$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft File: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft (raw, json) Hash identifier: upV09X9YeL4jdgcIEJz/29WTcNjAA/VHFMBQkFzjmu4= Subject key identifier: 94:15:DA:A8:C7:2A:24:12:46:64:7C:CA:AD:E3:B3:6A:BF:FE:46:CE Authority key identifier: 20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 Certificate issuer: /CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Certificate serial: 0E26F65CE36B664B1F5CD8FF76DDF89730F32E4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:46:57 +0000 Manifest this update: Thu 17 Sep 2026 06:41:57 +0000 Manifest next update: Fri 18 Sep 2026 09:21:57 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KbTN0zyFBhIzTtH0WTjt8SBU3pMK8PRdcnzLv/4GoTQ=) 2: 208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl (hash: kXze2jKgupoBsuZ6wHBEN8KK3Zng7MrPwWny8DnIoe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:26:f6:5c:e3:6b:66:4b:1f:5c:d8:ff:76:dd:f8:97:30:f3:2e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208E4D9FFD14FC113BE24E9456AF88A703580FD7 Validity Not Before: Sep 17 06:41:57 2026 GMT Not After : Sep 18 09:21:57 2026 GMT Subject: CN=9415DAA8C72A241246647CCAADE3B36ABFFE46CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0b:09:54:b0:2f:ff:ce:da:c4:e8:40:2f:c6: 84:df:2b:bf:2b:03:07:2a:04:4e:99:44:67:f5:96: a8:b6:c9:06:1c:0c:8c:ed:a1:42:bf:0b:ea:4f:5c: 31:e3:23:36:02:cd:41:9e:f3:76:68:b6:f7:c6:6d: 28:c7:0a:2a:25:be:30:fe:80:28:1f:f9:74:fe:10: 31:f7:fc:64:7a:67:2b:ad:6f:34:30:dc:60:89:1f: 4a:f1:8f:b5:b0:1c:59:b4:79:24:62:2b:f6:cb:d7: 11:f5:e2:27:33:db:9a:0e:49:ba:35:01:c3:45:a0: c1:93:4d:ff:16:34:8d:54:9c:ac:82:c6:e7:bd:b2: a5:80:41:d9:39:d3:bb:78:51:63:8f:f7:e8:d4:3b: 73:ed:97:64:b5:57:59:d1:66:82:a3:04:a5:98:47: 12:03:7f:2c:4e:69:2a:f1:4a:74:2e:72:3d:00:08: 84:e0:a2:3a:65:18:ee:4b:0a:a3:8a:53:aa:2b:e1: 9a:01:bf:43:64:fe:5f:c7:99:b8:58:1d:39:a3:87: c9:6c:90:2f:f9:76:63:ff:d7:88:e1:f1:9a:38:df: 87:fc:66:9c:b4:9f:a8:bb:0f:81:53:4c:d3:52:28: 11:7f:31:52:a4:f9:d9:b6:90:5b:89:b9:fb:84:70: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:DA:A8:C7:2A:24:12:46:64:7C:CA:AD:E3:B3:6A:BF:FE:46:CE X509v3 Authority Key Identifier: keyid:20:8E:4D:9F:FD:14:FC:11:3B:E2:4E:94:56:AF:88:A7:03:58:0F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/208E4D9FFD14FC113BE24E9456AF88A703580FD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/208E4D9FFD14FC113BE24E9456AF88A703580FD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b8:e6:59:90:4a:58:03:a7:0c:34:5c:07:f3:ca:52:3e:48: 6f:08:fd:31:4b:34:f5:18:0a:a1:7c:24:c1:53:5b:ce:4f:ee: 5a:4d:c6:10:3a:74:42:c9:3d:8f:c4:d9:61:68:af:cd:a3:a3: 48:fd:bc:4f:02:39:c7:40:e8:74:8a:cc:82:69:37:1e:8f:db: 35:16:1d:c4:82:19:65:25:09:5c:e8:1e:e0:e6:e4:2e:aa:39: 39:2e:52:b1:53:0b:d8:ee:7f:05:b2:b0:f1:02:76:ef:5c:62: 2b:70:6c:c8:f7:f6:db:19:b0:ca:ad:b7:53:31:03:35:e4:58: d2:bd:2a:6c:b4:4a:6d:93:76:0e:37:14:bf:05:31:6d:35:ba: 62:e4:7e:42:8b:4a:7b:b5:ef:19:94:35:99:c3:5b:95:bd:30: 0a:cd:02:94:b9:64:31:0b:ea:71:b1:08:de:4d:e2:fa:0e:4a: 61:dc:40:1c:e2:31:9b:e9:59:28:bc:ac:54:ad:32:d5:0c:02: cd:a2:0b:52:18:c8:84:43:44:6a:04:29:b4:1e:e4:7a:d2:d5: d1:ae:ec:3b:d0:5d:e9:16:66:84:6a:e3:9c:5c:18:55:81:84: 4f:b8:33:4c:7d:7e:f3:f1:a4:e6:71:d5:8d:71:e2:83:10:7b: a7:12:9b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDib2XONrZksfXNj/dt34lzDzLkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcw MzU4MEZENzAeFw0yNjA5MTcwNjQxNTdaFw0yNjA5MTgwOTIxNTdaMDMxMTAvBgNV BAMTKDk0MTVEQUE4QzcyQTI0MTI0NjY0N0NDQUFERTNCMzZBQkZGRTQ2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMCwlUsC//ztrE6EAvxoTfK78r AwcqBE6ZRGf1lqi2yQYcDIztoUK/C+pPXDHjIzYCzUGe83ZotvfGbSjHCiolvjD+ gCgf+XT+EDH3/GR6ZyutbzQw3GCJH0rxj7WwHFm0eSRiK/bL1xH14icz25oOSbo1 AcNFoMGTTf8WNI1UnKyCxue9sqWAQdk507t4UWOP9+jUO3Ptl2S1V1nRZoKjBKWY RxIDfyxOaSrxSnQucj0ACITgojplGO5LCqOKU6or4ZoBv0Nk/l/HmbhYHTmjh8ls kC/5dmP/14jh8Zo434f8Zpy0n6i7D4FTTNNSKBF/MVKk+dm2kFuJufuEcGNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBXaqMcqJBJGZHzKreOzar/+Rs4wHwYDVR0j BBgwFoAUII5Nn/0U/BE74k6UVq+IpwNYD9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ4OGQ0YzAtZGM5Mi00YWE4LWIxNjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZG RDE0RkMxMTNCRTI0RTk0NTZBRjg4QTcwMzU4MEZENy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDhFNEQ5RkZEMTRGQzExM0JFMjRFOTQ1NkFGODhBNzAzNTgw RkQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjA4RTREOUZGRDE0RkMxMTNCRTI0RTk0NTZBRjg4 QTcwMzU4MEZENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ245lmQSlgDpww0XAfzylI+SG8I/TFLNPUY CqF8JMFTW85P7lpNxhA6dELJPY/E2WFor82jo0j9vE8COcdA6HSKzIJpNx6P2zUW HcSCGWUlCVzoHuDm5C6qOTkuUrFTC9jufwWysPECdu9cYitwbMj39tsZsMqtt1Mx AzXkWNK9Kmy0Sm2Tdg43FL8FMW01umLkfkKLSnu17xmUNZnDW5W9MArNApS5ZDEL 6nGxCN5N4voOSmHcQBziMZvpWSi8rFStMtUMAs2iC1IYyIRDRGoEKbQe5HrS1dGu 7DvQXekWZoRq45xcGFWBhE+4M0x9fvPxpOZx1Y1x4oMQe6cSm18= -----END CERTIFICATE-----Generated at Thu Sep 17 08:25:20 2026 by rpki-client