$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: EjRSFN1H0ZCrsZmBthsNw8LrwohJLRlp40fRkZjCkRM= Subject key identifier: 0B:56:E4:B3:FE:B0:38:D6:E3:51:D4:08:8E:05:CC:CB:D6:96:43:0A Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 609AE92E81CB06B08E5BC16DEF4E5B37767E1182 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: BA Signing time: Thu 17 Sep 2026 10:11:14 +0000 Manifest this update: Thu 17 Sep 2026 10:06:14 +0000 Manifest next update: Fri 18 Sep 2026 12:26:14 +0000 Files and hashes: 1: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 2: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 3: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 4: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) 5: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) 6: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: LUddKIav57AVgMdFjacxtyjBZZpgC0jYFZ2WEtJeH5s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9a:e9:2e:81:cb:06:b0:8e:5b:c1:6d:ef:4e:5b:37:76:7e:11:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Sep 17 10:06:14 2026 GMT Not After : Sep 18 12:26:14 2026 GMT Subject: CN=0B56E4B3FEB038D6E351D4088E05CCCBD696430A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:4c:a0:79:b8:d8:08:ef:96:a2:52:7c:4a: 8f:b8:b1:e0:db:f9:08:d7:dc:c9:7e:89:6d:0b:86: 16:61:82:0c:4b:d6:b1:9a:67:21:dc:1c:0c:b0:4e: 80:38:5e:a0:ab:1d:82:09:9d:bb:e2:f2:b6:f8:26: ab:ed:20:fe:2e:bc:17:ae:9e:2d:eb:4d:49:7d:f1: 14:96:cf:7e:92:8f:69:d3:a1:16:a3:e0:92:41:67: e8:85:c2:8f:44:33:0a:ce:f3:69:a9:9c:e6:51:4f: a4:65:8f:ad:73:76:00:45:10:d8:42:54:9e:6d:9f: 8d:db:f4:30:ab:a2:ee:61:d2:63:2b:da:ec:fb:ef: 6e:6f:14:74:68:ff:2e:8d:46:bf:70:b9:2a:0f:49: 90:6c:eb:e9:0b:bb:ac:2d:fd:ec:00:fb:c5:5c:40: 23:9b:09:64:19:40:c2:b5:c2:3a:51:03:aa:fe:f7: 0c:a7:aa:b2:27:3b:02:53:2b:0b:08:60:ed:d3:94: 4f:68:a5:a5:54:03:4a:ed:48:59:9f:7c:0d:74:f9: c5:2c:a4:9e:e8:b2:1a:73:87:61:03:cd:bd:46:76: 4b:4b:37:1e:ce:c8:64:77:d0:8f:1d:34:22:ef:d2: 16:98:36:02:33:05:cb:b3:08:21:1d:90:d2:61:bb: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:E4:B3:FE:B0:38:D6:E3:51:D4:08:8E:05:CC:CB:D6:96:43:0A X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:93:67:a0:cf:86:ea:42:b9:6c:f9:3d:7b:ad:e6:20:16: 57:0b:73:07:af:a6:51:42:ea:39:63:d1:e0:b0:41:f7:9b:15: 07:13:6b:23:3e:29:cb:65:ba:cf:f1:3a:d7:1a:f6:bc:ac:25: e1:ca:1d:db:ce:df:b1:15:82:0d:d0:b0:63:17:6f:2a:fd:df: 21:1a:bd:dc:3e:3e:31:cc:dd:e6:d0:a7:03:09:be:84:6d:27: bb:dc:26:20:62:8d:ae:a4:bd:17:8f:7a:2e:71:97:da:59:8f: be:26:0b:2c:c6:8f:fb:4e:ac:34:0d:e1:fa:62:9e:85:4c:4f: eb:51:48:9e:0f:f4:11:07:a9:cb:ac:3d:15:4c:cb:93:03:96: a0:ca:40:15:60:59:74:07:09:af:9e:11:fe:83:e1:2e:17:ca: 48:20:9c:db:eb:50:e0:39:e1:e9:68:72:e5:83:5c:96:3a:51: 46:a0:1b:ec:93:73:d5:2a:1f:17:39:06:99:71:e2:ae:8c:7e: ee:2d:df:7f:cd:a6:6d:85:fa:43:c7:d6:f1:77:d5:4b:b9:97: 4b:dd:0b:35:e1:12:90:9f:e3:4f:48:77:d3:03:0a:68:37:d4: 08:45:40:dd:53:56:23:2e:32:c6:8f:d5:17:03:59:52:7d:d1: f9:2c:69:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJrpLoHLBrCOW8Ft705bN3Z+EYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA5MTcxMDA2MTRaFw0yNjA5MTgxMjI2MTRaMDMxMTAvBgNV BAMTKDBCNTZFNEIzRkVCMDM4RDZFMzUxRDQwODhFMDVDQ0NCRDY5NjQzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZUygebjYCO+WolJ8So+4seDb +QjX3Ml+iW0LhhZhggxL1rGaZyHcHAywToA4XqCrHYIJnbvi8rb4JqvtIP4uvBeu ni3rTUl98RSWz36Sj2nToRaj4JJBZ+iFwo9EMwrO82mpnOZRT6Rlj61zdgBFENhC VJ5tn43b9DCrou5h0mMr2uz7725vFHRo/y6NRr9wuSoPSZBs6+kLu6wt/ewA+8Vc QCObCWQZQMK1wjpRA6r+9wynqrInOwJTKwsIYO3TlE9opaVUA0rtSFmffA10+cUs pJ7oshpzh2EDzb1GdktLNx7OyGR30I8dNCLv0haYNgIzBcuzCCEdkNJhu/xhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1bks/6wONbjUdQIjgXMy9aWQwowHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+sk2egz4bqQrls+T17reYgFlcLcwevplFC 6jlj0eCwQfebFQcTayM+Kctlus/xOtca9rysJeHKHdvO37EVgg3QsGMXbyr93yEa vdw+PjHM3ebQpwMJvoRtJ7vcJiBija6kvRePei5xl9pZj74mCyzGj/tOrDQN4fpi noVMT+tRSJ4P9BEHqcusPRVMy5MDlqDKQBVgWXQHCa+eEf6D4S4XykggnNvrUOA5 4elocuWDXJY6UUagG+yTc9UqHxc5Bplx4q6Mfu4t33/Npm2F+kPH1vF31Uu5l0vd CzXhEpCf409Id9MDCmg31AhFQN1TViMuMsaP1RcDWVJ90fksaXA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:44:58 2026 by rpki-client