$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: v4UBLlVchJiOYgc6iU2iou8+ucSLO3eR0J7NeYljQ4s= Subject key identifier: E5:BF:81:9C:EA:B5:7F:EB:2A:0D:55:9D:84:2A:60:52:B4:F8:43:AD Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 7EBC65A9429C56F947839EEC368F6F9EE6B2980F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:55:47 +0000 Manifest this update: Wed 23 Sep 2026 15:50:47 +0000 Manifest next update: Thu 24 Sep 2026 16:20:47 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) 2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) 3: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: dBzLq9nrMXO2hOND0Q4qH5cL9x2qnxabZa187fnJzxQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bc:65:a9:42:9c:56:f9:47:83:9e:ec:36:8f:6f:9e:e6:b2:98:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Sep 23 15:50:47 2026 GMT Not After : Sep 24 16:20:47 2026 GMT Subject: CN=E5BF819CEAB57FEB2A0D559D842A6052B4F843AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:0b:59:a6:11:1d:64:9b:40:0b:22:aa:a7: 74:48:c9:16:df:19:9e:59:d0:33:07:c5:37:e4:d8: 45:1d:15:0d:29:fd:67:fd:2f:fc:63:a0:d1:77:e9: 40:1d:0d:7a:52:ba:ac:40:1d:7f:d7:51:4c:26:65: c3:8f:2c:e2:4d:fa:a4:7e:84:77:bf:96:35:69:ab: 9f:cb:6e:9c:5a:df:75:00:6a:b3:44:d2:e8:2a:4f: d4:00:cf:aa:3a:a1:1a:e4:a9:b5:fe:39:73:d9:6c: 4a:d8:59:99:0a:79:54:b1:56:ae:14:81:a6:8f:1a: b7:b6:dc:49:42:c6:50:f3:88:20:6a:4b:f7:96:d7: 10:d8:02:10:d6:19:97:ac:85:46:c2:b0:0d:e8:0a: f5:dc:b3:cd:be:78:20:55:1a:ed:4a:fb:4c:7e:3b: 99:52:75:09:04:99:68:bd:0c:df:4d:64:52:8f:d1: bc:2f:85:67:f7:6b:0e:47:e0:d8:d9:0c:81:40:0e: 0b:41:ce:19:df:59:e1:8c:b9:1b:9d:71:66:89:4d: 7a:f5:9b:15:33:55:51:e5:15:3b:58:c9:94:51:d3: aa:66:ec:48:c5:e8:ee:15:87:d5:dd:3a:0e:9e:5f: 09:27:95:81:d1:91:fb:0b:d5:54:44:89:f7:f9:e9: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BF:81:9C:EA:B5:7F:EB:2A:0D:55:9D:84:2A:60:52:B4:F8:43:AD X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c6:49:e2:df:b7:92:50:7b:7f:fe:45:6c:b3:91:b0:d4:89: 03:d6:25:19:02:50:34:04:4e:2f:32:76:e0:b2:a8:5c:e9:7b: 49:4d:3f:1b:79:7c:f0:51:c5:2c:1c:ff:d4:c6:b2:1d:94:c3: 57:78:f4:c8:e2:34:a7:cc:db:09:2c:0f:27:a6:6c:0f:d4:33: fb:e5:f8:7b:e6:fa:85:c6:25:7e:a3:d4:82:1a:9e:c5:a1:6e: e1:0b:3e:61:bd:2a:f0:04:e4:b0:69:e8:b7:b9:34:6e:8f:15: fb:6b:c4:c4:34:36:1e:97:69:e1:9c:10:f7:62:6b:a2:5a:9b: 79:2f:0b:ed:cd:be:47:e6:88:b8:2e:56:4e:b3:33:1c:ff:13: 85:6a:5d:30:82:13:f9:d0:08:e1:0d:0d:8d:85:9a:91:8f:c0: 18:8b:4b:70:78:d9:0a:11:1f:c6:39:27:9f:f5:99:7d:72:8b: c8:4f:aa:6b:cb:67:cb:c2:f8:c1:b8:90:ee:4e:0e:69:3e:99: 67:df:8c:50:8b:2d:c5:20:30:36:75:30:c5:f8:71:f1:33:a2: 03:26:c0:e8:62:9f:15:40:58:0d:ee:d7:a0:9f:5e:3c:13:b8: 90:0a:3a:f8:d1:f5:6b:52:05:05:0a:db:27:10:36:04:d9:16: e6:1a:ed:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfrxlqUKcVvlHg57sNo9vnuaymA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA5MjMxNTUwNDdaFw0yNjA5MjQxNjIwNDdaMDMxMTAvBgNV BAMTKEU1QkY4MTlDRUFCNTdGRUIyQTBENTU5RDg0MkE2MDUyQjRGODQzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XQtZphEdZJtACyKqp3RIyRbf GZ5Z0DMHxTfk2EUdFQ0p/Wf9L/xjoNF36UAdDXpSuqxAHX/XUUwmZcOPLOJN+qR+ hHe/ljVpq5/Lbpxa33UAarNE0ugqT9QAz6o6oRrkqbX+OXPZbErYWZkKeVSxVq4U gaaPGre23ElCxlDziCBqS/eW1xDYAhDWGZeshUbCsA3oCvXcs82+eCBVGu1K+0x+ O5lSdQkEmWi9DN9NZFKP0bwvhWf3aw5H4NjZDIFADgtBzhnfWeGMuRudcWaJTXr1 mxUzVVHlFTtYyZRR06pm7EjF6O4Vh9XdOg6eXwknlYHRkfsL1VREiff56U3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5b+BnOq1f+sqDVWdhCpgUrT4Q60wHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXGSeLft5JQe3/+RWyzkbDUiQPWJRkCUDQE Ti8yduCyqFzpe0lNPxt5fPBRxSwc/9TGsh2Uw1d49MjiNKfM2wksDyembA/UM/vl +Hvm+oXGJX6j1IIansWhbuELPmG9KvAE5LBp6Le5NG6PFftrxMQ0Nh6XaeGcEPdi a6Jam3kvC+3NvkfmiLguVk6zMxz/E4VqXTCCE/nQCOENDY2FmpGPwBiLS3B42QoR H8Y5J5/1mX1yi8hPqmvLZ8vC+MG4kO5ODmk+mWffjFCLLcUgMDZ1MMX4cfEzogMm wOhinxVAWA3u16CfXjwTuJAKOvjR9WtSBQUK2ycQNgTZFuYa7Yg= -----END CERTIFICATE-----Generated at Thu Sep 24 00:56:48 2026 by rpki-client