$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft File: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft (raw, json) Hash identifier: xiHNdfLuXOKWZiXOCtRV1nfcci58lbAuRoYKsyhWUEw= Subject key identifier: 97:B6:02:47:2B:A0:41:E3:9F:75:84:7A:E7:F2:41:6A:7D:F7:A5:BE Authority key identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 Certificate issuer: /CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4 Certificate serial: 06959D48EF998639189A50505025B6DBCB388298 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:54:15 +0000 Manifest this update: Thu 24 Sep 2026 06:49:15 +0000 Manifest next update: Fri 25 Sep 2026 09:38:15 +0000 Files and hashes: 1: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl (hash: x+0g26RTFgg6UoXNqadIRbp1HsBB6dHXKtrWlEMfOFI=) 2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: 9nR8f+NKs+GCy2BCUqqfXP6eNr2a6TnGK4mv1oCv2Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:95:9d:48:ef:99:86:39:18:9a:50:50:50:25:b6:db:cb:38:82:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4 Validity Not Before: Sep 24 06:49:15 2026 GMT Not After : Sep 25 09:38:15 2026 GMT Subject: CN=97B602472BA041E39F75847AE7F2416A7DF7A5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:82:58:3e:c1:7a:9d:1b:3f:41:eb:0e:af: 76:ed:b9:77:66:65:51:aa:d1:b3:19:88:62:94:f0: 88:cb:bb:79:41:fa:00:44:2f:4d:8d:47:ee:8b:65: bd:fa:9c:65:e6:7b:1e:19:0b:04:e8:ea:d1:7d:01: 54:f8:88:dd:d6:54:b6:56:83:1c:fb:07:6b:c5:45: 93:47:b2:ae:2c:03:d2:17:90:5e:cd:dc:04:76:69: f6:a9:9e:85:ac:40:2f:1f:c8:ce:27:d7:66:03:5e: df:d4:ea:61:ed:32:63:3f:49:ef:59:04:20:50:62: 6a:73:a3:a3:b7:15:20:60:20:c1:b2:58:ca:4b:a6: 1f:9d:ec:d3:b6:cb:94:de:c5:58:01:e9:4d:30:bc: 18:cf:91:66:21:c1:43:7e:69:e3:eb:3f:36:c2:a9: 67:73:17:49:39:66:f8:12:5d:3b:e6:a5:cc:cd:96: 1f:68:e1:b6:07:8f:8d:2e:e3:07:71:0d:83:68:a9: d9:68:96:2f:a0:7f:6a:0b:0d:10:3f:75:97:10:af: e8:cc:0d:20:25:a8:40:37:c2:6d:cb:aa:98:ca:bd: a3:bd:6c:25:c8:a5:b3:00:0b:82:86:33:67:17:55: 8f:a5:81:bf:27:8f:a1:cc:82:26:8b:1f:1c:9a:c9: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:02:47:2B:A0:41:E3:9F:75:84:7A:E7:F2:41:6A:7D:F7:A5:BE X509v3 Authority Key Identifier: keyid:23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b4:92:42:b0:a1:d2:c7:db:bc:ba:9e:05:fc:0d:8f:c7:54: 3e:c4:cd:83:06:08:4b:b5:b5:82:b8:03:9d:20:49:9b:81:8e: 5f:db:ea:08:ab:9c:9c:d5:ec:67:eb:43:f5:66:05:b0:cc:32: 26:f8:b9:e5:3e:51:9f:88:cb:fa:86:47:b5:8e:a1:1c:49:c5: 82:82:9a:50:3f:68:9b:b1:f8:19:32:74:37:9f:45:d8:2f:cc: 41:8c:62:da:4a:ef:42:94:0b:a5:22:8a:9b:96:fe:10:d5:e6: be:90:79:db:7c:ed:f7:0d:24:1a:8e:a9:6d:09:71:40:58:95: ef:5b:ae:fe:fb:51:06:c9:2d:0f:6f:bb:84:84:20:2b:02:e5: fd:b5:b3:9c:48:59:54:5e:99:15:17:92:ed:f3:d6:0c:da:79: 77:e6:6e:fb:41:f7:7f:9b:b5:d2:74:4b:a9:04:68:71:f3:12: ca:0c:85:1b:f4:3c:5c:5f:46:e0:23:80:20:32:66:5a:fd:ee: 48:11:4a:43:30:9d:ff:91:b5:66:d4:5b:62:47:de:2e:d6:58: 42:d0:8c:a3:5c:87:8c:92:3c:5a:2d:67:7f:30:6a:9b:be:22: e2:8d:77:db:ad:dc:9d:1d:66:12:06:cf:db:a0:60:cf:ac:70: 26:f8:bc:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpWdSO+ZhjkYmlBQUCW228s4gpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM2RkRGRkY0ODM3MDQ5QTAzNTc0RjBBM0Y1QjBFOUI2 Q0M4RTNBNDAeFw0yNjA5MjQwNjQ5MTVaFw0yNjA5MjUwOTM4MTVaMDMxMTAvBgNV BAMTKDk3QjYwMjQ3MkJBMDQxRTM5Rjc1ODQ3QUU3RjI0MTZBN0RGN0E1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9oJYPsF6nRs/QesOr3btuXdm ZVGq0bMZiGKU8IjLu3lB+gBEL02NR+6LZb36nGXmex4ZCwTo6tF9AVT4iN3WVLZW gxz7B2vFRZNHsq4sA9IXkF7N3AR2afapnoWsQC8fyM4n12YDXt/U6mHtMmM/Se9Z BCBQYmpzo6O3FSBgIMGyWMpLph+d7NO2y5TexVgB6U0wvBjPkWYhwUN+aePrPzbC qWdzF0k5ZvgSXTvmpczNlh9o4bYHj40u4wdxDYNoqdloli+gf2oLDRA/dZcQr+jM DSAlqEA3wm3LqpjKvaO9bCXIpbMAC4KGM2cXVY+lgb8nj6HMgiaLHxyayRmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7YCRyugQeOfdYR65/JBan33pb4wHwYDVR0j BBgwFoAUI2/f/0g3BJoDV08KP1sOm2zI46QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQ2OWMzZTMtN2I1OS00NDkwLTg0Y2YtZmVmMTU4NWFjNzViLzAvMjM2RkRGRkY0 ODM3MDQ5QTAzNTc0RjBBM0Y1QjBFOUI2Q0M4RTNBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzZGREZGRjQ4MzcwNDlBMDM1NzRGMEEzRjVCMEU5QjZDQzhF M0E0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvMjM2RkRGRkY0ODM3MDQ5QTAzNTc0RjBBM0Y1QjBF OUI2Q0M4RTNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD60kkKwodLH27y6ngX8DY/HVD7EzYMGCEu1 tYK4A50gSZuBjl/b6girnJzV7GfrQ/VmBbDMMib4ueU+UZ+Iy/qGR7WOoRxJxYKC mlA/aJux+BkydDefRdgvzEGMYtpK70KUC6UiipuW/hDV5r6Qedt87fcNJBqOqW0J cUBYle9brv77UQbJLQ9vu4SEICsC5f21s5xIWVRemRUXku3z1gzaeXfmbvtB93+b tdJ0S6kEaHHzEsoMhRv0PFxfRuAjgCAyZlr97kgRSkMwnf+RtWbUW2JH3i7WWELQ jKNch4ySPFotZ38wapu+IuKNd9ut3J0dZhIGz9ugYM+scCb4vL8= -----END CERTIFICATE-----Generated at Thu Sep 24 20:45:06 2026 by rpki-client