$ rpki-client -vvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: 3Pe+6q4dl4K/QV48qoo/cvG+d6lDyAUesREYwfURGpg= Subject key identifier: 1B:25:0B:F4:93:1F:6E:D5:BE:A1:BB:28:11:0B:B1:64:EA:9B:E3:2A Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 061590A37FB02BB44CADAE7F6F0DCD92CF901C38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:46:53 +0000 Manifest this update: Thu 23 Jul 2026 17:41:53 +0000 Manifest next update: Fri 24 Jul 2026 18:12:53 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: qBJALsUlIaufD1QbkFOvoqkfSL3PcUWKI4P3cUs7hHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:15:90:a3:7f:b0:2b:b4:4c:ad:ae:7f:6f:0d:cd:92:cf:90:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Jul 23 17:41:53 2026 GMT Not After : Jul 24 18:12:53 2026 GMT Subject: CN=1B250BF4931F6ED5BEA1BB28110BB164EA9BE32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:12:33:f6:17:af:76:53:12:de:97:e0:e1:ec: e4:10:c4:87:b6:3d:0e:86:69:b1:4b:90:38:5b:99: 06:fb:2f:db:e8:12:f2:0b:46:3b:a7:96:8b:5f:30: 7f:a7:bd:19:28:1d:86:1b:89:20:0e:74:c7:08:3b: c4:f3:93:c5:2f:c8:76:0c:a5:d3:a8:ca:35:f8:5a: bc:cf:8a:9e:a8:55:2a:a5:fc:e8:85:f6:de:a9:87: f6:e3:6e:a9:3e:b0:50:59:8b:c1:bb:cf:a3:27:df: 37:e9:a6:94:95:9c:19:2a:8c:22:d1:c2:ba:57:b4: 9a:82:41:01:3a:b4:ef:93:81:db:e3:6a:b7:6c:99: 3b:09:b5:d2:8a:61:f2:ba:ea:63:30:be:06:eb:1a: 8f:dc:16:10:78:cb:bf:82:ee:8f:58:74:34:e0:b3: 3d:87:0f:a3:e6:f3:5c:9f:1f:8a:b1:73:20:8e:8c: 90:d7:fe:e0:40:8a:7b:dc:12:a5:d3:52:56:cc:23: 5e:30:ae:c4:77:e6:ea:64:99:53:2c:34:64:bc:51: 01:8a:24:c4:28:0b:a1:ae:40:34:6c:b2:89:af:34: 04:ed:de:ce:48:ca:3f:1a:55:c5:8c:20:52:24:cf: 06:26:c7:ec:1c:f9:8f:21:26:36:79:24:bc:de:38: 16:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:0B:F4:93:1F:6E:D5:BE:A1:BB:28:11:0B:B1:64:EA:9B:E3:2A X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:04:93:f1:f9:a6:70:c5:56:57:27:a3:c4:27:54:95:e1: f7:37:ca:0d:16:6c:21:43:b7:2d:8b:59:ad:7f:f2:81:fd:e6: 6c:42:66:d0:0a:d1:86:e1:32:89:86:86:50:74:11:04:43:35: 84:68:81:d4:10:67:c3:ff:29:5f:af:4b:ec:c6:93:de:f3:8f: 98:47:a6:52:a2:b3:39:f5:0e:e1:89:0b:1a:b3:b3:e9:7c:28: b5:16:e2:cd:9c:5b:d0:c4:24:45:aa:1e:db:74:b2:9b:0f:b3: f2:e4:e3:86:35:63:62:db:df:8d:6c:66:99:b5:4a:05:38:40: d6:4e:99:95:d7:ac:08:8f:c0:16:74:c5:81:b5:2d:c6:29:3f: 25:7c:af:65:b8:d5:01:70:dd:28:64:fb:bc:d8:1e:99:fc:91: cd:d3:f8:db:c4:d9:dd:01:d3:9b:09:62:94:e1:86:6b:f8:02: ca:41:13:17:d4:12:5f:a7:4a:4b:84:7a:6a:09:0f:6a:bf:18: 84:c1:a3:f8:f2:f8:c6:d4:24:c6:17:45:17:c3:a2:cd:4f:3f: 84:18:7b:0a:b6:6f:61:41:54:93:57:e2:d2:05:5d:f0:d2:a4: 85:8c:a6:cf:22:98:8f:f8:d9:ec:29:f0:7a:9f:a7:ca:f1:bf: 08:3f:48:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhWQo3+wK7RMra5/bw3Nks+QHDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA3MjMxNzQxNTNaFw0yNjA3MjQxODEyNTNaMDMxMTAvBgNV BAMTKDFCMjUwQkY0OTMxRjZFRDVCRUExQkIyODExMEJCMTY0RUE5QkUzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEjP2F692UxLel+Dh7OQQxIe2 PQ6GabFLkDhbmQb7L9voEvILRjunlotfMH+nvRkoHYYbiSAOdMcIO8Tzk8UvyHYM pdOoyjX4WrzPip6oVSql/OiF9t6ph/bjbqk+sFBZi8G7z6Mn3zfpppSVnBkqjCLR wrpXtJqCQQE6tO+TgdvjardsmTsJtdKKYfK66mMwvgbrGo/cFhB4y7+C7o9YdDTg sz2HD6Pm81yfH4qxcyCOjJDX/uBAinvcEqXTUlbMI14wrsR35upkmVMsNGS8UQGK JMQoC6GuQDRssomvNATt3s5Iyj8aVcWMIFIkzwYmx+wc+Y8hJjZ5JLzeOBYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGyUL9JMfbtW+obsoEQuxZOqb4yowHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVNBJPx+aZwxVZXJ6PEJ1SV4fc3yg0WbCFD ty2LWa1/8oH95mxCZtAK0YbhMomGhlB0EQRDNYRogdQQZ8P/KV+vS+zGk97zj5hH plKiszn1DuGJCxqzs+l8KLUW4s2cW9DEJEWqHtt0spsPs/Lk44Y1Y2Lb341sZpm1 SgU4QNZOmZXXrAiPwBZ0xYG1LcYpPyV8r2W41QFw3Shk+7zYHpn8kc3T+NvE2d0B 05sJYpThhmv4AspBExfUEl+nSkuEemoJD2q/GITBo/jy+MbUJMYXRRfDos1PP4QY ewq2b2FBVJNX4tIFXfDSpIWMps8imI/42ewp8Hqfp8rxvwg/SPg= -----END CERTIFICATE-----Generated at Fri Jul 24 05:52:00 2026 by rpki-client