$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: 64wHcUXa75+I5efIqhZJTXFPr6cThBdDwiXVXZd15cY= Subject key identifier: 06:78:93:0F:66:6C:B6:46:F1:8B:36:C6:29:A1:3C:30:2E:37:6E:20 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 1080B494A2032BAD1E6FF5CA51972C8CA1F5F922 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 07:03:03 +0000 Manifest this update: Sat 14 Nov 2026 06:58:03 +0000 Manifest next update: Sun 15 Nov 2026 10:49:03 +0000 Files and hashes: 1: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: diyT3i6zneDoeg17kE+cGmQfsQWkelZCZl6685dbBn8=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:80:b4:94:a2:03:2b:ad:1e:6f:f5:ca:51:97:2c:8c:a1:f5:f9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Nov 14 06:58:03 2026 GMT Not After : Nov 15 10:49:03 2026 GMT Subject: CN=0678930F666CB646F18B36C629A13C302E376E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:dc:8c:db:7b:78:f5:d4:10:41:38:4a:fc: d4:10:5d:48:a3:d7:da:a7:94:19:32:50:57:cc:25: a3:da:d3:2d:c9:a3:78:b6:9b:cb:de:8c:d8:96:d3: 16:73:aa:ea:96:8a:ae:d1:3e:4b:0c:ad:2c:6c:74: f6:2c:1c:c9:6a:44:0a:ca:ed:04:f4:f4:86:91:16: ec:a0:74:4f:be:c6:70:f0:8d:c4:49:aa:7e:b8:d1: f2:eb:80:1f:f3:9c:24:ff:8d:22:cf:7e:f2:ab:ac: 09:39:52:66:76:f2:51:d1:26:e6:0d:b4:d0:a5:c4: 21:7e:64:4b:31:6b:f2:84:c7:4b:aa:54:d0:64:93: 71:4f:98:41:8f:35:c2:a0:52:81:c0:b1:3f:53:75: 6c:43:a5:bd:72:75:d8:86:0a:7b:16:72:cd:98:84: 3b:dd:2a:47:fa:3c:3b:c8:d4:c9:31:f8:72:1b:42: 64:11:f4:1d:d3:c8:78:88:67:77:e2:d6:23:a2:47: f5:ce:d9:df:d7:28:39:72:ae:8d:d6:e2:e5:d0:fb: 47:5c:74:74:82:fb:0a:f9:d8:dd:54:2d:9b:cc:55: 97:ab:d3:93:0e:9e:92:d5:7a:4e:71:f2:aa:c4:82: 82:76:0e:87:aa:8c:56:38:65:7f:4b:97:90:e7:35: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:93:0F:66:6C:B6:46:F1:8B:36:C6:29:A1:3C:30:2E:37:6E:20 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3d:4a:06:cb:29:96:62:73:80:d5:08:d8:76:1d:04:e6:25: e1:bf:8b:f9:82:f8:29:70:00:57:b9:45:47:c5:6c:9c:47:fe: d0:77:92:7d:7a:b6:a8:56:eb:2f:55:e2:5e:de:59:fe:79:d0: 23:83:06:00:67:06:18:e1:8f:76:40:99:a5:9f:1f:69:af:b8: 57:a6:80:b9:a4:45:b5:6d:5b:92:a0:1b:f4:0e:62:55:e5:d5: f8:29:d7:45:2e:aa:63:74:0f:e3:8b:31:58:51:be:45:6b:50: de:28:dc:53:a8:c3:2a:a5:86:50:b9:c0:da:ba:79:de:7c:3f: 62:43:59:bf:47:c0:4f:87:a7:b6:3b:e8:c6:5c:b8:a9:d1:15: 2e:20:ed:c0:9f:a1:77:63:71:82:4b:ba:8c:7a:64:59:29:2d: cf:ce:7e:0a:27:dd:76:8a:df:58:63:c2:2e:92:3d:50:d9:8a: 55:09:de:5c:75:3a:cc:89:0b:00:1b:f5:ef:f4:91:69:2a:15: f4:8a:07:45:db:54:c5:5b:71:db:88:a0:77:d9:cb:4f:30:f9: 26:8a:d7:88:e7:f2:c1:00:9e:60:06:17:37:6c:33:a5:30:c9: a3:49:f7:6c:49:31:a2:90:51:d0:ab:48:ef:47:39:32:b6:b0: 3c:6c:08:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIC0lKIDK60eb/XKUZcsjKH1+SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjExMTQwNjU4MDNaFw0yNjExMTUxMDQ5MDNaMDMxMTAvBgNV BAMTKDA2Nzg5MzBGNjY2Q0I2NDZGMThCMzZDNjI5QTEzQzMwMkUzNzZFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPstyM23t49dQQQThK/NQQXUij 19qnlBkyUFfMJaPa0y3Jo3i2m8vejNiW0xZzquqWiq7RPksMrSxsdPYsHMlqRArK 7QT09IaRFuygdE++xnDwjcRJqn640fLrgB/znCT/jSLPfvKrrAk5UmZ28lHRJuYN tNClxCF+ZEsxa/KEx0uqVNBkk3FPmEGPNcKgUoHAsT9TdWxDpb1yddiGCnsWcs2Y hDvdKkf6PDvI1Mkx+HIbQmQR9B3TyHiIZ3fi1iOiR/XO2d/XKDlyro3W4uXQ+0dc dHSC+wr52N1ULZvMVZer05MOnpLVek5x8qrEgoJ2DoeqjFY4ZX9Ll5DnNZcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBniTD2ZstkbxizbGKaE8MC43biAwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw9SgbLKZZic4DVCNh2HQTmJeG/i/mC+Clw AFe5RUfFbJxH/tB3kn16tqhW6y9V4l7eWf550CODBgBnBhjhj3ZAmaWfH2mvuFem gLmkRbVtW5KgG/QOYlXl1fgp10UuqmN0D+OLMVhRvkVrUN4o3FOowyqlhlC5wNq6 ed58P2JDWb9HwE+Hp7Y76MZcuKnRFS4g7cCfoXdjcYJLuox6ZFkpLc/Ofgon3XaK 31hjwi6SPVDZilUJ3lx1OsyJCwAb9e/0kWkqFfSKB0XbVMVbcduIoHfZy08w+SaK 14jn8sEAnmAGFzdsM6UwyaNJ92xJMaKQUdCrSO9HOTK2sDxsCJY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:35 2026 by rpki-client