$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: BEazgusMIgMpFvJwNT5fV4hXGLXYs70omddMI96gvGs= Subject key identifier: CD:69:19:F1:DE:3D:DA:E3:EB:C6:C1:2A:B0:19:8F:1E:A9:17:0D:05 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 36574610A8ED13ACAF297B5D2F4F66EDEC7EC02F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:28:50 +0000 Manifest this update: Thu 23 Jul 2026 15:23:50 +0000 Manifest next update: Fri 24 Jul 2026 17:32:50 +0000 Files and hashes: 1: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: J/iYPlmMH+jL2vWNqsWaJnetYc/r4sUQSNJaOkfu+W8=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:57:46:10:a8:ed:13:ac:af:29:7b:5d:2f:4f:66:ed:ec:7e:c0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Jul 23 15:23:50 2026 GMT Not After : Jul 24 17:32:50 2026 GMT Subject: CN=CD6919F1DE3DDAE3EBC6C12AB0198F1EA9170D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:ca:9b:53:b1:8d:6a:02:f7:99:32:b4:d9: b1:7a:ad:8d:57:1b:76:c0:05:bf:0d:fd:f4:db:33: e4:78:e7:9d:47:4b:ca:a9:35:da:47:4f:9c:04:61: 0b:f4:bd:4f:96:43:05:93:c8:54:08:43:9e:58:cc: 9d:a5:af:3b:49:35:66:05:de:e3:fa:da:4e:0e:a8: 41:24:60:cc:ba:c7:f0:04:78:3b:0f:47:4d:8d:43: 1e:0c:97:8e:e1:bd:e7:52:bf:89:57:03:ef:95:0d: ae:b9:47:10:f5:96:ee:b0:f0:c5:18:8e:af:bb:3d: 1f:f8:f6:c5:f3:70:ed:f5:4a:8c:f3:df:da:8a:77: 07:22:9a:99:5d:7b:21:5f:23:46:dd:64:94:fe:e8: 38:c0:0f:2a:8c:1b:65:42:85:66:9f:74:d9:58:d4: 56:b1:29:89:6a:2a:3e:6e:31:3e:9d:1a:58:7a:bb: 2f:66:94:3e:60:a7:8d:68:46:11:9b:99:6a:9c:84: dc:a7:18:db:a5:34:3c:e5:fb:78:1c:6c:ac:78:15: 16:48:1c:9a:0e:10:fd:e2:7c:4b:c2:66:83:2b:12: 1d:0f:91:4d:1c:45:df:f2:b1:6a:d3:69:a2:86:27: 76:f5:4c:92:86:30:61:84:82:77:b1:e4:2d:24:a4: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:69:19:F1:DE:3D:DA:E3:EB:C6:C1:2A:B0:19:8F:1E:A9:17:0D:05 X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:b2:2b:5a:21:c9:f7:4e:85:63:07:e3:00:92:ef:d8:d6: 21:d6:e0:cb:25:f2:2c:8e:63:ee:50:f7:dd:40:6a:9c:cf:59: 68:30:1e:08:65:dc:21:29:ef:80:d2:cc:9a:58:66:0d:a4:ab: d9:a9:fb:00:87:ec:53:bc:bd:ce:e3:77:c1:36:eb:70:00:c7: e7:dc:ae:08:05:62:76:43:d0:60:1b:b9:b1:ac:38:9a:a8:d5: 6b:83:e9:18:ba:72:08:8e:41:ff:e1:dd:f7:01:80:bd:48:5b: d3:d1:fd:bf:50:1e:96:f0:ac:e5:40:8c:ca:de:ab:b6:62:2f: dc:9e:3e:c5:3b:15:93:60:5f:38:d7:f4:e8:68:5c:c1:71:89: 99:b9:9e:35:52:21:18:40:b9:1b:49:90:89:aa:74:07:f2:7a: 99:39:1e:13:41:61:83:b9:b2:0b:a2:46:cf:42:39:2f:9d:e4: d3:a0:0a:26:cd:6f:34:38:8d:f1:df:c3:a2:04:ec:41:cd:de: 36:45:fb:55:62:dd:d2:cd:ef:7c:75:08:32:6e:03:3e:77:52: d1:45:34:56:f1:e9:a1:1a:b8:9a:fb:c2:2a:06:c8:a9:39:d9: 3c:f1:d2:2b:65:19:7d:ed:ea:07:40:44:ec:d7:bf:0b:84:50: f8:4b:4d:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNldGEKjtE6yvKXtdL09m7ex+wC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA3MjMxNTIzNTBaFw0yNjA3MjQxNzMyNTBaMDMxMTAvBgNV BAMTKENENjkxOUYxREUzRERBRTNFQkM2QzEyQUIwMTk4RjFFQTkxNzBEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zMqbU7GNagL3mTK02bF6rY1X G3bABb8N/fTbM+R4551HS8qpNdpHT5wEYQv0vU+WQwWTyFQIQ55YzJ2lrztJNWYF 3uP62k4OqEEkYMy6x/AEeDsPR02NQx4Ml47hvedSv4lXA++VDa65RxD1lu6w8MUY jq+7PR/49sXzcO31Sozz39qKdwcimpldeyFfI0bdZJT+6DjADyqMG2VChWafdNlY 1FaxKYlqKj5uMT6dGlh6uy9mlD5gp41oRhGbmWqchNynGNulNDzl+3gcbKx4FRZI HJoOEP3ifEvCZoMrEh0PkU0cRd/ysWrTaaKGJ3b1TJKGMGGEgnex5C0kpMf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWkZ8d492uPrxsEqsBmPHqkXDQUwHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp2sitaIcn3ToVjB+MAku/Y1iHW4Msl8iyO Y+5Q991AapzPWWgwHghl3CEp74DSzJpYZg2kq9mp+wCH7FO8vc7jd8E263AAx+fc rggFYnZD0GAbubGsOJqo1WuD6Ri6cgiOQf/h3fcBgL1IW9PR/b9QHpbwrOVAjMre q7ZiL9yePsU7FZNgXzjX9OhoXMFxiZm5njVSIRhAuRtJkImqdAfyepk5HhNBYYO5 sguiRs9COS+d5NOgCibNbzQ4jfHfw6IE7EHN3jZF+1Vi3dLN73x1CDJuAz53UtFF NFbx6aEauJr7wioGyKk52Tzx0itlGX3t6gdAROzXvwuEUPhLTQE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:55 2026 by rpki-client