$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: 2wGNYFxweqWSFwTzAjqXzYC2DsV451Gc/uTwtMOaMj0= Subject key identifier: 5B:9B:F1:1E:E4:AC:89:54:11:6B:68:59:D5:36:34:3C:9B:73:63:F5 Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 7600DFB18AB549E9653D30CB33EBE143EE039F00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:20:35 +0000 Manifest this update: Mon 21 Sep 2026 15:15:35 +0000 Manifest next update: Tue 22 Sep 2026 18:37:35 +0000 Files and hashes: 1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: nsbsSKw8iDXHvq06ly+ABIGsrx+gahct2/BKT8rbcbE=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:00:df:b1:8a:b5:49:e9:65:3d:30:cb:33:eb:e1:43:ee:03:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Sep 21 15:15:35 2026 GMT Not After : Sep 22 18:37:35 2026 GMT Subject: CN=5B9BF11EE4AC8954116B6859D536343C9B7363F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:0e:9a:9f:ec:39:2b:d6:1b:22:c3:fa:83: 7b:9d:8a:1c:93:6e:dd:60:cd:45:7b:a7:fd:8a:5b: af:66:dc:f6:0c:d3:5f:3a:7e:d2:d8:fc:2b:d8:62: 57:8a:0f:f9:42:49:35:63:87:d8:6e:92:c4:f9:e7: ee:ca:97:7b:e6:08:01:74:5a:8a:f3:df:ee:33:86: 63:a6:d1:06:51:f4:8c:2e:fc:3f:43:77:d4:2f:5d: 04:6a:a7:75:a0:2b:1e:3f:97:4b:08:71:30:37:c0: 06:4f:66:6b:48:be:8d:aa:33:e3:ee:9a:a0:4e:28: 5a:4f:51:2b:30:43:fe:d3:da:7d:e0:af:13:38:43: 3f:e5:36:db:a4:8e:45:0e:69:7e:31:05:e1:4a:ba: 45:81:06:63:0b:d7:3b:94:c6:99:dd:9b:e6:57:44: 0e:d1:f9:87:87:62:8e:5e:f0:85:8f:64:65:3b:34: 1c:04:08:b4:aa:e0:bd:93:5e:6c:c0:34:63:07:8d: ef:e2:00:51:59:6d:f2:a3:74:fd:09:04:cb:f7:76: 5b:dc:0d:4b:3e:6c:2d:3c:0c:36:20:1f:5e:76:6d: e9:d3:35:94:f0:1b:1a:c5:28:cb:0a:83:5f:9d:95: c9:19:d9:4b:d6:9d:39:0a:07:b5:c6:3e:c0:8d:37: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:F1:1E:E4:AC:89:54:11:6B:68:59:D5:36:34:3C:9B:73:63:F5 X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ff:eb:e3:a8:6c:ff:5b:42:f1:25:26:50:d2:3a:e0:9f:29: e7:57:68:05:92:72:ce:ad:23:43:b2:bb:14:a1:51:8f:12:ce: cd:5c:ea:41:24:4a:53:df:1a:5d:58:c1:22:42:ef:e2:26:66: 90:b8:ac:f1:ca:41:f4:e5:35:96:20:f4:89:fe:eb:1d:09:fb: e4:d7:29:5c:5a:cf:fe:5e:1e:ca:d3:94:c9:86:d7:70:1e:db: f2:6a:c9:9a:d9:19:84:10:76:0c:e1:40:f4:8f:b6:77:53:3b: 59:33:93:7b:30:65:cd:98:dd:1c:27:da:4b:d7:a2:43:3c:2f: 62:29:7e:09:81:e3:cd:34:68:8d:d4:b3:aa:bc:bb:33:4a:98: d8:1b:ea:dc:ad:c5:b0:ad:76:88:43:c2:b7:a2:8f:f5:4f:a0: 95:cd:d7:c9:33:c4:92:13:63:0f:58:e2:45:da:7e:78:13:3d: e4:82:02:ce:36:1b:b7:1d:ea:31:65:69:32:da:d3:9d:94:6b: 62:7f:52:a2:fa:29:0f:d7:eb:80:55:00:05:d1:0c:fa:51:17: ab:0c:00:74:6b:ed:07:eb:f4:b0:95:fa:bb:68:4e:97:50:12: f5:78:09:df:49:9b:71:a4:f9:6a:cb:eb:87:18:30:aa:20:f8: 1c:f8:7b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgDfsYq1SellPTDLM+vhQ+4DnwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA5MjExNTE1MzVaFw0yNjA5MjIxODM3MzVaMDMxMTAvBgNV BAMTKDVCOUJGMTFFRTRBQzg5NTQxMTZCNjg1OUQ1MzYzNDNDOUI3MzYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVQ6an+w5K9YbIsP6g3udihyT bt1gzUV7p/2KW69m3PYM0186ftLY/CvYYleKD/lCSTVjh9huksT55+7Kl3vmCAF0 Worz3+4zhmOm0QZR9Iwu/D9Dd9QvXQRqp3WgKx4/l0sIcTA3wAZPZmtIvo2qM+Pu mqBOKFpPUSswQ/7T2n3grxM4Qz/lNtukjkUOaX4xBeFKukWBBmML1zuUxpndm+ZX RA7R+YeHYo5e8IWPZGU7NBwECLSq4L2TXmzANGMHje/iAFFZbfKjdP0JBMv3dlvc DUs+bC08DDYgH152benTNZTwGxrFKMsKg1+dlckZ2UvWnTkKB7XGPsCNNyorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5vxHuSsiVQRa2hZ1TY0PJtzY/UwHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP/6+OobP9bQvElJlDSOuCfKedXaAWScs6t I0OyuxShUY8Szs1c6kEkSlPfGl1YwSJC7+ImZpC4rPHKQfTlNZYg9In+6x0J++TX KVxaz/5eHsrTlMmG13Ae2/JqyZrZGYQQdgzhQPSPtndTO1kzk3swZc2Y3Rwn2kvX okM8L2IpfgmB4800aI3Us6q8uzNKmNgb6tytxbCtdohDwreij/VPoJXN18kzxJIT Yw9Y4kXafngTPeSCAs42G7cd6jFlaTLa052Ua2J/UqL6KQ/X64BVAAXRDPpRF6sM AHRr7Qfr9LCV+rtoTpdQEvV4Cd9Jm3Gk+WrL64cYMKog+Bz4ex8= -----END CERTIFICATE-----Generated at Tue Sep 22 01:17:05 2026 by rpki-client