$ rpki-client -vvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: k4DHcClw/9bHJbMkjSCG3/t3JCEsPp3dzbZtSX/pdd8= Subject key identifier: AD:69:C0:8B:27:9D:1F:7F:97:64:EB:94:09:8C:42:2D:C1:97:A6:0F Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 50C91BEAAE94A07110CB03BE10F944FAC14B33C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:49:45 +0000 Manifest this update: Tue 12 May 2026 21:44:45 +0000 Manifest next update: Wed 13 May 2026 23:15:45 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) 2: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: sKwkrY0RCIgCm55oUtl1hH2Fmpbhq6hgfi4VAfgrlMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c9:1b:ea:ae:94:a0:71:10:cb:03:be:10:f9:44:fa:c1:4b:33:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: May 12 21:44:45 2026 GMT Not After : May 13 23:15:45 2026 GMT Subject: CN=AD69C08B279D1F7F9764EB94098C422DC197A60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:c7:bc:cf:da:3b:9a:cb:25:36:c7:62:87: 82:a5:c4:be:ee:cc:9a:27:bf:6a:8a:fe:3b:ac:66: e3:74:44:66:8c:56:65:9f:e5:bd:ce:49:11:38:f6: 36:87:ae:81:aa:5d:2d:dd:85:6a:70:1d:a6:1e:a1: 4b:68:2b:ff:75:ea:e0:00:39:f6:f1:2a:46:24:7c: 51:f2:16:0f:5f:8f:67:24:16:d8:32:80:4b:c4:4c: 3b:db:3a:99:bf:3e:65:27:3f:99:b5:aa:e7:5a:7e: 0c:44:4d:7d:3f:87:d1:85:82:bc:58:d6:cb:30:a9: c7:a8:3c:86:91:ad:64:0e:68:e5:b2:e2:44:96:3f: b5:e5:e7:b1:56:09:d6:7e:57:5b:be:99:33:a9:0d: 2c:08:2d:2e:3a:09:b0:ac:91:70:bb:78:8c:15:70: 2a:6f:1c:43:d7:14:89:60:ab:8d:90:bd:83:53:71: ef:a7:36:90:d9:11:47:b8:3c:dc:41:a8:ef:16:89: dd:b8:5a:68:74:34:65:51:68:f2:50:26:c7:45:c2: 30:38:a0:fb:40:7d:58:13:9e:ef:db:33:10:24:9e: 00:c4:30:5e:6a:e3:ed:76:ff:72:1a:05:1d:f6:aa: e5:43:7e:7c:1f:3f:f6:28:56:dd:f2:38:a7:0a:5b: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:C0:8B:27:9D:1F:7F:97:64:EB:94:09:8C:42:2D:C1:97:A6:0F X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:5e:63:f1:69:a0:db:7f:20:18:a2:c2:fc:f6:f1:e3:0b: 3c:5a:a6:42:f2:c6:43:a6:29:db:c2:de:bf:7e:56:94:ee:53: 45:56:64:61:69:8f:f4:ec:f1:08:f0:9f:8f:d7:a6:a6:5e:a8: 43:3d:8f:82:82:0f:20:31:c8:45:6d:84:ef:da:43:bf:4a:76: 05:11:3f:55:b1:09:02:84:38:6e:6d:27:86:58:31:51:75:ad: dd:f2:1a:33:73:34:cd:5e:1c:99:fc:22:74:c8:f6:95:32:16: 24:a5:f9:31:c4:af:f0:37:52:20:fa:7f:bd:34:b4:c4:b5:4e: dc:df:06:13:23:f2:87:44:b8:7f:90:a3:77:63:3c:b9:ae:67: 33:50:22:1b:9c:cf:34:5c:71:1c:af:24:8d:8b:b6:0f:7e:48: 0f:a5:1a:c0:a9:e7:78:23:2c:99:1b:0d:b4:98:61:4e:b1:75: 36:bd:ea:f7:f3:17:47:07:93:14:f8:14:0b:e6:9d:25:8e:78: d4:8b:eb:a5:b5:7c:14:c6:13:54:56:3f:39:5b:25:b8:59:26: 4b:8c:66:46:e4:a3:89:b7:6c:ff:e7:f9:ef:7b:61:e0:fc:3e: 3c:43:4e:ab:4e:9e:2a:57:e1:e5:dc:b5:6f:02:9c:27:59:33: e4:fe:91:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMkb6q6UoHEQywO+EPlE+sFLM8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA1MTIyMTQ0NDVaFw0yNjA1MTMyMzE1NDVaMDMxMTAvBgNV BAMTKEFENjlDMDhCMjc5RDFGN0Y5NzY0RUI5NDA5OEM0MjJEQzE5N0E2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZMe8z9o7msslNsdih4KlxL7u zJonv2qK/jusZuN0RGaMVmWf5b3OSRE49jaHroGqXS3dhWpwHaYeoUtoK/916uAA OfbxKkYkfFHyFg9fj2ckFtgygEvETDvbOpm/PmUnP5m1qudafgxETX0/h9GFgrxY 1sswqceoPIaRrWQOaOWy4kSWP7Xl57FWCdZ+V1u+mTOpDSwILS46CbCskXC7eIwV cCpvHEPXFIlgq42QvYNTce+nNpDZEUe4PNxBqO8Wid24Wmh0NGVRaPJQJsdFwjA4 oPtAfVgTnu/bMxAkngDEMF5q4+12/3IaBR32quVDfnwfP/YoVt3yOKcKWyj5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWnAiyedH3+XZOuUCYxCLcGXpg8wHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM3XmPxaaDbfyAYosL89vHjCzxapkLyxkOm KdvC3r9+VpTuU0VWZGFpj/Ts8Qjwn4/XpqZeqEM9j4KCDyAxyEVthO/aQ79KdgUR P1WxCQKEOG5tJ4ZYMVF1rd3yGjNzNM1eHJn8InTI9pUyFiSl+THEr/A3UiD6f700 tMS1TtzfBhMj8odEuH+Qo3djPLmuZzNQIhuczzRccRyvJI2Ltg9+SA+lGsCp53gj LJkbDbSYYU6xdTa96vfzF0cHkxT4FAvmnSWOeNSL66W1fBTGE1RWPzlbJbhZJkuM Zkbko4m3bP/n+e97YeD8PjxDTqtOnipX4eXctW8CnCdZM+T+kSE= -----END CERTIFICATE-----Generated at Wed May 13 02:27:11 2026 by rpki-client