$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: jUJMLHG4rQcM0+/ruQbJN37XYuUdBmJs1aGwITAS7JU= Subject key identifier: 92:FD:1D:69:CD:9C:BA:75:4E:18:33:38:78:72:18:0D:6D:FD:3B:1F Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 504F0E1C009DB46AC0A18DC547429E6D5441ED76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:42:18 +0000 Manifest this update: Tue 22 Sep 2026 04:37:18 +0000 Manifest next update: Wed 23 Sep 2026 05:04:18 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) 2: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: DHiASofyV56+1Q+1VJ08Ku3QAAis6Rk8mqTJEGueOqw=) 3: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4f:0e:1c:00:9d:b4:6a:c0:a1:8d:c5:47:42:9e:6d:54:41:ed:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Sep 22 04:37:18 2026 GMT Not After : Sep 23 05:04:18 2026 GMT Subject: CN=92FD1D69CD9CBA754E1833387872180D6DFD3B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:cb:68:a5:5f:0d:dc:cf:d0:17:95:f5:b0: 07:07:28:de:cc:79:35:8a:9b:14:ea:aa:6b:60:82: b0:e1:b7:2f:fd:fd:7e:ed:47:26:4e:33:98:0f:3e: fe:83:f0:8f:15:f4:7d:ba:60:1d:0b:28:8c:81:04: 76:c7:0a:07:11:6a:9d:b1:60:20:ee:2c:5b:bd:32: f1:53:67:14:1f:06:14:0e:3c:64:a6:7a:bf:cb:ca: d0:f8:fe:62:86:00:96:a1:5a:a7:c1:1d:4f:91:49: 0d:af:2e:7f:78:3b:39:ae:2c:77:69:96:b8:2a:93: a7:2d:e3:8b:27:8a:d1:f4:f5:79:11:31:de:5b:61: 9e:7c:e0:1d:35:49:1f:c3:32:29:9f:5f:92:cf:ed: 7f:32:62:b4:47:bb:09:54:bc:99:73:d9:54:53:24: 72:45:9d:6b:3e:1a:d1:05:09:77:79:f7:1c:6f:96: 0d:d1:25:8d:31:3b:8f:78:38:55:98:a6:0e:71:c9: e0:92:fd:44:2e:12:74:18:6c:ff:ba:d8:01:15:be: 41:e9:6a:5c:0f:3b:4c:a5:7d:8e:74:32:6c:c0:b2: 48:8d:32:4d:fb:97:60:cd:95:be:75:1b:a7:8a:6c: ca:8e:88:98:01:a4:7f:68:61:9b:2e:b3:eb:de:8a: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FD:1D:69:CD:9C:BA:75:4E:18:33:38:78:72:18:0D:6D:FD:3B:1F X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c4:ef:f1:7a:2b:e0:ac:53:5a:af:e6:5a:1b:d4:b8:26:f4: bf:ee:c2:2f:1a:de:22:dd:ef:32:a7:80:a4:b9:ad:a8:11:16: 94:fc:02:7f:25:b7:e7:46:29:45:c9:21:a4:ef:a7:b9:c6:93: f0:fa:0c:aa:06:79:ca:cb:2f:2e:f5:d6:c3:d4:39:b7:2b:3c: df:e6:ce:6e:92:bf:d2:fa:1a:e5:24:d2:fd:90:a8:b9:75:d9: 18:79:5a:66:1f:22:71:78:50:3d:21:fb:84:69:09:7c:42:5d: 9f:d1:97:f0:6e:75:73:19:a3:52:74:37:7f:96:31:61:48:1b: 19:b5:56:97:6b:ec:57:03:c4:c3:ce:92:90:b6:86:94:ec:00: c1:87:e6:77:2e:d1:9a:01:65:d8:24:ce:57:10:6a:a9:09:49: a4:c4:12:9f:77:1c:a5:1d:a8:24:22:a9:f5:19:71:5b:9e:e4: 71:42:54:0d:5a:5c:c4:a4:b1:66:19:47:01:24:dd:a4:ee:2d: 75:81:f4:e7:bc:fb:84:0b:df:60:56:26:cc:76:8c:ca:35:9c: 63:2f:bc:49:0d:89:69:27:de:df:74:d7:3e:df:1c:dc:17:fd: 76:89:5d:ca:3f:c8:f7:89:32:78:ad:96:90:e4:0c:be:5a:8f: ad:1e:2a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUE8OHACdtGrAoY3FR0KebVRB7XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA5MjIwNDM3MThaFw0yNjA5MjMwNTA0MThaMDMxMTAvBgNV BAMTKDkyRkQxRDY5Q0Q5Q0JBNzU0RTE4MzMzODc4NzIxODBENkRGRDNCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIstopV8N3M/QF5X1sAcHKN7M eTWKmxTqqmtggrDhty/9/X7tRyZOM5gPPv6D8I8V9H26YB0LKIyBBHbHCgcRap2x YCDuLFu9MvFTZxQfBhQOPGSmer/LytD4/mKGAJahWqfBHU+RSQ2vLn94OzmuLHdp lrgqk6ct44snitH09XkRMd5bYZ584B01SR/DMimfX5LP7X8yYrRHuwlUvJlz2VRT JHJFnWs+GtEFCXd59xxvlg3RJY0xO494OFWYpg5xyeCS/UQuEnQYbP+62AEVvkHp alwPO0ylfY50MmzAskiNMk37l2DNlb51G6eKbMqOiJgBpH9oYZsus+veisRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkv0dac2cunVOGDM4eHIYDW39Ox8wHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7E7/F6K+CsU1qv5lob1Lgm9L/uwi8a3iLd 7zKngKS5ragRFpT8An8lt+dGKUXJIaTvp7nGk/D6DKoGecrLLy711sPUObcrPN/m zm6Sv9L6GuUk0v2QqLl12Rh5WmYfInF4UD0h+4RpCXxCXZ/Rl/BudXMZo1J0N3+W MWFIGxm1Vpdr7FcDxMPOkpC2hpTsAMGH5ncu0ZoBZdgkzlcQaqkJSaTEEp93HKUd qCQiqfUZcVue5HFCVA1aXMSksWYZRwEk3aTuLXWB9Oe8+4QL32BWJsx2jMo1nGMv vEkNiWkn3t901z7fHNwX/XaJXco/yPeJMnitlpDkDL5aj60eKug= -----END CERTIFICATE-----Generated at Tue Sep 22 10:43:39 2026 by rpki-client