$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: +aay3by0uvsHibV1knBy2Tvmop9SuTUtNWmnkpJBXM8= Subject key identifier: 56:26:F3:20:F8:40:A7:5E:24:08:F1:12:30:4F:21:C9:41:32:0B:AD Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 05F6ABEDE88178E8CD51D9DB9F10EEF409DBBBD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:13:59 +0000 Manifest this update: Tue 12 May 2026 04:08:59 +0000 Manifest next update: Wed 13 May 2026 07:30:59 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) 2: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: SFi4jOyhuU+chc1lqp2aOQYkHU49rKOE4WLIqEuTAw4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f6:ab:ed:e8:81:78:e8:cd:51:d9:db:9f:10:ee:f4:09:db:bb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: May 12 04:08:59 2026 GMT Not After : May 13 07:30:59 2026 GMT Subject: CN=5626F320F840A75E2408F112304F21C941320BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:c8:e3:33:92:21:8d:a9:a3:e4:17:2b:5b: 0f:02:81:1b:f9:ea:02:29:40:db:6b:c1:16:8b:0b: 3f:e4:1e:60:32:ed:47:aa:f8:8b:40:03:e9:dc:a5: 20:b5:27:4d:46:35:3a:f3:70:f9:28:e6:0d:19:f1: a0:2b:a2:60:13:30:55:ca:d1:03:32:09:2f:32:bc: ec:96:79:c5:f4:e5:30:70:06:a2:35:88:4a:1e:f6: 4a:9a:fa:0d:1a:a6:9e:a8:31:11:17:44:26:1d:8c: 83:66:07:31:f8:8b:b2:8e:8a:a9:4c:56:16:a5:17: 6e:78:4d:ac:79:66:fe:8f:55:48:a8:75:ff:95:b2: a7:dc:39:48:7a:04:ae:cb:7b:26:19:ee:60:34:0d: d4:25:71:4c:e0:1d:12:c2:20:51:54:0e:39:34:58: d9:a7:01:b3:a3:82:42:75:b4:cf:ab:8a:58:43:9f: b7:42:c5:fa:09:50:2f:02:79:ee:a2:da:81:c5:f3: ce:4c:ea:94:b8:df:6a:e2:25:33:85:16:09:00:84: 9a:ee:c2:f5:96:da:92:5c:37:21:3c:92:7b:60:4f: 5d:c9:48:e7:95:02:c6:e2:a8:aa:2b:f3:45:dc:1c: c6:b1:30:8b:13:3d:7e:e3:ba:6c:bc:f5:4f:e0:20: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:F3:20:F8:40:A7:5E:24:08:F1:12:30:4F:21:C9:41:32:0B:AD X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:d0:d1:68:c7:cb:5b:63:cc:d7:4a:e0:b5:bc:7e:fc:8e: 96:fc:ee:59:ea:fe:32:bd:f5:bd:75:61:66:85:68:60:38:57: 4b:1b:87:9b:06:1d:2d:8f:49:bf:de:e3:a0:20:01:aa:c4:a5: 82:b3:d9:87:bf:03:15:c2:db:cd:33:16:32:2b:67:85:91:37: f2:19:d5:20:17:e9:f2:24:b4:fc:99:37:9f:72:d1:24:ed:d4: 4f:b5:e9:27:61:bb:92:4f:92:d9:dd:e5:dc:45:b0:9a:cd:83: c2:6e:c0:4c:2e:0e:e0:37:d7:b2:eb:d3:a1:9c:8f:cd:b3:c4: 5d:99:cf:a9:c1:26:37:fc:2d:63:85:aa:92:e4:5d:42:3a:66: 97:3b:c0:7d:51:96:a2:c9:cd:49:f8:a6:21:30:44:3c:aa:72: b3:d6:75:5a:10:6f:61:f6:82:57:63:b4:00:07:3c:51:14:3a: 1d:54:d6:97:83:33:aa:ed:41:14:15:bd:7e:4f:73:32:83:b5: 2b:43:b7:3e:ef:de:5d:4d:7e:82:5f:88:71:fd:1c:4e:61:0e: 8b:34:59:6a:69:89:b6:0d:f7:c1:e0:bd:c7:70:93:2e:aa:e9: a9:77:e0:66:df:4e:ce:7f:33:b5:63:3d:15:3f:d1:8d:f2:30: 2a:ea:d5:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfar7eiBeOjNUdnbnxDu9Anbu9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA1MTIwNDA4NTlaFw0yNjA1MTMwNzMwNTlaMDMxMTAvBgNV BAMTKDU2MjZGMzIwRjg0MEE3NUUyNDA4RjExMjMwNEYyMUM5NDEzMjBCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDby8jjM5Ihjamj5BcrWw8CgRv5 6gIpQNtrwRaLCz/kHmAy7Ueq+ItAA+ncpSC1J01GNTrzcPko5g0Z8aAromATMFXK 0QMyCS8yvOyWecX05TBwBqI1iEoe9kqa+g0app6oMREXRCYdjINmBzH4i7KOiqlM VhalF254Tax5Zv6PVUiodf+VsqfcOUh6BK7LeyYZ7mA0DdQlcUzgHRLCIFFUDjk0 WNmnAbOjgkJ1tM+rilhDn7dCxfoJUC8Cee6i2oHF885M6pS432riJTOFFgkAhJru wvWW2pJcNyE8kntgT13JSOeVAsbiqKor80XcHMaxMIsTPX7jumy89U/gII6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVibzIPhAp14kCPESME8hyUEyC60wHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjD0NFox8tbY8zXSuC1vH78jpb87lnq/jK9 9b11YWaFaGA4V0sbh5sGHS2PSb/e46AgAarEpYKz2Ye/AxXC280zFjIrZ4WRN/IZ 1SAX6fIktPyZN59y0STt1E+16Sdhu5JPktnd5dxFsJrNg8JuwEwuDuA317Lr06Gc j82zxF2Zz6nBJjf8LWOFqpLkXUI6Zpc7wH1RlqLJzUn4piEwRDyqcrPWdVoQb2H2 gldjtAAHPFEUOh1U1peDM6rtQRQVvX5PczKDtStDtz7v3l1NfoJfiHH9HE5hDos0 WWppibYN98Hgvcdwky6q6al34GbfTs5/M7VjPRU/0Y3yMCrq1SI= -----END CERTIFICATE-----Generated at Tue May 12 23:45:50 2026 by rpki-client