$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: kYTmhDIJWWNSiZkYMNk/iWmGMQ0JxxNaK0G8PsR9kt4= Subject key identifier: 46:55:60:C3:11:0A:BA:32:06:40:19:01:D2:49:56:CD:DD:BC:DB:F8 Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 36E5D5920F439AA18B02F66C6008130DF3009AE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:07:06 +0000 Manifest this update: Thu 24 Sep 2026 05:02:06 +0000 Manifest next update: Fri 25 Sep 2026 09:03:06 +0000 Files and hashes: 1: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: mW01GWSYawk29hsM/gdMs/JThzpwfuuIPMndg56Bd6A=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e5:d5:92:0f:43:9a:a1:8b:02:f6:6c:60:08:13:0d:f3:00:9a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: Sep 24 05:02:06 2026 GMT Not After : Sep 25 09:03:06 2026 GMT Subject: CN=465560C3110ABA3206401901D24956CDDDBCDBF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:31:4f:55:0f:da:3d:1f:f7:9d:ea:89:94: 2d:62:2a:44:ad:e9:31:f2:c5:f3:dd:1f:e3:6e:eb: e6:1a:29:fb:ca:cd:c6:5e:17:cb:3a:aa:b9:9c:77: 1b:f1:2f:a2:02:5e:ba:91:62:e8:49:7e:bd:c1:36: 46:f4:74:cc:f3:db:75:a8:ec:d3:ae:2a:e7:3e:f4: d0:3e:31:eb:8f:38:ce:f5:87:f5:23:b2:50:1d:b4: 4d:eb:a5:09:3f:c5:8c:10:d0:83:41:38:60:9a:ef: cd:e4:63:cb:31:a8:6a:e5:a8:eb:fa:cd:0c:d5:fa: 0b:a8:02:23:de:28:f4:4e:c1:ca:36:e1:6e:32:99: 45:ae:da:70:c2:c3:53:83:02:5f:67:f4:d9:b3:98: ba:d5:f3:5e:cf:d4:04:ed:97:37:75:d8:28:29:39: ac:8d:c6:c9:67:6b:9d:43:b2:2e:12:4d:78:7e:c1: 00:23:be:6b:83:fa:1d:7f:96:af:79:87:8b:92:0a: 88:96:5e:66:20:53:cd:1f:ab:52:cf:2c:5a:df:8f: 2c:a7:33:bc:3d:b5:06:64:ac:ad:f6:8b:0e:f8:44: 02:74:fd:24:cc:7e:8f:61:e2:aa:5f:e7:92:b3:7a: 70:95:73:52:ff:ee:54:cc:b2:8d:2c:48:f1:fe:5d: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:55:60:C3:11:0A:BA:32:06:40:19:01:D2:49:56:CD:DD:BC:DB:F8 X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:78:61:a5:a5:0b:5d:e6:2e:e8:38:82:b3:30:26:a8:bb:cf: 4a:db:61:1a:bb:b5:64:e6:f3:e7:15:55:b9:77:12:bd:f5:a5: 3c:18:19:6a:38:eb:02:f8:cb:2c:a7:f0:71:d4:84:a1:04:fc: a7:6f:1e:7b:82:96:93:61:54:e7:e8:86:82:2e:0f:c0:1c:bd: e4:16:7f:29:78:ab:f9:b4:b9:04:0e:6b:95:7e:06:05:05:2e: 57:23:5f:55:08:17:a8:94:b4:17:ee:9d:ed:94:e1:f5:2a:af: 61:9e:4b:5f:02:81:9f:61:06:b7:c3:e7:5c:f5:a7:5e:d5:49: 83:9c:a8:e8:fe:32:48:f8:55:88:ee:00:1d:72:e1:60:61:e0: 23:71:d9:dd:bc:0b:88:d2:f3:23:4e:1e:2f:07:da:7c:a4:99: cb:74:2f:62:b7:d8:78:00:01:a5:b0:f7:c6:a3:78:5b:f3:7b: fd:64:e9:07:04:6d:95:c6:7b:d0:cb:8f:6e:6a:98:71:a0:8f: 2c:f1:0b:29:c8:8b:ff:b6:49:1b:74:aa:4c:f3:e0:53:83:db: 5a:5f:44:49:7e:c4:66:ae:b4:7a:f6:15:a2:63:84:88:36:eb: 2c:ac:b3:23:f4:b0:5a:0f:75:f1:72:49:ca:1e:66:73:ab:0c: f3:cf:3c:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuXVkg9DmqGLAvZsYAgTDfMAmuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA5MjQwNTAyMDZaFw0yNjA5MjUwOTAzMDZaMDMxMTAvBgNV BAMTKDQ2NTU2MEMzMTEwQUJBMzIwNjQwMTkwMUQyNDk1NkNERERCQ0RCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO4DFPVQ/aPR/3neqJlC1iKkSt 6THyxfPdH+Nu6+YaKfvKzcZeF8s6qrmcdxvxL6ICXrqRYuhJfr3BNkb0dMzz23Wo 7NOuKuc+9NA+MeuPOM71h/UjslAdtE3rpQk/xYwQ0INBOGCa783kY8sxqGrlqOv6 zQzV+guoAiPeKPROwco24W4ymUWu2nDCw1ODAl9n9NmzmLrV817P1ATtlzd12Cgp OayNxslna51Dsi4STXh+wQAjvmuD+h1/lq95h4uSCoiWXmYgU80fq1LPLFrfjyyn M7w9tQZkrK32iw74RAJ0/STMfo9h4qpf55KzenCVc1L/7lTMso0sSPH+Xea/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURlVgwxEKujIGQBkB0klWzd282/gwHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI54YaWlC13mLug4grMwJqi7z0rbYRq7tWTm 8+cVVbl3Er31pTwYGWo46wL4yyyn8HHUhKEE/KdvHnuClpNhVOfohoIuD8AcveQW fyl4q/m0uQQOa5V+BgUFLlcjX1UIF6iUtBfune2U4fUqr2GeS18CgZ9hBrfD51z1 p17VSYOcqOj+Mkj4VYjuAB1y4WBh4CNx2d28C4jS8yNOHi8H2nykmct0L2K32HgA AaWw98ajeFvze/1k6QcEbZXGe9DLj25qmHGgjyzxCynIi/+2SRt0qkzz4FOD21pf REl+xGautHr2FaJjhIg26yyssyP0sFoPdfFyScoeZnOrDPPPPFU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:36:07 2026 by rpki-client