$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: 3k/rttO4NyN1jffb1Gt8UyZpkda/guPwBEcOHw/jZU4= Subject key identifier: 90:F3:47:21:A0:F0:1E:18:E9:FE:AB:68:8A:A7:77:6D:91:1E:8F:58 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 646D4E2438C0915B2F940C64CA4CAF7055E71B7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 11:19:34 +0000 Manifest this update: Thu 24 Sep 2026 11:14:34 +0000 Manifest next update: Fri 25 Sep 2026 11:24:34 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) 2: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: I1czmDb+pQkRq/cEFBgYLHVD10wn07whuhb0OTv/lSA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6d:4e:24:38:c0:91:5b:2f:94:0c:64:ca:4c:af:70:55:e7:1b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: Sep 24 11:14:34 2026 GMT Not After : Sep 25 11:24:34 2026 GMT Subject: CN=90F34721A0F01E18E9FEAB688AA7776D911E8F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:8e:1f:d6:aa:5e:37:38:fb:03:69:79:d5: 74:58:9a:5a:39:c0:c1:64:3e:3e:b9:2b:b5:7b:ac: 1b:3e:b8:a0:93:a4:17:d3:91:6b:bc:0d:48:51:0f: 40:0e:98:b9:1a:85:78:b5:94:90:d9:7b:82:e9:ae: 2e:8e:5e:69:58:5d:50:f3:90:8d:98:19:f3:38:c4: ca:33:5d:59:0d:94:85:e4:7e:38:13:bd:39:de:9a: 98:0a:8d:b7:45:c5:7a:f9:ef:6d:d2:2a:6f:6b:06: 17:19:34:59:65:d8:d7:5d:65:9b:0a:15:30:ea:d9: 10:74:8e:77:42:cf:2d:27:8d:a7:dd:31:e0:44:86: 6f:99:dc:0e:a0:ec:e7:16:53:de:66:12:d9:90:16: 8c:b1:cf:87:f0:0b:45:bf:58:09:2f:1b:33:3a:c6: 73:13:1a:7c:3b:84:29:b1:8a:48:58:de:bb:97:7c: c3:cf:cf:8b:1b:4c:53:c8:c3:98:16:36:3b:e1:82: e7:66:af:0e:9a:a6:05:9e:b9:83:34:45:c9:54:b2: 7d:2c:23:fb:82:aa:57:ad:d6:c7:2c:1a:1f:d7:07: 0b:9e:38:5b:38:7a:0b:0e:28:b3:d8:e7:53:49:68: d3:fd:c9:60:0f:05:ec:e8:4c:33:41:2e:42:c7:c4: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:47:21:A0:F0:1E:18:E9:FE:AB:68:8A:A7:77:6D:91:1E:8F:58 X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a9:de:68:1d:d8:e5:5f:8d:cb:dd:2c:75:ed:ac:1b:3c:67: 98:11:8b:52:4a:3b:97:7c:0e:20:af:bc:e5:90:33:c8:c7:83: c4:c4:96:e2:f9:5d:1b:24:d5:67:f7:2e:3f:89:4f:e3:38:fe: 5b:c9:9a:9e:0c:4d:13:30:81:7f:d8:84:96:43:3f:7b:15:f5: 47:8a:ab:bd:1e:3e:ee:25:79:c7:41:2a:17:dc:ce:9b:f8:79: 70:49:9c:91:14:ca:94:80:ac:1e:4d:1e:04:e6:1f:24:aa:07: 17:2a:5b:05:3c:73:13:3b:c9:5e:82:c7:cd:06:cd:92:dc:a4: 8a:6e:70:b9:ad:52:d5:70:11:a6:8f:c4:67:db:53:fa:5c:4c: b2:19:6b:1e:ca:af:ac:06:9a:67:82:53:12:b9:7f:c1:49:2e: ce:d2:77:42:74:bd:5e:37:a6:4e:6c:fb:91:7b:b3:ba:52:f6: 8f:85:d0:0c:23:fe:88:4a:70:b2:4f:f1:ed:8b:b6:f7:0c:84: 79:ae:0f:85:42:86:4d:f0:ce:84:6b:6c:f8:a4:1b:e2:8a:e1: fb:dd:77:38:ff:73:d3:66:7c:41:30:d4:a7:02:c1:a6:f1:4b: f3:90:d0:93:79:03:5d:90:21:7c:0d:db:b6:00:17:1e:7b:01: 67:a8:44:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZG1OJDjAkVsvlAxkykyvcFXnG30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA5MjQxMTE0MzRaFw0yNjA5MjUxMTI0MzRaMDMxMTAvBgNV BAMTKDkwRjM0NzIxQTBGMDFFMThFOUZFQUI2ODhBQTc3NzZEOTExRThGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDo4f1qpeNzj7A2l51XRYmlo5 wMFkPj65K7V7rBs+uKCTpBfTkWu8DUhRD0AOmLkahXi1lJDZe4Lpri6OXmlYXVDz kI2YGfM4xMozXVkNlIXkfjgTvTnempgKjbdFxXr5723SKm9rBhcZNFll2NddZZsK FTDq2RB0jndCzy0njafdMeBEhm+Z3A6g7OcWU95mEtmQFoyxz4fwC0W/WAkvGzM6 xnMTGnw7hCmxikhY3ruXfMPPz4sbTFPIw5gWNjvhgudmrw6apgWeuYM0RclUsn0s I/uCqlet1scsGh/XBwueOFs4egsOKLPY51NJaNP9yWAPBezoTDNBLkLHxLVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPNHIaDwHhjp/qtoiqd3bZEej1gwHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCp3mgd2OVfjcvdLHXtrBs8Z5gRi1JKO5d8 DiCvvOWQM8jHg8TEluL5XRsk1Wf3Lj+JT+M4/lvJmp4MTRMwgX/YhJZDP3sV9UeK q70ePu4lecdBKhfczpv4eXBJnJEUypSArB5NHgTmHySqBxcqWwU8cxM7yV6Cx80G zZLcpIpucLmtUtVwEaaPxGfbU/pcTLIZax7Kr6wGmmeCUxK5f8FJLs7Sd0J0vV43 pk5s+5F7s7pS9o+F0Awj/ohKcLJP8e2LtvcMhHmuD4VChk3wzoRrbPikG+KK4fvd dzj/c9NmfEEw1KcCwabxS/OQ0JN5A12QIXwN27YAFx57AWeoRGo= -----END CERTIFICATE-----Generated at Thu Sep 24 15:09:00 2026 by rpki-client