$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: 3OuqHicuqKHJ3cvuWGQGJQIlLOLE1++NNe9RoBESmr8= Subject key identifier: CF:16:EF:ED:F9:59:14:A1:70:BD:E8:8E:F8:1C:FF:6A:E8:D4:12:B2 Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 2DCB161DBE1473B35B2D4B93C4C21B252407E057 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:31:09 +0000 Manifest this update: Tue 12 May 2026 16:26:09 +0000 Manifest next update: Wed 13 May 2026 18:02:09 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: HW158w/DBo5JHOEbVvmIk06oMV8ZNnTd4yYhbEcWwCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cb:16:1d:be:14:73:b3:5b:2d:4b:93:c4:c2:1b:25:24:07:e0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: May 12 16:26:09 2026 GMT Not After : May 13 18:02:09 2026 GMT Subject: CN=CF16EFEDF95914A170BDE88EF81CFF6AE8D412B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:76:be:44:f9:d9:f3:85:6a:eb:c0:bf:c0: f8:4a:9f:c1:59:a9:3b:a0:12:6b:1c:f0:52:05:1f: 6f:e3:4a:2c:6a:eb:33:a7:27:0d:6f:09:a5:03:89: 9c:5c:ba:61:8c:96:4f:01:ae:68:4b:6a:5c:c5:2e: 5d:62:5c:89:39:cc:46:ff:10:66:81:df:3d:92:12: 54:24:6e:f9:88:40:8c:58:40:af:c0:69:2a:25:a2: af:0a:df:74:7c:e2:f4:4d:a8:e9:fb:0e:29:36:ed: 36:23:d9:bf:af:84:17:0c:19:8b:61:5e:a9:cd:f6: 18:9c:4c:4b:46:5a:e1:8f:50:7d:ea:e1:ca:e1:e0: ab:0e:fd:69:6e:07:ce:19:2e:36:4b:f3:fe:bc:61: 41:3b:40:df:3e:15:5b:eb:72:58:00:d3:bd:24:66: b3:46:29:2b:d4:ac:63:a6:1c:c5:9f:0b:27:29:1c: b2:49:98:8c:51:15:22:a6:04:81:c5:7e:64:c4:a2: 41:06:f3:d8:26:68:5e:28:c2:71:39:c6:b8:7b:33: 4b:1a:0c:72:c9:b4:3b:2e:0e:4c:26:5b:7e:be:e7: eb:3e:7c:a5:d6:2e:ba:ab:cd:db:57:08:93:37:42: 1f:e2:90:76:1f:36:27:ef:d3:81:44:b7:5d:54:de: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:EF:ED:F9:59:14:A1:70:BD:E8:8E:F8:1C:FF:6A:E8:D4:12:B2 X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:22:2e:29:25:f4:0d:eb:7d:36:f0:a0:19:12:2f:9e:bb: a8:37:f8:bd:61:02:b4:2c:98:62:c6:f9:a2:6d:1f:ae:84:3d: d8:20:d1:41:45:1d:c7:90:09:21:ae:5e:b3:2b:d9:2a:2c:85: 3c:31:ba:a4:f5:67:7a:b8:12:91:56:3a:22:ba:33:1e:a0:a9: 4c:ae:93:7f:77:b2:e4:f6:ac:5e:bf:f1:40:00:1a:b2:20:1b: 09:f5:8d:22:3f:a8:ed:31:8f:6a:f0:ab:61:3b:ba:2c:81:a8: 97:84:2d:49:82:7b:49:a2:c7:d8:d5:b4:17:84:5a:6e:89:ae: 23:5a:ab:06:3d:63:28:2e:3f:fd:90:6b:4f:ba:6c:a6:f3:62: d8:ca:f3:34:78:48:46:0c:94:19:da:d0:c3:dd:46:86:1a:5b: 33:e7:14:0b:70:08:e5:b7:7c:7e:03:a6:c8:b2:a2:e5:d2:05: 19:47:30:a9:32:2e:32:16:b3:65:4e:ae:44:92:33:97:61:39: 4f:33:10:27:62:1f:a4:3c:d5:c1:eb:8f:c5:a3:49:61:32:34: 95:b1:f1:b5:04:ad:63:a6:a4:1a:16:da:b9:fe:e3:86:ff:33: fd:7b:7d:66:29:dd:eb:a9:4f:59:b3:9f:7c:32:09:85:29:1b: 69:74:95:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcsWHb4Uc7NbLUuTxMIbJSQH4FcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA1MTIxNjI2MDlaFw0yNjA1MTMxODAyMDlaMDMxMTAvBgNV BAMTKENGMTZFRkVERjk1OTE0QTE3MEJERTg4RUY4MUNGRjZBRThENDEyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7na+RPnZ84Vq68C/wPhKn8FZ qTugEmsc8FIFH2/jSixq6zOnJw1vCaUDiZxcumGMlk8BrmhLalzFLl1iXIk5zEb/ EGaB3z2SElQkbvmIQIxYQK/AaSoloq8K33R84vRNqOn7Dik27TYj2b+vhBcMGYth XqnN9hicTEtGWuGPUH3q4crh4KsO/WluB84ZLjZL8/68YUE7QN8+FVvrclgA070k ZrNGKSvUrGOmHMWfCycpHLJJmIxRFSKmBIHFfmTEokEG89gmaF4ownE5xrh7M0sa DHLJtDsuDkwmW36+5+s+fKXWLrqrzdtXCJM3Qh/ikHYfNifv04FEt11U3ounAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzxbv7flZFKFwveiO+Bz/aujUErIwHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMmIi4pJfQN63028KAZEi+eu6g3+L1hArQs mGLG+aJtH66EPdgg0UFFHceQCSGuXrMr2SoshTwxuqT1Z3q4EpFWOiK6Mx6gqUyu k393suT2rF6/8UAAGrIgGwn1jSI/qO0xj2rwq2E7uiyBqJeELUmCe0mix9jVtBeE Wm6JriNaqwY9YyguP/2Qa0+6bKbzYtjK8zR4SEYMlBna0MPdRoYaWzPnFAtwCOW3 fH4DpsiyouXSBRlHMKkyLjIWs2VOrkSSM5dhOU8zECdiH6Q81cHrj8WjSWEyNJWx 8bUErWOmpBoW2rn+44b/M/17fWYp3eupT1mzn3wyCYUpG2l0leE= -----END CERTIFICATE-----Generated at Wed May 13 04:09:04 2026 by rpki-client