$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft File: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft (raw, json) Hash identifier: lOVt4P7LgGmFO5yMzOn51R7qLlD2TvyVJ+cZcqT11oA= Subject key identifier: 16:C7:0C:71:B2:D7:57:96:7D:A6:3E:9D:D4:84:A3:25:13:3D:5F:6F Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 7B8B8F4CBDC3885B91BA1AF25A26782C48F3D526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft Manifest number: BD Signing time: Mon 21 Sep 2026 00:32:11 +0000 Manifest this update: Mon 21 Sep 2026 00:27:11 +0000 Manifest next update: Tue 22 Sep 2026 03:16:11 +0000 Files and hashes: 1: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: rXO9gTdPSQGsrR5rUmnzksusGY7II8+DMWGkUGzNqUA=) 2: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=) 3: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl (hash: EiANZt9jZj949MfRQ8iWB/EKegs5ts8th5xc0XOWfdk=) 4: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: xLoeT+ko7MUw5aLnf4wj8gyqTKfil2TZ1gKntVO+LKI=) 5: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8b:8f:4c:bd:c3:88:5b:91:ba:1a:f2:5a:26:78:2c:48:f3:d5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: Sep 21 00:27:11 2026 GMT Not After : Sep 22 03:16:11 2026 GMT Subject: CN=16C70C71B2D757967DA63E9DD484A325133D5F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:89:72:5c:10:84:c6:6b:5b:2a:e8:66:af: 03:fe:b8:49:10:ce:98:62:ef:90:81:dd:ad:68:03: 50:c5:d8:53:c3:ac:a1:e0:d9:04:ee:9b:26:e3:13: 15:46:2f:63:d1:fb:36:c0:b6:d3:98:48:9a:5b:90: b3:a8:a0:3b:de:c0:c1:66:d8:22:cb:aa:5e:83:12: e8:1d:e9:ab:a2:7b:54:0a:ed:98:d1:40:b7:c5:68: 47:66:b3:56:58:7b:24:c0:a8:8d:61:13:12:e1:b0: 20:ca:77:07:61:3b:e6:18:17:3e:c1:f3:28:3b:7d: 9d:1b:6f:48:9d:0d:64:fa:0c:fa:27:19:cb:2d:27: 00:d4:57:21:c3:d5:74:78:ae:76:f2:c2:1c:12:79: e5:54:bc:91:8f:ba:03:71:59:aa:b6:4e:8a:d6:c3: 09:22:01:fa:38:a7:36:78:65:70:0f:66:91:67:66: 78:92:5f:d6:01:e7:06:3c:78:d8:9c:fb:24:95:ab: f3:9d:d3:23:e7:3d:cf:37:4a:24:c0:f1:df:19:4b: 6f:22:95:36:8a:11:f5:b9:2d:b0:ab:97:ed:6c:b4: 6a:cf:a8:b1:03:1e:9a:3e:14:df:0d:29:5f:98:b9: 64:9b:87:d1:7a:19:61:1c:9b:b7:8e:83:bb:28:1b: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:0C:71:B2:D7:57:96:7D:A6:3E:9D:D4:84:A3:25:13:3D:5F:6F X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6f:41:54:9f:80:af:9e:ef:31:d0:40:ed:f1:89:c8:7a:e8: e8:8e:50:e7:69:ae:f8:e5:8a:f2:b6:36:50:c8:04:a8:b7:bd: 2b:0f:db:71:ce:41:f5:15:8d:d1:1d:a6:7d:fc:8f:8d:08:a9: be:9d:b4:ff:42:9e:18:01:6a:c3:a2:e2:42:1e:20:cc:a1:c3: 95:b8:e5:c0:c1:41:95:ee:34:71:e3:2e:49:6f:cc:25:66:35: 81:81:8a:6e:b6:b8:9a:1f:8a:02:0c:b6:c5:82:bc:a7:2b:05: 28:df:97:0d:19:dd:68:79:34:5d:90:0b:a5:fe:61:04:b9:6a: 02:a4:39:ad:33:63:18:0d:b3:6d:8e:77:0b:1d:c6:c7:d3:80: 86:90:16:8b:3d:4e:89:ed:d2:3c:0d:86:22:9b:95:63:5f:0c: 92:07:d2:52:bd:d9:b8:cd:ff:0c:99:02:33:1b:6c:27:ea:e4: 19:08:11:3a:fe:a5:6d:79:bc:c0:3e:f2:97:e4:44:0a:5a:d0: f3:e9:43:88:21:e6:3d:0e:30:a1:62:ee:93:36:b3:ad:ab:1c: 0a:0a:45:9a:cb:a7:dd:8e:7f:38:5e:69:3e:23:81:61:a3:f7: b5:e1:96:19:69:4e:29:a3:b3:08:d6:21:3c:76:00:9c:c5:2a: 05:3b:0e:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4uPTL3DiFuRuhryWiZ4LEjz1SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA5MjEwMDI3MTFaFw0yNjA5MjIwMzE2MTFaMDMxMTAvBgNV BAMTKDE2QzcwQzcxQjJENzU3OTY3REE2M0U5REQ0ODRBMzI1MTMzRDVGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkolyXBCExmtbKuhmrwP+uEkQ zphi75CB3a1oA1DF2FPDrKHg2QTumybjExVGL2PR+zbAttOYSJpbkLOooDvewMFm 2CLLql6DEugd6auie1QK7ZjRQLfFaEdms1ZYeyTAqI1hExLhsCDKdwdhO+YYFz7B 8yg7fZ0bb0idDWT6DPonGcstJwDUVyHD1XR4rnbywhwSeeVUvJGPugNxWaq2TorW wwkiAfo4pzZ4ZXAPZpFnZniSX9YB5wY8eNic+ySVq/Od0yPnPc83SiTA8d8ZS28i lTaKEfW5LbCrl+1stGrPqLEDHpo+FN8NKV+YuWSbh9F6GWEcm7eOg7soG9vnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFscMcbLXV5Z9pj6d1ISjJRM9X28wHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhG RjRFQzEwMTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJvQVSfgK+e7zHQQO3xich66OiOUOdprvjl ivK2NlDIBKi3vSsP23HOQfUVjdEdpn38j40Iqb6dtP9CnhgBasOi4kIeIMyhw5W4 5cDBQZXuNHHjLklvzCVmNYGBim62uJofigIMtsWCvKcrBSjflw0Z3Wh5NF2QC6X+ YQS5agKkOa0zYxgNs22OdwsdxsfTgIaQFos9Tont0jwNhiKblWNfDJIH0lK92bjN /wyZAjMbbCfq5BkIETr+pW15vMA+8pfkRApa0PPpQ4gh5j0OMKFi7pM2s62rHAoK RZrLp92OfzheaT4jgWGj97XhlhlpTimjswjWITx2AJzFKgU7Dks= -----END CERTIFICATE-----Generated at Mon Sep 21 09:54:44 2026 by rpki-client