$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: yTOzUtHaxjj3ce9XAVTtUUXttL8JYT+q0d/SX6hhLA8= Subject key identifier: A2:3D:9E:3C:8F:54:44:54:EA:93:7C:62:92:D1:90:0C:3B:D4:B6:05 Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 50A92AC7B524E619AE2A3769A9B09682DE5601E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:41:05 +0000 Manifest this update: Mon 21 Sep 2026 03:36:05 +0000 Manifest next update: Tue 22 Sep 2026 05:27:05 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 4: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: hxii4NoDHlt4O9KuGQlynRSK9N6oYb1LRe32FCPzDYc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a9:2a:c7:b5:24:e6:19:ae:2a:37:69:a9:b0:96:82:de:56:01:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: Sep 21 03:36:05 2026 GMT Not After : Sep 22 05:27:05 2026 GMT Subject: CN=A23D9E3C8F544454EA937C6292D1900C3BD4B605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:23:31:bb:f1:af:13:a5:08:4c:20:cf:7d: 9a:94:5f:d0:a0:08:61:28:1b:98:84:b6:c2:8c:1c: b3:79:68:f6:34:8c:32:91:41:6e:94:32:ff:16:fc: 58:bf:24:91:fc:3d:b8:ac:82:69:61:d4:48:0e:09: 97:8f:2d:28:0d:9a:e1:cb:06:37:cd:02:b5:7a:0a: b9:7f:9b:fd:fe:75:98:f1:e8:20:66:79:d9:b8:6e: 37:b1:da:d0:d3:c2:eb:55:7c:f2:dc:42:2a:9f:cb: a3:2f:f8:76:af:38:92:1d:39:36:52:2b:2b:f5:6b: 99:f5:19:24:a0:41:e2:50:3c:f7:03:0f:90:a0:59: fa:b2:3a:fe:66:69:81:b3:3a:4e:86:6f:a9:48:58: 8d:e7:43:0a:b9:aa:59:05:30:07:47:1a:76:86:eb: c5:98:3e:f0:55:0f:37:45:41:34:54:9c:56:9d:51: 62:52:a7:8f:51:d0:6b:4f:74:95:ea:e4:07:b5:20: 59:da:6e:0a:2f:08:19:79:85:c2:6f:a7:76:36:4e: 86:19:5a:8b:bb:94:b0:f9:2f:4f:ea:e5:0e:5c:a7: 79:9d:54:1d:70:6a:eb:91:bf:c2:6e:80:8b:25:47: b0:70:57:8e:30:d0:72:74:c5:e5:8d:42:af:3f:05: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3D:9E:3C:8F:54:44:54:EA:93:7C:62:92:D1:90:0C:3B:D4:B6:05 X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c8:7b:ef:cb:15:e5:49:60:cc:17:f7:13:71:f4:07:4c:13: 4e:1d:d2:0c:39:b9:9a:38:02:ef:49:e3:bc:1e:32:08:0a:71: 2f:9d:6b:82:78:2f:5d:3a:0d:31:f8:7a:90:6a:17:2e:ea:15: fd:d9:84:f9:2e:5b:9b:d5:bb:a4:2b:cc:00:63:6a:c0:f7:97: d3:02:80:46:bc:17:9b:3e:b3:ed:41:36:f9:00:60:a6:99:e7: 8c:a6:6d:b7:1f:b5:bb:df:af:59:f5:e5:b7:a3:d6:67:aa:e8: 41:fc:bc:35:43:f4:0a:f7:b6:e0:3f:14:8d:b2:de:39:71:fd: ae:0a:4a:81:b3:d7:1c:c2:0a:a2:47:69:9e:0b:a0:76:c6:e4: 74:25:bd:41:26:9d:6b:5b:4c:91:f9:e1:52:00:b7:0b:cb:a4: 7d:27:18:b1:09:97:6d:a3:29:0c:da:57:41:81:f2:f0:e9:1b: fb:06:70:ad:4e:48:34:7a:d6:2e:2e:77:87:31:cf:ec:20:b8: 5f:12:da:99:d6:df:c5:0d:93:2c:ab:5b:c0:79:90:5d:e5:d5: c4:be:ce:b3:3e:c3:64:77:b7:e0:b1:be:4e:03:24:75:80:f0: e1:e4:01:9f:6a:ba:7f:89:9c:35:45:c3:44:02:8d:d3:62:57: eb:77:0e:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKkqx7Uk5hmuKjdpqbCWgt5WAeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA5MjEwMzM2MDVaFw0yNjA5MjIwNTI3MDVaMDMxMTAvBgNV BAMTKEEyM0Q5RTNDOEY1NDQ0NTRFQTkzN0M2MjkyRDE5MDBDM0JENEI2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNyMxu/GvE6UITCDPfZqUX9Cg CGEoG5iEtsKMHLN5aPY0jDKRQW6UMv8W/Fi/JJH8Pbisgmlh1EgOCZePLSgNmuHL BjfNArV6Crl/m/3+dZjx6CBmedm4bjex2tDTwutVfPLcQiqfy6Mv+HavOJIdOTZS Kyv1a5n1GSSgQeJQPPcDD5CgWfqyOv5maYGzOk6Gb6lIWI3nQwq5qlkFMAdHGnaG 68WYPvBVDzdFQTRUnFadUWJSp49R0GtPdJXq5Ae1IFnabgovCBl5hcJvp3Y2ToYZ Wou7lLD5L0/q5Q5cp3mdVB1wauuRv8JugIslR7BwV44w0HJ0xeWNQq8/BevlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoj2ePI9URFTqk3xiktGQDDvUtgUwHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7Ie+/LFeVJYMwX9xNx9AdME04d0gw5uZo4 Au9J47weMggKcS+da4J4L106DTH4epBqFy7qFf3ZhPkuW5vVu6QrzABjasD3l9MC gEa8F5s+s+1BNvkAYKaZ54ymbbcftbvfr1n15bej1meq6EH8vDVD9Ar3tuA/FI2y 3jlx/a4KSoGz1xzCCqJHaZ4LoHbG5HQlvUEmnWtbTJH54VIAtwvLpH0nGLEJl22j KQzaV0GB8vDpG/sGcK1OSDR61i4ud4cxz+wguF8S2pnW38UNkyyrW8B5kF3l1cS+ zrM+w2R3t+Cxvk4DJHWA8OHkAZ9qun+JnDVFw0QCjdNiV+t3DiA= -----END CERTIFICATE-----Generated at Mon Sep 21 06:15:35 2026 by rpki-client