$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: KDgJxlHNcA4yXxFNLQ2/wcsVC9+I4844cN38Sz5TkGc= Subject key identifier: 79:CE:3A:B2:F8:C3:13:12:38:48:B0:0A:63:C7:E6:2B:E0:DD:75:07 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 4F3FB7F75FA3F887131CEB3B9679B2EBDC3C4CBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 0226 Signing time: Wed 25 Mar 2026 21:50:45 +0000 Manifest this update: Wed 25 Mar 2026 21:45:45 +0000 Manifest next update: Sun 29 Mar 2026 07:31:45 +0000 Files and hashes: 1: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: xRwGFhgxeu1CAV1+gFeCQMhm4YDhoZJE8bg+uNmVg2o=) 2: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: XiciqX1bjM5UtrqwoeLaOn6TVlDYoCyxw0L6Ym8T3XA=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: iIgboqPAZcJ6GkgIoGNtSVY4wHjrhyWezE3yGK9cDpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3f:b7:f7:5f:a3:f8:87:13:1c:eb:3b:96:79:b2:eb:dc:3c:4c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Mar 25 21:45:45 2026 GMT Not After : Mar 29 07:31:45 2026 GMT Subject: CN=79CE3AB2F8C313123848B00A63C7E62BE0DD7507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:06:bb:1b:f5:fb:f1:d0:00:f8:26:c2:75: 5b:2f:90:e9:4e:7c:d5:7e:e7:fa:cf:c5:f2:e5:45: ec:6a:cd:a3:77:d3:38:a9:ea:f3:96:45:62:07:53: 11:3c:c5:e9:15:21:c2:60:f6:ca:61:0b:b3:39:12: b3:1a:b5:a6:41:8c:01:b6:82:ba:62:f9:0e:e0:df: 68:20:8d:7a:93:89:b0:a9:f5:5b:9f:42:53:7f:5b: 9e:1a:a8:e9:e8:5a:e8:ab:a2:b3:62:0e:c7:6d:fe: 5c:96:4b:d2:73:a3:27:17:0b:3f:78:23:68:6b:c6: e3:f8:d6:d9:6b:dd:d8:98:07:4b:06:33:a7:9f:8e: 16:66:c4:0a:dc:39:07:0d:a6:16:98:35:e8:e1:64: 68:86:e5:54:8d:c1:8d:4e:64:82:d6:5a:0b:9c:02: 6e:37:bc:30:1a:9e:4e:33:ad:d4:d2:cb:21:35:07: 4d:8c:87:71:ac:50:2b:7b:5c:09:b7:fb:6e:80:52: 38:e4:6c:f2:8a:aa:ad:db:b9:92:ed:78:36:27:bd: 33:98:ba:60:6e:60:4a:7c:11:ea:f9:fa:89:bf:df: 01:ca:1b:4d:b1:30:39:e6:a1:fd:7c:f3:8b:85:6f: 05:f0:12:55:ef:4a:71:b8:36:d3:8a:c4:c5:44:ad: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CE:3A:B2:F8:C3:13:12:38:48:B0:0A:63:C7:E6:2B:E0:DD:75:07 X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8f:96:3b:96:e8:25:39:9b:a9:0b:ed:08:03:38:71:3d:b8: a5:ff:34:38:b5:dc:53:94:9e:af:38:8d:e3:b9:25:49:6f:31: a9:93:ca:48:01:cc:b9:56:97:42:97:a5:3e:c4:7d:da:13:75: 62:c8:16:51:7a:54:19:46:67:98:e3:29:fd:24:1f:20:99:fd: c1:17:72:a8:2c:e1:3f:05:c2:96:58:0a:46:0f:84:3b:3e:9c: 6a:dd:b9:5a:a7:56:3f:3c:0a:c0:e1:29:d2:9a:e9:2c:33:5d: 30:c3:81:3f:86:11:72:b9:b5:c6:a3:4d:50:ba:8d:13:c4:4b: bf:56:2a:3d:71:74:bc:53:91:0b:8f:0c:3e:14:3f:d4:50:5f: 95:2a:a6:d9:45:cc:fe:af:d4:5f:22:d0:0e:7f:05:f7:dc:fb: 09:f6:d0:6b:1b:0b:60:b7:38:3c:89:e9:d1:70:e1:d8:b1:c7: 72:ec:02:f1:bb:7d:fb:ed:31:60:97:0b:51:7d:3b:79:46:d0: 0f:2c:d9:43:93:01:8a:c8:73:22:0e:50:54:73:4e:d6:cb:54: 37:49:ef:44:21:c7:0d:4c:73:c6:8d:ec:3a:99:8b:0a:ac:e2: 6f:0b:46:c6:c9:f1:0e:99:bf:42:d0:71:2a:d5:6b:b3:71:b0: db:26:2d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTz+391+j+IcTHOs7lnmy69w8TL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNjAzMjUyMTQ1NDVaFw0yNjAzMjkwNzMxNDVaMDMxMTAvBgNV BAMTKDc5Q0UzQUIyRjhDMzEzMTIzODQ4QjAwQTYzQzdFNjJCRTBERDc1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBwa7G/X78dAA+CbCdVsvkOlO fNV+5/rPxfLlRexqzaN30zip6vOWRWIHUxE8xekVIcJg9sphC7M5ErMataZBjAG2 grpi+Q7g32ggjXqTibCp9VufQlN/W54aqOnoWuirorNiDsdt/lyWS9JzoycXCz94 I2hrxuP41tlr3diYB0sGM6efjhZmxArcOQcNphaYNejhZGiG5VSNwY1OZILWWguc Am43vDAank4zrdTSyyE1B02Mh3GsUCt7XAm3+26AUjjkbPKKqq3buZLteDYnvTOY umBuYEp8Eer5+om/3wHKG02xMDnmof1884uFbwXwElXvSnG4NtOKxMVErdeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUec46svjDExI4SLAKY8fmK+DddQcwHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuPljuW6CU5m6kL7QgDOHE9uKX/NDi13FOU nq84jeO5JUlvMamTykgBzLlWl0KXpT7EfdoTdWLIFlF6VBlGZ5jjKf0kHyCZ/cEX cqgs4T8FwpZYCkYPhDs+nGrduVqnVj88CsDhKdKa6SwzXTDDgT+GEXK5tcajTVC6 jRPES79WKj1xdLxTkQuPDD4UP9RQX5UqptlFzP6v1F8i0A5/Bffc+wn20GsbC2C3 ODyJ6dFw4dixx3LsAvG7ffvtMWCXC1F9O3lG0A8s2UOTAYrIcyIOUFRzTtbLVDdJ 70Qhxw1Mc8aN7DqZiwqs4m8LRsbJ8Q6Zv0LQcSrVa7NxsNsmLWM= -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:20 2026 by rpki-client