$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: bKNbVEy7n6S7DwRqRHmCj6udf0Ct+M083LyV4HWhKEU= Subject key identifier: E4:BF:A2:16:DE:16:54:9D:A0:57:CB:EE:D2:F5:87:A9:BD:85:98:97 Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 23EDFA3EAFF1A7439E2B2DAD766B53EC383844BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:30:36 +0000 Manifest this update: Wed 16 Sep 2026 21:25:36 +0000 Manifest next update: Thu 17 Sep 2026 23:27:36 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) 2: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: 0Rgpf82FE18K3yg6PnHCea782dgoPUGZxbO0FNvsVRg=) 3: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:fa:3e:af:f1:a7:43:9e:2b:2d:ad:76:6b:53:ec:38:38:44:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Sep 16 21:25:36 2026 GMT Not After : Sep 17 23:27:36 2026 GMT Subject: CN=E4BFA216DE16549DA057CBEED2F587A9BD859897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:a1:78:2e:3a:8d:77:98:01:75:3d:21:60: e2:51:a4:ca:fe:38:64:a3:89:97:69:80:c6:32:5c: ae:55:8b:e9:1a:a0:23:f1:29:56:64:d7:14:13:09: 60:57:a2:3f:7d:2c:c2:da:b7:b1:70:ea:32:5a:cd: c5:5a:66:e9:55:83:03:d7:48:c3:c2:08:3a:fd:88: e0:1a:22:d9:4c:de:ab:ab:1d:2e:37:16:5d:e7:82: f0:01:23:27:0f:2f:6e:71:4a:5c:48:c2:33:e9:ec: 6a:f8:d6:b3:cd:ec:23:33:f2:69:13:72:00:ea:77: c4:56:98:4b:09:6a:a3:20:20:af:a6:7c:a4:d8:8a: 36:c4:ee:4f:e6:8f:8d:61:55:b3:5d:97:e6:89:cd: 25:80:80:e3:2d:27:88:ad:fd:3e:72:00:05:9b:91: ea:93:2b:0a:61:55:7c:f8:70:63:f1:f9:d2:0d:0d: 01:7e:be:cb:6d:fe:08:d7:27:42:30:2b:88:2a:52: 51:1a:4f:81:3c:9e:6c:fc:f0:6a:ff:d8:9b:86:f0: 5e:59:92:aa:04:3a:78:f8:7e:7c:a3:61:81:a9:a4: 70:39:f8:85:d8:48:f3:10:fa:49:c7:fb:5a:dd:32: c6:dc:01:63:77:5d:cb:b7:d6:58:d4:9c:55:05:56: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BF:A2:16:DE:16:54:9D:A0:57:CB:EE:D2:F5:87:A9:BD:85:98:97 X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c7:03:af:02:77:21:3f:6c:95:ff:c5:12:64:66:b2:5f:f4: 20:36:15:50:fa:47:b1:b5:22:23:a6:ee:60:83:c5:52:14:c2: 58:7d:8a:c4:52:78:3f:97:2b:bc:49:db:a0:e6:3d:c4:6c:e2: a0:f3:ef:9e:88:25:92:ce:03:0b:b2:9f:27:fd:cd:93:f3:52: 92:26:63:1d:6a:8e:b1:56:b1:9b:e2:9a:77:2b:a5:03:be:5c: 50:63:cc:b7:6f:20:fe:4d:dd:fa:11:c9:2f:80:de:b8:6d:f1: b0:fd:97:05:33:a2:2d:3b:b4:c5:40:1d:ea:1b:d6:c2:23:a1: 0a:14:df:d5:0f:e2:3e:5b:f5:cd:84:93:13:7a:3e:8a:15:4c: 40:2a:2a:c9:1c:c4:f2:16:b3:7a:d4:1b:6f:20:37:d9:f0:d7: 89:68:3b:72:23:7d:c0:f7:fd:18:11:e8:02:2e:15:fe:3c:14: d3:95:ff:6b:df:65:14:78:f5:79:c6:30:eb:f1:66:02:22:20: 4f:d4:96:25:95:b6:62:05:74:f4:15:e5:00:b1:ad:65:e2:70: 37:89:ea:cc:10:a0:90:52:9d:6e:93:7a:57:64:67:0d:2a:72: 6d:87:35:80:18:73:74:75:a6:8d:fc:5a:44:6b:f4:9c:e3:6c: 0d:2c:96:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+36Pq/xp0OeKy2tdmtT7Dg4RLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA5MTYyMTI1MzZaFw0yNjA5MTcyMzI3MzZaMDMxMTAvBgNV BAMTKEU0QkZBMjE2REUxNjU0OURBMDU3Q0JFRUQyRjU4N0E5QkQ4NTk4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGKF4LjqNd5gBdT0hYOJRpMr+ OGSjiZdpgMYyXK5Vi+kaoCPxKVZk1xQTCWBXoj99LMLat7Fw6jJazcVaZulVgwPX SMPCCDr9iOAaItlM3qurHS43Fl3ngvABIycPL25xSlxIwjPp7Gr41rPN7CMz8mkT cgDqd8RWmEsJaqMgIK+mfKTYijbE7k/mj41hVbNdl+aJzSWAgOMtJ4it/T5yAAWb keqTKwphVXz4cGPx+dINDQF+vstt/gjXJ0IwK4gqUlEaT4E8nmz88Gr/2JuG8F5Z kqoEOnj4fnyjYYGppHA5+IXYSPMQ+knH+1rdMsbcAWN3Xcu31ljUnFUFVpeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5L+iFt4WVJ2gV8vu0vWHqb2FmJcwHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnHA68CdyE/bJX/xRJkZrJf9CA2FVD6R7G1 IiOm7mCDxVIUwlh9isRSeD+XK7xJ26DmPcRs4qDz756IJZLOAwuynyf9zZPzUpIm Yx1qjrFWsZvimncrpQO+XFBjzLdvIP5N3foRyS+A3rht8bD9lwUzoi07tMVAHeob 1sIjoQoU39UP4j5b9c2EkxN6PooVTEAqKskcxPIWs3rUG28gN9nw14loO3IjfcD3 /RgR6AIuFf48FNOV/2vfZRR49XnGMOvxZgIiIE/UliWVtmIFdPQV5QCxrWXicDeJ 6swQoJBSnW6TeldkZw0qcm2HNYAYc3R1po38WkRr9JzjbA0sltI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:55 2026 by rpki-client