$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: Igs4SzQEBhVkAG2nP1k7Q2I+Y8eycl8IwZYxH7aPsOw= Subject key identifier: 67:D2:0C:0D:38:ED:3D:0E:79:0C:22:3D:F1:D5:4D:D3:81:6B:B9:CE Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 310F9D6781F3BDA59E7B294EDFFA75DAAC264188 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 0252 Signing time: Tue 24 Mar 2026 12:30:53 +0000 Manifest this update: Tue 24 Mar 2026 12:25:53 +0000 Manifest next update: Fri 27 Mar 2026 22:01:53 +0000 Files and hashes: 1: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: OxuN/KCMHtMTDCyaI0bgtvQy256j5b/74mmzW3WQvFc=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) 3: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: Cy07xYSyUWFjvR0x0kDQ3HZDqKe9RyYBEeT67hsabqg=) 4: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: LN33OhlXa7CoasvV3cxQOs9J2kDdtyfTFUH8AXgIggk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0f:9d:67:81:f3:bd:a5:9e:7b:29:4e:df:fa:75:da:ac:26:41:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Mar 24 12:25:53 2026 GMT Not After : Mar 27 22:01:53 2026 GMT Subject: CN=67D20C0D38ED3D0E790C223DF1D54DD3816BB9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e2:4f:6c:6a:1a:1c:3d:13:0c:db:9d:2f:f6: 4b:d1:d3:e7:a2:de:92:77:5d:fb:fb:e4:9d:d5:db: 30:67:3d:8f:e2:4e:95:8a:47:9b:66:85:d3:1c:1d: 11:47:47:cc:dc:96:5f:12:2b:0a:a3:98:1e:42:ef: 65:ec:3d:07:dd:c7:bd:4e:a3:a3:1f:d8:26:ea:06: 02:a7:b9:50:52:fd:fe:ae:de:50:f5:dc:1e:ee:d1: f2:3f:a3:31:af:2e:cf:0d:d3:91:5a:3b:f0:ca:9e: 3d:2d:b6:8c:7a:14:a9:c8:84:aa:a3:03:91:67:14: 2b:4c:2c:0b:8e:70:cc:17:2f:f3:59:0d:11:10:67: 71:bb:06:d4:8f:4d:05:10:74:78:a7:ad:51:1c:be: ce:dd:80:6b:f5:bc:10:df:e2:d7:68:51:7c:f0:76: 33:2e:0a:0e:3f:3a:b9:ea:74:e4:97:a3:e0:d4:05: f9:df:ec:f5:16:f5:b2:7d:0a:93:65:7a:87:06:6f: 91:d3:d0:70:3e:36:0b:1c:c8:63:44:7e:2d:b3:a4: 0f:80:6f:ce:5b:5d:ab:ed:a5:4c:d2:c6:1e:6c:c0: bf:ce:e3:6c:83:18:f2:5f:54:0b:de:5c:b3:b4:69: f3:4c:be:0a:6c:29:f1:8a:ff:3e:91:51:eb:69:3c: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:0C:0D:38:ED:3D:0E:79:0C:22:3D:F1:D5:4D:D3:81:6B:B9:CE X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f4:70:9c:11:db:8d:d2:cc:32:0d:66:32:bb:8f:91:d8:c2: a9:2b:f0:68:38:e5:b5:d3:eb:d1:74:a4:61:7c:61:26:e0:30: 83:a0:f7:32:9d:cb:ed:7d:21:5b:b3:3b:62:cf:75:ad:db:cd: 02:9b:6e:27:61:ac:19:8c:1c:4e:00:9a:66:e0:04:52:52:50: 74:79:00:63:8c:db:39:50:49:e2:0e:a9:a1:54:0e:2f:9d:62: 6b:96:ab:99:48:9a:17:4f:29:cf:3b:e0:55:fa:28:13:41:60: 1e:bd:86:04:e5:48:27:a1:b2:56:56:5d:1a:06:3b:43:58:bd: ba:3d:65:2f:83:8c:69:3d:67:50:60:cd:38:44:75:50:19:e2: fc:21:a4:61:52:d8:16:39:7a:9f:84:fa:de:49:ef:cb:81:fc: d4:af:7c:14:2c:08:4f:63:52:a0:f7:1b:e2:f3:ae:6d:6c:ca: 36:9e:2b:31:1b:fe:19:35:7c:fe:80:88:57:b1:6e:94:75:a5: c8:1e:a9:27:d7:16:9f:e4:9b:9f:4c:ad:ff:ec:34:57:7e:4e: ad:cc:b1:12:64:fb:6a:e2:2e:e0:31:aa:c1:9f:d0:89:54:c8: 65:ac:b4:80:66:98:da:a2:1d:bd:04:12:be:be:fc:f2:14:56: 38:68:b0:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQ+dZ4HzvaWeeylO3/p12qwmQYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNjAzMjQxMjI1NTNaFw0yNjAzMjcyMjAxNTNaMDMxMTAvBgNV BAMTKDY3RDIwQzBEMzhFRDNEMEU3OTBDMjIzREYxRDU0REQzODE2QkI5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD24k9sahocPRMM250v9kvR0+ei 3pJ3Xfv75J3V2zBnPY/iTpWKR5tmhdMcHRFHR8zcll8SKwqjmB5C72XsPQfdx71O o6Mf2CbqBgKnuVBS/f6u3lD13B7u0fI/ozGvLs8N05FaO/DKnj0ttox6FKnIhKqj A5FnFCtMLAuOcMwXL/NZDREQZ3G7BtSPTQUQdHinrVEcvs7dgGv1vBDf4tdoUXzw djMuCg4/OrnqdOSXo+DUBfnf7PUW9bJ9CpNleocGb5HT0HA+NgscyGNEfi2zpA+A b85bXavtpUzSxh5swL/O42yDGPJfVAveXLO0afNMvgpsKfGK/z6RUetpPC3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ9IMDTjtPQ55DCI98dVN04Fruc4wHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL0cJwR243SzDINZjK7j5HYwqkr8Gg45bXT 69F0pGF8YSbgMIOg9zKdy+19IVuzO2LPda3bzQKbbidhrBmMHE4AmmbgBFJSUHR5 AGOM2zlQSeIOqaFUDi+dYmuWq5lImhdPKc874FX6KBNBYB69hgTlSCehslZWXRoG O0NYvbo9ZS+DjGk9Z1BgzThEdVAZ4vwhpGFS2BY5ep+E+t5J78uB/NSvfBQsCE9j UqD3G+Lzrm1syjaeKzEb/hk1fP6AiFexbpR1pcgeqSfXFp/km59Mrf/sNFd+Tq3M sRJk+2riLuAxqsGf0IlUyGWstIBmmNqiHb0EEr6+/PIUVjhosCs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:27 2026 by rpki-client