$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: QFNaWrnNl8gyLDa7RmB1DB34eORlSe8+OZjCHYKi3qY= Subject key identifier: 86:5D:38:E7:CF:5B:24:61:F9:F9:C0:AF:6D:E9:26:71:82:2D:D2:66 Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 68A961891E249BB6276F4FF10A1001D10B273628 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 10:03:05 +0000 Manifest this update: Fri 25 Sep 2026 09:58:05 +0000 Manifest next update: Sat 26 Sep 2026 12:11:05 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) 2: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: dI0/TFwlRQ/h2ds4mm5fGBaOgHLJ2/WxY02C3uctG7E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 12:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a9:61:89:1e:24:9b:b6:27:6f:4f:f1:0a:10:01:d1:0b:27:36:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Sep 25 09:58:05 2026 GMT Not After : Sep 26 12:11:05 2026 GMT Subject: CN=865D38E7CF5B2461F9F9C0AF6DE92671822DD266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:c1:5f:b3:f1:31:69:db:05:de:95:c2:79: 08:2e:56:90:bc:7d:51:6c:d1:a6:4e:2a:97:0c:f3: 00:23:ec:79:b7:f9:91:8c:a3:83:07:ff:3b:e5:28: b3:16:bf:67:c7:c8:4c:00:d6:54:ea:28:0c:5f:32: 17:ad:18:11:6a:9e:2e:c6:96:df:3d:2e:7d:86:bc: 75:7c:e4:2c:1e:01:39:49:81:8a:23:45:1d:d5:7b: 98:5e:34:06:84:e7:84:d7:24:64:17:aa:e0:25:21: d4:88:21:ad:8e:cb:a8:e2:92:53:dd:fb:ec:56:ce: 75:e3:3b:db:cf:4f:2e:10:cd:07:30:f5:e8:a6:4b: 51:fe:90:e4:06:5c:ad:8a:ef:48:cc:dd:0c:19:1a: fb:00:0c:fc:66:85:f9:f7:fa:ca:bd:57:9f:03:33: 3e:2a:14:08:18:df:9e:fc:65:6f:9e:81:83:c5:4e: 04:83:a1:2e:67:d2:21:c6:b4:55:c7:0e:32:ec:3d: 76:ad:ff:3b:cf:12:c4:72:ab:e0:74:6a:41:9d:b5: 50:3d:32:7b:5d:b6:8d:69:a4:9b:1c:ae:6a:8c:45: 0b:05:0b:f0:af:39:bd:77:d1:8e:dd:32:46:88:93: 73:cf:36:35:8a:cc:d7:89:6d:91:53:b5:a7:17:11: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:38:E7:CF:5B:24:61:F9:F9:C0:AF:6D:E9:26:71:82:2D:D2:66 X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:f6:97:b4:d9:59:de:d0:10:ca:cb:da:5f:30:7f:d9:2b:28: d9:2c:cd:05:4b:6e:3d:c5:24:4b:c2:e4:ef:2e:b7:87:f7:8f: 32:24:16:de:64:26:95:21:20:ac:60:0e:aa:2d:9d:d3:e6:66: b3:39:79:5f:7b:b9:bd:62:7e:96:c9:96:91:b1:06:1f:bf:11: 20:d8:23:b2:1e:64:2f:fc:ff:cd:b8:4f:aa:77:38:56:b7:8c: 37:b7:b1:f7:f6:bf:a9:39:b1:97:bf:0b:58:f0:3f:f6:3c:51: 6c:6a:0b:c1:a4:69:61:c3:6b:ee:8a:a1:5c:01:f5:0b:bf:06: eb:79:aa:3b:84:8c:78:9a:b3:41:66:d2:99:b6:46:95:a0:53: 81:33:8e:fd:89:ad:7d:a6:64:45:99:6b:82:13:54:8a:64:9d: e9:7a:1c:27:cd:6d:eb:a5:18:d1:12:8c:80:9a:66:c5:6a:e7: 4c:e3:1d:38:de:92:48:06:55:0b:91:1a:7b:14:49:3c:e8:4a: ff:c8:af:f4:65:84:e2:51:2e:1f:b5:92:76:9f:bb:f2:d5:79: 64:ed:87:0f:8b:6c:0f:16:40:78:9b:9e:2b:b7:29:4a:08:39: 2f:d1:63:5a:2d:0a:49:20:d2:44:8d:bc:5b:bc:38:55:a9:df: 6e:8f:21:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKlhiR4km7Ynb0/xChAB0QsnNigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA5MjUwOTU4MDVaFw0yNjA5MjYxMjExMDVaMDMxMTAvBgNV BAMTKDg2NUQzOEU3Q0Y1QjI0NjFGOUY5QzBBRjZERTkyNjcxODIyREQyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Y8Ffs/ExadsF3pXCeQguVpC8 fVFs0aZOKpcM8wAj7Hm3+ZGMo4MH/zvlKLMWv2fHyEwA1lTqKAxfMhetGBFqni7G lt89Ln2GvHV85CweATlJgYojRR3Ve5heNAaE54TXJGQXquAlIdSIIa2Oy6jiklPd ++xWznXjO9vPTy4QzQcw9eimS1H+kOQGXK2K70jM3QwZGvsADPxmhfn3+sq9V58D Mz4qFAgY3578ZW+egYPFTgSDoS5n0iHGtFXHDjLsPXat/zvPEsRyq+B0akGdtVA9 Mntdto1ppJscrmqMRQsFC/CvOb130Y7dMkaIk3PPNjWKzNeJbZFTtacXEWGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhl04589bJGH5+cCvbekmcYIt0mYwHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/2l7TZWd7QEMrL2l8wf9krKNkszQVLbj3F JEvC5O8ut4f3jzIkFt5kJpUhIKxgDqotndPmZrM5eV97ub1ifpbJlpGxBh+/ESDY I7IeZC/8/824T6p3OFa3jDe3sff2v6k5sZe/C1jwP/Y8UWxqC8GkaWHDa+6KoVwB 9Qu/But5qjuEjHias0Fm0pm2RpWgU4Ezjv2JrX2mZEWZa4ITVIpknel6HCfNbeul GNESjICaZsVq50zjHTjekkgGVQuRGnsUSTzoSv/Ir/RlhOJRLh+1knafu/LVeWTt hw+LbA8WQHibniu3KUoIOS/RY1otCkkg0kSNvFu8OFWp326PIUM= -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:25 2026 by rpki-client