$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: HxU8OplODs1VFyNV0LdWCmiYqJjPtHKNuka4Z4NM3VQ= Subject key identifier: F2:34:C4:2E:B9:B4:59:4C:B0:98:DF:47:BB:19:A7:27:44:76:48:AA Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 1A25040606A12946A7D66CCB71D6629973FE4579 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:16:27 +0000 Manifest this update: Tue 12 May 2026 10:11:27 +0000 Manifest next update: Wed 13 May 2026 12:25:27 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 4: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: l90nn6N12Kc/ZMfj9iw/kDUD4BpcdB8mu8bOMFl1HGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:25:04:06:06:a1:29:46:a7:d6:6c:cb:71:d6:62:99:73:fe:45:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: May 12 10:11:27 2026 GMT Not After : May 13 12:25:27 2026 GMT Subject: CN=F234C42EB9B4594CB098DF47BB19A727447648AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:27:b3:9b:a5:ca:bb:01:31:37:38:25:3d: 5d:b2:d0:fe:25:bd:db:00:e6:94:ca:74:ad:6d:e5: 0e:d1:eb:37:53:25:66:d9:ea:ad:49:ce:e5:a2:6c: 75:4d:fa:c1:b4:01:49:6a:58:b2:18:59:b5:66:d0: 32:d0:b3:24:3d:72:b7:e0:77:64:10:e0:6b:7a:4e: 64:2e:45:25:b6:02:48:1b:47:99:db:c1:8f:2d:01: e0:5c:36:84:76:6f:f5:30:71:17:ac:11:3c:be:31: 07:75:b0:ed:88:46:00:95:a4:6c:da:42:22:36:15: 83:a8:21:ef:6d:0d:d8:93:ba:f1:c4:4f:9d:10:0b: 13:ce:71:5d:39:5f:c9:c2:61:c3:38:16:54:ba:8b: 59:d6:31:b0:7d:92:5b:b2:d1:e9:c4:89:29:a1:1d: 85:12:a9:f4:04:aa:f9:12:6e:b2:76:87:ce:f0:cc: 35:bb:1d:f8:8c:8b:b3:39:cd:85:c4:4c:a5:bf:98: 0d:0a:12:dc:ca:23:ab:d6:b4:f2:be:89:f9:e8:17: d2:d7:bb:1b:f9:29:b7:68:bc:98:40:e3:75:82:ab: 7d:86:27:33:6c:cc:1b:6e:ee:ac:30:5d:e5:bb:a6: ed:0e:00:60:7e:93:84:7d:1f:5d:34:45:13:f4:41: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:C4:2E:B9:B4:59:4C:B0:98:DF:47:BB:19:A7:27:44:76:48:AA X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:94:e4:d2:b1:ad:5d:98:b3:f2:f5:43:ee:2b:d2:a2:39:b5: bc:88:3d:9d:dd:ac:dc:b2:a9:2a:3e:47:a0:17:0f:fe:d0:35: 37:e1:bd:74:80:e4:32:44:2e:88:a2:b4:98:1a:7e:47:62:66: f9:78:f9:98:9d:d8:e5:47:4b:7a:11:92:32:58:06:1c:22:f3: 73:9f:98:82:00:39:1f:e0:26:30:10:ef:4c:f1:56:5b:ff:d7: 40:e6:e3:68:fb:8b:14:82:5a:22:9d:11:92:fb:f9:85:bc:d4: 2b:93:5c:34:b7:57:88:63:e9:44:0b:ca:51:d5:ac:93:44:0d: 41:18:ed:0c:0c:a4:39:b4:ac:88:ed:0c:48:50:29:7d:29:78: 41:75:e5:64:b3:e4:1c:88:c3:c5:f2:27:02:07:d7:8e:6d:1b: f0:8d:8d:87:0f:ed:b5:d7:bf:25:30:36:05:ec:a3:b9:72:82: 14:0d:f5:ab:67:f9:0e:69:e4:74:90:a2:0c:c8:c5:f7:85:df: 37:83:3e:c8:7b:34:36:02:74:03:46:04:5d:a5:c0:69:17:ce: 51:01:32:1e:97:16:9f:a7:e4:b6:8d:49:29:19:10:ce:72:21: 52:01:c3:2f:3f:b5:a5:d3:d5:b1:96:67:50:51:c4:30:2a:66: 95:46:a2:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiUEBgahKUan1mzLcdZimXP+RXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA1MTIxMDExMjdaFw0yNjA1MTMxMjI1MjdaMDMxMTAvBgNV BAMTKEYyMzRDNDJFQjlCNDU5NENCMDk4REY0N0JCMTlBNzI3NDQ3NjQ4QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnyezm6XKuwExNzglPV2y0P4l vdsA5pTKdK1t5Q7R6zdTJWbZ6q1JzuWibHVN+sG0AUlqWLIYWbVm0DLQsyQ9crfg d2QQ4Gt6TmQuRSW2AkgbR5nbwY8tAeBcNoR2b/UwcResETy+MQd1sO2IRgCVpGza QiI2FYOoIe9tDdiTuvHET50QCxPOcV05X8nCYcM4FlS6i1nWMbB9kluy0enEiSmh HYUSqfQEqvkSbrJ2h87wzDW7HfiMi7M5zYXETKW/mA0KEtzKI6vWtPK+ifnoF9LX uxv5KbdovJhA43WCq32GJzNszBtu7qwwXeW7pu0OAGB+k4R9H100RRP0QQhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jTELrm0WUywmN9HuxmnJ0R2SKowHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICU5NKxrV2Ys/L1Q+4r0qI5tbyIPZ3drNyy qSo+R6AXD/7QNTfhvXSA5DJELoiitJgafkdiZvl4+Zid2OVHS3oRkjJYBhwi83Of mIIAOR/gJjAQ70zxVlv/10Dm42j7ixSCWiKdEZL7+YW81CuTXDS3V4hj6UQLylHV rJNEDUEY7QwMpDm0rIjtDEhQKX0peEF15WSz5ByIw8XyJwIH145tG/CNjYcP7bXX vyUwNgXso7lyghQN9atn+Q5p5HSQogzIxfeF3zeDPsh7NDYCdANGBF2lwGkXzlEB Mh6XFp+n5LaNSSkZEM5yIVIBwy8/taXT1bGWZ1BRxDAqZpVGoj0= -----END CERTIFICATE-----Generated at Tue May 12 22:50:00 2026 by rpki-client