$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: 3eIadXMu+UsTi24g+y7LMh4dPR09wewnCQlCyTINDBI= Subject key identifier: 6F:D3:55:62:B4:70:BF:81:82:AD:BC:B8:EB:70:5B:E5:AB:BB:49:88 Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 100BCAD2C9BB961E8B937325DA8C2106E2638F7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: BD Signing time: Sun 20 Sep 2026 07:36:29 +0000 Manifest this update: Sun 20 Sep 2026 07:31:29 +0000 Manifest next update: Mon 21 Sep 2026 09:45:29 +0000 Files and hashes: 1: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: af0JLXhhLrzTg3zsixqop+Fs4bCxvdZoyibtF4qex7M=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:ca:d2:c9:bb:96:1e:8b:93:73:25:da:8c:21:06:e2:63:8f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Sep 20 07:31:29 2026 GMT Not After : Sep 21 09:45:29 2026 GMT Subject: CN=6FD35562B470BF8182ADBCB8EB705BE5ABBB4988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:b1:f2:72:86:4c:af:43:f6:41:e7:98:16: 04:0b:21:c8:59:7e:51:b8:4f:0f:26:4f:e5:71:a5: 7a:08:73:33:ad:ff:03:28:82:fd:6f:4c:d5:c6:53: 42:85:e6:20:3e:30:c8:26:4f:7e:26:96:1f:81:18: be:7e:58:7c:f1:0b:9a:b6:e5:1c:56:b4:5d:bc:00: 4f:e2:3b:8b:af:1a:3e:d7:2c:53:78:4d:df:3d:e7: 61:3c:e5:9a:85:eb:91:b6:fd:0c:02:c4:5f:db:54: 37:12:a6:9f:72:8a:81:9f:7c:81:7e:a1:df:e5:0f: 98:49:52:c2:94:84:27:0e:f3:9a:ad:8c:bd:65:ff: e8:63:46:b3:b3:5e:9b:d0:14:37:52:ea:d8:a4:24: 60:1f:9c:90:25:c8:96:d0:12:08:07:70:5c:b8:18: e2:2d:67:85:47:fd:48:b8:33:c0:8f:f5:e4:0c:67: e3:a0:41:d6:e0:bd:e6:ab:0c:40:9c:c3:e7:5f:7d: 27:9c:86:73:39:64:21:29:86:94:fc:9e:da:e0:46: 46:f2:3d:c2:84:57:18:7f:c4:53:7a:91:87:50:1b: 2b:e3:4f:7a:82:09:06:44:23:93:6d:b9:40:b2:bc: bd:f3:ad:77:89:5b:3c:68:96:3e:72:43:88:01:90: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D3:55:62:B4:70:BF:81:82:AD:BC:B8:EB:70:5B:E5:AB:BB:49:88 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e2:4d:3e:9c:b3:9e:74:00:ad:d6:b1:14:65:b5:06:cb:9c: 37:7c:ed:b7:f3:dc:51:60:73:0c:26:10:f4:5f:47:e1:f2:07: e0:db:cd:d6:f2:b7:cc:cd:9d:ea:cb:9f:e4:d2:7c:13:c5:20: c4:ef:43:fc:9f:62:d2:1a:3c:2d:20:94:5e:08:96:08:ed:a3: 1e:87:fa:da:69:e2:f0:16:ff:97:35:3e:c8:5b:1c:61:5c:f7: 8c:b9:ce:bd:a8:ef:5b:0c:74:68:8c:23:b3:5e:99:66:65:6f: 0a:ba:d7:e5:85:7a:c1:88:99:d1:d5:95:70:f7:e7:96:e8:8b: e7:20:81:19:49:48:de:7d:f4:4e:fa:fe:7d:86:09:8f:92:01: b7:20:9e:02:aa:61:9d:b8:d7:61:47:18:bc:b0:ec:9b:b3:ce: 95:ea:45:b6:d0:e8:4d:4e:d3:2e:03:3a:7f:e9:1f:60:93:f0: c4:ba:51:29:5a:06:2f:49:9e:79:11:38:02:7a:7b:8b:6b:13: 77:05:2e:a4:14:63:23:25:ec:ed:54:37:37:f7:3f:15:9e:4e: 66:9d:52:3a:57:ec:77:86:9f:e3:3f:ae:f7:db:dd:79:dd:1c: 90:54:17:62:6d:6c:4f:06:0f:6c:22:e2:1f:ae:cc:f4:5c:5b: a2:f7:21:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAvK0sm7lh6Lk3Ml2owhBuJjj3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA5MjAwNzMxMjlaFw0yNjA5MjEwOTQ1MjlaMDMxMTAvBgNV BAMTKDZGRDM1NTYyQjQ3MEJGODE4MkFEQkNCOEVCNzA1QkU1QUJCQjQ5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5bHycoZMr0P2QeeYFgQLIchZ flG4Tw8mT+VxpXoIczOt/wMogv1vTNXGU0KF5iA+MMgmT34mlh+BGL5+WHzxC5q2 5RxWtF28AE/iO4uvGj7XLFN4Td8952E85ZqF65G2/QwCxF/bVDcSpp9yioGffIF+ od/lD5hJUsKUhCcO85qtjL1l/+hjRrOzXpvQFDdS6tikJGAfnJAlyJbQEggHcFy4 GOItZ4VH/Ui4M8CP9eQMZ+OgQdbgvearDECcw+dffSechnM5ZCEphpT8ntrgRkby PcKEVxh/xFN6kYdQGyvjT3qCCQZEI5NtuUCyvL3zrXeJWzxolj5yQ4gBkFmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9NVYrRwv4GCrby463Bb5au7SYgwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPiTT6cs550AK3WsRRltQbLnDd87bfz3FFg cwwmEPRfR+HyB+Dbzdbyt8zNnerLn+TSfBPFIMTvQ/yfYtIaPC0glF4Ilgjtox6H +tpp4vAW/5c1PshbHGFc94y5zr2o71sMdGiMI7NemWZlbwq61+WFesGImdHVlXD3 55boi+cggRlJSN599E76/n2GCY+SAbcgngKqYZ2412FHGLyw7JuzzpXqRbbQ6E1O 0y4DOn/pH2CT8MS6USlaBi9JnnkROAJ6e4trE3cFLqQUYyMl7O1UNzf3PxWeTmad UjpX7HeGn+M/rvfb3XndHJBUF2JtbE8GD2wi4h+uzPRcW6L3IbE= -----END CERTIFICATE-----Generated at Mon Sep 21 01:28:49 2026 by rpki-client