$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: 7JMHF9OeyVwFclEMZeZGGtMbIjK/U9znM8zL74pXqno= Subject key identifier: 0D:D5:42:E6:E5:F1:EC:1B:5B:3F:F3:BA:29:9C:82:0A:B7:06:77:A1 Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 01A349925F10505316254F56B43B6FE4DDE53BE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 0269 Signing time: Tue 24 Mar 2026 13:02:11 +0000 Manifest this update: Tue 24 Mar 2026 12:57:11 +0000 Manifest next update: Fri 27 Mar 2026 23:28:11 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 2: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) 3: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: ilx09GhRuLW7Nbk+OxPOl9JjFwky/wKzoSGdGWML9yo=) 4: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a3:49:92:5f:10:50:53:16:25:4f:56:b4:3b:6f:e4:dd:e5:3b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Mar 24 12:57:11 2026 GMT Not After : Mar 27 23:28:11 2026 GMT Subject: CN=0DD542E6E5F1EC1B5B3FF3BA299C820AB70677A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:5b:b4:76:e0:94:91:a1:34:6a:e1:75:fe: 5f:66:57:1b:58:a3:3a:5c:92:fa:9e:c4:bd:1e:47: a5:46:a3:12:17:48:cc:1a:75:3a:1b:92:6d:82:0e: 73:78:8f:01:1e:31:68:a4:ee:07:69:0d:c2:dd:f2: 8a:a3:06:81:f1:7a:ec:eb:34:4c:38:7d:f7:9c:4e: 83:9c:fb:f3:73:6b:b6:9d:84:2f:e2:e5:e7:bb:05: 5b:ad:c3:f7:b2:e4:97:dd:64:3e:34:d4:ee:fb:50: b2:52:fe:8f:db:1e:06:de:c9:08:33:95:b8:0e:cf: 22:f2:ae:a8:3b:7e:67:25:19:b4:ef:d4:bf:68:3e: ec:6b:a2:29:14:24:9e:33:f6:5e:1a:84:b2:7e:8b: 0d:84:a6:17:05:b9:49:d1:db:6c:07:42:52:16:83: 5f:71:4b:af:44:3d:dd:30:c6:e7:44:1d:29:3a:62: d0:2c:6a:ac:b4:d6:3b:5f:fd:6c:83:c7:44:54:e2: c6:a6:a2:34:0a:31:3d:3b:2c:68:ea:93:44:e2:71: 3f:6f:fe:6c:59:04:4d:20:26:5b:28:16:b1:e4:85: 52:41:cb:0d:f3:c7:50:20:f9:9f:52:d6:19:e4:28: 06:bb:b9:4d:4b:4e:b3:65:0d:4e:aa:d9:ce:c3:f0: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:42:E6:E5:F1:EC:1B:5B:3F:F3:BA:29:9C:82:0A:B7:06:77:A1 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a5:ed:bb:13:83:87:19:e1:8e:22:77:f0:61:f8:08:9c:cc: 8c:7d:d2:ff:64:ea:d2:71:59:15:22:4b:2b:42:e2:f2:cd:57: 48:25:1a:34:ab:96:6a:fc:fb:05:dc:58:1f:46:af:dc:ba:fb: 78:f9:69:e8:f8:9b:1c:6c:fc:d4:82:55:e8:ff:20:1f:a9:7d: 41:11:b8:df:8c:82:32:d1:cb:2b:85:74:ac:ee:ce:d9:39:5e: d2:cd:ac:19:bd:9a:75:d6:87:11:a7:f2:62:b9:c8:0d:06:ef: b4:99:50:7c:8b:69:33:4b:8f:13:c1:d2:b1:1a:f4:86:1a:59: 58:d1:91:39:b6:85:c2:66:33:de:1c:56:58:6c:99:b1:37:90: 7b:9a:7f:0c:94:b2:33:45:88:c5:41:ee:54:66:01:29:c3:35: bc:0a:9f:b7:77:11:e3:eb:89:6e:92:53:8f:61:55:62:1e:f1: 2a:08:1b:f8:ca:e3:99:28:5f:cb:da:91:26:56:39:54:04:b0: 58:1f:dd:91:7d:d8:52:8d:3f:8b:c7:ed:4b:ef:a9:e7:0d:9b: a9:e6:e5:06:4b:54:24:79:49:0a:89:01:d4:b8:fd:8d:2f:66: 26:f8:ba:30:90:25:a4:ac:c9:04:31:d2:87:60:61:20:a0:e6: 51:ee:3d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaNJkl8QUFMWJU9WtDtv5N3lO+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNjAzMjQxMjU3MTFaFw0yNjAzMjcyMzI4MTFaMDMxMTAvBgNV BAMTKDBERDU0MkU2RTVGMUVDMUI1QjNGRjNCQTI5OUM4MjBBQjcwNjc3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNVu0duCUkaE0auF1/l9mVxtY ozpckvqexL0eR6VGoxIXSMwadTobkm2CDnN4jwEeMWik7gdpDcLd8oqjBoHxeuzr NEw4ffecToOc+/Nza7adhC/i5ee7BVutw/ey5JfdZD401O77ULJS/o/bHgbeyQgz lbgOzyLyrqg7fmclGbTv1L9oPuxroikUJJ4z9l4ahLJ+iw2EphcFuUnR22wHQlIW g19xS69EPd0wxudEHSk6YtAsaqy01jtf/WyDx0RU4samojQKMT07LGjqk0TicT9v /mxZBE0gJlsoFrHkhVJByw3zx1Ag+Z9S1hnkKAa7uU1LTrNlDU6q2c7D8BazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdVC5uXx7BtbP/O6KZyCCrcGd6EwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+l7bsTg4cZ4Y4id/Bh+AiczIx90v9k6tJx WRUiSytC4vLNV0glGjSrlmr8+wXcWB9Gr9y6+3j5aej4mxxs/NSCVej/IB+pfUER uN+MgjLRyyuFdKzuztk5XtLNrBm9mnXWhxGn8mK5yA0G77SZUHyLaTNLjxPB0rEa 9IYaWVjRkTm2hcJmM94cVlhsmbE3kHuafwyUsjNFiMVB7lRmASnDNbwKn7d3EePr iW6SU49hVWIe8SoIG/jK45koX8vakSZWOVQEsFgf3ZF92FKNP4vH7UvvqecNm6nm 5QZLVCR5SQqJAdS4/Y0vZib4ujCQJaSsyQQx0odgYSCg5lHuPcE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:10 2026 by rpki-client