$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: zvwWsk3PvLaHsHUpf74fIo0bj555jkX+Va9WyyD62ws= Subject key identifier: A7:94:07:E6:DC:2F:25:21:D0:AA:69:A6:8B:E3:5D:56:9A:7C:6B:BC Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 6872AC7EC63CC242CB92F62CF515FC2A4755C51F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:13:47 +0000 Manifest this update: Wed 23 Sep 2026 10:08:47 +0000 Manifest next update: Thu 24 Sep 2026 11:48:47 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) 2: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: zQxxvvja99gM+sUOEzPZIwpdBu49kW6dyecvl24extw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:72:ac:7e:c6:3c:c2:42:cb:92:f6:2c:f5:15:fc:2a:47:55:c5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Sep 23 10:08:47 2026 GMT Not After : Sep 24 11:48:47 2026 GMT Subject: CN=A79407E6DC2F2521D0AA69A68BE35D569A7C6BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:99:34:ac:75:cf:17:b7:aa:28:9f:88:cd:98: 0a:2b:9b:e6:20:27:a3:7b:2b:8c:ee:91:20:1a:62: e1:c8:c4:67:48:3a:28:24:58:f5:05:a4:4b:e8:1d: c5:3b:e8:67:dd:fb:70:fe:31:ce:cf:f5:a1:d9:46: 8c:b5:89:f1:65:53:b2:c1:05:37:d9:97:fb:eb:3a: b4:27:22:98:20:a2:52:f0:de:bf:7b:ad:7e:bb:58: b7:c9:09:01:a4:2c:76:d1:3b:a8:4a:63:65:31:88: a3:60:9a:f8:5a:47:e0:65:b9:31:84:9d:f9:88:c9: 4f:9b:36:cd:53:92:eb:53:8e:cc:86:9f:c3:57:33: 5e:f6:f9:8c:1c:ff:5a:9b:bc:dc:f6:80:97:c4:94: 69:eb:47:3a:2a:d4:f0:46:51:00:3b:42:d3:9e:3d: 95:0f:04:81:ce:2a:7d:c4:fe:c6:55:3c:7c:26:19: bb:45:08:4e:38:dd:58:e3:7a:5e:83:ff:6b:a0:f1: 04:12:a1:27:78:90:59:c5:da:b5:b5:ff:52:6c:d8: 71:55:66:2c:31:44:fc:38:32:41:7d:6d:7f:bf:50: 73:c5:60:48:6e:61:49:c0:ff:6c:ae:b5:02:15:67: 4e:ca:6a:5f:b8:8e:20:d6:71:54:31:46:df:5e:47: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:94:07:E6:DC:2F:25:21:D0:AA:69:A6:8B:E3:5D:56:9A:7C:6B:BC X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c3:5b:9b:bd:e9:cf:6d:f9:ab:59:34:da:4b:5b:f8:8c:5b: aa:71:43:22:4d:f0:76:90:a0:b3:fb:b2:8c:6d:64:71:b2:4f: a9:53:7a:96:d0:05:6c:46:96:51:0a:b1:24:0f:50:f1:d2:76: ca:73:68:c6:cc:74:ed:25:a0:bf:8b:b6:10:47:0f:6a:49:ca: 47:06:51:b2:9d:3d:f7:fa:c7:14:8d:bf:6c:22:7e:d5:25:1a: b4:c6:04:b6:2e:e5:75:dd:29:7f:09:56:95:77:0c:5f:41:ca: 3b:d1:a2:c5:19:59:48:17:a3:43:5b:22:f4:b4:94:81:a5:f0: 54:6a:b2:db:f4:8f:62:67:14:0f:96:87:51:51:a6:4c:59:c2: 83:29:d9:b3:43:35:1e:27:90:b6:9f:1d:03:f0:4b:7a:0f:be: 8d:90:3c:ec:cc:13:6f:d5:d9:6b:1f:41:7f:22:59:5c:12:b4: 7d:38:eb:84:80:f9:ae:ba:fe:e5:26:88:4d:a7:9a:13:59:a2: f2:0e:6b:93:cf:c7:9f:db:d8:15:63:01:fc:5e:38:07:16:07: cc:0a:84:bd:97:3a:66:bb:5e:a3:56:65:0e:a5:91:da:c8:b1: 60:ca:5c:2e:47:fc:33:21:45:78:16:fc:4e:a1:b6:4d:ee:4f: 57:75:46:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHKsfsY8wkLLkvYs9RX8KkdVxR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA5MjMxMDA4NDdaFw0yNjA5MjQxMTQ4NDdaMDMxMTAvBgNV BAMTKEE3OTQwN0U2REMyRjI1MjFEMEFBNjlBNjhCRTM1RDU2OUE3QzZCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDymTSsdc8Xt6oon4jNmAorm+Yg J6N7K4zukSAaYuHIxGdIOigkWPUFpEvoHcU76Gfd+3D+Mc7P9aHZRoy1ifFlU7LB BTfZl/vrOrQnIpggolLw3r97rX67WLfJCQGkLHbRO6hKY2UxiKNgmvhaR+BluTGE nfmIyU+bNs1TkutTjsyGn8NXM172+Ywc/1qbvNz2gJfElGnrRzoq1PBGUQA7QtOe PZUPBIHOKn3E/sZVPHwmGbtFCE443Vjjel6D/2ug8QQSoSd4kFnF2rW1/1Js2HFV ZiwxRPw4MkF9bX+/UHPFYEhuYUnA/2yutQIVZ07Kal+4jiDWcVQxRt9eR1tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp5QH5twvJSHQqmmmi+NdVpp8a7wwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrDW5u96c9t+atZNNpLW/iMW6pxQyJN8HaQ oLP7soxtZHGyT6lTepbQBWxGllEKsSQPUPHSdspzaMbMdO0loL+LthBHD2pJykcG UbKdPff6xxSNv2wiftUlGrTGBLYu5XXdKX8JVpV3DF9ByjvRosUZWUgXo0NbIvS0 lIGl8FRqstv0j2JnFA+Wh1FRpkxZwoMp2bNDNR4nkLafHQPwS3oPvo2QPOzME2/V 2WsfQX8iWVwStH0464SA+a66/uUmiE2nmhNZovIOa5PPx5/b2BVjAfxeOAcWB8wK hL2XOma7XqNWZQ6lkdrIsWDKXC5H/DMhRXgW/E6htk3uT1d1Ro4= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:00 2026 by rpki-client