$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: SoKMsEknqKznv1vRQcZt76SUVwNI4HgDLxzXm4e/lVQ= Subject key identifier: 1F:21:4A:6E:EA:C4:01:52:E9:BB:72:FF:88:70:D6:C3:49:D0:30:F8 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 0D1250A662708E8A8D3E39D385156A618E425476 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:13 +0000 Manifest this update: Tue 12 May 2026 21:24:13 +0000 Manifest next update: Wed 13 May 2026 23:00:13 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 3: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: mmaAP9pP7FvBA+pFEmMLsSyvEo6vvKfCSTedZPLjy6U=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:12:50:a6:62:70:8e:8a:8d:3e:39:d3:85:15:6a:61:8e:42:54:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: May 12 21:24:13 2026 GMT Not After : May 13 23:00:13 2026 GMT Subject: CN=1F214A6EEAC40152E9BB72FF8870D6C349D030F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:b6:d7:40:4e:71:fc:4b:0f:ee:19:0b:ab: a1:d0:60:4f:21:be:45:89:d2:f5:c8:cf:9a:8a:eb: 44:44:91:4e:f4:eb:e4:14:7c:49:d9:9a:58:f5:88: dc:16:fd:eb:6d:96:3f:9f:4b:53:04:ed:4f:aa:18: ab:8f:28:71:31:74:7c:ed:7e:68:67:62:5c:30:7e: 56:f5:fe:da:2f:95:ea:31:42:0b:cf:cd:50:f2:a0: 94:5e:3a:c9:0a:9c:18:20:72:e5:8b:06:65:51:80: 7b:6c:0f:1f:1e:9f:88:b5:18:d6:38:54:01:09:70: 90:18:d2:56:fc:06:55:18:c1:3b:26:90:2f:59:20: 73:94:f3:34:ef:43:40:52:b4:bd:08:c6:2a:66:fa: 12:4f:59:00:19:22:b4:d7:00:5a:69:eb:9e:0a:e5: 50:81:da:c7:a0:ff:b0:e7:b8:bc:93:ef:74:9f:b0: 55:80:c0:b6:7f:46:1b:76:15:8f:10:c3:9a:d0:39: d8:af:4b:a2:9c:d4:bd:51:50:4b:10:2c:df:b1:b0: 58:b4:e0:38:88:8b:c7:09:d7:db:ce:dc:c4:aa:6c: 94:75:ef:00:1f:73:0f:8e:58:f6:48:8f:5a:fb:7f: 46:16:f2:b3:35:54:04:3d:37:cd:76:96:89:46:70: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:4A:6E:EA:C4:01:52:E9:BB:72:FF:88:70:D6:C3:49:D0:30:F8 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:09:ad:7e:cb:a0:97:6f:62:f2:aa:24:ac:35:71:4a:6e: 4c:84:c4:c4:cd:5a:2b:52:34:de:2d:b9:19:f2:b3:34:61:c7: de:ea:e7:eb:23:ca:35:84:ba:8d:fd:f7:b1:db:2f:fe:12:db: e3:d3:e3:9f:7d:bf:bc:56:bc:bb:13:c7:c0:1f:fe:d5:1a:47: b2:3a:0f:6f:8f:ac:40:d0:a1:86:e8:22:34:a4:b3:bf:1f:61: dd:74:a6:3e:60:79:61:15:a1:bf:5b:f7:6c:66:a5:20:3d:82: e9:61:21:89:80:21:a3:a1:d0:a4:73:f4:2a:f6:cd:c5:62:0a: 64:2a:42:70:d5:49:49:3c:98:60:7c:59:01:a3:70:97:88:c5: ae:58:58:44:85:0a:ba:7d:a8:47:c1:1d:be:6d:be:3b:8a:e4: d7:2e:4e:da:40:62:5f:21:ee:33:32:9b:56:40:27:d4:1c:af: 36:c2:1d:09:c2:0e:45:40:0c:79:20:1c:d2:80:40:04:87:bf: 61:e9:f7:2d:9b:af:66:b9:31:c1:d3:1c:75:e2:e9:5a:2c:15: 60:18:30:f5:ea:31:ef:e9:3f:b6:87:b0:bc:6c:dd:5f:a2:d8: 55:c5:70:0a:90:7e:7a:8a:9e:ef:cb:82:d2:58:18:76:fa:3e: c5:b5:2c:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRJQpmJwjoqNPjnThRVqYY5CVHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA1MTIyMTI0MTNaFw0yNjA1MTMyMzAwMTNaMDMxMTAvBgNV BAMTKDFGMjE0QTZFRUFDNDAxNTJFOUJCNzJGRjg4NzBENkMzNDlEMDMwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgLbXQE5x/EsP7hkLq6HQYE8h vkWJ0vXIz5qK60REkU706+QUfEnZmlj1iNwW/ettlj+fS1ME7U+qGKuPKHExdHzt fmhnYlwwflb1/tovleoxQgvPzVDyoJReOskKnBggcuWLBmVRgHtsDx8en4i1GNY4 VAEJcJAY0lb8BlUYwTsmkC9ZIHOU8zTvQ0BStL0Ixipm+hJPWQAZIrTXAFpp654K 5VCB2seg/7DnuLyT73SfsFWAwLZ/Rht2FY8Qw5rQOdivS6Kc1L1RUEsQLN+xsFi0 4DiIi8cJ19vO3MSqbJR17wAfcw+OWPZIj1r7f0YW8rM1VAQ9N812lolGcJ4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyFKburEAVLpu3L/iHDWw0nQMPgwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGotCa1+y6CXb2LyqiSsNXFKbkyExMTNWitS NN4tuRnyszRhx97q5+sjyjWEuo3997HbL/4S2+PT4599v7xWvLsTx8Af/tUaR7I6 D2+PrEDQoYboIjSks78fYd10pj5geWEVob9b92xmpSA9gulhIYmAIaOh0KRz9Cr2 zcViCmQqQnDVSUk8mGB8WQGjcJeIxa5YWESFCrp9qEfBHb5tvjuK5NcuTtpAYl8h 7jMym1ZAJ9QcrzbCHQnCDkVADHkgHNKAQASHv2Hp9y2br2a5McHTHHXi6VosFWAY MPXqMe/pP7aHsLxs3V+i2FXFcAqQfnqKnu/LgtJYGHb6PsW1LLw= -----END CERTIFICATE-----Generated at Wed May 13 01:07:21 2026 by rpki-client