sRZeLapgMdjPmdjWI= -----END CERTIFICATE-----Generated at Tue Sep 22 02:31:28 2026 by rpki-client