$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: Tu89iqQ/kXmDHEKYntDU4qkEQb88RDoWPtEkXBTZhc0= Subject key identifier: 1F:6F:67:8C:2F:0F:9C:C8:41:AC:9E:06:FA:E1:1B:EC:E3:DA:65:20 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 44A5AB771F35B9D64959A3D0E1AC61CEE6FCC631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 04:55:24 +0000 Manifest this update: Sat 14 Nov 2026 04:50:24 +0000 Manifest next update: Sun 15 Nov 2026 07:04:24 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 4: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: ccftv1coPjQt6vF2iNGhDtIlbhvUDspudTliqcL1wcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a5:ab:77:1f:35:b9:d6:49:59:a3:d0:e1:ac:61:ce:e6:fc:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Nov 14 04:50:24 2026 GMT Not After : Nov 15 07:04:24 2026 GMT Subject: CN=1F6F678C2F0F9CC841AC9E06FAE11BECE3DA6520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:7c:22:28:d3:37:87:3b:51:f4:55:c2:65: a5:73:93:15:69:1e:8e:c2:3e:ef:87:02:25:01:91: 50:e6:47:a3:81:ff:c7:df:28:fd:45:a0:13:a2:15: 8e:68:44:d9:47:a0:d8:ea:e8:67:34:06:aa:c7:27: c1:16:24:db:8e:fb:38:72:a5:c9:4c:0d:01:16:75: 68:9d:b0:9d:68:02:62:67:63:32:49:46:e6:aa:fc: 4b:41:67:c0:1e:63:c7:48:58:35:43:9d:0b:66:63: 7b:5d:5f:8a:4e:50:4d:02:6b:68:86:49:07:b6:ce: 97:11:38:cb:7a:69:6b:5f:45:65:32:73:35:b5:1f: ff:dd:02:e5:61:66:5e:67:8f:8f:82:a6:14:18:46: 79:ae:37:8b:e0:8c:8c:e3:b7:13:c1:ca:c4:93:1e: b8:ae:3c:b2:c8:f6:63:46:99:70:96:dc:74:d6:e8: c0:26:66:56:78:92:52:e4:25:97:83:3a:77:da:0a: c5:65:51:c6:2f:9e:5a:91:aa:f5:cd:9e:95:6c:c8: e7:e3:3d:c0:8c:2a:33:28:54:3b:62:c7:37:44:a0: f5:4f:0a:73:1d:5c:65:6a:14:16:40:ff:3b:ed:0c: f4:3f:5b:97:dc:fc:0c:2b:51:27:d3:d9:1d:21:bf: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:67:8C:2F:0F:9C:C8:41:AC:9E:06:FA:E1:1B:EC:E3:DA:65:20 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:56:1b:4f:28:7b:b9:d0:f5:e9:a5:76:a0:22:ef:32:e6: 34:8d:c6:fb:24:34:ba:0d:d0:1f:9c:9d:bf:46:52:b9:9d:99: b1:bd:11:26:58:07:40:a1:63:f8:cc:8e:a0:9b:14:4c:9f:e2: 94:f9:03:be:6e:43:1f:84:14:fd:42:0c:a3:cd:ff:bc:a9:a1: 81:70:65:31:f5:d5:db:35:09:95:2f:f3:06:a7:e2:71:07:79: 82:08:1b:77:b2:ce:71:79:98:e5:f9:79:70:93:9a:e4:9f:02: 1d:ae:df:e5:e9:8a:f1:54:b5:a2:0f:c1:ff:5f:a6:fe:a1:4c: 8a:8a:df:d1:3f:da:02:28:23:3b:32:aa:20:c2:46:27:da:2d: 95:9c:05:27:e9:5c:ac:db:c2:f3:2c:7b:ef:86:5d:c9:fb:42: d8:74:64:19:cb:66:06:f5:02:40:96:3a:a6:9e:b6:2b:19:fc: de:8c:0f:6b:b9:fe:bc:65:4c:4a:fe:fb:56:72:63:dd:6d:56: b6:fe:e7:15:b9:2c:be:9f:0c:b2:53:c9:b4:64:37:d7:d2:57: 88:21:fa:fb:f5:9f:08:a4:17:55:ba:95:64:45:fa:99:e6:dd: c2:7c:f8:10:3e:2d:26:dd:98:e5:52:ac:52:ad:ce:7c:69:5a: 8b:2e:a3:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKWrdx81udZJWaPQ4axhzub8xjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjExMTQwNDUwMjRaFw0yNjExMTUwNzA0MjRaMDMxMTAvBgNV BAMTKDFGNkY2NzhDMkYwRjlDQzg0MUFDOUUwNkZBRTExQkVDRTNEQTY1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnXwiKNM3hztR9FXCZaVzkxVp Ho7CPu+HAiUBkVDmR6OB/8ffKP1FoBOiFY5oRNlHoNjq6Gc0BqrHJ8EWJNuO+zhy pclMDQEWdWidsJ1oAmJnYzJJRuaq/EtBZ8AeY8dIWDVDnQtmY3tdX4pOUE0Ca2iG SQe2zpcROMt6aWtfRWUyczW1H//dAuVhZl5nj4+CphQYRnmuN4vgjIzjtxPBysST HriuPLLI9mNGmXCW3HTW6MAmZlZ4klLkJZeDOnfaCsVlUcYvnlqRqvXNnpVsyOfj PcCMKjMoVDtixzdEoPVPCnMdXGVqFBZA/zvtDPQ/W5fc/AwrUSfT2R0hv0N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH29njC8PnMhBrJ4G+uEb7OPaZSAwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSLVhtPKHu50PXppXagIu8y5jSNxvskNLoN 0B+cnb9GUrmdmbG9ESZYB0ChY/jMjqCbFEyf4pT5A75uQx+EFP1CDKPN/7ypoYFw ZTH11ds1CZUv8wan4nEHeYIIG3eyznF5mOX5eXCTmuSfAh2u3+XpivFUtaIPwf9f pv6hTIqK39E/2gIoIzsyqiDCRifaLZWcBSfpXKzbwvMse++GXcn7Qth0ZBnLZgb1 AkCWOqaetisZ/N6MD2u5/rxlTEr++1ZyY91tVrb+5xW5LL6fDLJTybRkN9fSV4gh +vv1nwikF1W6lWRF+pnm3cJ8+BA+LSbdmOVSrFKtznxpWosuo/A= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:22 2026 by rpki-client