$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: Xpc6pbvjVvdpEeLgrK/36FPIrIKF/h5JtZ0itQViUI0= Subject key identifier: AC:25:48:9A:CF:16:ED:05:02:F8:ED:7B:6A:E1:65:D7:6F:10:1B:42 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 69C3646F0607446ADDE697CB9924C6CBE3D49D70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 0223 Signing time: Wed 15 Apr 2026 22:41:12 +0000 Manifest this update: Wed 15 Apr 2026 22:36:12 +0000 Manifest next update: Sun 19 Apr 2026 07:42:12 +0000 Files and hashes: 1: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: y0sJNEJfhkTeJmALgJ8hbQsKnwyq1k6Ys4RcORz99Mg=) 2: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: gpotogkgRPqhq+iXjlc72dawBwQqgtK3y2i6zL2CYVg=) 3: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: G8PV7882jIzL7DpesLHcinlC2gFpMWki9wF55ivTArc=) 4: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: G1GO2xkJddb3+Y/gyc1CuMPONDsxmL8d7VQhnKS/oUM=) 5: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: 9Zia9o6pZwHOK52NvyDCb/uiHgQl9tsHUexz827si5o=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: lK1vUk86W1WWvANWItOKCTii7JITy4ro2D+rSQqdjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c3:64:6f:06:07:44:6a:dd:e6:97:cb:99:24:c6:cb:e3:d4:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Apr 15 22:36:12 2026 GMT Not After : Apr 19 07:42:12 2026 GMT Subject: CN=AC25489ACF16ED0502F8ED7B6AE165D76F101B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:89:21:e8:1f:de:d6:60:fe:c0:fb:df:af:a1: 2d:a8:e1:47:9f:a7:af:a6:70:bb:c5:ad:4d:62:b5: 59:6c:42:f4:2c:3b:f6:74:22:55:43:f3:d9:97:67: 21:63:77:62:0d:c3:ac:1f:20:11:ab:6e:55:0e:f9: a2:4f:0a:2c:57:82:24:03:da:b3:f1:6a:65:cd:0b: 39:f4:8d:46:5c:72:91:d3:5b:d1:da:17:88:72:20: dd:c1:f8:0f:17:6e:ea:aa:18:81:34:87:3e:4a:78: 4a:19:ae:cb:71:d0:2b:0e:20:d4:80:fd:15:d0:4c: 1d:f9:69:90:45:1c:6f:44:30:8f:33:a1:0f:b1:9e: 88:1e:d1:a6:0e:46:73:14:81:55:7a:22:86:af:1d: 41:3e:21:1e:eb:58:de:82:13:4b:33:b5:59:1e:4a: e2:23:aa:4c:28:0e:e6:70:be:0c:b5:19:f4:89:b6: b3:6a:87:a9:19:ef:e9:e5:61:d1:ee:d5:b4:ef:d0: fc:d0:aa:f7:7f:2f:3c:0e:da:66:ab:10:4d:83:a9: 34:f2:6e:cb:f6:03:f1:79:aa:2e:47:78:a5:33:83: 8c:e6:4e:0d:a8:85:a2:a6:9c:70:6e:62:c2:e7:ca: c1:f1:fa:0b:61:2a:70:5c:ab:da:01:10:c1:8a:31: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:25:48:9A:CF:16:ED:05:02:F8:ED:7B:6A:E1:65:D7:6F:10:1B:42 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c1:ed:73:68:e7:9d:c7:06:4a:58:35:78:c8:83:08:91:30: ad:83:2a:79:17:e4:73:00:c3:84:9a:ac:7e:0d:2e:19:85:b2: 16:5d:ed:00:8a:a9:4b:ab:bd:c5:e0:f6:36:1c:39:ae:2a:ac: 91:94:c3:c4:4b:fd:4f:a2:2d:b3:c6:a6:3f:b0:94:f1:6e:34: 62:48:ca:72:f4:fa:39:8f:14:9b:8e:5a:61:e9:14:fc:17:93: 24:bb:b1:22:48:07:76:6a:cf:f1:76:58:6a:72:d0:e8:6a:94: 62:c1:28:64:5b:8d:7c:a3:b4:9a:ef:42:5b:a1:f5:5a:17:66: 7a:98:b1:24:23:b8:59:3d:7f:6c:10:87:d4:cf:52:70:25:f1: b9:32:a7:31:6c:8c:56:38:c9:31:39:4a:49:85:70:ea:36:d4: a1:1d:e9:88:b2:40:5e:5a:8a:69:f8:5d:2e:2d:3a:c6:ed:94: ac:52:fd:d0:21:c1:5d:ec:5f:da:13:3c:fb:0f:8d:51:02:ac: 6a:ee:f0:03:f8:7e:83:40:50:d7:3c:00:8a:aa:89:4b:8d:92: 8d:fc:a9:b8:f4:75:19:28:90:eb:5e:67:64:96:02:c6:48:db: 1e:53:bc:95:37:47:16:ec:35:00:fc:b6:c6:de:e6:94:64:e0: 05:a6:24:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacNkbwYHRGrd5pfLmSTGy+PUnXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNjA0MTUyMjM2MTJaFw0yNjA0MTkwNzQyMTJaMDMxMTAvBgNV BAMTKEFDMjU0ODlBQ0YxNkVEMDUwMkY4RUQ3QjZBRTE2NUQ3NkYxMDFCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyiSHoH97WYP7A+9+voS2o4Uef p6+mcLvFrU1itVlsQvQsO/Z0IlVD89mXZyFjd2INw6wfIBGrblUO+aJPCixXgiQD 2rPxamXNCzn0jUZccpHTW9HaF4hyIN3B+A8XbuqqGIE0hz5KeEoZrstx0CsOINSA /RXQTB35aZBFHG9EMI8zoQ+xnoge0aYORnMUgVV6IoavHUE+IR7rWN6CE0sztVke SuIjqkwoDuZwvgy1GfSJtrNqh6kZ7+nlYdHu1bTv0PzQqvd/LzwO2marEE2DqTTy bsv2A/F5qi5HeKUzg4zmTg2ohaKmnHBuYsLnysHx+gthKnBcq9oBEMGKMeexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCVIms8W7QUC+O17auFl128QG0IwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvB7XNo553HBkpYNXjIgwiRMK2DKnkX5HMA w4SarH4NLhmFshZd7QCKqUurvcXg9jYcOa4qrJGUw8RL/U+iLbPGpj+wlPFuNGJI ynL0+jmPFJuOWmHpFPwXkyS7sSJIB3Zqz/F2WGpy0OhqlGLBKGRbjXyjtJrvQluh 9VoXZnqYsSQjuFk9f2wQh9TPUnAl8bkypzFsjFY4yTE5SkmFcOo21KEd6YiyQF5a imn4XS4tOsbtlKxS/dAhwV3sX9oTPPsPjVECrGru8AP4foNAUNc8AIqqiUuNko38 qbj0dRkokOteZ2SWAsZI2x5TvJU3RxbsNQD8tsbe5pRk4AWmJDA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:32:53 2026 by rpki-client