$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: NFTNekVS7f3oXODjbExFVTCGSAZwu/tYg5Fongs+dyo= Subject key identifier: FD:AC:36:AE:E9:AE:9F:22:A2:98:04:F2:89:25:F6:1F:CA:67:9D:8E Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 36D5D6C65C209647C6DC037C11BF931460D50EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 020F Signing time: Sat 28 Feb 2026 23:21:11 +0000 Manifest this update: Sat 28 Feb 2026 23:16:11 +0000 Manifest next update: Wed 04 Mar 2026 10:51:11 +0000 Files and hashes: 1: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: PUolwh5riXds8VS6GTrpm+2TCG7uGcXbvNqAwH1ulXw=) 2: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: G1GO2xkJddb3+Y/gyc1CuMPONDsxmL8d7VQhnKS/oUM=) 3: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: G8PV7882jIzL7DpesLHcinlC2gFpMWki9wF55ivTArc=) 4: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: gpotogkgRPqhq+iXjlc72dawBwQqgtK3y2i6zL2CYVg=) 5: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: lK1vUk86W1WWvANWItOKCTii7JITy4ro2D+rSQqdjDY=) 6: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: 9Zia9o6pZwHOK52NvyDCb/uiHgQl9tsHUexz827si5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d5:d6:c6:5c:20:96:47:c6:dc:03:7c:11:bf:93:14:60:d5:0e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Feb 28 23:16:11 2026 GMT Not After : Mar 4 10:51:11 2026 GMT Subject: CN=FDAC36AEE9AE9F22A29804F28925F61FCA679D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:5e:2a:92:0b:c8:a7:00:1c:6d:c4:d9:04: 17:76:d6:7c:2a:47:c4:a8:b1:1d:48:81:8c:7a:ab: fc:48:18:7c:3f:3b:98:4c:a0:8d:09:a2:b8:8e:10: 11:27:59:07:57:af:32:01:f2:03:6c:62:a2:da:09: dc:ae:3a:be:61:e7:88:24:51:67:6b:40:f3:2d:ad: 96:6c:77:b2:1b:71:c6:75:fc:42:43:2b:f2:22:8e: ba:ae:84:77:08:a9:6a:3e:75:bc:11:e3:c4:0a:57: 8d:21:d9:a1:88:95:0f:88:9f:fd:51:2b:3f:51:21: b2:bf:09:df:30:b7:12:e2:43:00:bc:ba:a6:99:4c: 00:55:c3:d3:a5:9d:a4:69:6b:1c:68:b7:96:d3:bb: 16:6c:dc:78:23:2c:37:d9:cc:ad:57:9c:b3:d7:12: 16:e4:aa:19:07:45:49:4a:17:a6:a7:d3:59:94:0c: ff:2c:57:b6:fe:34:6a:d3:5f:8c:2f:b4:d6:6e:6f: 2e:09:c8:04:9d:9e:41:58:d2:d0:2c:41:4f:4a:fd: 3e:62:49:85:ac:e4:46:f8:58:d8:51:89:95:fc:20: b0:5f:3b:3f:65:12:38:c6:1e:20:53:86:ae:ba:5f: 6f:2d:c5:d0:4e:28:9b:0f:d9:64:be:19:9a:da:c7: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AC:36:AE:E9:AE:9F:22:A2:98:04:F2:89:25:F6:1F:CA:67:9D:8E X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5b:1c:b5:07:ec:89:33:30:13:18:df:80:8d:59:bb:84:0e: 00:94:18:86:ee:7f:cc:63:70:d7:48:7f:07:80:de:1b:d4:90: e1:ae:7e:aa:17:39:eb:32:f6:7a:09:b7:f2:ba:cd:7b:38:db: f8:9f:6d:b9:98:04:36:17:50:7e:6e:96:c6:a2:ab:81:88:0a: 0d:d7:4c:21:15:26:27:bb:79:00:35:c3:29:38:fc:93:66:72: 3e:a0:07:c2:71:cf:87:7a:2b:43:aa:22:79:c2:ff:84:35:49: 94:29:37:d0:6b:c3:61:84:a6:24:52:b2:44:46:33:d0:d1:38: d2:30:4b:5a:98:e7:fe:df:32:5b:9a:cd:63:d4:ba:fa:ac:e7: d9:34:54:c5:a5:a4:d5:a7:e9:ae:f2:a6:d7:6a:2b:65:34:c4: fb:e4:db:b1:76:51:2d:96:36:f8:c9:75:dc:09:1f:e2:dd:dc: 4c:a9:ed:68:89:de:7b:2a:b2:01:9c:c2:47:c0:e4:0c:73:43: aa:65:8c:af:17:4f:89:7d:56:32:36:55:ed:af:83:c9:90:b9: 9e:7c:05:ea:fa:55:69:f4:ee:5a:88:61:4b:5e:cf:70:b9:ed: 00:40:79:1c:51:76:51:7f:ca:18:17:53:d9:c6:89:30:21:65: f1:46:35:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtXWxlwglkfG3AN8Eb+TFGDVDrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNjAyMjgyMzE2MTFaFw0yNjAzMDQxMDUxMTFaMDMxMTAvBgNV BAMTKEZEQUMzNkFFRTlBRTlGMjJBMjk4MDRGMjg5MjVGNjFGQ0E2NzlEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbol4qkgvIpwAcbcTZBBd21nwq R8SosR1IgYx6q/xIGHw/O5hMoI0JoriOEBEnWQdXrzIB8gNsYqLaCdyuOr5h54gk UWdrQPMtrZZsd7IbccZ1/EJDK/IijrquhHcIqWo+dbwR48QKV40h2aGIlQ+In/1R Kz9RIbK/Cd8wtxLiQwC8uqaZTABVw9OlnaRpaxxot5bTuxZs3HgjLDfZzK1XnLPX EhbkqhkHRUlKF6an01mUDP8sV7b+NGrTX4wvtNZuby4JyASdnkFY0tAsQU9K/T5i SYWs5Eb4WNhRiZX8ILBfOz9lEjjGHiBThq66X28txdBOKJsP2WS+GZraxweRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/aw2rumunyKimATyiSX2H8pnnY4wHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZbHLUH7IkzMBMY34CNWbuEDgCUGIbuf8xj cNdIfweA3hvUkOGufqoXOesy9noJt/K6zXs42/ifbbmYBDYXUH5ulsaiq4GICg3X TCEVJie7eQA1wyk4/JNmcj6gB8Jxz4d6K0OqInnC/4Q1SZQpN9Brw2GEpiRSskRG M9DRONIwS1qY5/7fMluazWPUuvqs59k0VMWlpNWn6a7yptdqK2U0xPvk27F2US2W NvjJddwJH+Ld3Eyp7WiJ3nsqsgGcwkfA5AxzQ6pljK8XT4l9VjI2Ve2vg8mQuZ58 Ber6VWn07lqIYUtez3C57QBAeRxRdlF/yhgXU9nGiTAhZfFGNY0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:03 2026 by rpki-client