$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft File: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft (raw, json) Hash identifier: Iy/Zgvdsr7XRuaYiz6syZdBznwARmTZBb0Pwt/LrS+c= Subject key identifier: F5:76:0F:9A:1B:5D:67:4B:B5:BC:FC:E1:B2:52:14:DC:DB:62:18:B4 Authority key identifier: D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 Certificate issuer: /CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Certificate serial: 259216D3CEFDFEF1A7EBBC0D371B9A3140A113AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft Manifest number: BD Signing time: Mon 21 Sep 2026 07:46:16 +0000 Manifest this update: Mon 21 Sep 2026 07:41:16 +0000 Manifest next update: Tue 22 Sep 2026 11:45:16 +0000 Files and hashes: 1: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl (hash: KLR2kcMnxCRANcQ7lXYxAd6COlqCCMU13dEijhmxcYw=) 2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: NMwe5J+/CXgAi6nFmZAKAhCZ3C0lGwYdxKCNwpdKULE=) 3: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: NWVRwRUJEoPLPqz3cDGwdvfhxswf8EJ/TbLr4jkDe78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 11:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:92:16:d3:ce:fd:fe:f1:a7:eb:bc:0d:37:1b:9a:31:40:a1:13:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Validity Not Before: Sep 21 07:41:16 2026 GMT Not After : Sep 22 11:45:16 2026 GMT Subject: CN=F5760F9A1B5D674BB5BCFCE1B25214DCDB6218B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:2e:3e:ff:a4:33:fd:d0:f9:2b:71:4d:f3: 6f:bd:11:02:8f:46:b9:77:0b:89:09:33:e6:8a:3b: cd:49:f6:72:c6:4c:97:9a:2b:7a:61:a8:89:08:1d: b1:46:07:d2:15:40:ce:10:75:96:33:3d:78:a9:2f: 76:c6:8c:10:08:9f:9d:b6:6c:f0:c3:8b:5d:ed:5f: a2:3b:39:39:b7:de:43:a5:98:1b:51:6d:c9:31:ed: c3:bf:a0:e5:7b:16:b3:a6:b7:e5:b6:cb:e2:e6:67: 80:ff:7c:09:4d:10:d9:af:b0:bf:0e:a9:f7:9d:41: 86:75:c2:65:1e:f8:43:dc:ef:03:68:3a:b5:db:2e: aa:70:5f:ae:9d:4b:40:16:95:83:46:25:b3:48:20: 3b:6e:17:e5:28:ab:f3:45:af:67:bc:da:b6:15:f9: 67:1e:ea:77:2a:ed:ee:85:fe:bb:1e:fd:74:0e:ad: 22:f5:7f:12:3c:86:a2:ea:ea:4d:b1:43:e8:a7:6e: f1:41:ab:64:c0:30:ea:5a:0f:57:4b:d2:04:80:8b: 10:a4:63:b2:d6:3e:40:78:a8:e8:db:9a:92:61:fa: 5a:b6:72:64:bd:4b:e9:4d:22:5c:cc:c0:f8:18:e4: 06:84:99:f4:ee:58:02:c3:43:20:e2:cf:d1:26:37: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:76:0F:9A:1B:5D:67:4B:B5:BC:FC:E1:B2:52:14:DC:DB:62:18:B4 X509v3 Authority Key Identifier: keyid:D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9c:0a:3a:15:25:84:c8:3f:97:b7:ec:26:c6:17:9f:97:83: 34:88:10:a8:34:22:05:fc:6a:b1:52:c8:a9:e4:77:d2:3c:13: 6e:69:5e:27:06:8a:f2:6d:e7:2b:54:1f:e3:0a:6a:c7:8c:c5: 89:31:44:c6:3a:fb:9d:1f:8d:9d:ad:88:30:8b:74:95:47:49: 6d:a4:25:f0:b0:a9:10:da:7e:bb:12:85:81:c0:e7:c5:c4:49: 7e:95:d9:0d:34:0e:5f:de:09:48:2a:33:c6:56:22:5f:be:0f: 61:ea:a3:d5:2f:75:54:2f:08:31:da:98:6a:5f:98:83:0c:90: f3:54:50:0a:1a:32:06:a0:40:3b:c4:d5:f2:ac:f7:03:99:1f: a0:d1:85:a6:6a:17:a7:1c:53:59:92:c2:98:8e:0b:53:48:a3: b7:11:8f:85:43:f7:2b:35:d0:aa:8d:89:be:0c:20:b9:25:f0: 99:44:93:9b:94:18:41:c8:1f:11:68:b9:44:d0:0f:a0:64:3d: 95:ba:3a:90:93:c3:28:6f:0c:f1:81:fa:5d:7c:45:63:08:1a: 79:c1:c8:cd:16:11:6d:45:0d:5a:fb:a2:5c:9f:ae:eb:50:57: ba:82:2a:33:6b:c5:24:0f:62:dd:d4:16:4f:e8:09:0a:44:db: eb:fc:60:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZIW0879/vGn67wNNxuaMUChE68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdDRjhC QjE2MTQzNjAeFw0yNjA5MjEwNzQxMTZaFw0yNjA5MjIxMTQ1MTZaMDMxMTAvBgNV BAMTKEY1NzYwRjlBMUI1RDY3NEJCNUJDRkNFMUIyNTIxNERDREI2MjE4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziC4+/6Qz/dD5K3FN82+9EQKP Rrl3C4kJM+aKO81J9nLGTJeaK3phqIkIHbFGB9IVQM4QdZYzPXipL3bGjBAIn522 bPDDi13tX6I7OTm33kOlmBtRbckx7cO/oOV7FrOmt+W2y+LmZ4D/fAlNENmvsL8O qfedQYZ1wmUe+EPc7wNoOrXbLqpwX66dS0AWlYNGJbNIIDtuF+Uoq/NFr2e82rYV +Wce6ncq7e6F/rse/XQOrSL1fxI8hqLq6k2xQ+inbvFBq2TAMOpaD1dL0gSAixCk Y7LWPkB4qOjbmpJh+lq2cmS9S+lNIlzMwPgY5AaEmfTuWALDQyDiz9EmN4I9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9XYPmhtdZ0u1vPzhslIU3NtiGLQwHwYDVR0j BBgwFoAU0gweDdAqqLHOH+ukdpd8+LsWFDYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNkNzUzNmQtOWUxMC00ZDQ5LWI2Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMERE MDJBQThCMUNFMUZFQkE0NzY5NzdDRjhCQjE2MTQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjBDMUUwREQwMkFBOEIxQ0UxRkVCQTQ3Njk3N0NGOEJCMTYx NDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdD RjhCQjE2MTQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+cCjoVJYTIP5e37CbGF5+XgzSIEKg0IgX8 arFSyKnkd9I8E25pXicGivJt5ytUH+MKaseMxYkxRMY6+50fjZ2tiDCLdJVHSW2k JfCwqRDafrsShYHA58XESX6V2Q00Dl/eCUgqM8ZWIl++D2Hqo9UvdVQvCDHamGpf mIMMkPNUUAoaMgagQDvE1fKs9wOZH6DRhaZqF6ccU1mSwpiOC1NIo7cRj4VD9ys1 0KqNib4MILkl8JlEk5uUGEHIHxFouUTQD6BkPZW6OpCTwyhvDPGB+l18RWMIGnnB yM0WEW1FDVr7olyfrutQV7qCKjNrxSQPYt3UFk/oCQpE2+v8YOc= -----END CERTIFICATE-----Generated at Tue Sep 22 03:55:20 2026 by rpki-client