$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft File: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft (raw, json) Hash identifier: 0QidKfK3+O2DkeobXEY7CgOBl0sEAOtRL2x0QvWokkE= Subject key identifier: 64:66:54:C5:84:3A:C4:24:8D:ED:79:54:EE:3E:FB:9B:BE:D9:8F:59 Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 12C548458F375196D343C90C923D8909BD2F7E38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 07:35:32 +0000 Manifest this update: Wed 23 Sep 2026 07:30:32 +0000 Manifest next update: Thu 24 Sep 2026 09:54:32 +0000 Files and hashes: 1: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: xLoeT+ko7MUw5aLnf4wj8gyqTKfil2TZ1gKntVO+LKI=) 2: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=) 3: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM=) 4: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: rXO9gTdPSQGsrR5rUmnzksusGY7II8+DMWGkUGzNqUA=) 5: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl (hash: oZKgYRbE2yYQklpQx2IAWK/p0e5bKKqHmdvAJ562i+Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:48:45:8f:37:51:96:d3:43:c9:0c:92:3d:89:09:bd:2f:7e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: Sep 23 07:30:32 2026 GMT Not After : Sep 24 09:54:32 2026 GMT Subject: CN=646654C5843AC4248DED7954EE3EFB9BBED98F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:47:58:eb:07:98:78:a8:a1:64:a6:df:62: 2c:df:66:ae:7d:ac:d4:0a:4e:41:5d:95:22:20:5f: 8e:c4:3a:4b:ce:a4:e8:96:2d:b7:a7:32:dd:76:b9: b6:df:e2:02:ec:95:f8:ff:d0:4e:64:34:4a:4f:18: 7a:a7:72:72:38:2d:4c:4e:8c:2e:8b:8c:78:81:d0: 38:80:44:4f:b0:fa:4e:f6:31:6c:1a:ca:22:12:79: aa:6c:32:73:ff:87:f2:ea:ca:c4:5c:ba:84:54:03: 02:19:69:16:bc:ff:63:59:62:72:8d:c4:d2:df:52: 62:97:25:3e:dc:3c:95:03:ab:ea:b9:54:7d:5b:2d: d3:7e:61:45:78:23:26:78:93:d8:53:b8:ac:d1:c1: 69:55:30:a2:e6:98:41:80:d5:61:91:78:87:18:fe: 92:46:e8:51:75:69:40:74:54:95:7b:99:f3:20:aa: 65:bc:13:31:6c:74:3a:87:95:16:16:72:6a:9a:3c: 82:7c:3a:c1:11:b3:eb:4b:5a:d8:2a:b8:e5:bd:6f: ac:6b:46:6c:4b:1a:9e:43:45:78:bf:3c:ef:10:42: 89:16:3d:b6:2e:4f:a1:5b:32:81:ce:0b:53:21:7a: 54:5b:f6:bd:44:b4:c3:ec:27:a6:fb:3c:df:7f:a5: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:54:C5:84:3A:C4:24:8D:ED:79:54:EE:3E:FB:9B:BE:D9:8F:59 X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:de:7a:f9:d3:9b:03:09:d8:f4:8a:eb:47:05:3e:13:b8:35: 44:3d:64:78:ef:45:8c:90:d5:87:dd:e9:aa:8b:1d:d4:45:54: 50:0b:3a:7d:25:8b:03:af:17:b2:a2:bc:34:14:2f:c9:5d:e2: 0d:ec:86:e4:80:c6:93:57:1c:22:69:1a:54:bc:ab:2a:60:05: 91:42:a6:f5:1b:8b:7e:79:42:bb:f9:5f:c8:30:5b:d5:62:87: ec:9a:e1:ea:3c:a0:63:bb:d8:9c:19:ea:9a:2d:d5:68:70:1f: 5f:65:69:e6:5a:3f:9b:45:6b:02:bb:33:99:d8:9e:77:2a:b6: f4:90:7b:a9:25:3d:cc:22:c7:76:54:ea:80:be:60:26:2e:e8: ec:9a:e1:1b:b3:31:d8:b9:23:c0:59:f2:e4:a6:eb:88:14:32: e1:79:bd:46:06:28:9f:a0:6c:3e:db:43:45:34:f4:b6:9e:82: 12:75:c2:90:a3:2d:de:c3:84:c7:12:10:9e:62:46:50:10:36: a4:37:2e:59:b1:f4:d4:11:65:9c:3b:6e:fd:3d:c9:c5:65:2e: d6:42:6b:99:8a:62:e7:b8:06:2a:df:9a:43:7e:ad:74:76:65: 77:1f:58:69:f2:61:1d:e7:42:b5:50:51:69:4f:d7:40:23:1f: cb:b8:ee:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsVIRY83UZbTQ8kMkj2JCb0vfjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA5MjMwNzMwMzJaFw0yNjA5MjQwOTU0MzJaMDMxMTAvBgNV BAMTKDY0NjY1NEM1ODQzQUM0MjQ4REVENzk1NEVFM0VGQjlCQkVEOThGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG0dY6weYeKihZKbfYizfZq59 rNQKTkFdlSIgX47EOkvOpOiWLbenMt12ubbf4gLslfj/0E5kNEpPGHqncnI4LUxO jC6LjHiB0DiARE+w+k72MWwayiISeapsMnP/h/LqysRcuoRUAwIZaRa8/2NZYnKN xNLfUmKXJT7cPJUDq+q5VH1bLdN+YUV4IyZ4k9hTuKzRwWlVMKLmmEGA1WGReIcY /pJG6FF1aUB0VJV7mfMgqmW8EzFsdDqHlRYWcmqaPIJ8OsERs+tLWtgquOW9b6xr RmxLGp5DRXi/PO8QQokWPbYuT6FbMoHOC1MhelRb9r1EtMPsJ6b7PN9/pSPJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGZUxYQ6xCSN7XlU7j77m77Zj1kwHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhG RjRFQzEwMTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPeevnTmwMJ2PSK60cFPhO4NUQ9ZHjvRYyQ 1Yfd6aqLHdRFVFALOn0liwOvF7KivDQUL8ld4g3shuSAxpNXHCJpGlS8qypgBZFC pvUbi355Qrv5X8gwW9Vih+ya4eo8oGO72JwZ6pot1WhwH19laeZaP5tFawK7M5nY nncqtvSQe6klPcwix3ZU6oC+YCYu6Oya4RuzMdi5I8BZ8uSm64gUMuF5vUYGKJ+g bD7bQ0U09LaeghJ1wpCjLd7DhMcSEJ5iRlAQNqQ3Llmx9NQRZZw7bv09ycVlLtZC a5mKYue4BirfmkN+rXR2ZXcfWGnyYR3nQrVQUWlP10AjH8u47g0= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:08 2026 by rpki-client