$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft File: 207EA811568CF1DB9A757936B650F6F68EBB08B5.mft (raw, json) Hash identifier: 2ZqMwsI6mjn+ddZCMYAj8GGqEvbesxUvx3QlAnZxoGQ= Subject key identifier: D2:D2:BE:78:B6:A3:68:AC:9C:75:40:C5:07:C8:E3:41:76:B0:B6:C7 Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Certificate serial: 3EFD887E5B207130BC524CBE572A9128AC71E120 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:50:20 +0000 Manifest this update: Tue 12 May 2026 15:45:20 +0000 Manifest next update: Wed 13 May 2026 16:14:20 +0000 Files and hashes: 1: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=) 2: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: g+arXZ/+W18ln97mYgZBk8E2/DdTLNyMPheE+2x0Cuc=) 3: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: pA4m3YcDohtyW2KH722N1KPWI/anmYo+9ayJjEcxchg=) 4: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: 43hN5CD23xxhiHpx+833RrzIqG8jDW9esNMFg94JtSw=) 5: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=) 6: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: i+qtws7Oi1iB0D4v0zddm18REaIEnLKsYF0sq4QBY98=) 7: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: P/jDOIqhS8TYGh1HRra14jw9lZ/QNU3dPScct8NOxRA=) 8: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yk4mIGPQKduAZWFcwjNTu/2gsTuXAS4f5Gm0DqPPeQM=) 9: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: abkMD5Nzu85VGTPH9+F+7oClcdXwuiYFP0L9QI7125U=) 10: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UidjzsQTxCtanEIC/TiRELvUoDCR4DA5krGkEEiRu+Y=) 11: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: yp9LgKk0vpVLD1ssSi3ZMXSFOq3JC5q5meA5QQuObAo=) 12: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: NON+2mKqUMP5nxNEYTSRYXBctaTyrQBZDGBl/+tv7Iw=) 13: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=) 14: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: kk/YLt9sOibq+Ehirb8Tv+ujtGYKVYXNjuOikBMvvf4=) 15: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: mhO206C5MCEo68TF6ww7+81+IS3YTnFs3GIVpnP+S28=) 16: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: JAv/L1Ca/rOAR83XrzqT+QKIkZeHE06/YMr97eIGL/8=) 17: 207EA811568CF1DB9A757936B650F6F68EBB08B5.crl (hash: h92/40FFKIiZ45VXZacU3H/4UpDFMW6fN8XHpO2nef4=) 18: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: zZnfuS7x4B3IbMWwGHUKAscPUAhTdq47Ud12yvcyTws=) 19: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: YdojAte0DabKD9U31MLajmNX2Ade2ItCQ0uOXVTExGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:88:7e:5b:20:71:30:bc:52:4c:be:57:2a:91:28:ac:71:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5 Validity Not Before: May 12 15:45:20 2026 GMT Not After : May 13 16:14:20 2026 GMT Subject: CN=D2D2BE78B6A368AC9C7540C507C8E34176B0B6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:cb:7c:b9:4b:ee:b2:75:e3:77:8b:db:3a: 67:36:a9:2d:ec:03:c0:ae:be:25:20:fc:1c:b0:22: e1:f4:2d:0b:93:3e:13:38:85:cb:d2:fd:1d:ff:40: 95:90:57:ca:56:39:97:d2:0e:55:a3:81:96:ac:17: d3:6b:a4:65:73:6e:15:a5:6b:cf:de:53:5c:ff:79: e6:11:56:8f:40:b9:b5:da:20:4f:3d:65:12:35:f7: d1:cc:d0:4e:9a:10:c7:23:2e:39:cb:83:c0:d0:f1: 07:c5:98:6e:22:fa:49:bd:ea:5a:42:a4:00:29:e7: 13:22:6e:2d:01:ba:88:f6:10:4a:f2:bf:84:35:97: 60:f7:5d:c4:51:0a:31:b4:3c:9c:3b:57:10:82:05: f9:fb:84:4e:7d:d0:5e:6e:87:50:83:f0:6b:b3:db: 71:7b:1b:cf:bf:d8:5d:5a:0b:8d:e4:0f:d9:dc:37: f4:1a:68:d0:34:1f:16:55:7b:8a:4c:3e:1c:3f:cf: 85:88:06:d2:ad:cb:6d:ef:32:04:b2:fd:f7:66:3e: 29:d0:1a:30:cd:f4:35:67:08:fc:92:b6:14:f4:e3: 5d:86:9f:1a:55:38:cd:96:73:88:dd:73:63:80:22: d8:dd:8b:53:4e:52:f4:30:bb:d7:ce:56:9f:9e:01: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D2:BE:78:B6:A3:68:AC:9C:75:40:C5:07:C8:E3:41:76:B0:B6:C7 X509v3 Authority Key Identifier: keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b5:7a:b0:71:5f:4d:f9:d0:78:f0:93:47:4a:b1:d9:f3:98: b8:f1:f1:8c:6b:91:c3:f3:ec:97:56:4b:a1:13:34:d3:ef:52: 33:68:d1:c6:8f:30:76:42:95:0f:bc:7d:3a:1a:fa:9b:cf:fc: 27:55:38:70:3c:d6:7a:6b:ab:bb:3c:ff:7b:5e:97:7b:a3:1b: 17:a7:28:cd:70:e6:89:0d:7a:a8:97:bb:e7:b3:fb:68:35:a1: cb:66:5d:a3:ec:a2:4f:f0:10:47:13:74:8a:00:98:a6:12:a0: 95:c9:57:34:e7:a2:85:9c:34:8a:42:96:92:e8:96:1b:b8:7f: 9d:2f:91:20:ff:b5:1b:d3:32:79:8d:cd:cb:b3:bd:88:a5:7c: 82:d9:13:11:de:63:6e:4e:92:80:7c:68:1a:5e:46:b7:8a:91: 03:e3:bf:af:8b:e1:d0:17:14:5f:be:0c:e8:60:91:08:89:f3: 15:d7:17:b8:50:08:08:9d:81:e1:0d:cb:a0:57:e6:dc:35:eb: a2:2f:a9:2c:4a:d2:b3:69:53:bf:0c:e8:08:07:4d:cb:df:5a: cd:73:35:bc:e3:16:f5:38:33:aa:5c:02:6e:e0:cc:c7:44:e0: 4e:8b:8c:98:ec:93:e1:e3:66:91:0a:5f:f6:93:b5:fa:91:22: 52:31:f3:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv2IflsgcTC8Uky+VyqRKKxx4SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4 RUJCMDhCNTAeFw0yNjA1MTIxNTQ1MjBaFw0yNjA1MTMxNjE0MjBaMDMxMTAvBgNV BAMTKEQyRDJCRTc4QjZBMzY4QUM5Qzc1NDBDNTA3QzhFMzQxNzZCMEI2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kst8uUvusnXjd4vbOmc2qS3s A8CuviUg/BywIuH0LQuTPhM4hcvS/R3/QJWQV8pWOZfSDlWjgZasF9NrpGVzbhWl a8/eU1z/eeYRVo9AubXaIE89ZRI199HM0E6aEMcjLjnLg8DQ8QfFmG4i+km96lpC pAAp5xMibi0Buoj2EEryv4Q1l2D3XcRRCjG0PJw7VxCCBfn7hE590F5uh1CD8Guz 23F7G8+/2F1aC43kD9ncN/QaaNA0HxZVe4pMPhw/z4WIBtKty23vMgSy/fdmPinQ GjDN9DVnCPySthT0412GnxpVOM2Wc4jdc2OAItjdi1NOUvQwu9fOVp+eAdFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tK+eLajaKycdUDFB8jjQXawtscwHwYDVR0j BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1 NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw OEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2 RjY4RUJCMDhCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi1erBxX0350Hjwk0dKsdnzmLjx8YxrkcPz 7JdWS6ETNNPvUjNo0caPMHZClQ+8fToa+pvP/CdVOHA81nprq7s8/3tel3ujGxen KM1w5okNeqiXu+ez+2g1octmXaPsok/wEEcTdIoAmKYSoJXJVzTnooWcNIpClpLo lhu4f50vkSD/tRvTMnmNzcuzvYilfILZExHeY25OkoB8aBpeRreKkQPjv6+L4dAX FF++DOhgkQiJ8xXXF7hQCAidgeENy6BX5tw166IvqSxK0rNpU78M6AgHTcvfWs1z NbzjFvU4M6pcAm7gzMdE4E6LjJjsk+HjZpEKX/aTtfqRIlIx85I= -----END CERTIFICATE-----Generated at Wed May 13 04:09:33 2026 by rpki-client