$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: 9NDJHCAh5bzoCjFbksGG/nm2czaY+02lnZdci9mTzi4= Subject key identifier: 2E:C7:72:77:9F:B2:16:29:E8:83:65:94:F9:F2:8F:54:6D:0B:9D:F9 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 2DE4E942064C40388E46E24A3FEEF619F47D82E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 13:08:17 +0000 Manifest this update: Sun 20 Sep 2026 13:03:17 +0000 Manifest next update: Mon 21 Sep 2026 16:46:17 +0000 Files and hashes: 1: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: /DSPbUXYHahCaYW4eMM2i66UM8NpvfHnCUv4VqxBzaw=) 3: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e4:e9:42:06:4c:40:38:8e:46:e2:4a:3f:ee:f6:19:f4:7d:82:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Sep 20 13:03:17 2026 GMT Not After : Sep 21 16:46:17 2026 GMT Subject: CN=2EC772779FB21629E8836594F9F28F546D0B9DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:88:c1:c4:4f:7d:1f:dc:3b:f4:2a:2a:2d: 32:b3:55:fe:0b:26:0a:12:f2:7a:e6:08:3e:21:c7: b0:f4:8e:51:31:32:ed:f0:84:cd:5b:87:0b:e6:c7: 4e:eb:01:38:79:cc:e3:cb:88:3d:69:fd:8a:d0:54: 73:98:d1:1f:13:1a:9a:4a:5a:3b:26:29:e8:45:4f: 2c:98:aa:d0:29:e4:31:fc:26:d7:e5:16:d5:53:86: 18:f9:33:f5:93:d8:0f:6b:d7:68:4b:b7:49:9a:a1: e1:85:bc:af:84:b2:89:f4:1e:72:e4:30:77:40:b7: e8:61:9a:73:2b:c4:05:9c:d8:bc:e2:99:a1:42:e2: 00:de:be:41:c3:16:93:6b:f8:6b:7e:49:b5:63:82: d6:06:9e:77:7f:4f:a4:e2:55:c1:20:e5:77:9b:78: 86:95:82:87:09:14:19:82:e7:3d:80:46:f7:5f:29: 53:83:ce:43:1f:ec:8f:d6:e6:68:97:c3:a3:53:1a: 11:cf:87:70:af:dd:d5:e9:09:b5:87:94:bc:53:77: 34:34:6d:a4:ba:f8:27:01:6b:39:df:8a:ee:41:69: 7c:d5:8c:59:ac:28:f9:a8:eb:31:73:16:19:b5:46: 3b:33:f0:89:97:ff:3b:fe:05:1f:ef:5c:7c:48:b0: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C7:72:77:9F:B2:16:29:E8:83:65:94:F9:F2:8F:54:6D:0B:9D:F9 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a3:02:84:9b:a3:10:57:ae:fc:12:ca:b5:bc:d1:0c:99:cd: 6d:96:ec:a6:05:9b:01:9f:49:24:7e:e2:04:0b:5f:f3:45:79: 92:cc:37:5f:79:fa:3e:98:88:b2:96:f9:15:e1:73:7a:13:8a: f7:71:7c:6d:6a:1c:df:37:7b:d8:33:bc:d5:b7:84:a7:fb:b8: 3e:de:20:a8:64:e5:4e:8b:c4:0d:2b:71:29:35:d6:28:22:a9: e8:54:09:88:0e:61:82:5f:d9:0a:fa:f2:44:2c:62:d6:43:77: 7b:7a:64:38:e9:2e:a1:1a:c7:67:0c:e4:74:a4:30:cb:22:fd: 65:a3:17:30:45:7c:af:94:b9:22:b8:04:2f:d0:46:b4:dc:4b: 94:13:5d:98:f4:c2:e0:06:da:14:5a:cd:09:dd:32:31:dd:50: 4d:25:07:ed:f8:71:32:0d:4e:2f:b1:95:91:30:1b:9d:ff:cc: 20:90:b9:7b:2d:b3:73:47:38:b0:40:f9:5c:c4:a4:80:a5:b5: e7:8e:b3:a9:1f:e5:89:38:f9:07:ec:35:59:40:31:ad:d6:5d: 8d:30:b9:40:91:33:19:13:e5:70:f1:44:2c:2d:e4:26:11:aa: 1d:2a:51:40:4d:13:b7:73:57:93:ad:77:0a:e6:e5:7c:6d:da: 18:d6:73:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeTpQgZMQDiORuJKP+72GfR9gukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA5MjAxMzAzMTdaFw0yNjA5MjExNjQ2MTdaMDMxMTAvBgNV BAMTKDJFQzc3Mjc3OUZCMjE2MjlFODgzNjU5NEY5RjI4RjU0NkQwQjlERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z4jBxE99H9w79CoqLTKzVf4L JgoS8nrmCD4hx7D0jlExMu3whM1bhwvmx07rATh5zOPLiD1p/YrQVHOY0R8TGppK WjsmKehFTyyYqtAp5DH8JtflFtVThhj5M/WT2A9r12hLt0maoeGFvK+Eson0HnLk MHdAt+hhmnMrxAWc2LzimaFC4gDevkHDFpNr+Gt+SbVjgtYGnnd/T6TiVcEg5Xeb eIaVgocJFBmC5z2ARvdfKVODzkMf7I/W5miXw6NTGhHPh3Cv3dXpCbWHlLxTdzQ0 baS6+CcBaznfiu5BaXzVjFmsKPmo6zFzFhm1Rjsz8ImX/zv+BR/vXHxIsPoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsdyd5+yFinog2WU+fKPVG0LnfkwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqjAoSboxBXrvwSyrW80QyZzW2W7KYFmwGf SSR+4gQLX/NFeZLMN195+j6YiLKW+RXhc3oTivdxfG1qHN83e9gzvNW3hKf7uD7e IKhk5U6LxA0rcSk11igiqehUCYgOYYJf2Qr68kQsYtZDd3t6ZDjpLqEax2cM5HSk MMsi/WWjFzBFfK+UuSK4BC/QRrTcS5QTXZj0wuAG2hRazQndMjHdUE0lB+34cTIN Ti+xlZEwG53/zCCQuXsts3NHOLBA+VzEpIClteeOs6kf5Yk4+QfsNVlAMa3WXY0w uUCRMxkT5XDxRCwt5CYRqh0qUUBNE7dzV5Otdwrm5Xxt2hjWc7Y= -----END CERTIFICATE-----Generated at Sun Sep 20 23:49:59 2026 by rpki-client