$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft File: 202D68B92C393694107A2F9B59DF1822383F0A40.mft (raw, json) Hash identifier: 8b2IcZA6L9vgmMqNBSvrHk2AMezAR/l1WIeWpKIgTbk= Subject key identifier: 18:25:73:B9:AF:07:82:64:9F:95:AC:AB:4F:CA:DC:97:85:B8:64:70 Authority key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 Certificate issuer: /CN=202D68B92C393694107A2F9B59DF1822383F0A40 Certificate serial: 2BB2FA3F059D6088E1539671A48F4F533B833892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft Manifest number: BF Signing time: Tue 22 Sep 2026 00:32:11 +0000 Manifest this update: Tue 22 Sep 2026 00:27:11 +0000 Manifest next update: Wed 23 Sep 2026 01:23:11 +0000 Files and hashes: 1: 202D68B92C393694107A2F9B59DF1822383F0A40.crl (hash: 2nR30/nkNOrf8Ckh6JBiW9jR1d5/Q8XghDcH+4ihd0E=) 2: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: sVkX/3BAqlUnIX3vPMQ13bPbeRbhUsec2KXwzV7qXyg=) 3: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 59w4gZXVO0UF24xOSJ6tHWLfwtyek7qt4pTN2C7JT58=) 4: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JJn7HIlfA2u7cKl1pj836AvFJgvd06b+L9BxXbXGPiQ=) 5: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: s1JJ4qxqnX+/x2wRLTL/vn6XvEiBu3g0RUuaHJFKCfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b2:fa:3f:05:9d:60:88:e1:53:96:71:a4:8f:4f:53:3b:83:38:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202D68B92C393694107A2F9B59DF1822383F0A40 Validity Not Before: Sep 22 00:27:11 2026 GMT Not After : Sep 23 01:23:11 2026 GMT Subject: CN=182573B9AF0782649F95ACAB4FCADC9785B86470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:7d:c9:78:66:1c:65:d6:81:67:89:fb:09: 22:a4:c2:6f:85:18:0c:07:95:bd:a8:2e:e8:54:a5: 58:ff:c1:72:78:85:68:63:05:51:17:76:49:f4:ae: cf:11:a4:5c:21:18:2f:47:82:05:a3:85:82:2e:8c: 16:42:56:d2:69:72:4d:e7:a2:3a:a4:42:6a:cb:84: d9:21:74:59:65:19:a0:c7:f6:1c:77:20:27:37:24: 3c:82:be:a0:cd:dc:9c:ca:bc:ae:77:06:13:26:dd: 98:47:bb:70:69:f3:9d:0a:92:c0:d3:07:00:47:a0: 90:8f:00:27:f7:b6:7f:19:e0:58:3a:1a:d2:4e:5a: 54:ad:f4:5d:20:d9:15:f2:ea:19:22:06:64:21:bb: d1:86:0c:26:3d:0d:7a:aa:1d:5e:e2:df:b8:96:36: 24:45:e8:1b:dd:e2:92:32:4d:3b:82:15:b4:56:9e: 1e:f2:66:bc:f9:59:21:bb:cf:fc:9e:1d:ae:82:2a: d5:de:2f:7e:d1:2e:3d:f0:2a:2e:78:15:dd:7e:9f: 04:26:3e:95:a5:82:4c:5b:29:6e:3f:4d:98:db:6e: 8b:35:87:61:10:a4:f8:49:32:46:f7:c4:1b:4c:57: 7b:6f:f0:e4:9d:a5:92:61:c7:d9:d0:96:fe:49:fa: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:25:73:B9:AF:07:82:64:9F:95:AC:AB:4F:CA:DC:97:85:B8:64:70 X509v3 Authority Key Identifier: keyid:20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e9:45:ba:1a:3a:61:1c:6c:ed:ce:ed:69:94:c7:9a:73:d7: 26:66:90:18:df:c9:90:b7:eb:49:29:86:f9:37:0a:24:12:b3: ca:0c:a5:5c:f9:53:11:79:2f:01:4d:39:e9:ef:04:3b:89:a7: e5:f2:cb:44:5b:a9:69:c1:77:40:01:4d:66:50:78:cd:80:52: 96:95:2e:f5:1c:12:27:8f:1b:ed:0e:83:6d:40:69:ec:05:e9: c9:1d:0d:99:2e:4b:4b:7e:44:b7:25:20:c5:c7:a0:29:3f:79: 07:d9:ec:9f:e9:a3:99:20:81:dd:4c:8f:96:11:d7:97:ea:8e: 2c:3f:a9:8b:df:6e:85:10:4d:7b:fa:01:8f:c2:61:c7:6f:d0: 25:d4:74:19:5c:df:04:5c:3c:7a:2d:6a:c1:7d:d3:e6:8d:52: bb:28:61:ed:40:38:8a:f9:53:b0:71:77:7a:99:2c:26:dd:e4: e1:e0:96:bd:2c:47:33:06:2a:8b:30:62:07:bd:42:8e:34:14: 7e:01:da:26:38:90:07:05:d9:e3:cb:aa:5e:57:aa:d4:e6:22: da:3b:77:2b:cc:e6:cd:2b:08:d4:08:66:5a:d9:c3:01:5d:90: 61:ce:7a:8d:e5:34:ed:a4:27:63:d8:79:0b:37:a4:d6:f3:85: b0:0e:be:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7L6PwWdYIjhU5ZxpI9PUzuDOJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4MjIz ODNGMEE0MDAeFw0yNjA5MjIwMDI3MTFaFw0yNjA5MjMwMTIzMTFaMDMxMTAvBgNV BAMTKDE4MjU3M0I5QUYwNzgyNjQ5Rjk1QUNBQjRGQ0FEQzk3ODVCODY0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Bn3JeGYcZdaBZ4n7CSKkwm+F GAwHlb2oLuhUpVj/wXJ4hWhjBVEXdkn0rs8RpFwhGC9HggWjhYIujBZCVtJpck3n ojqkQmrLhNkhdFllGaDH9hx3ICc3JDyCvqDN3JzKvK53BhMm3ZhHu3Bp850KksDT BwBHoJCPACf3tn8Z4Fg6GtJOWlSt9F0g2RXy6hkiBmQhu9GGDCY9DXqqHV7i37iW NiRF6Bvd4pIyTTuCFbRWnh7yZrz5WSG7z/yeHa6CKtXeL37RLj3wKi54Fd1+nwQm PpWlgkxbKW4/TZjbbos1h2EQpPhJMkb3xBtMV3tv8OSdpZJhx9nQlv5J+qPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCVzua8HgmSflayrT8rcl4W4ZHAwHwYDVR0j BBgwFoAUIC1ouSw5NpQQei+bWd8YIjg/CkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3MjkyOTEtYTFhNy00YjE5LTkzZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4Qjky QzM5MzY5NDEwN0EyRjlCNTlERjE4MjIzODNGMEE0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJENjhCOTJDMzkzNjk0MTA3QTJGOUI1OURGMTgyMjM4M0Yw QTQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4 MjIzODNGMEE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXpRboaOmEcbO3O7WmUx5pz1yZmkBjfyZC3 60kphvk3CiQSs8oMpVz5UxF5LwFNOenvBDuJp+Xyy0RbqWnBd0ABTWZQeM2AUpaV LvUcEiePG+0Og21AaewF6ckdDZkuS0t+RLclIMXHoCk/eQfZ7J/po5kggd1Mj5YR 15fqjiw/qYvfboUQTXv6AY/CYcdv0CXUdBlc3wRcPHotasF90+aNUrsoYe1AOIr5 U7Bxd3qZLCbd5OHglr0sRzMGKoswYge9Qo40FH4B2iY4kAcF2ePLql5XqtTmIto7 dyvM5s0rCNQIZlrZwwFdkGHOeo3lNO2kJ2PYeQs3pNbzhbAOvm4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:25 2026 by rpki-client