$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: Dx4asfMT1Vusu93aYyqZTFahm+Labv0E5Ehu9EUpaYo= Subject key identifier: 4A:7B:2B:B0:FB:3E:7E:89:B3:83:55:E1:CB:C0:45:ED:F6:8C:12:0A Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 0200D858B1FA836B058FD2141DAB6C257501BE42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:43:12 +0000 Manifest this update: Wed 23 Sep 2026 09:38:12 +0000 Manifest next update: Thu 24 Sep 2026 10:53:12 +0000 Files and hashes: 1: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 2: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 3: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 4: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 5: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: GtZWeZMcUV1fzWsMMpdWkqgTvv8gWiebbEpy9gq7s7w=) 6: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:00:d8:58:b1:fa:83:6b:05:8f:d2:14:1d:ab:6c:25:75:01:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Sep 23 09:38:12 2026 GMT Not After : Sep 24 10:53:12 2026 GMT Subject: CN=4A7B2BB0FB3E7E89B38355E1CBC045EDF68C120A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:40:43:a6:b7:03:86:ae:d2:05:e2:2c:97: e8:bd:d6:e9:38:98:aa:c6:18:bb:46:8d:05:bd:27: 09:ab:54:48:79:8d:92:8e:78:4a:39:bc:55:ab:e2: 9b:e6:d3:8e:d9:75:78:cc:34:05:32:f3:8c:bd:4f: df:44:66:55:2d:93:63:b5:dc:13:fc:3b:d2:25:58: 6a:a6:14:11:5b:d7:d1:10:12:75:14:c2:d2:4d:d2: 5a:ad:a8:a7:ca:98:08:8e:a7:1f:2c:41:a5:17:89: 2e:a6:50:12:f8:3b:64:05:b1:39:3e:04:6d:f8:a8: 29:d8:5d:78:05:1d:26:f7:59:17:a3:5d:18:c6:54: 05:21:2a:59:8d:4a:c2:82:70:44:90:1a:3a:c8:d6: bf:a7:3c:92:16:05:27:aa:67:2a:06:cf:91:f2:57: a4:45:19:60:2d:2d:a9:22:a1:cd:ce:60:27:d7:d4: 54:ec:53:b0:e9:79:68:c9:9b:67:d7:80:ad:b3:1b: 5e:c0:e9:79:70:a1:0a:95:8a:2d:a5:eb:45:44:69: 48:f6:e0:6d:23:4b:93:fd:71:61:2d:0d:3e:48:94: 02:5d:a1:02:fd:2d:61:44:be:b4:c4:ca:aa:1c:70: 54:25:7e:5f:db:40:e0:53:50:05:f3:02:f7:74:8f: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:2B:B0:FB:3E:7E:89:B3:83:55:E1:CB:C0:45:ED:F6:8C:12:0A X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:95:09:b1:4d:74:44:7c:cb:36:b2:0e:2a:49:a4:3a:b7:8e: f4:39:01:7a:7d:ba:dd:8d:23:f6:d8:74:29:d6:42:a2:e0:0a: b7:e6:e6:a7:67:26:68:a3:1a:af:a2:8e:7d:3b:37:39:e3:27: 79:aa:25:18:8e:f1:64:03:a3:8d:96:85:80:e7:ee:8d:e5:99: bd:80:44:85:89:a5:47:79:b6:0c:da:c3:be:84:be:f3:9e:78: 4f:66:9b:01:44:f3:85:c5:f8:f6:99:93:8e:97:43:57:7d:0e: cb:3d:72:29:c6:59:78:fa:7d:8f:68:c6:47:b4:07:cc:c7:11: 55:ae:e0:40:8a:b2:0a:5b:ee:f5:ba:7e:28:cf:e9:3b:bc:ca: 7b:0f:78:65:7e:1a:9f:7f:56:39:aa:28:72:a5:c4:1c:21:8f: e1:be:b0:7e:42:a7:47:6a:6b:c9:13:11:7a:47:bf:0f:29:f5: bd:1d:b5:b8:2c:88:a1:f4:a3:39:a9:bd:2c:36:44:f7:83:f6: 4a:ed:44:69:dc:5b:51:55:13:d1:1e:7e:27:3e:81:b6:87:9b: 2f:2b:40:5d:2f:9f:36:2d:f8:a5:6f:d6:a8:fb:fe:89:8b:a0: 5a:57:c5:a5:b8:13:88:ce:70:c0:2e:b5:df:8e:52:77:27:50: 29:4d:c2:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgDYWLH6g2sFj9IUHatsJXUBvkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA5MjMwOTM4MTJaFw0yNjA5MjQxMDUzMTJaMDMxMTAvBgNV BAMTKDRBN0IyQkIwRkIzRTdFODlCMzgzNTVFMUNCQzA0NUVERjY4QzEyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpkBDprcDhq7SBeIsl+i91uk4 mKrGGLtGjQW9JwmrVEh5jZKOeEo5vFWr4pvm047ZdXjMNAUy84y9T99EZlUtk2O1 3BP8O9IlWGqmFBFb19EQEnUUwtJN0lqtqKfKmAiOpx8sQaUXiS6mUBL4O2QFsTk+ BG34qCnYXXgFHSb3WRejXRjGVAUhKlmNSsKCcESQGjrI1r+nPJIWBSeqZyoGz5Hy V6RFGWAtLakioc3OYCfX1FTsU7DpeWjJm2fXgK2zG17A6XlwoQqVii2l60VEaUj2 4G0jS5P9cWEtDT5IlAJdoQL9LWFEvrTEyqoccFQlfl/bQOBTUAXzAvd0jy9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnsrsPs+fomzg1Xhy8BF7faMEgowHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiVCbFNdER8yzayDipJpDq3jvQ5AXp9ut2N I/bYdCnWQqLgCrfm5qdnJmijGq+ijn07NznjJ3mqJRiO8WQDo42WhYDn7o3lmb2A RIWJpUd5tgzaw76EvvOeeE9mmwFE84XF+PaZk46XQ1d9Dss9cinGWXj6fY9oxke0 B8zHEVWu4ECKsgpb7vW6fijP6Tu8ynsPeGV+Gp9/VjmqKHKlxBwhj+G+sH5Cp0dq a8kTEXpHvw8p9b0dtbgsiKH0ozmpvSw2RPeD9krtRGncW1FVE9Eefic+gbaHmy8r QF0vnzYt+KVv1qj7/omLoFpXxaW4E4jOcMAutd+OUncnUClNwkY= -----END CERTIFICATE-----Generated at Thu Sep 24 01:30:29 2026 by rpki-client