$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: Qm+fdZoPKZ2aeDCSPmyuoseoYIqpI0eDf5vp+8ZQs1k= Subject key identifier: 3F:89:EB:02:B6:6A:D2:2E:CF:F4:45:28:5A:15:AF:71:AA:F1:2F:E9 Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 0177482671DE69E7596E3C64470D0C0E09C89B14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 11:35:12 +0000 Manifest this update: Mon 09 Nov 2026 11:30:12 +0000 Manifest next update: Tue 10 Nov 2026 14:15:12 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) 2: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: Tp5/wM/3wPFJC2AqC7g3nOe5GUH4fSw4hsF/4JZ6TjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:77:48:26:71:de:69:e7:59:6e:3c:64:47:0d:0c:0e:09:c8:9b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Nov 9 11:30:12 2026 GMT Not After : Nov 10 14:15:12 2026 GMT Subject: CN=3F89EB02B66AD22ECFF445285A15AF71AAF12FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:17:0f:8c:16:c3:82:10:e2:6a:d0:cc:63: 59:ae:10:cb:b6:39:6e:02:60:02:69:82:c8:80:24: 3f:08:84:ad:37:8e:ec:38:b7:e5:d4:74:9f:73:a7: ca:a2:db:59:c5:b8:11:9d:b5:3f:f7:88:53:de:92: 5b:00:49:1e:90:13:d9:0e:27:ab:9a:30:fb:dd:1b: 54:56:21:7d:6d:25:5f:48:60:e9:f8:4d:00:0b:ae: c5:a9:aa:a3:a7:12:43:2e:22:9a:88:7e:b3:14:ba: 82:b6:99:c9:10:70:8b:1a:5c:18:19:c2:b4:a5:a9: e8:a9:9f:8c:0a:fc:b0:55:43:33:59:2f:bf:f8:ce: 82:bf:c0:ce:13:47:cd:e8:07:d9:c1:28:ec:73:c0: f5:7b:ec:b8:bb:23:22:7e:92:ad:e0:28:1d:c7:51: cf:b1:88:e7:f0:0d:71:1a:17:39:f7:03:5d:7f:2b: 75:c6:af:2c:fa:7a:2c:f6:c7:dd:cf:d9:e9:a9:af: 18:66:dd:13:41:1e:90:90:d8:29:de:75:07:df:f7: 28:cc:f1:60:58:ce:e7:dc:9d:6a:4d:85:8d:2a:b8: f6:3f:c0:be:fa:ab:6e:26:1f:74:4c:b7:7f:1d:ca: 74:40:6f:fb:f2:c3:6c:c4:0d:51:ca:cd:11:87:4c: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:89:EB:02:B6:6A:D2:2E:CF:F4:45:28:5A:15:AF:71:AA:F1:2F:E9 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2d:6c:43:75:96:5d:5a:6c:a7:fd:ad:38:b8:9e:49:41:8b: 71:59:59:8b:c5:da:0b:44:88:06:e7:8b:ab:a4:a2:09:d6:04: 3d:8a:df:0c:04:07:ee:68:42:8d:c0:1e:18:62:c6:39:22:63: d3:fe:d8:1e:69:86:10:49:70:7d:8c:8f:e6:64:e2:65:d7:5a: 9b:6e:66:4a:c3:78:18:04:c6:a1:33:a0:3b:62:06:87:1e:3a: 58:b5:7b:56:00:14:81:82:db:bb:ed:36:4c:bd:c8:17:d2:38: 06:77:d6:0c:1f:b5:52:c0:62:5e:85:6e:d3:c0:58:1c:06:eb: 70:da:27:e7:90:fb:9e:eb:88:cd:03:d2:40:29:55:0e:59:1d: b7:a3:cd:63:e8:45:4e:95:e0:ca:fd:a9:fc:38:db:06:af:f4: 13:12:8c:cc:4f:55:c3:14:82:53:7f:59:1c:95:f8:a7:6a:50: 5b:16:51:28:c0:fd:12:68:92:cd:62:43:af:2e:16:b7:56:37: 6c:e0:d2:37:f8:13:03:78:ee:3d:fa:79:e1:ca:46:0f:4c:b3: 40:92:b8:0f:cc:b1:0d:5e:6f:cb:7a:95:af:d0:e7:fd:6a:ba: 9b:37:6a:e0:6c:ca:e7:26:88:03:e6:33:ae:1c:0e:99:98:5f: a7:a2:9d:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXdIJnHeaedZbjxkRw0MDgnImxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjExMDkxMTMwMTJaFw0yNjExMTAxNDE1MTJaMDMxMTAvBgNV BAMTKDNGODlFQjAyQjY2QUQyMkVDRkY0NDUyODVBMTVBRjcxQUFGMTJGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFqRcPjBbDghDiatDMY1muEMu2 OW4CYAJpgsiAJD8IhK03juw4t+XUdJ9zp8qi21nFuBGdtT/3iFPeklsASR6QE9kO J6uaMPvdG1RWIX1tJV9IYOn4TQALrsWpqqOnEkMuIpqIfrMUuoK2mckQcIsaXBgZ wrSlqeipn4wK/LBVQzNZL7/4zoK/wM4TR83oB9nBKOxzwPV77Li7IyJ+kq3gKB3H Uc+xiOfwDXEaFzn3A11/K3XGryz6eiz2x93P2emprxhm3RNBHpCQ2CnedQff9yjM 8WBYzufcnWpNhY0quPY/wL76q24mH3RMt38dynRAb/vyw2zEDVHKzRGHTKfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4nrArZq0i7P9EUoWhWvcarxL+kwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMtbEN1ll1abKf9rTi4nklBi3FZWYvF2gtE iAbni6ukognWBD2K3wwEB+5oQo3AHhhixjkiY9P+2B5phhBJcH2Mj+Zk4mXXWptu ZkrDeBgExqEzoDtiBoceOli1e1YAFIGC27vtNky9yBfSOAZ31gwftVLAYl6FbtPA WBwG63DaJ+eQ+57riM0D0kApVQ5ZHbejzWPoRU6V4Mr9qfw42wav9BMSjMxPVcMU glN/WRyV+KdqUFsWUSjA/RJoks1iQ68uFrdWN2zg0jf4EwN47j36eeHKRg9Ms0CS uA/MsQ1eb8t6la/Q5/1qups3auBsyucmiAPmM64cDpmYX6einXo= -----END CERTIFICATE-----Generated at Tue Nov 10 04:12:34 2026 by rpki-client