$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: 7edwxNTbpVFDkoFAhYI+UPAlcjb5AJK9OryEeX+u9b0= Subject key identifier: F0:5D:70:87:E0:1D:48:8B:1A:50:21:D3:91:6A:CA:F8:E3:83:27:2B Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 4ED67F6777CD56018C3440ABDC0954E648960ABD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 05:22:23 +0000 Manifest this update: Thu 24 Sep 2026 05:17:23 +0000 Manifest next update: Fri 25 Sep 2026 08:00:23 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 2: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: 4xg8rYHkDhQZirWRF+8obJnmLuwEmN8aIVUGeA/uoFE=) 3: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d6:7f:67:77:cd:56:01:8c:34:40:ab:dc:09:54:e6:48:96:0a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Sep 24 05:17:23 2026 GMT Not After : Sep 25 08:00:23 2026 GMT Subject: CN=F05D7087E01D488B1A5021D3916ACAF8E383272B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:bf:41:b5:90:ee:33:0d:25:84:5c:9c:ac: ae:26:f4:c1:a7:52:8f:a2:b4:13:72:93:41:1c:9a: 26:ef:25:db:8b:2f:a0:11:22:74:1d:5a:bb:89:3d: 9b:5e:0e:98:7e:9f:ed:9b:cc:5d:e2:99:55:6d:f8: 47:bb:55:2e:cc:06:8e:09:cd:18:e0:6c:d5:97:90: ed:2d:67:9d:fb:65:72:aa:8d:11:6b:3e:8d:c4:af: d8:8c:91:8c:1b:4f:a0:36:08:8e:ca:6b:98:c8:3a: af:b0:33:ca:09:bc:aa:9f:99:f0:b7:3f:05:1b:0b: ca:4e:e1:bd:69:19:5a:a5:33:5b:cf:50:80:ec:89: ee:8f:3c:86:0c:e1:9e:0c:2b:4c:13:16:60:38:2e: 46:fc:b9:2a:68:d3:e5:32:44:93:bf:84:16:b2:84: ab:4b:69:3c:1e:8d:e5:34:e8:b5:2b:f7:59:9b:8a: 60:e6:9e:7f:ad:f7:9e:5c:cb:02:e2:03:4f:54:e3: a1:2f:5b:7b:38:a5:de:0d:f3:7e:07:02:1b:91:34: c8:24:78:49:16:11:c6:30:d4:c8:eb:81:6a:e7:7b: c0:05:cf:32:29:31:b9:53:09:87:33:8c:ad:f5:39: d3:40:1b:4a:41:52:63:14:cd:16:88:69:f8:86:ee: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5D:70:87:E0:1D:48:8B:1A:50:21:D3:91:6A:CA:F8:E3:83:27:2B X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:17:56:0f:02:de:17:a7:be:d4:75:9e:65:57:25:03:5c:2b: ec:6f:09:65:68:ed:5d:40:da:ed:d1:3c:a9:4f:4e:50:1f:89: 93:ec:32:9c:61:69:9f:9a:a8:39:0f:f5:23:f8:ac:e6:71:c3: 2f:98:e1:e8:6e:bd:78:39:7c:d5:e6:3f:4e:b8:49:20:a1:26: 39:ae:ef:82:9b:d6:98:fe:ae:50:ba:80:1f:fe:56:b6:03:00: d0:c0:75:eb:c5:37:30:10:29:b1:8c:e4:12:bb:d7:b2:ed:d4: f0:1e:52:25:3e:d3:49:8e:d5:2d:45:41:14:5a:73:64:94:52: d4:c2:3b:dd:25:51:e8:3e:ee:8c:1e:b1:40:5d:00:28:61:c1: 18:9d:d2:9b:4e:0a:ef:fc:fe:3b:3e:52:93:db:0a:34:3a:8c: 31:77:c7:6b:05:82:7e:d0:a9:e8:41:70:71:7e:66:1d:c9:38: ee:12:2d:15:d8:54:47:22:d7:c4:c4:69:99:a6:fa:e1:dd:05: 08:04:27:d7:56:51:7d:70:95:3b:21:da:e0:71:53:68:d1:47: 79:ea:b7:f5:62:b5:d2:6b:4b:96:68:d8:ce:00:3a:15:37:82: e6:49:61:97:7f:52:e5:35:c5:f3:32:51:28:8a:43:1b:f0:8a: 52:7e:60:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtZ/Z3fNVgGMNECr3AlU5kiWCr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA5MjQwNTE3MjNaFw0yNjA5MjUwODAwMjNaMDMxMTAvBgNV BAMTKEYwNUQ3MDg3RTAxRDQ4OEIxQTUwMjFEMzkxNkFDQUY4RTM4MzI3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5r9BtZDuMw0lhFycrK4m9MGn Uo+itBNyk0EcmibvJduLL6ARInQdWruJPZteDph+n+2bzF3imVVt+Ee7VS7MBo4J zRjgbNWXkO0tZ537ZXKqjRFrPo3Er9iMkYwbT6A2CI7Ka5jIOq+wM8oJvKqfmfC3 PwUbC8pO4b1pGVqlM1vPUIDsie6PPIYM4Z4MK0wTFmA4Lkb8uSpo0+UyRJO/hBay hKtLaTwejeU06LUr91mbimDmnn+t955cywLiA09U46EvW3s4pd4N834HAhuRNMgk eEkWEcYw1MjrgWrne8AFzzIpMblTCYczjK31OdNAG0pBUmMUzRaIafiG7qvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8F1wh+AdSIsaUCHTkWrK+OODJyswHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAXVg8C3henvtR1nmVXJQNcK+xvCWVo7V1A 2u3RPKlPTlAfiZPsMpxhaZ+aqDkP9SP4rOZxwy+Y4ehuvXg5fNXmP064SSChJjmu 74Kb1pj+rlC6gB/+VrYDANDAdevFNzAQKbGM5BK717Lt1PAeUiU+00mO1S1FQRRa c2SUUtTCO90lUeg+7owesUBdAChhwRid0ptOCu/8/js+UpPbCjQ6jDF3x2sFgn7Q qehBcHF+Zh3JOO4SLRXYVEci18TEaZmm+uHdBQgEJ9dWUX1wlTsh2uBxU2jRR3nq t/VitdJrS5Zo2M4AOhU3guZJYZd/UuU1xfMyUSiKQxvwilJ+YFQ= -----END CERTIFICATE-----Generated at Thu Sep 24 09:17:58 2026 by rpki-client