$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: /N5IsWtC8fL2ZcGclDI8gctvnqbzGP0+Ovg0DnpwUGY= Subject key identifier: CC:79:BF:D6:F1:91:4A:F6:42:9E:01:CA:19:96:A4:26:ED:EF:A3:3D Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 75CB9DF0C6B9A4515C647C033C0753A2D5A2E139 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:05:37 +0000 Manifest this update: Thu 24 Sep 2026 08:00:37 +0000 Manifest next update: Fri 25 Sep 2026 11:32:37 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) 3: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: DwqBDHTlP6rBFKUbwuCHC7AB+Y0cYxQ6nQla/B/DvaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cb:9d:f0:c6:b9:a4:51:5c:64:7c:03:3c:07:53:a2:d5:a2:e1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Sep 24 08:00:37 2026 GMT Not After : Sep 25 11:32:37 2026 GMT Subject: CN=CC79BFD6F1914AF6429E01CA1996A426EDEFA33D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:2e:35:59:a7:c6:f7:3d:53:e4:08:40:fa: 6c:23:84:dd:af:18:a3:fb:ef:8a:41:3e:ae:ce:92: d1:2d:dc:46:73:69:86:2c:d1:68:9b:5f:8e:a7:e6: 6c:1b:8d:8f:f1:dc:97:9e:d4:b1:f1:5f:36:d3:e3: bc:25:0f:09:9c:0e:74:9a:91:51:9c:9f:7d:b4:85: 8d:1f:9e:bf:71:6b:f2:ab:d6:cd:a1:6a:3f:c6:55: 2d:96:4d:9f:19:27:a2:0e:68:f7:3b:f1:32:7a:4a: cf:df:da:61:02:c9:80:6f:f5:d8:d9:49:fb:59:00: 8a:1f:bf:e2:cc:c9:0b:d1:e0:c2:56:f0:bc:b9:48: e3:a7:f2:5c:6d:9a:3b:b8:0c:f0:4b:8c:17:eb:eb: 1f:7b:a3:5f:45:74:16:7d:f8:57:85:cd:db:72:af: b8:2b:cd:2f:22:0f:f1:1f:d9:0c:87:27:a0:c8:56: 92:b1:61:03:0c:be:25:14:40:65:16:9f:e1:f4:52: 19:83:25:51:11:fb:fb:a0:0d:8b:ec:bd:a2:8b:f7: 79:d1:f7:61:91:a7:74:7d:77:51:40:95:2a:0f:c7: 31:f4:f7:43:79:f1:5c:d1:d7:c4:d8:9b:72:40:09: 62:81:e5:10:c7:4c:3b:38:a9:40:36:0f:c5:78:78: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:79:BF:D6:F1:91:4A:F6:42:9E:01:CA:19:96:A4:26:ED:EF:A3:3D X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:13:86:c2:bd:20:ee:08:e8:34:b7:3a:b8:6a:27:80:3a:d3: ac:7e:28:93:46:a1:cd:f6:84:8a:df:32:3e:a2:c1:d1:fb:11: 4b:39:00:7b:00:e1:41:89:5e:32:5a:f5:06:5f:54:ed:08:bc: 94:f3:7f:14:2f:6c:05:dd:8d:96:b8:83:78:8a:d9:76:e9:3d: d4:78:a0:b6:6a:04:1a:c1:20:82:d8:74:00:52:73:19:f4:d3: bd:37:72:5f:d8:5c:3a:07:b9:95:b3:a5:b3:8d:54:17:fd:d4: 47:5f:2e:52:00:ba:f5:9d:ea:36:54:63:88:d8:c2:aa:42:7e: 4b:5b:25:4f:73:0a:0b:8d:7a:4a:76:94:d4:66:55:34:3e:b0: 0a:76:8c:42:6e:4e:60:45:d0:6a:d9:45:66:3f:cf:e0:b8:31: c0:23:b5:7d:0e:de:9d:87:a8:19:25:3c:60:85:f3:85:19:2c: 6e:54:ae:c7:54:c8:ef:cf:8d:b5:bb:ce:ac:d0:a5:2b:2a:a7: 86:13:50:3c:79:ae:89:a9:d1:c7:4c:70:9f:81:b0:d9:01:7c: 2c:b4:84:a5:0c:5a:4b:5b:14:6e:10:f5:96:31:e6:9e:b7:c9: 84:21:7d:36:a7:52:e3:a2:f6:10:dd:c5:4b:35:ef:68:b5:a2: 93:30:73:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcud8Ma5pFFcZHwDPAdTotWi4TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA5MjQwODAwMzdaFw0yNjA5MjUxMTMyMzdaMDMxMTAvBgNV BAMTKENDNzlCRkQ2RjE5MTRBRjY0MjlFMDFDQTE5OTZBNDI2RURFRkEzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4C41WafG9z1T5AhA+mwjhN2v GKP774pBPq7OktEt3EZzaYYs0WibX46n5mwbjY/x3Jee1LHxXzbT47wlDwmcDnSa kVGcn320hY0fnr9xa/Kr1s2haj/GVS2WTZ8ZJ6IOaPc78TJ6Ss/f2mECyYBv9djZ SftZAIofv+LMyQvR4MJW8Ly5SOOn8lxtmju4DPBLjBfr6x97o19FdBZ9+FeFzdty r7grzS8iD/Ef2QyHJ6DIVpKxYQMMviUUQGUWn+H0UhmDJVER+/ugDYvsvaKL93nR 92GRp3R9d1FAlSoPxzH090N58VzR18TYm3JACWKB5RDHTDs4qUA2D8V4eJz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzHm/1vGRSvZCngHKGZakJu3voz0wHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkThsK9IO4I6DS3OrhqJ4A606x+KJNGoc32 hIrfMj6iwdH7EUs5AHsA4UGJXjJa9QZfVO0IvJTzfxQvbAXdjZa4g3iK2XbpPdR4 oLZqBBrBIILYdABScxn00703cl/YXDoHuZWzpbONVBf91EdfLlIAuvWd6jZUY4jY wqpCfktbJU9zCguNekp2lNRmVTQ+sAp2jEJuTmBF0GrZRWY/z+C4McAjtX0O3p2H qBklPGCF84UZLG5UrsdUyO/PjbW7zqzQpSsqp4YTUDx5romp0cdMcJ+BsNkBfCy0 hKUMWktbFG4Q9ZYx5p63yYQhfTanUuOi9hDdxUs172i1opMwc14= -----END CERTIFICATE-----Generated at Thu Sep 24 18:12:37 2026 by rpki-client