$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: giQdj8Uo8lQ1o34oKZj68unrQ+qaMpelLuZzNNyhsjs= Subject key identifier: 36:53:34:B3:A4:AC:93:2C:2E:15:DE:A2:DE:EC:66:E2:C8:59:72:CA Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 77DF7E6F32BA21B37CB254197F2545BFEBE18E30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:33:38 +0000 Manifest this update: Wed 17 Jun 2026 00:28:38 +0000 Manifest next update: Thu 18 Jun 2026 01:21:38 +0000 Files and hashes: 1: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: irMrjR/k93EWd01aYtA6+5Pei6lbu56QLlVnHZPF1hg=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:df:7e:6f:32:ba:21:b3:7c:b2:54:19:7f:25:45:bf:eb:e1:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Jun 17 00:28:38 2026 GMT Not After : Jun 18 01:21:38 2026 GMT Subject: CN=365334B3A4AC932C2E15DEA2DEEC66E2C85972CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:d5:ec:a9:74:ab:12:40:54:8e:12:86:65: 9b:2b:e5:ff:ab:e4:f0:e4:bb:69:08:bd:0c:64:ad: 5e:75:73:91:f9:dd:c5:d2:ce:18:59:10:da:45:0c: b6:c1:ef:68:12:5a:b4:ce:1a:07:ad:14:76:85:98: a2:02:b5:d5:01:20:ee:28:72:3e:5a:9f:3d:fc:dc: 93:88:9b:1a:17:ca:72:26:37:b5:65:75:41:03:67: e7:6a:72:1f:6d:34:1d:79:7f:44:3d:f8:eb:d7:2d: 6f:75:59:18:16:1b:79:82:b9:27:cb:7c:59:d5:93: 27:2d:b8:12:8b:c6:c3:e9:a1:63:7f:43:b1:a8:f6: 4c:79:38:d1:90:6d:91:25:4e:ae:f7:74:d0:4f:1f: f9:fb:34:68:2a:cb:72:ed:a5:c4:b8:52:53:44:b2: ad:06:ca:cc:4c:a0:ed:d2:62:83:60:f2:49:b7:03: 8c:c3:18:73:f4:99:79:7b:97:f1:40:c9:4d:80:5e: 38:f6:22:11:28:16:5b:fc:21:cc:34:c5:e5:3c:49: 44:d8:03:3a:c1:a6:c9:bb:bc:ad:0a:9d:84:16:98: 8c:a7:2a:32:c1:e7:79:5d:16:35:76:ba:2f:25:d6: dd:6b:52:96:55:3d:46:69:4f:e3:0d:da:f1:a7:09: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:34:B3:A4:AC:93:2C:2E:15:DE:A2:DE:EC:66:E2:C8:59:72:CA X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a5:f9:90:df:a0:fe:a9:7b:07:17:ad:9c:18:dc:db:55:3a: 83:ac:34:06:e0:d4:71:f6:bc:28:f4:d2:e2:e1:ab:cb:53:54: 14:49:e6:72:84:c1:83:11:33:5c:4e:0e:45:a4:09:4e:78:92: e0:89:24:02:b2:3e:cb:4b:4f:e5:4a:21:1e:1e:6c:3b:40:74: 83:1f:91:b8:3d:08:02:2f:3c:15:4e:7d:81:b5:a5:e5:71:d4: bf:0e:e2:3b:5b:5a:49:bb:4d:e7:79:87:ed:d5:fb:4f:c7:a7: 03:76:aa:e5:e4:e8:6a:b3:bd:9f:6f:c1:56:88:28:6e:e5:86: 75:60:4d:95:69:43:e9:d6:7f:d3:6d:63:b0:c5:9c:bf:d1:4f: f5:40:be:b8:1b:59:6d:0b:84:0d:ab:06:38:f5:b2:1b:de:45: 24:68:73:e0:13:0e:f7:ab:44:f7:5c:1a:3c:11:77:4a:0c:65: dc:66:14:c3:3a:1e:c8:24:7d:b0:89:30:5b:a0:27:e8:d3:cb: 2a:8d:76:90:9d:6d:72:44:6b:84:f8:3a:4b:8e:80:0e:df:b5: f7:f7:b9:4a:ce:1d:3b:6d:65:2a:57:7e:57:ba:26:e4:23:4e: 37:bd:e0:9f:79:9c:21:f7:c3:3d:a1:04:a2:6a:63:41:e5:a0: 2b:da:75:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd99+bzK6IbN8slQZfyVFv+vhjjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA2MTcwMDI4MzhaFw0yNjA2MTgwMTIxMzhaMDMxMTAvBgNV BAMTKDM2NTMzNEIzQTRBQzkzMkMyRTE1REVBMkRFRUM2NkUyQzg1OTcyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XdXsqXSrEkBUjhKGZZsr5f+r 5PDku2kIvQxkrV51c5H53cXSzhhZENpFDLbB72gSWrTOGgetFHaFmKICtdUBIO4o cj5anz383JOImxoXynImN7VldUEDZ+dqch9tNB15f0Q9+OvXLW91WRgWG3mCuSfL fFnVkyctuBKLxsPpoWN/Q7Go9kx5ONGQbZElTq73dNBPH/n7NGgqy3LtpcS4UlNE sq0GysxMoO3SYoNg8km3A4zDGHP0mXl7l/FAyU2AXjj2IhEoFlv8Icw0xeU8SUTY AzrBpsm7vK0KnYQWmIynKjLB53ldFjV2ui8l1t1rUpZVPUZpT+MN2vGnCdgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNlM0s6SskywuFd6i3uxm4shZcsowHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADul+ZDfoP6pewcXrZwY3NtVOoOsNAbg1HH2 vCj00uLhq8tTVBRJ5nKEwYMRM1xODkWkCU54kuCJJAKyPstLT+VKIR4ebDtAdIMf kbg9CAIvPBVOfYG1peVx1L8O4jtbWkm7Ted5h+3V+0/HpwN2quXk6GqzvZ9vwVaI KG7lhnVgTZVpQ+nWf9NtY7DFnL/RT/VAvrgbWW0LhA2rBjj1shveRSRoc+ATDver RPdcGjwRd0oMZdxmFMM6HsgkfbCJMFugJ+jTyyqNdpCdbXJEa4T4OkuOgA7ftff3 uUrOHTttZSpXfle6JuQjTje94J95nCH3wz2hBKJqY0HloCvadXA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:29 2026 by rpki-client