$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: 9+p9oT0cnb7d/Pw64BOYq/R+2ULjPH3X9KyTCAEEyD4= Subject key identifier: 8D:BE:26:6A:41:24:BF:51:08:04:F3:55:FC:A9:FB:D6:0A:BD:94:7D Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 14F11F406668ABF76025A96578617D68AAB844F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:02:34 +0000 Manifest this update: Wed 17 Jun 2026 07:57:34 +0000 Manifest next update: Thu 18 Jun 2026 09:16:34 +0000 Files and hashes: 1: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 2: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 3: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 4: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: HwxHf9+WWoOFUspkWhanfvll+NbVvW/bRUMDhKJvVGI=) 5: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 6: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f1:1f:40:66:68:ab:f7:60:25:a9:65:78:61:7d:68:aa:b8:44:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Jun 17 07:57:34 2026 GMT Not After : Jun 18 09:16:34 2026 GMT Subject: CN=8DBE266A4124BF510804F355FCA9FBD60ABD947D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:bb:92:86:53:b4:b7:ac:99:cc:02:98:4d: d0:41:6d:37:7e:ef:58:c9:59:2e:4c:32:3a:5c:b5: b1:53:90:e7:d4:a5:37:e8:2a:28:19:a6:84:0e:0d: 10:63:aa:e6:aa:db:a3:40:51:14:9a:2f:4a:86:45: 5f:ca:97:3f:67:26:c3:da:a4:36:ac:df:26:d1:96: ec:47:17:ae:6d:f2:ef:a8:38:dc:6b:4a:72:7d:27: cc:dd:5b:0b:ec:b7:51:8a:4d:7b:9c:b4:06:0a:31: 6f:05:1a:40:55:80:f9:ec:8f:4f:f4:c2:4a:c9:33: c7:15:e0:23:a7:99:f2:c5:24:a5:a4:a7:2f:60:36: 34:1c:6f:39:ee:d4:11:e4:67:70:b5:e2:e9:2f:bb: 9a:86:c1:ed:0b:92:d9:4b:57:8e:43:80:cc:5a:c5: ff:a7:27:d4:f4:ee:cd:1f:02:64:ba:48:a2:3e:30: 20:67:16:fb:3f:7e:5c:29:71:fb:6d:83:22:8e:06: 05:04:4a:a7:63:f2:49:9c:e2:29:b0:57:62:e6:c5: eb:2b:94:d6:9e:5b:f8:65:96:96:ee:15:eb:ec:b9: 6f:da:8b:34:b8:51:15:83:46:dd:e7:e1:2d:9d:e7: c7:fc:73:23:48:f7:fe:51:79:34:b5:17:30:25:92: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BE:26:6A:41:24:BF:51:08:04:F3:55:FC:A9:FB:D6:0A:BD:94:7D X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e4:70:bb:50:df:e1:e4:b8:9b:70:36:49:0b:7f:79:ac:55: cc:c3:93:09:4d:6e:41:a8:4a:c4:e0:4c:7d:f7:82:66:95:3f: 0e:44:7f:0c:75:05:5a:54:fc:41:77:ed:2b:e9:fa:67:b0:c7: 34:f7:79:8d:60:0f:9c:7f:81:c6:ab:b5:d0:16:ca:37:f1:b5: d6:e4:93:f0:61:e3:66:fa:5f:db:48:51:dc:53:b6:52:6b:0a: 6a:98:3b:05:38:cb:73:fb:78:31:5b:73:91:af:4e:22:82:18: f2:33:79:c1:33:cf:21:0c:07:c2:cf:42:39:dc:83:25:f3:6b: af:a4:44:8c:d2:ef:d4:73:5a:19:c9:fc:24:8f:97:9a:08:a7: 75:41:db:87:d5:3f:64:60:3b:c9:6a:03:1b:fb:da:49:43:38: 3d:93:1d:b3:77:76:0d:07:bd:83:65:98:13:4a:33:9c:eb:b4: bd:1e:1e:d5:3a:92:d8:0a:4c:0c:2d:7e:33:5c:16:6b:04:00: 71:7d:5c:ab:f5:5d:ef:08:ec:e5:8d:f8:d4:fb:66:9c:fa:14: 5f:cd:9a:1e:a8:ad:8b:34:3e:52:f4:a7:97:76:4f:d7:4e:85: 3d:9b:27:2c:b8:e4:90:43:e2:37:fe:38:4a:09:88:91:eb:d0: c7:3b:7e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPEfQGZoq/dgJalleGF9aKq4RPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA2MTcwNzU3MzRaFw0yNjA2MTgwOTE2MzRaMDMxMTAvBgNV BAMTKDhEQkUyNjZBNDEyNEJGNTEwODA0RjM1NUZDQTlGQkQ2MEFCRDk0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDbuShlO0t6yZzAKYTdBBbTd+ 71jJWS5MMjpctbFTkOfUpTfoKigZpoQODRBjquaq26NAURSaL0qGRV/Klz9nJsPa pDas3ybRluxHF65t8u+oONxrSnJ9J8zdWwvst1GKTXuctAYKMW8FGkBVgPnsj0/0 wkrJM8cV4COnmfLFJKWkpy9gNjQcbznu1BHkZ3C14ukvu5qGwe0LktlLV45DgMxa xf+nJ9T07s0fAmS6SKI+MCBnFvs/flwpcfttgyKOBgUESqdj8kmc4imwV2Lmxesr lNaeW/hllpbuFevsuW/aizS4URWDRt3n4S2d58f8cyNI9/5ReTS1FzAlki1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjb4makEkv1EIBPNV/Kn71gq9lH0wHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbkcLtQ3+HkuJtwNkkLf3msVczDkwlNbkGo SsTgTH33gmaVPw5Efwx1BVpU/EF37Svp+mewxzT3eY1gD5x/gcartdAWyjfxtdbk k/Bh42b6X9tIUdxTtlJrCmqYOwU4y3P7eDFbc5GvTiKCGPIzecEzzyEMB8LPQjnc gyXza6+kRIzS79RzWhnJ/CSPl5oIp3VB24fVP2RgO8lqAxv72klDOD2THbN3dg0H vYNlmBNKM5zrtL0eHtU6ktgKTAwtfjNcFmsEAHF9XKv1Xe8I7OWN+NT7Zpz6FF/N mh6orYs0PlL0p5d2T9dOhT2bJyy45JBD4jf+OEoJiJHr0Mc7fpk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:38 2026 by rpki-client