$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft File: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft (raw, json) Hash identifier: BleQSqxP+y4M8CkHfzFaY5gHJtS9ev0vnpPk/ZVVp88= Subject key identifier: CD:08:73:B5:FC:13:A9:9E:66:A0:75:EF:74:1E:F6:CC:AB:E2:C7:39 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 4ECCE88F3D1156BA00ACDFA438DAACD6382B3C0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:19:48 +0000 Manifest this update: Thu 24 Sep 2026 03:14:48 +0000 Manifest next update: Fri 25 Sep 2026 04:05:48 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA=) 2: 237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl (hash: zaQ+O10TM3OByrnnICRUf/SjsTHC4Z9fn9+iYRzTmkM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cc:e8:8f:3d:11:56:ba:00:ac:df:a4:38:da:ac:d6:38:2b:3c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: Sep 24 03:14:48 2026 GMT Not After : Sep 25 04:05:48 2026 GMT Subject: CN=CD0873B5FC13A99E66A075EF741EF6CCABE2C739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:a7:3b:74:d1:b4:62:85:e6:a9:67:cc:0c: f8:61:84:77:83:c6:92:31:dd:d5:2a:11:17:1d:d3: d3:ff:e8:3b:32:88:bf:08:c6:6d:91:67:13:83:15: a1:60:b4:70:63:f5:83:c6:14:36:64:79:24:34:f0: a4:3f:16:0a:b5:06:32:f0:5e:51:d6:fd:27:53:42: 08:d3:03:11:e5:0a:51:b1:e0:b8:43:ea:85:9f:a6: 1c:23:71:a9:08:34:33:5a:0e:0b:db:11:fa:db:29: 46:fc:6b:02:e0:90:9b:d0:e6:5d:e3:ab:8e:38:5c: 3d:7e:14:a0:b0:4d:56:c1:fc:cd:b2:ed:93:32:ab: 53:d6:46:6c:ce:f9:b8:87:c4:b9:7e:a7:40:4d:72: 25:b1:1a:ae:f8:24:fe:0f:89:c7:77:85:a9:6f:e6: 20:b5:db:22:43:c8:80:43:a2:fb:b1:88:89:89:e6: 17:4a:fc:af:cd:0e:c6:35:c8:67:51:a2:3a:cf:f2: 2b:63:07:27:67:ca:47:a4:33:ea:ea:ab:80:81:ec: 85:0f:93:d7:f2:8a:9d:77:13:cd:42:67:c3:e5:ff: be:3d:39:46:a8:24:3c:5c:62:c8:8b:c5:60:b8:4c: 9d:ae:d8:e1:38:91:b7:7f:79:20:8e:5a:a6:2f:bb: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:08:73:B5:FC:13:A9:9E:66:A0:75:EF:74:1E:F6:CC:AB:E2:C7:39 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:e9:59:76:95:6a:a4:c5:27:8a:59:20:3e:93:cc:c3:fd: 71:e9:26:f5:ea:79:14:42:ba:fe:8b:ef:c9:3b:91:e9:90:b0: ee:02:c9:80:29:3b:c0:c9:fd:b5:2a:50:db:8d:9d:b4:04:05: 82:a6:3e:78:8a:6a:a2:96:80:55:00:72:c7:1b:ea:02:76:74: fa:14:9d:21:c3:66:62:6c:21:4b:a1:9b:7c:22:84:b9:9d:7d: 4c:be:08:04:c0:a6:5b:c8:50:6d:a2:94:3f:23:86:37:9e:a1: d3:27:d0:54:d3:34:d9:00:0d:fd:4d:a1:7c:2f:48:7a:29:8f: c0:c6:1f:f1:73:db:39:47:22:f6:fc:1d:fa:73:4a:3b:b6:cb: eb:06:9d:34:ba:94:36:f5:b9:55:db:f9:e8:5a:7e:4f:88:56: dc:83:ee:35:3e:17:f3:91:dd:16:b6:43:9d:f4:91:f0:d8:a1: df:2b:9e:e7:8f:ef:c7:2d:ef:4d:ae:7e:6e:19:96:15:bd:cc: e7:c2:2c:19:68:1b:75:22:bb:8c:23:9b:3e:37:80:6b:65:a8: 72:90:06:f0:a3:bc:64:61:14:79:96:e1:b4:00:03:3e:5f:df: 02:65:7a:09:9d:21:26:62:87:15:84:0c:aa:09:10:5b:0f:d0: 93:18:91:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTszojz0RVroArN+kONqs1jgrPAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA5MjQwMzE0NDhaFw0yNjA5MjUwNDA1NDhaMDMxMTAvBgNV BAMTKENEMDg3M0I1RkMxM0E5OUU2NkEwNzVFRjc0MUVGNkNDQUJFMkM3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxqc7dNG0YoXmqWfMDPhhhHeD xpIx3dUqERcd09P/6DsyiL8Ixm2RZxODFaFgtHBj9YPGFDZkeSQ08KQ/Fgq1BjLw XlHW/SdTQgjTAxHlClGx4LhD6oWfphwjcakINDNaDgvbEfrbKUb8awLgkJvQ5l3j q444XD1+FKCwTVbB/M2y7ZMyq1PWRmzO+biHxLl+p0BNciWxGq74JP4Picd3halv 5iC12yJDyIBDovuxiImJ5hdK/K/NDsY1yGdRojrP8itjBydnykekM+rqq4CB7IUP k9fyip13E81CZ8Pl/749OUaoJDxcYsiLxWC4TJ2u2OE4kbd/eSCOWqYvu9rjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQhztfwTqZ5moHXvdB72zKvixzkwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1 RTlFQkE0RUY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY86Vl2lWqkxSeKWSA+k8zD/XHpJvXqeRRC uv6L78k7kemQsO4CyYApO8DJ/bUqUNuNnbQEBYKmPniKaqKWgFUAcscb6gJ2dPoU nSHDZmJsIUuhm3wihLmdfUy+CATAplvIUG2ilD8jhjeeodMn0FTTNNkADf1NoXwv SHopj8DGH/Fz2zlHIvb8HfpzSju2y+sGnTS6lDb1uVXb+ehafk+IVtyD7jU+F/OR 3Ra2Q530kfDYod8rnueP78ct702ufm4ZlhW9zOfCLBloG3Uiu4wjmz43gGtlqHKQ BvCjvGRhFHmW4bQAAz5f3wJlegmdISZihxWEDKoJEFsP0JMYke4= -----END CERTIFICATE-----Generated at Thu Sep 24 12:15:11 2026 by rpki-client