$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft File: 238BFF104128FBEC185234C7879355DB8B0D84D2.mft (raw, json) Hash identifier: kRbam3d7FLafz9qgkZd0ecCXy2HeIqYbIAJNlUMliu0= Subject key identifier: BE:2C:74:71:0F:96:A7:58:80:D5:61:54:39:A1:06:5F:2B:31:9F:68 Authority key identifier: 23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 Certificate issuer: /CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Certificate serial: 3479C5CCA97A37502287EB0E7E0B51DB57296701 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:22:01 +0000 Manifest this update: Thu 24 Sep 2026 21:17:01 +0000 Manifest next update: Sat 26 Sep 2026 00:51:01 +0000 Files and hashes: 1: 238BFF104128FBEC185234C7879355DB8B0D84D2.crl (hash: uNmX8BdYqzoEdezYRe5IrjIfd5YOfWQDXNSKUBY2Fy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:79:c5:cc:a9:7a:37:50:22:87:eb:0e:7e:0b:51:db:57:29:67:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238BFF104128FBEC185234C7879355DB8B0D84D2 Validity Not Before: Sep 24 21:17:01 2026 GMT Not After : Sep 26 00:51:01 2026 GMT Subject: CN=BE2C74710F96A75880D5615439A1065F2B319F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7f:2c:8c:a9:f9:35:1d:b8:a1:fb:bc:a6:33: 71:50:2b:02:82:27:93:4d:7b:9a:8c:1b:94:9b:1a: 41:61:7c:89:c9:39:dd:23:c5:5f:5f:23:87:ee:82: 7a:2e:a6:a1:31:06:c5:d7:3d:18:df:91:34:61:4e: 8e:4e:10:df:97:51:75:14:64:ae:ab:c8:b7:2d:ae: 8b:20:e4:d0:33:f4:11:d0:54:ad:7e:4a:2a:0f:00: b5:de:6e:3b:64:2e:44:19:37:e6:5a:71:f1:a7:a8: c1:7c:8b:2a:67:20:fd:30:ce:ae:84:26:2c:e5:b2: fb:61:9a:21:97:51:ee:ea:c3:7b:ae:0c:95:f7:79: 37:3f:8d:1d:ac:5c:aa:bd:58:76:7e:d1:93:38:b4: 00:98:bc:f6:32:fb:f0:81:d7:35:51:8f:97:52:23: 5e:1c:a0:53:94:33:e3:34:d4:c6:28:8a:87:67:04: 15:18:91:60:28:ca:64:a6:bc:d3:24:46:a0:2e:08: dd:12:7d:e8:a1:5d:1e:aa:0d:76:b9:e7:83:0d:e4: 8d:41:df:27:ba:5b:34:8b:61:87:ae:b3:2c:6e:08: 10:af:9a:a3:51:87:db:10:67:c7:75:1e:f6:74:73: e9:04:66:bb:01:d5:88:96:5a:fb:8a:ba:68:9a:0c: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2C:74:71:0F:96:A7:58:80:D5:61:54:39:A1:06:5F:2B:31:9F:68 X509v3 Authority Key Identifier: keyid:23:8B:FF:10:41:28:FB:EC:18:52:34:C7:87:93:55:DB:8B:0D:84:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238BFF104128FBEC185234C7879355DB8B0D84D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/238BFF104128FBEC185234C7879355DB8B0D84D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:95:14:ea:2a:4e:ea:d2:0b:25:3d:ab:3d:28:b0:c7:77:b1: 3e:3c:a8:7d:19:d6:0b:8c:ce:7e:d0:6b:a1:9b:3c:f8:ff:e5: ee:e2:79:8d:39:9a:56:00:05:46:52:59:04:09:da:86:45:21: ce:f8:0c:3a:04:ba:12:52:0d:8a:21:6a:48:53:4f:d2:56:bf: 9a:64:87:34:b6:84:1e:58:17:33:59:38:d7:0a:c0:c5:56:5d: 81:a2:ec:13:06:55:2e:ba:75:9e:39:01:d0:22:5e:5d:d5:92: 76:2f:65:9c:d8:1b:52:4a:c9:db:f8:b7:20:d5:2d:10:7b:6d: 0f:e0:13:49:97:3e:7c:4e:d6:b2:a1:39:fb:8a:97:74:ce:e4: d6:a4:35:9f:15:91:b4:1f:c0:f0:8b:b4:7d:95:04:5e:fb:35: 36:ce:df:0d:e5:99:1f:73:4b:87:34:78:d3:94:2f:e0:a5:ad: 06:6d:11:bc:01:3b:37:73:c7:32:ca:ca:27:23:9c:c4:26:26: 18:d5:27:48:20:6e:77:c4:86:a2:4c:52:be:85:5c:91:6e:6c: dd:64:23:e7:2c:85:bc:bc:f0:e0:42:55:50:af:93:02:4b:4b: dc:77:59:98:f7:ca:2b:72:f7:4f:b1:eb:62:25:8b:ff:a0:1f: 2f:db:cc:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHnFzKl6N1Aih+sOfgtR21cpZwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4 QjBEODREMjAeFw0yNjA5MjQyMTE3MDFaFw0yNjA5MjYwMDUxMDFaMDMxMTAvBgNV BAMTKEJFMkM3NDcxMEY5NkE3NTg4MEQ1NjE1NDM5QTEwNjVGMkIzMTlGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3fyyMqfk1Hbih+7ymM3FQKwKC J5NNe5qMG5SbGkFhfInJOd0jxV9fI4fugnoupqExBsXXPRjfkTRhTo5OEN+XUXUU ZK6ryLctrosg5NAz9BHQVK1+SioPALXebjtkLkQZN+ZacfGnqMF8iypnIP0wzq6E JizlsvthmiGXUe7qw3uuDJX3eTc/jR2sXKq9WHZ+0ZM4tACYvPYy+/CB1zVRj5dS I14coFOUM+M01MYoiodnBBUYkWAoymSmvNMkRqAuCN0SfeihXR6qDXa554MN5I1B 3ye6WzSLYYeusyxuCBCvmqNRh9sQZ8d1HvZ0c+kEZrsB1YiWWvuKumiaDKpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvix0cQ+Wp1iA1WFUOaEGXysxn2gwHwYDVR0j BBgwFoAUI4v/EEEo++wYUjTHh5NV24sNhNIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWYyODZmMGMtMGZjZC00MzljLThkZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0 MTI4RkJFQzE4NTIzNEM3ODc5MzU1REI4QjBEODREMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhCRkYxMDQxMjhGQkVDMTg1MjM0Qzc4NzkzNTVEQjhCMEQ4 NEQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvMjM4QkZGMTA0MTI4RkJFQzE4NTIzNEM3ODc5MzU1 REI4QjBEODREMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOVFOoqTurSCyU9qz0osMd3sT48qH0Z1guM zn7Qa6GbPPj/5e7ieY05mlYABUZSWQQJ2oZFIc74DDoEuhJSDYohakhTT9JWv5pk hzS2hB5YFzNZONcKwMVWXYGi7BMGVS66dZ45AdAiXl3VknYvZZzYG1JKydv4tyDV LRB7bQ/gE0mXPnxO1rKhOfuKl3TO5NakNZ8VkbQfwPCLtH2VBF77NTbO3w3lmR9z S4c0eNOUL+ClrQZtEbwBOzdzxzLKyicjnMQmJhjVJ0ggbnfEhqJMUr6FXJFubN1k I+cshby88OBCVVCvkwJLS9x3WZj3yity90+x62Ili/+gHy/bzNE= -----END CERTIFICATE-----Generated at Fri Sep 25 03:52:04 2026 by rpki-client