$ rpki-client -vvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: nF/bQEY8gQba3IrELXfdvqmDNTQa40hi4V90kBmwyIg= Subject key identifier: 95:03:EA:95:9C:C3:01:05:C9:D4:B7:9F:9D:BB:90:D2:F4:E9:E2:E7 Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 4E242BEDE547EA35D1F143B6619D7B4F26931E24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:40:02 +0000 Manifest this update: Tue 02 Jun 2026 16:35:02 +0000 Manifest next update: Wed 03 Jun 2026 18:17:02 +0000 Files and hashes: 1: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: cN0r1VDgW97EJQIcB7pFVvhwhP2S7bCzcqIFTmuuttc=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:24:2b:ed:e5:47:ea:35:d1:f1:43:b6:61:9d:7b:4f:26:93:1e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Jun 2 16:35:02 2026 GMT Not After : Jun 3 18:17:02 2026 GMT Subject: CN=9503EA959CC30105C9D4B79F9DBB90D2F4E9E2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:b5:f6:59:a6:26:09:f3:02:16:0c:73:35: 95:57:6c:03:1a:79:df:f2:9d:b1:0d:66:df:85:f3: eb:34:6d:3a:37:05:c3:14:d5:ea:b0:16:1c:90:cf: a5:27:de:d0:0b:99:5b:be:06:4e:4e:9c:27:eb:87: 6d:3b:b4:e5:48:f0:d6:f4:7e:4e:e3:db:16:ca:7d: d5:0d:27:1a:f2:48:a1:04:cc:33:a2:de:26:f5:f4: b1:70:c5:a1:d1:e8:12:42:f5:c1:2e:fa:ed:6e:df: 5f:e7:ec:29:0f:f2:bf:c3:32:46:da:bf:c2:43:30: 70:fd:75:44:d6:dd:2c:da:6c:c7:46:f9:18:24:4c: cc:a2:26:ba:cd:00:dc:16:35:7e:09:2c:ae:b6:7a: b8:84:51:36:0b:e3:73:39:92:66:6b:57:29:3e:fd: e9:9b:16:79:1f:14:3d:6b:61:02:05:05:2d:61:fb: bd:09:42:3d:99:d9:ed:3f:db:62:bc:49:f9:15:23: 8a:6e:b3:be:13:dd:99:1a:87:8a:63:5b:2a:12:f1: 8a:eb:1d:f5:6f:f4:8c:f5:9d:cf:96:30:c2:e6:4c: d4:41:4f:e7:e6:56:86:5a:e1:c6:28:90:23:ff:ca: 9f:b2:04:b4:fe:bc:cf:46:41:8a:ca:04:e5:25:5f: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:03:EA:95:9C:C3:01:05:C9:D4:B7:9F:9D:BB:90:D2:F4:E9:E2:E7 X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:b1:fa:30:e4:4b:b9:a3:1e:fd:46:12:93:e8:a9:a9:e0: 49:6c:b3:4c:0a:4e:5b:7f:19:2c:a5:2b:96:23:52:4c:38:66: 84:03:3b:7e:61:45:f6:82:8b:44:7a:6a:e8:ea:af:73:4c:d1: e9:df:ac:9a:7b:d2:96:dc:c4:5e:26:9f:a0:78:6c:0c:1b:ab: e0:f9:0d:f5:7d:e5:85:48:cc:21:39:0c:77:3d:5e:cd:bd:8b: ee:7c:6a:73:35:e1:fc:e6:5d:b3:b5:fc:fd:8f:a5:46:3b:4e: 50:c8:d3:d0:de:e6:a3:14:12:1a:ff:0e:62:79:db:58:57:93: 18:bf:43:5f:f0:25:fa:17:5f:13:95:b0:3f:bb:06:64:bb:80: a5:6a:6a:cd:08:e3:18:d8:1b:96:50:e9:7a:84:00:d0:cf:91: 10:0b:c2:2b:45:12:fd:ea:ce:cc:ca:26:e6:9e:f4:9d:c3:1d: a1:07:55:72:03:e5:f2:e5:30:0b:c5:ea:f7:b4:d5:0d:a9:4a: d9:87:5a:0d:f6:1a:87:8f:bf:00:72:44:ca:69:d2:44:60:0b: 92:87:d7:92:24:d3:48:6e:04:58:d3:89:82:33:fc:9a:d0:08: c9:fd:e0:12:2b:3c:b1:60:06:27:a2:0a:8c:1c:9e:37:81:8c: 3a:4f:31:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiQr7eVH6jXR8UO2YZ17TyaTHiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA2MDIxNjM1MDJaFw0yNjA2MDMxODE3MDJaMDMxMTAvBgNV BAMTKDk1MDNFQTk1OUNDMzAxMDVDOUQ0Qjc5RjlEQkI5MEQyRjRFOUUyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkubX2WaYmCfMCFgxzNZVXbAMa ed/ynbENZt+F8+s0bTo3BcMU1eqwFhyQz6Un3tALmVu+Bk5OnCfrh207tOVI8Nb0 fk7j2xbKfdUNJxrySKEEzDOi3ib19LFwxaHR6BJC9cEu+u1u31/n7CkP8r/DMkba v8JDMHD9dUTW3SzabMdG+RgkTMyiJrrNANwWNX4JLK62eriEUTYL43M5kmZrVyk+ /embFnkfFD1rYQIFBS1h+70JQj2Z2e0/22K8SfkVI4pus74T3Zkah4pjWyoS8Yrr HfVv9Iz1nc+WMMLmTNRBT+fmVoZa4cYokCP/yp+yBLT+vM9GQYrKBOUlXy6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQPqlZzDAQXJ1LefnbuQ0vTp4ucwHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT/sfow5Eu5ox79RhKT6Kmp4Elss0wKTlt/ GSylK5YjUkw4ZoQDO35hRfaCi0R6aujqr3NM0enfrJp70pbcxF4mn6B4bAwbq+D5 DfV95YVIzCE5DHc9Xs29i+58anM14fzmXbO1/P2PpUY7TlDI09De5qMUEhr/DmJ5 21hXkxi/Q1/wJfoXXxOVsD+7BmS7gKVqas0I4xjYG5ZQ6XqEANDPkRALwitFEv3q zszKJuae9J3DHaEHVXID5fLlMAvF6ve01Q2pStmHWg32GoePvwByRMpp0kRgC5KH 15Ik00huBFjTiYIz/JrQCMn94BIrPLFgBieiCowcnjeBjDpPMdM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:44:04 2026 by rpki-client