$ rpki-client -vvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: 8EGep60+nt+tl0IQh/FeEUjevtN933dqPEgPiEiyGFo= Subject key identifier: 6F:85:4C:E0:84:AE:03:05:AA:17:72:03:E6:AE:6C:2F:3B:03:E3:F3 Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 6E88688CDC6CC9229A49FF1200D516E4927FD872 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:57:29 +0000 Manifest this update: Mon 20 Jul 2026 16:52:29 +0000 Manifest next update: Tue 21 Jul 2026 20:43:29 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) 2: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: PrfPvWMesUljrm2nnVlykq/Eg/Vdb4RZggIWfhnUzoM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:88:68:8c:dc:6c:c9:22:9a:49:ff:12:00:d5:16:e4:92:7f:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Jul 20 16:52:29 2026 GMT Not After : Jul 21 20:43:29 2026 GMT Subject: CN=6F854CE084AE0305AA177203E6AE6C2F3B03E3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:97:ba:ef:fc:73:53:bb:0e:ea:d0:90:62: d9:c6:11:c9:5b:28:5d:3e:85:ca:c8:04:37:6f:56: 54:3d:1a:07:92:af:0e:53:69:a6:f0:60:54:f2:14: 6a:3b:f8:a8:29:f6:1c:64:2c:38:a2:8e:2f:29:38: 0a:cb:87:24:b6:db:12:ce:a9:37:44:85:d4:60:17: 8f:d9:2a:6d:ea:fa:b6:7f:d1:02:41:9e:ec:6b:49: 94:16:3a:38:a8:0d:92:e7:92:b6:29:9a:8c:9d:42: db:8b:9a:4e:8e:ed:fe:5b:be:0e:12:ea:9c:9e:eb: 5b:5f:66:e7:78:4e:bf:ce:ea:29:be:1e:16:f8:cc: c7:8b:37:e2:fa:6a:3f:8b:8b:7c:0b:da:a9:48:b0: 1e:5e:10:a3:b6:05:4a:7b:43:63:43:24:b0:a1:d7: ec:20:60:91:ff:47:0b:c9:a9:18:91:2d:35:52:2b: be:19:81:b9:5b:8c:5c:08:12:a1:c8:3c:68:f7:09: 5a:54:e9:57:1d:b7:17:cb:d8:60:7b:bf:e2:97:05: 01:0b:f2:cb:9c:bf:e0:70:51:8c:b1:bb:90:78:7f: 11:03:c1:66:9b:99:47:92:fc:e8:7f:6c:c3:4b:3a: c7:d0:bd:b8:0d:15:38:ce:94:58:b4:bb:92:00:f9: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:4C:E0:84:AE:03:05:AA:17:72:03:E6:AE:6C:2F:3B:03:E3:F3 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e8:2b:d8:f8:fa:5f:15:01:60:80:da:12:ae:0a:fc:c5:ea: 61:c4:81:cc:e0:85:59:d9:6d:c0:5f:87:68:9b:8a:d0:50:74: 03:27:84:bb:37:e0:9c:b3:a0:dc:8a:64:01:8c:96:f2:a9:17: c2:9c:6c:69:f9:af:bc:a0:b0:0d:2f:e9:04:31:74:57:6d:0b: b9:0d:75:62:ed:e1:b5:52:4f:03:64:54:48:9d:6f:98:6d:92: 41:e0:32:bd:20:ba:e2:81:c7:d0:83:5e:cc:b2:5c:a4:7b:6e: 9e:d1:c9:c8:21:29:a4:d6:b7:dd:de:a8:e8:c7:18:51:98:7d: e2:a8:01:95:6a:0a:2d:12:33:78:5a:af:73:c4:0e:8c:60:bc: 56:01:59:2a:c7:ef:ad:61:71:8c:b5:b1:90:86:78:1d:2e:a7: ea:58:80:66:74:e7:9f:b9:16:e6:97:2c:31:f2:77:78:71:8d: 69:1c:f6:88:83:96:be:41:6d:48:00:42:f3:8d:8e:cc:5c:f1: 7a:0c:9e:9e:71:0e:a2:4e:a4:78:6a:fa:13:4b:fb:ad:12:21: fe:5a:0b:98:3f:5f:28:3b:1a:2e:90:57:d5:5b:35:a9:29:31: c9:10:c0:84:38:c7:4e:7d:96:4c:57:a8:1a:f8:0e:38:d5:18: 3f:7f:d4:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbohojNxsySKaSf8SANUW5JJ/2HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA3MjAxNjUyMjlaFw0yNjA3MjEyMDQzMjlaMDMxMTAvBgNV BAMTKDZGODU0Q0UwODRBRTAzMDVBQTE3NzIwM0U2QUU2QzJGM0IwM0UzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsm5e67/xzU7sO6tCQYtnGEclb KF0+hcrIBDdvVlQ9GgeSrw5TaabwYFTyFGo7+Kgp9hxkLDiiji8pOArLhyS22xLO qTdEhdRgF4/ZKm3q+rZ/0QJBnuxrSZQWOjioDZLnkrYpmoydQtuLmk6O7f5bvg4S 6pye61tfZud4Tr/O6im+Hhb4zMeLN+L6aj+Li3wL2qlIsB5eEKO2BUp7Q2NDJLCh 1+wgYJH/RwvJqRiRLTVSK74ZgblbjFwIEqHIPGj3CVpU6VcdtxfL2GB7v+KXBQEL 8sucv+BwUYyxu5B4fxEDwWabmUeS/Oh/bMNLOsfQvbgNFTjOlFi0u5IA+bkXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4VM4ISuAwWqF3ID5q5sLzsD4/MwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLoK9j4+l8VAWCA2hKuCvzF6mHEgczghVnZ bcBfh2ibitBQdAMnhLs34JyzoNyKZAGMlvKpF8KcbGn5r7ygsA0v6QQxdFdtC7kN dWLt4bVSTwNkVEidb5htkkHgMr0guuKBx9CDXsyyXKR7bp7RycghKaTWt93eqOjH GFGYfeKoAZVqCi0SM3har3PEDoxgvFYBWSrH761hcYy1sZCGeB0up+pYgGZ055+5 FuaXLDHyd3hxjWkc9oiDlr5BbUgAQvONjsxc8XoMnp5xDqJOpHhq+hNL+60SIf5a C5g/Xyg7Gi6QV9VbNakpMckQwIQ4x059lkxXqBr4DjjVGD9/1L8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:25:35 2026 by rpki-client