$ rpki-client -vvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: +1bx4UkVFnpKk0BSU0+FtkdS2iahZJTGkKVZLZ+DTJw= Subject key identifier: C3:06:BE:79:39:01:DE:FC:28:51:F1:47:3F:89:13:DB:44:0A:ED:57 Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 185F70C885AFA2FBF4A788BDCC805CCF013D0933 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:28:30 +0000 Manifest this update: Tue 12 May 2026 13:23:30 +0000 Manifest next update: Wed 13 May 2026 15:57:30 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) 3: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: OOYt5dsbicEPMuNLQVPQBJgJK5jEAEmBpQNTjEZir0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5f:70:c8:85:af:a2:fb:f4:a7:88:bd:cc:80:5c:cf:01:3d:09:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: May 12 13:23:30 2026 GMT Not After : May 13 15:57:30 2026 GMT Subject: CN=C306BE793901DEFC2851F1473F8913DB440AED57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ba:8d:ff:d3:65:dc:4f:28:7b:c9:2d:f6:33: 6a:69:4c:76:d3:b1:b1:b2:3b:6c:2b:13:27:3c:f3: c7:c9:30:9a:75:f8:a0:4d:d9:1e:2a:ef:e8:06:16: 0e:6b:77:75:93:8c:1f:33:46:2a:42:53:f0:c6:d6: 7e:da:0c:0b:24:89:d7:52:a2:35:6c:b2:b4:13:11: 64:e4:28:61:c6:fc:e0:26:c4:fa:6b:35:d9:46:e8: d9:41:f6:27:49:d4:f1:a2:5a:c4:58:14:a8:7c:c6: 65:1d:c2:4c:0b:11:12:a6:d9:87:37:c3:41:a7:3a: 23:a0:dd:cc:c4:69:ce:38:dc:c8:8b:63:3f:31:fb: a8:8e:a8:14:9e:a5:94:5a:f2:13:0b:5b:8f:19:cf: 84:10:55:c8:f6:49:74:20:64:18:8d:7b:65:b0:70: 34:86:88:4d:35:a2:64:a4:ac:d7:cf:a6:ed:c9:77: 19:4a:f2:0f:ab:d2:19:1a:94:a9:bf:97:27:46:7d: 11:55:21:93:0b:f2:91:b0:5b:45:a3:63:87:89:72: ec:59:e2:7e:32:18:8b:ea:68:66:84:b4:2b:d9:c6: 5f:6b:d1:4b:4f:16:11:c9:d0:83:6a:fb:cf:84:12: be:49:9f:a1:69:e5:bc:93:57:e6:7a:21:31:f6:13: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:06:BE:79:39:01:DE:FC:28:51:F1:47:3F:89:13:DB:44:0A:ED:57 X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4f:5d:fe:de:70:16:33:c7:6a:fc:ae:8c:b4:a2:0a:fd:ca: f8:d4:96:a2:9b:7c:4a:46:5a:d7:ad:bf:5e:aa:f2:f3:2d:71: f2:73:d6:d9:b9:d1:96:80:20:36:d6:5a:48:25:56:5b:1f:06: e0:47:5e:8b:f0:7c:84:88:c4:ba:f2:a3:a5:dd:66:dc:2f:55: 4f:e6:65:9b:88:33:7b:b8:00:da:7d:29:66:a6:42:58:a6:14: d5:55:eb:fc:40:00:b2:9f:c4:65:7e:d8:5b:4c:31:3b:af:b5: 48:7a:15:ae:05:9e:57:69:a6:b6:4d:0c:f2:8c:10:16:40:86: 08:44:bc:65:a3:bf:c6:30:1f:a8:c8:40:cb:ca:bb:96:2b:50: 2a:29:93:18:92:50:c2:8f:7f:90:0f:53:da:f2:49:f5:78:60: 3c:bc:f4:00:0b:7c:bd:78:32:86:ec:d7:ec:49:55:5c:1d:36: f5:54:d3:10:54:60:5b:88:f0:97:6c:18:08:c8:9f:f1:1c:68: cf:5c:03:6e:f3:8e:10:1d:30:f6:f0:2d:38:67:54:06:fc:71: 5d:4e:90:77:9b:93:91:cb:34:cc:a0:ba:22:a7:88:13:f7:78: bf:9c:46:c0:8d:4f:5a:4d:d3:b8:6d:1b:2d:c6:0c:e0:62:54: 6b:b6:de:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGF9wyIWvovv0p4i9zIBczwE9CTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA1MTIxMzIzMzBaFw0yNjA1MTMxNTU3MzBaMDMxMTAvBgNV BAMTKEMzMDZCRTc5MzkwMURFRkMyODUxRjE0NzNGODkxM0RCNDQwQUVENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3uo3/02XcTyh7yS32M2ppTHbT sbGyO2wrEyc888fJMJp1+KBN2R4q7+gGFg5rd3WTjB8zRipCU/DG1n7aDAskiddS ojVssrQTEWTkKGHG/OAmxPprNdlG6NlB9idJ1PGiWsRYFKh8xmUdwkwLERKm2Yc3 w0GnOiOg3czEac443MiLYz8x+6iOqBSepZRa8hMLW48Zz4QQVcj2SXQgZBiNe2Ww cDSGiE01omSkrNfPpu3JdxlK8g+r0hkalKm/lydGfRFVIZML8pGwW0WjY4eJcuxZ 4n4yGIvqaGaEtCvZxl9r0UtPFhHJ0INq+8+EEr5Jn6Fp5byTV+Z6ITH2E0GLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwa+eTkB3vwoUfFHP4kT20QK7VcwHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxPXf7ecBYzx2r8roy0ogr9yvjUlqKbfEpG Wtetv16q8vMtcfJz1tm50ZaAIDbWWkglVlsfBuBHXovwfISIxLryo6XdZtwvVU/m ZZuIM3u4ANp9KWamQlimFNVV6/xAALKfxGV+2FtMMTuvtUh6Fa4FnldpprZNDPKM EBZAhghEvGWjv8YwH6jIQMvKu5YrUCopkxiSUMKPf5APU9rySfV4YDy89AALfL14 Mobs1+xJVVwdNvVU0xBUYFuI8JdsGAjIn/EcaM9cA27zjhAdMPbwLThnVAb8cV1O kHebk5HLNMyguiKniBP3eL+cRsCNT1pN07htGy3GDOBiVGu23u0= -----END CERTIFICATE-----Generated at Tue May 12 22:19:37 2026 by rpki-client