$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: TnQXN4D2oCxs4gSSerqQAtzh+1ULWCJPOfYaQutpeao= Subject key identifier: DA:AF:E8:A2:02:59:4C:62:72:CD:26:57:8C:2F:36:83:59:53:BC:81 Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 2F147D22E722E984D7B9676DF4AB9C367495B67D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:57:07 +0000 Manifest this update: Thu 23 Jul 2026 13:52:07 +0000 Manifest next update: Fri 24 Jul 2026 15:22:07 +0000 Files and hashes: 1: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 2: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 3: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 4: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 5: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: V7QZaFhZF2z8MZ0F1dZ4k8+5PjQfuRvYT+51Q2/5xe0=) 6: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:14:7d:22:e7:22:e9:84:d7:b9:67:6d:f4:ab:9c:36:74:95:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Jul 23 13:52:07 2026 GMT Not After : Jul 24 15:22:07 2026 GMT Subject: CN=DAAFE8A202594C6272CD26578C2F36835953BC81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:1a:9e:bf:e1:ae:8c:72:36:fd:0c:2b:b1: 95:5e:ba:7e:09:87:54:55:0d:2f:7e:d2:5a:15:37: f5:f8:7c:91:1b:24:05:14:37:fd:f4:30:ba:6e:4b: 7d:06:b2:42:09:23:ed:83:e2:fd:40:2e:cc:db:9f: 67:f7:34:b3:6b:c9:51:d9:aa:aa:f4:77:8b:ac:f1: bf:23:41:1e:c0:a3:d9:9a:00:1b:21:21:6f:f0:0f: 65:d7:7c:d6:9e:8e:f5:f5:d7:cc:f6:d7:93:25:ec: ca:11:cc:4c:0b:39:9c:7b:83:c5:9b:0a:28:d2:6f: f8:ee:74:f7:37:3f:05:a8:6f:ce:be:fd:a1:49:4c: 4b:15:4f:14:13:31:00:6d:b7:53:6b:c9:50:f8:bb: da:b8:1f:e6:f9:e0:87:9c:d8:33:7c:cc:5f:4d:3b: e7:89:65:ad:8e:a9:7e:fd:73:93:04:34:ea:84:f2: bd:83:7f:70:c7:6d:57:d2:ab:c0:20:31:a5:73:08: c9:28:f2:38:5d:27:1b:5d:03:56:2d:33:4d:f1:a4: 21:18:b6:81:7d:6f:6e:1e:53:66:d1:33:b2:5d:53: 9f:38:af:45:4f:70:cb:5b:68:40:94:ec:ac:6f:f0: 40:d7:e9:1a:bb:9c:cf:96:cc:64:30:e1:61:e2:1e: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AF:E8:A2:02:59:4C:62:72:CD:26:57:8C:2F:36:83:59:53:BC:81 X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9c:f2:d4:88:be:a7:6e:8f:83:d3:5a:02:5c:93:78:df:cb: 92:96:32:1b:da:2c:48:64:bd:29:af:a3:0a:c3:f8:30:76:a2: e9:f1:c8:af:59:db:f3:53:1d:7d:b3:62:c5:6f:3b:49:18:71: dc:ea:06:93:41:56:bb:93:47:68:7b:bf:c9:cd:ba:31:a5:94: 61:70:e7:b9:01:b2:80:2f:b2:68:76:12:ec:6c:50:80:5f:e5: df:6b:5d:03:c0:1e:05:25:7f:04:ea:85:94:1f:75:ce:cc:6e: 7f:74:7d:6b:7d:35:65:83:c1:b5:09:09:4b:f5:c6:83:0f:f0: 23:7e:fd:27:04:b2:ca:12:7f:a7:35:e0:1a:43:fc:76:44:bd: cf:b8:8e:dc:f4:90:b5:90:a4:b7:8a:61:0a:fd:24:3c:f0:5e: ba:6d:60:40:ba:39:d4:00:42:3c:b6:14:40:4b:91:5a:ae:da: 9c:ae:06:02:41:ab:f2:63:0b:27:50:1f:9b:18:9b:fe:40:85: 73:de:4c:cd:2d:45:71:77:f0:d2:a4:3e:4a:60:6d:6d:a9:d1: 9e:67:32:6f:ee:16:3e:de:c9:b9:b1:db:c9:e7:0c:a0:1b:67: 9e:8b:37:d6:08:57:29:35:2f:da:f9:16:57:3a:2d:94:e7:cd: f1:07:c2:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxR9Iuci6YTXuWdt9KucNnSVtn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA3MjMxMzUyMDdaFw0yNjA3MjQxNTIyMDdaMDMxMTAvBgNV BAMTKERBQUZFOEEyMDI1OTRDNjI3MkNEMjY1NzhDMkYzNjgzNTk1M0JDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRxqev+GujHI2/QwrsZVeun4J h1RVDS9+0loVN/X4fJEbJAUUN/30MLpuS30GskIJI+2D4v1ALszbn2f3NLNryVHZ qqr0d4us8b8jQR7Ao9maABshIW/wD2XXfNaejvX118z215Ml7MoRzEwLOZx7g8Wb CijSb/judPc3PwWob86+/aFJTEsVTxQTMQBtt1NryVD4u9q4H+b54Iec2DN8zF9N O+eJZa2OqX79c5MENOqE8r2Df3DHbVfSq8AgMaVzCMko8jhdJxtdA1YtM03xpCEY toF9b24eU2bRM7JdU584r0VPcMtbaECU7Kxv8EDX6Rq7nM+WzGQw4WHiHmJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2q/oogJZTGJyzSZXjC82g1lTvIEwHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2c8tSIvqduj4PTWgJck3jfy5KWMhvaLEhk vSmvowrD+DB2ounxyK9Z2/NTHX2zYsVvO0kYcdzqBpNBVruTR2h7v8nNujGllGFw 57kBsoAvsmh2EuxsUIBf5d9rXQPAHgUlfwTqhZQfdc7Mbn90fWt9NWWDwbUJCUv1 xoMP8CN+/ScEssoSf6c14BpD/HZEvc+4jtz0kLWQpLeKYQr9JDzwXrptYEC6OdQA Qjy2FEBLkVqu2pyuBgJBq/JjCydQH5sYm/5AhXPeTM0tRXF38NKkPkpgbW2p0Z5n Mm/uFj7eybmx28nnDKAbZ56LN9YIVyk1L9r5Flc6LZTnzfEHwlM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:52 2026 by rpki-client