$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: WsV6vYR7XVkG8Cl8lBsYdyfzSkypX7U24bnrQw3dRRg= Subject key identifier: EC:2B:72:17:35:92:C7:A3:DA:74:A5:5F:FA:26:65:57:C2:91:03:83 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 3663857C4464D20C8327F238746B2FB032DF53FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: BD Signing time: Sun 20 Sep 2026 13:59:17 +0000 Manifest this update: Sun 20 Sep 2026 13:54:17 +0000 Manifest next update: Mon 21 Sep 2026 14:32:17 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 4: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: 3AXYHWDC3KPuQdZZuILcFFXxClun41YxItYDz1+WUb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:85:7c:44:64:d2:0c:83:27:f2:38:74:6b:2f:b0:32:df:53:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Sep 20 13:54:17 2026 GMT Not After : Sep 21 14:32:17 2026 GMT Subject: CN=EC2B72173592C7A3DA74A55FFA266557C2910383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:3a:9e:41:a0:5c:fa:1f:b0:bb:2f:ab:c1: 67:0d:93:c8:94:68:14:d2:a8:d2:40:bc:e3:75:c0: 75:d2:45:e5:0a:e9:58:0c:4c:91:5f:27:2e:3e:08: f0:f7:66:83:19:78:91:73:67:05:82:e8:23:33:05: 03:50:4b:4c:93:04:05:e4:6c:2d:fc:f8:80:0f:b4: 5c:80:89:3f:8e:e6:49:56:a9:f9:0f:00:03:9d:5c: d0:3f:2f:6a:53:96:bc:b9:ad:8c:a5:47:8f:1c:7a: d6:54:8d:91:54:d3:c0:f2:5a:bb:22:7e:3a:2e:a6: 50:05:85:41:92:9e:af:3e:3f:55:86:d1:27:88:9c: 99:49:bf:68:d0:6d:9b:d2:1a:bd:e6:d7:1f:b3:ff: 6c:48:25:0c:1a:4c:e5:46:aa:21:76:d4:34:69:6b: 48:64:09:51:89:18:fe:6f:ec:e7:45:d7:22:a1:6c: 9e:9b:b1:da:79:00:a7:08:34:12:96:4f:e0:51:12: 81:82:c3:54:db:fc:1a:08:74:a7:fa:1d:6e:fd:72: ed:d0:c9:86:0a:34:9a:19:a0:fc:38:69:85:8e:2a: e3:3a:9d:a1:63:bd:48:f6:2b:6e:81:49:05:0f:02: 43:dc:41:a3:27:27:65:b4:03:83:4d:09:75:99:ec: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2B:72:17:35:92:C7:A3:DA:74:A5:5F:FA:26:65:57:C2:91:03:83 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:89:19:61:b4:e1:79:37:b9:6c:fc:3e:8d:14:a0:0b:e6:e2: b3:15:e7:fb:f1:47:4a:c5:8a:d8:73:77:17:13:b9:c5:13:e6: c5:0a:f8:4a:da:6e:08:aa:41:db:ec:b1:86:94:ae:66:92:a7: bb:9f:19:ed:d3:19:b3:ad:59:0d:c7:e4:1d:0d:b8:8e:e0:0b: c8:fb:b5:7c:d8:bc:2e:0a:b3:f4:e4:36:ef:39:e4:e4:44:9b: 58:a9:6b:07:91:64:cc:91:4d:3e:8d:58:5d:f0:fd:0d:16:c9: 36:85:0e:8a:61:e9:99:05:1f:1e:86:2d:02:cf:97:0a:4d:20: 09:99:e2:ed:30:51:3b:3f:c3:b7:da:f8:56:c2:57:0e:4c:e3: ca:1a:27:4d:c5:83:59:2d:5a:c8:0e:24:80:e0:ee:2d:16:bf: c9:88:ab:d1:a9:7c:49:a0:7b:58:8b:2d:c3:31:67:41:30:f7: 86:72:52:5a:43:77:26:b0:3b:ce:32:bf:7d:a4:b0:f9:82:77: d6:e5:7b:fe:13:59:f0:a0:81:8b:00:af:0c:c6:2c:cd:ef:64: f8:52:cf:89:cb:98:6d:95:a3:3f:e0:db:8d:cc:2a:c6:b3:5e: e0:80:d4:46:f2:8f:46:23:b5:5c:f3:56:50:13:ce:c2:7a:f0: 32:f1:c6:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmOFfERk0gyDJ/I4dGsvsDLfU/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA5MjAxMzU0MTdaFw0yNjA5MjExNDMyMTdaMDMxMTAvBgNV BAMTKEVDMkI3MjE3MzU5MkM3QTNEQTc0QTU1RkZBMjY2NTU3QzI5MTAzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOjqeQaBc+h+wuy+rwWcNk8iU aBTSqNJAvON1wHXSReUK6VgMTJFfJy4+CPD3ZoMZeJFzZwWC6CMzBQNQS0yTBAXk bC38+IAPtFyAiT+O5klWqfkPAAOdXNA/L2pTlry5rYylR48cetZUjZFU08DyWrsi fjouplAFhUGSnq8+P1WG0SeInJlJv2jQbZvSGr3m1x+z/2xIJQwaTOVGqiF21DRp a0hkCVGJGP5v7OdF1yKhbJ6bsdp5AKcINBKWT+BREoGCw1Tb/BoIdKf6HW79cu3Q yYYKNJoZoPw4aYWOKuM6naFjvUj2K26BSQUPAkPcQaMnJ2W0A4NNCXWZ7MaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CtyFzWSx6PadKVf+iZlV8KRA4MwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOJGWG04Xk3uWz8Po0UoAvm4rMV5/vxR0rF ithzdxcTucUT5sUK+ErabgiqQdvssYaUrmaSp7ufGe3TGbOtWQ3H5B0NuI7gC8j7 tXzYvC4Ks/TkNu855OREm1ipaweRZMyRTT6NWF3w/Q0WyTaFDoph6ZkFHx6GLQLP lwpNIAmZ4u0wUTs/w7fa+FbCVw5M48oaJ03Fg1ktWsgOJIDg7i0Wv8mIq9GpfEmg e1iLLcMxZ0Ew94ZyUlpDdyawO84yv32ksPmCd9ble/4TWfCggYsArwzGLM3vZPhS z4nLmG2Voz/g243MKsazXuCA1Ebyj0YjtVzzVlATzsJ68DLxxtg= -----END CERTIFICATE-----Generated at Mon Sep 21 07:17:05 2026 by rpki-client