$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: yWQOmZN+0Q7diGflnLy0sE6ClEPceMKU0KtSkFjlsqA= Subject key identifier: 8C:44:93:B8:5C:E3:BF:F0:E7:7D:4F:09:1E:14:4B:D4:C5:64:53:B0 Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 0697DAC469D84C183EE1DC4E08ED0FA624F27851 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 22:30:45 +0000 Manifest this update: Mon 02 Nov 2026 22:25:45 +0000 Manifest next update: Tue 03 Nov 2026 23:16:45 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) 2: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: Cdakt+w6zjKrHLfoQLwgbLUPq5Y6DB3J6nV2UmNV4Dc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 23:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:da:c4:69:d8:4c:18:3e:e1:dc:4e:08:ed:0f:a6:24:f2:78:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Nov 2 22:25:45 2026 GMT Not After : Nov 3 23:16:45 2026 GMT Subject: CN=8C4493B85CE3BFF0E77D4F091E144BD4C56453B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:4a:f5:4b:d0:1b:46:de:09:fe:3e:88:17: f3:06:40:c5:ce:d6:7e:29:82:d0:e0:1c:d6:77:64: 21:5f:2a:e7:2f:e2:6f:96:ce:dc:bf:4e:cb:d1:a1: 99:65:a0:c3:ef:2a:3e:f4:75:92:9c:8a:58:54:50: 7e:e8:3a:bc:46:00:f8:70:86:2c:a8:a3:60:fc:b8: 3f:a6:b3:59:c2:ad:1b:ff:e6:95:b0:11:31:93:9f: dc:ee:88:58:59:d7:e2:0b:10:65:e4:51:d6:cc:4a: f8:b7:fa:ba:8a:5d:5c:6a:7b:c3:93:a7:20:e2:71: de:86:11:26:71:d9:2f:64:14:ec:24:67:04:ac:26: 7c:92:de:92:02:97:94:9a:ad:e3:6c:13:f8:6b:c7: 50:8e:81:47:76:cf:20:99:ba:81:b2:45:72:68:2e: ec:be:a8:21:62:67:f4:3e:f7:72:c3:37:f7:70:21: 75:09:93:05:76:d8:0d:03:10:c7:d7:6b:73:42:e2: 1a:73:b2:11:65:2b:75:e1:1b:78:13:a5:21:3c:74: eb:c5:1d:73:40:d4:4d:ee:ec:e1:50:16:5d:95:31: db:d3:37:d5:17:4d:27:b0:ea:4a:3d:a0:4a:e0:2b: ca:19:c3:a3:75:5c:3a:18:1b:d9:0e:a6:4e:20:35: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:44:93:B8:5C:E3:BF:F0:E7:7D:4F:09:1E:14:4B:D4:C5:64:53:B0 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:bb:a6:c6:6f:d7:de:38:ba:25:50:18:14:fe:3c:e2:95: 7e:f2:a6:f8:11:47:5e:d1:13:90:c4:93:4f:b8:13:3c:58:15: 9b:3d:b6:ee:49:b2:ce:c9:6c:05:ad:72:de:85:e8:ef:c4:11: 4d:4b:b3:c9:e5:81:48:e9:af:54:01:1b:71:1b:d3:73:e4:99: 30:e5:77:6b:e8:ec:c1:24:91:5c:f9:48:3a:65:44:71:08:a8: 31:d6:db:ae:b7:44:ab:3b:e7:dd:ec:17:00:7e:cd:7d:0d:ec: 3e:f7:4a:3c:ae:b8:ad:8b:30:f4:e9:2f:78:45:22:6a:6f:59: cd:67:3a:ed:66:5e:87:09:56:53:c4:78:ca:a4:50:c4:00:d3: d2:70:78:4d:92:ec:ef:5b:d9:b9:7f:f2:7f:b4:16:ed:07:76: 21:32:0c:2a:3c:fe:62:95:6d:04:cc:b0:49:c2:7f:a5:31:a0: 53:66:a3:9c:b7:44:92:a8:22:3a:be:a4:c3:b6:99:fc:b2:0a: 56:17:49:63:f7:bd:ed:d1:90:eb:6a:da:fe:53:b5:2e:5a:91: 45:45:83:d6:f6:85:89:05:13:60:c9:78:8e:40:5c:68:8f:5a: 2d:6c:a5:0b:12:89:bf:b9:39:0d:69:7a:4c:57:69:7a:53:55: b7:a2:d5:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpfaxGnYTBg+4dxOCO0PpiTyeFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjExMDIyMjI1NDVaFw0yNjExMDMyMzE2NDVaMDMxMTAvBgNV BAMTKDhDNDQ5M0I4NUNFM0JGRjBFNzdENEYwOTFFMTQ0QkQ0QzU2NDUzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ0r1S9AbRt4J/j6IF/MGQMXO 1n4pgtDgHNZ3ZCFfKucv4m+Wzty/TsvRoZlloMPvKj70dZKcilhUUH7oOrxGAPhw hiyoo2D8uD+ms1nCrRv/5pWwETGTn9zuiFhZ1+ILEGXkUdbMSvi3+rqKXVxqe8OT pyDicd6GESZx2S9kFOwkZwSsJnyS3pICl5SareNsE/hrx1COgUd2zyCZuoGyRXJo Luy+qCFiZ/Q+93LDN/dwIXUJkwV22A0DEMfXa3NC4hpzshFlK3XhG3gTpSE8dOvF HXNA1E3u7OFQFl2VMdvTN9UXTSew6ko9oErgK8oZw6N1XDoYG9kOpk4gNRv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjESTuFzjv/DnfU8JHhRL1MVkU7AwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJbu6bGb9feOLolUBgU/jzilX7ypvgRR17R E5DEk0+4EzxYFZs9tu5Jss7JbAWtct6F6O/EEU1Ls8nlgUjpr1QBG3Eb03PkmTDl d2vo7MEkkVz5SDplRHEIqDHW2663RKs7593sFwB+zX0N7D73SjyuuK2LMPTpL3hF ImpvWc1nOu1mXocJVlPEeMqkUMQA09JweE2S7O9b2bl/8n+0Fu0HdiEyDCo8/mKV bQTMsEnCf6UxoFNmo5y3RJKoIjq+pMO2mfyyClYXSWP3ve3RkOtq2v5TtS5akUVF g9b2hYkFE2DJeI5AXGiPWi1spQsSib+5OQ1pekxXaXpTVbei1e4= -----END CERTIFICATE-----Generated at Tue Nov 3 14:23:00 2026 by rpki-client