$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: xDDZD7Qg+s7Rv0T1ieo4Ig1fN0wQkxPBD9FazoSsYTc= Subject key identifier: 52:D5:B1:6B:C6:E0:24:60:83:98:3A:5C:31:F3:7B:57:65:90:85:6D Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 28AA4C94C6DA2B970DACF8147F0598750AF56F75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:42:52 +0000 Manifest this update: Tue 12 May 2026 20:37:52 +0000 Manifest next update: Wed 13 May 2026 20:57:52 +0000 Files and hashes: 1: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 2: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: +tvzl4hRexRosPCj5UOv3UXMvmq1h3d7ZHxs55IvT44=) 3: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) 4: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 5: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 6: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:4c:94:c6:da:2b:97:0d:ac:f8:14:7f:05:98:75:0a:f5:6f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: May 12 20:37:52 2026 GMT Not After : May 13 20:57:52 2026 GMT Subject: CN=52D5B16BC6E0246083983A5C31F37B576590856D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:5c:dd:cd:ff:f6:f0:8d:e8:af:b3:d6:08: bb:3b:37:0b:29:d3:65:f4:1c:8d:2b:2a:8b:1d:77: d5:44:69:78:e4:1b:b3:8c:66:f6:ed:21:52:87:d7: ee:84:e0:60:33:4b:32:f0:11:e3:44:fc:4d:22:b4: 51:2d:c3:90:9e:46:3e:16:31:b3:2c:c7:17:7e:e4: 73:31:cd:7e:e1:ea:4e:0d:51:e6:69:d3:cc:73:3e: 00:c8:15:ca:27:b2:d2:ce:fa:6f:44:d7:6a:77:4e: c0:40:c4:bc:97:c0:96:d9:31:bf:bb:81:7f:87:a5: 25:87:f1:a6:ab:71:9e:e0:38:2c:85:88:c1:56:a2: 8e:e6:d8:4c:f8:50:82:28:ad:cf:df:03:8c:0b:cc: fd:9f:b8:24:54:81:e7:c6:83:8f:73:e4:0b:24:64: 51:e9:8d:2f:cf:ef:8f:be:95:91:14:9f:aa:52:ea: 4f:e2:f7:0d:20:70:8f:cb:dc:7c:09:2d:99:b3:e6: bd:51:50:54:c9:2b:bb:4e:9a:dc:26:e3:a4:ff:14: 8f:08:03:49:26:fc:0c:ac:30:06:ad:82:1c:c4:62: 7c:2b:e6:1e:eb:0d:4a:83:4e:99:69:2e:d9:89:e0: 68:a8:ec:0d:6e:69:9b:55:20:c7:ef:ba:01:28:86: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D5:B1:6B:C6:E0:24:60:83:98:3A:5C:31:F3:7B:57:65:90:85:6D X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ac:39:64:b0:5f:b7:53:09:cd:20:e0:b8:fe:e2:ae:c9:6d: bb:b3:10:27:45:83:08:b4:43:1b:61:5a:1c:c7:87:a7:25:d3: 3f:89:95:8f:f4:ff:de:72:3b:7f:8d:6b:ff:ec:fd:49:4e:33: 92:9b:aa:c7:dd:2d:f5:0c:53:46:0f:b5:65:ae:e7:07:a4:0b: d8:3f:ca:eb:09:ca:11:12:8a:ac:50:04:ac:7a:07:15:41:c0: 3a:cc:e8:5e:dc:7f:3b:ed:a3:3b:b3:54:dc:b3:01:a0:e8:ff: c9:6e:50:6b:36:a9:56:df:e1:52:a5:c6:69:22:67:9b:c4:f4: 93:59:64:23:0f:9d:07:33:3a:7b:f2:ec:71:cb:3b:04:d8:f9: 3b:3b:21:81:d3:41:18:8c:ab:37:44:1b:bc:a0:89:c5:ec:ce: b0:24:d3:57:79:a4:42:ba:83:fc:49:be:23:cd:7b:a5:51:0c: 76:6c:e5:4c:be:94:9b:de:78:28:f4:d9:54:7f:18:59:3b:b4: 95:12:38:82:86:57:fe:e3:48:1d:10:5a:76:19:2a:be:f3:4d: c4:98:d0:c0:f8:6e:85:7c:03:81:38:07:0a:63:dc:8d:ee:0c: da:61:ff:c2:85:d5:21:cf:de:50:67:2c:f3:aa:8b:af:91:a7: 36:83:6e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKpMlMbaK5cNrPgUfwWYdQr1b3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA1MTIyMDM3NTJaFw0yNjA1MTMyMDU3NTJaMDMxMTAvBgNV BAMTKDUyRDVCMTZCQzZFMDI0NjA4Mzk4M0E1QzMxRjM3QjU3NjU5MDg1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7Vzdzf/28I3or7PWCLs7Nwsp 02X0HI0rKosdd9VEaXjkG7OMZvbtIVKH1+6E4GAzSzLwEeNE/E0itFEtw5CeRj4W MbMsxxd+5HMxzX7h6k4NUeZp08xzPgDIFconstLO+m9E12p3TsBAxLyXwJbZMb+7 gX+HpSWH8aarcZ7gOCyFiMFWoo7m2Ez4UIIorc/fA4wLzP2fuCRUgefGg49z5Ask ZFHpjS/P74++lZEUn6pS6k/i9w0gcI/L3HwJLZmz5r1RUFTJK7tOmtwm46T/FI8I A0km/AysMAatghzEYnwr5h7rDUqDTplpLtmJ4Gio7A1uaZtVIMfvugEohrxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtWxa8bgJGCDmDpcMfN7V2WQhW0wHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAasOWSwX7dTCc0g4Lj+4q7JbbuzECdFgwi0 QxthWhzHh6cl0z+JlY/0/95yO3+Na//s/UlOM5KbqsfdLfUMU0YPtWWu5wekC9g/ yusJyhESiqxQBKx6BxVBwDrM6F7cfzvtozuzVNyzAaDo/8luUGs2qVbf4VKlxmki Z5vE9JNZZCMPnQczOnvy7HHLOwTY+Ts7IYHTQRiMqzdEG7ygicXszrAk01d5pEK6 g/xJviPNe6VRDHZs5Uy+lJveeCj02VR/GFk7tJUSOIKGV/7jSB0QWnYZKr7zTcSY 0MD4boV8A4E4Bwpj3I3uDNph/8KF1SHP3lBnLPOqi6+RpzaDbuo= -----END CERTIFICATE-----Generated at Wed May 13 04:48:23 2026 by rpki-client