$ rpki-client -vvf rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft File: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft (raw, json) Hash identifier: 47qMkUjhxdLCTwtku0F2TzXQQ1nUDsRmk0hKnpnzbkc= Subject key identifier: FA:3D:DD:EF:01:8D:97:F3:66:43:66:81:ED:D6:E1:30:69:80:3D:70 Authority key identifier: 23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 Certificate issuer: /CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Certificate serial: 08F1B466B3A7E5289115CBA43377CC4FB2452903 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:13:41 +0000 Manifest this update: Wed 13 May 2026 00:08:41 +0000 Manifest next update: Thu 14 May 2026 02:55:41 +0000 Files and hashes: 1: 238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl (hash: eWhXkErPSBuIzAOF6IP3hMxN5CS+MNLWXsbgYraV+7s=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: YsNhbgSyGdj7lPmW4hliLq1der7BL8sziFy9gg7oZGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f1:b4:66:b3:a7:e5:28:91:15:cb:a4:33:77:cc:4f:b2:45:29:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238DD36DA6E75C2D67C263FECD1E705DCF1C8226 Validity Not Before: May 13 00:08:41 2026 GMT Not After : May 14 02:55:41 2026 GMT Subject: CN=FA3DDDEF018D97F366436681EDD6E13069803D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:04:e0:9a:e9:68:eb:e2:3e:67:d3:09:dc: 50:88:b6:1c:e3:73:c4:e6:e7:d9:4e:31:2a:b7:df: a4:9b:e8:c2:d2:65:13:17:8f:52:89:24:ce:cf:f9: e5:b7:28:6c:38:94:a5:6c:89:ff:a2:d0:70:97:47: 68:a4:f4:00:cb:f5:a7:a2:d7:03:9b:7d:60:38:a1: f5:52:bd:7f:a6:1a:f8:e4:6e:13:e8:ca:0d:9c:56: 5c:1a:e0:6f:0d:36:a6:ce:f8:8e:4a:66:f0:89:12: 00:e5:16:d3:bb:47:58:fe:12:e8:a0:ab:cf:ff:93: 96:45:ed:ff:88:7b:65:24:9f:23:9d:71:cb:27:57: 3d:2d:ad:aa:1e:33:44:f3:b9:f4:78:cc:62:72:0b: 16:3a:84:61:a4:69:c2:3d:fc:70:f3:2a:d7:70:8d: 60:2c:73:e1:2f:3c:ed:05:ea:c4:75:1b:e3:8e:d9: 2c:84:85:e8:5d:90:e2:0c:f5:a8:d6:0c:76:b7:29: 58:7a:a4:b2:cc:56:55:4c:29:f3:6f:3e:91:63:60: d1:31:09:b8:29:2c:f9:3a:ac:68:4e:f7:5c:ca:70: 4c:1b:52:7c:f9:63:0e:d5:83:91:c6:cc:a8:cb:3c: 19:96:62:5c:f9:81:06:f2:01:44:98:da:5e:00:27: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3D:DD:EF:01:8D:97:F3:66:43:66:81:ED:D6:E1:30:69:80:3D:70 X509v3 Authority Key Identifier: keyid:23:8D:D3:6D:A6:E7:5C:2D:67:C2:63:FE:CD:1E:70:5D:CF:1C:82:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/238DD36DA6E75C2D67C263FECD1E705DCF1C8226.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6c:ac:6a:ec:01:8d:be:09:f9:89:54:c8:de:f6:61:9d:90: 77:55:f5:59:6e:3d:d6:3b:d8:b2:ec:88:b9:92:1e:65:32:eb: e4:08:77:f8:90:4e:99:92:69:ca:8a:88:6a:70:73:ed:67:db: 4e:fd:f2:c3:58:f5:84:9b:eb:b0:c3:7c:0c:d6:17:42:e3:29: 53:5b:ff:aa:4b:d4:0a:91:61:74:47:be:e9:64:dd:da:0a:4b: 08:ff:e9:6a:94:07:31:5e:5b:96:76:2c:f3:ea:ca:15:f1:4e: 1f:43:a6:e6:f9:fe:dd:74:f9:b8:09:9f:8e:c2:55:13:06:58: 3e:96:21:3b:a3:d9:91:71:45:12:ab:b8:5e:02:d6:cf:ef:4d: d9:74:7a:4c:2e:f7:53:1b:d1:dc:de:eb:97:7d:38:fd:d1:1d: c2:73:fc:4c:1c:26:cf:bc:f1:3f:87:65:51:0d:e8:1b:c9:a9: 7d:53:17:52:cb:cb:5b:08:75:d7:9f:c0:eb:3b:98:25:e0:9e: e5:f4:33:cd:a5:a8:ec:45:fe:82:12:f9:8a:d6:ef:e2:93:1c: f0:83:fd:93:4c:a1:be:56:40:d4:d2:46:b7:ee:32:de:e1:b8: 8b:34:1d:35:22:bc:a1:9f:a5:b6:27:b2:1b:83:bd:fe:cb:97: e0:ad:95:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPG0ZrOn5SiRFcukM3fMT7JFKQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURD RjFDODIyNjAeFw0yNjA1MTMwMDA4NDFaFw0yNjA1MTQwMjU1NDFaMDMxMTAvBgNV BAMTKEZBM0REREVGMDE4RDk3RjM2NjQzNjY4MUVERDZFMTMwNjk4MDNENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSTwTgmulo6+I+Z9MJ3FCIthzj c8Tm59lOMSq336Sb6MLSZRMXj1KJJM7P+eW3KGw4lKVsif+i0HCXR2ik9ADL9aei 1wObfWA4ofVSvX+mGvjkbhPoyg2cVlwa4G8NNqbO+I5KZvCJEgDlFtO7R1j+Euig q8//k5ZF7f+Ie2UknyOdccsnVz0traoeM0TzufR4zGJyCxY6hGGkacI9/HDzKtdw jWAsc+EvPO0F6sR1G+OO2SyEhehdkOIM9ajWDHa3KVh6pLLMVlVMKfNvPpFjYNEx CbgpLPk6rGhO91zKcEwbUnz5Yw7Vg5HGzKjLPBmWYlz5gQbyAUSY2l4AJ3VHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+j3d7wGNl/NmQ2aB7dbhMGmAPXAwHwYDVR0j BBgwFoAUI43TbabnXC1nwmP+zR5wXc8cgiYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ZkYWZlNTYtODQzNC00YmJhLWIxNzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRB NkU3NUMyRDY3QzI2M0ZFQ0QxRTcwNURDRjFDODIyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMzhERDM2REE2RTc1QzJENjdDMjYzRkVDRDFFNzA1RENGMUM4 MjI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvMjM4REQzNkRBNkU3NUMyRDY3QzI2M0ZFQ0QxRTcw NURDRjFDODIyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZsrGrsAY2+CfmJVMje9mGdkHdV9VluPdY7 2LLsiLmSHmUy6+QId/iQTpmSacqKiGpwc+1n20798sNY9YSb67DDfAzWF0LjKVNb /6pL1AqRYXRHvulk3doKSwj/6WqUBzFeW5Z2LPPqyhXxTh9Dpub5/t10+bgJn47C VRMGWD6WITuj2ZFxRRKruF4C1s/vTdl0ekwu91Mb0dze65d9OP3RHcJz/EwcJs+8 8T+HZVEN6BvJqX1TF1LLy1sIddefwOs7mCXgnuX0M82lqOxF/oIS+YrW7+KTHPCD /ZNMob5WQNTSRrfuMt7huIs0HTUivKGfpbYnshuDvf7Ll+CtlRk= -----END CERTIFICATE-----Generated at Wed May 13 02:18:49 2026 by rpki-client