$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: KWN1WiV7dXIJP5Wgfu1t7ux1ABBYXUJB0AqBKpuGB1g= Subject key identifier: 1E:D5:1B:05:E0:10:3F:BA:65:E9:10:D1:B0:31:DC:FD:94:DF:1E:3E Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 5876715935D44E7D66664BF85FDA229DC9315C08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 17:37:10 +0000 Manifest this update: Fri 25 Sep 2026 17:32:10 +0000 Manifest next update: Sat 26 Sep 2026 18:32:10 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) 2: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 3: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: fdpmPLXrMH5/QEpsw8weiyjUyym6MtNn/7Jc6QEUHKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:76:71:59:35:d4:4e:7d:66:66:4b:f8:5f:da:22:9d:c9:31:5c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Sep 25 17:32:10 2026 GMT Not After : Sep 26 18:32:10 2026 GMT Subject: CN=1ED51B05E0103FBA65E910D1B031DCFD94DF1E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:07:58:3a:58:36:cf:cc:34:36:87:19:17: c9:af:75:14:a1:7a:70:fe:3c:a6:82:07:fd:31:47: bd:06:8c:4c:2c:b6:77:9a:73:e5:16:f6:db:55:a1: 18:59:b2:00:39:6c:1c:d4:6b:b3:44:2c:16:74:aa: ef:3c:5a:34:02:0b:54:a4:80:d4:97:01:6a:db:55: 79:8d:33:27:61:f3:20:0c:e6:d2:12:12:11:10:4d: fe:64:8e:40:b8:82:1d:45:82:ca:5d:b4:60:82:1a: 15:28:4b:6a:9e:15:35:35:7e:eb:e2:66:51:65:24: 14:fa:64:37:cc:34:a6:bc:88:df:33:de:b5:11:9b: 8b:ed:ef:d9:85:c5:70:c6:1a:e7:1e:6e:bc:a4:a6: da:f6:7a:0c:69:1c:35:e6:54:76:fc:ac:54:4d:8d: 03:c7:7d:ca:02:79:ae:e2:32:3f:03:37:13:5d:07: fd:67:b0:9c:46:3e:cd:31:a6:f1:d7:c6:e4:eb:ae: e1:36:4c:47:1f:ee:3b:cf:6b:97:46:5f:5b:55:8f: bf:55:d9:fd:c6:9e:e4:ea:52:63:7a:6d:a5:fe:66: 03:56:cb:88:9e:fc:3e:c7:3e:cb:fb:80:e2:0a:85: cb:72:79:98:3c:9f:69:3f:4e:db:27:a7:fd:be:e4: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D5:1B:05:E0:10:3F:BA:65:E9:10:D1:B0:31:DC:FD:94:DF:1E:3E X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:b9:9e:73:54:35:86:ed:c9:12:8b:c1:82:4c:e2:94:23: 87:9f:b9:91:71:60:df:1c:41:4c:dc:a9:f2:04:c4:2e:bf:8d: cb:0b:d3:3f:02:da:be:e9:64:6e:19:52:98:39:77:b0:a6:46: 70:4b:e8:e4:5a:a0:05:f4:ce:24:6e:74:0f:93:eb:3e:34:63: 0f:d9:ef:42:26:6e:44:35:4f:cc:dd:45:d3:a7:65:7d:ce:61: 01:20:6a:d2:e7:63:46:df:ec:43:28:5b:c8:6b:10:d0:41:82: ba:a8:c5:5b:17:ec:bf:7e:f3:f8:cb:40:b1:7a:92:cd:45:bf: 77:1b:24:3a:be:3c:2a:0f:c7:8e:c3:60:52:6f:df:59:d2:bb: df:df:40:96:4a:63:9c:de:57:20:9e:97:8c:2b:a2:d1:cd:ed: ca:8c:c8:5d:ae:35:70:79:5c:60:f9:6c:37:03:e5:6a:10:2e: 56:a3:2c:e9:40:d1:a8:dc:8f:11:72:d5:99:d6:4f:7d:6a:64: 06:9e:88:54:0e:a7:d4:58:33:6f:58:ea:ef:9e:af:ac:53:ac: 91:8f:84:2d:f8:0f:20:71:33:e0:69:90:68:6c:64:73:f0:5a: 29:cd:76:1e:cf:3f:44:9c:76:11:62:44:1b:43:f8:38:73:68: 4b:71:ba:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHZxWTXUTn1mZkv4X9oinckxXAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA5MjUxNzMyMTBaFw0yNjA5MjYxODMyMTBaMDMxMTAvBgNV BAMTKDFFRDUxQjA1RTAxMDNGQkE2NUU5MTBEMUIwMzFEQ0ZEOTRERjFFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUgdYOlg2z8w0NocZF8mvdRSh enD+PKaCB/0xR70GjEwstneac+UW9ttVoRhZsgA5bBzUa7NELBZ0qu88WjQCC1Sk gNSXAWrbVXmNMydh8yAM5tISEhEQTf5kjkC4gh1FgspdtGCCGhUoS2qeFTU1fuvi ZlFlJBT6ZDfMNKa8iN8z3rURm4vt79mFxXDGGucebrykptr2egxpHDXmVHb8rFRN jQPHfcoCea7iMj8DNxNdB/1nsJxGPs0xpvHXxuTrruE2TEcf7jvPa5dGX1tVj79V 2f3GnuTqUmN6baX+ZgNWy4ie/D7HPsv7gOIKhctyeZg8n2k/Ttsnp/2+5AsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHtUbBeAQP7pl6RDRsDHc/ZTfHj4wHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6tuZ5zVDWG7ckSi8GCTOKUI4efuZFxYN8c QUzcqfIExC6/jcsL0z8C2r7pZG4ZUpg5d7CmRnBL6ORaoAX0ziRudA+T6z40Yw/Z 70ImbkQ1T8zdRdOnZX3OYQEgatLnY0bf7EMoW8hrENBBgrqoxVsX7L9+8/jLQLF6 ks1Fv3cbJDq+PCoPx47DYFJv31nSu9/fQJZKY5zeVyCel4wrotHN7cqMyF2uNXB5 XGD5bDcD5WoQLlajLOlA0ajcjxFy1ZnWT31qZAaeiFQOp9RYM29Y6u+er6xTrJGP hC34DyBxM+BpkGhsZHPwWinNdh7PP0ScdhFiRBtD+DhzaEtxurI= -----END CERTIFICATE-----Generated at Sat Sep 26 10:13:31 2026 by rpki-client