$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft File: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft (raw, json) Hash identifier: n0kg1ebek5R/dtSGt6vLlzgSn4akYORKGR/THUeupck= Subject key identifier: 33:35:BC:B1:E6:AC:11:CE:13:77:54:A5:E2:A0:75:ED:A3:18:E6:82 Authority key identifier: D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 Certificate issuer: /CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Certificate serial: 374FD607B349620CF64028291DDD9A1B749164EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:03:06 +0000 Manifest this update: Thu 24 Sep 2026 09:58:06 +0000 Manifest next update: Fri 25 Sep 2026 12:14:06 +0000 Files and hashes: 1: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: NMwe5J+/CXgAi6nFmZAKAhCZ3C0lGwYdxKCNwpdKULE=) 2: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: NWVRwRUJEoPLPqz3cDGwdvfhxswf8EJ/TbLr4jkDe78=) 3: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl (hash: 40AKMERRi37gyVlna5d2Q2VXFbsNc3YML5C808tlrcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4f:d6:07:b3:49:62:0c:f6:40:28:29:1d:dd:9a:1b:74:91:64:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Validity Not Before: Sep 24 09:58:06 2026 GMT Not After : Sep 25 12:14:06 2026 GMT Subject: CN=3335BCB1E6AC11CE137754A5E2A075EDA318E682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:a9:42:ad:21:0c:59:1d:73:1b:b9:e4:23: 6e:13:00:75:c8:4f:7b:d0:ed:b9:6a:86:ad:65:34: 76:2f:cf:e8:7f:26:c2:98:3d:ae:ab:d5:73:26:da: 45:20:ec:e6:c8:dc:4d:6e:11:46:b7:5a:78:b4:9d: ad:90:0c:8d:dc:ef:74:55:97:df:a8:85:3c:ee:8b: c6:c1:5c:32:64:c7:e7:23:5c:3b:f2:9e:5d:d3:3f: b6:d4:f6:2c:ac:d3:d1:66:2b:83:9e:a5:6d:cf:29: 78:08:a9:5c:7c:04:fa:1f:44:4c:3b:0c:f6:f2:32: 51:1e:8e:c6:15:4e:15:06:e8:61:45:70:27:08:ae: a3:99:09:6c:62:e6:1f:6a:53:ff:7f:43:e0:27:e7: 34:0a:85:5a:cc:d0:86:57:9e:cc:24:45:44:dc:95: 71:73:42:bc:9f:b4:47:4c:6f:78:a3:3b:60:84:92: 0c:b9:6d:f6:fc:d0:96:33:db:01:67:29:06:f1:a1: c2:2d:c0:6c:46:32:4e:1d:a5:42:a9:4c:40:7e:c4: 9a:e5:9a:89:d6:eb:3c:67:d8:17:7b:d6:3b:d1:9e: f5:cf:8b:61:51:f6:97:15:6f:66:6a:92:52:d5:4e: 5e:a1:49:08:03:9f:d0:f1:d3:2d:5e:85:ad:8d:9b: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:BC:B1:E6:AC:11:CE:13:77:54:A5:E2:A0:75:ED:A3:18:E6:82 X509v3 Authority Key Identifier: keyid:D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cb:bd:75:26:a4:c7:16:c3:68:1b:8c:1c:93:13:58:a1:d2: 67:7a:5c:c5:e3:30:2f:f9:ad:55:90:56:8d:13:3a:0a:05:57: db:06:ef:14:5b:8d:78:bd:c6:3c:74:36:8a:53:bd:ed:3c:b4: 60:ec:aa:f4:e7:46:15:9e:df:cc:07:cd:be:66:c4:0e:77:16: 1e:77:d3:b4:94:07:a9:91:1b:69:b6:05:98:a8:74:5f:1a:23: ff:f9:9e:da:27:13:a6:a5:02:06:94:f2:10:14:c0:07:8b:84: 64:b9:d2:a2:57:2e:05:07:59:e9:8e:a7:de:cf:f3:ef:e7:98: bb:6f:82:7f:dc:01:90:0f:dc:68:2c:d5:9f:b3:20:5a:ab:1f: 4d:23:46:60:60:7a:dc:91:20:38:80:55:8b:ee:4b:b5:53:9c: 92:80:3d:01:85:81:81:80:4c:73:84:f4:7d:e8:f6:c6:b4:66: 1e:8b:2d:cc:66:03:71:c4:ee:96:c1:28:e8:0f:f4:95:6e:41: 33:c0:db:8d:c7:d7:f4:22:bf:88:65:ee:be:a0:87:61:c6:36: 62:d2:14:fa:a3:c6:e5:fb:35:b6:fe:b0:21:52:8f:bc:19:34: 40:32:71:49:f9:d2:77:39:2f:ae:b3:a1:a5:26:e8:7f:5f:b1: fb:6b:87:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0/WB7NJYgz2QCgpHd2aG3SRZOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdDRjhC QjE2MTQzNjAeFw0yNjA5MjQwOTU4MDZaFw0yNjA5MjUxMjE0MDZaMDMxMTAvBgNV BAMTKDMzMzVCQ0IxRTZBQzExQ0UxMzc3NTRBNUUyQTA3NUVEQTMxOEU2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9qlCrSEMWR1zG7nkI24TAHXI T3vQ7blqhq1lNHYvz+h/JsKYPa6r1XMm2kUg7ObI3E1uEUa3Wni0na2QDI3c73RV l9+ohTzui8bBXDJkx+cjXDvynl3TP7bU9iys09FmK4OepW3PKXgIqVx8BPofREw7 DPbyMlEejsYVThUG6GFFcCcIrqOZCWxi5h9qU/9/Q+An5zQKhVrM0IZXnswkRUTc lXFzQryftEdMb3ijO2CEkgy5bfb80JYz2wFnKQbxocItwGxGMk4dpUKpTEB+xJrl monW6zxn2Bd71jvRnvXPi2FR9pcVb2ZqklLVTl6hSQgDn9Dx0y1eha2Nm9pTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzW8seasEc4Td1Sl4qB17aMY5oIwHwYDVR0j BBgwFoAU0gweDdAqqLHOH+ukdpd8+LsWFDYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNkNzUzNmQtOWUxMC00ZDQ5LWI2Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMERE MDJBQThCMUNFMUZFQkE0NzY5NzdDRjhCQjE2MTQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjBDMUUwREQwMkFBOEIxQ0UxRkVCQTQ3Njk3N0NGOEJCMTYx NDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdD RjhCQjE2MTQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzLvXUmpMcWw2gbjByTE1ih0md6XMXjMC/5 rVWQVo0TOgoFV9sG7xRbjXi9xjx0NopTve08tGDsqvTnRhWe38wHzb5mxA53Fh53 07SUB6mRG2m2BZiodF8aI//5ntonE6alAgaU8hAUwAeLhGS50qJXLgUHWemOp97P 8+/nmLtvgn/cAZAP3Ggs1Z+zIFqrH00jRmBgetyRIDiAVYvuS7VTnJKAPQGFgYGA THOE9H3o9sa0Zh6LLcxmA3HE7pbBKOgP9JVuQTPA243H1/Qiv4hl7r6gh2HGNmLS FPqjxuX7Nbb+sCFSj7wZNEAycUn50nc5L66zoaUm6H9fsftrh38= -----END CERTIFICATE-----Generated at Fri Sep 25 04:47:38 2026 by rpki-client