$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: QBsvucJzT4OsiJPGMcoOuB5GPIP3Fq04W0xnKlGNAUs= Subject key identifier: 51:B2:AC:8E:EF:E3:36:29:70:A6:4D:67:66:0F:AE:20:CE:BA:2D:49 Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 5269318D4164F8F9462E9AFE1500A43588D6551D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:17 +0000 Manifest this update: Tue 12 May 2026 18:03:17 +0000 Manifest next update: Wed 13 May 2026 20:55:17 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 2: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: hBCu7YIbEKiRX14OfmKHaTOFNpZiQmRAetJdiEyUoBc=) 3: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:69:31:8d:41:64:f8:f9:46:2e:9a:fe:15:00:a4:35:88:d6:55:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: May 12 18:03:17 2026 GMT Not After : May 13 20:55:17 2026 GMT Subject: CN=51B2AC8EEFE3362970A64D67660FAE20CEBA2D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:0e:e1:ad:92:6f:6b:7e:79:19:40:e9:b8: 84:fd:6d:16:ac:7f:4f:20:25:6f:0e:5c:32:aa:fc: b5:5b:16:e7:d1:19:ef:24:32:f5:60:ee:b8:a7:d0: 1b:1c:46:f5:2d:b0:73:c6:a4:0e:da:e8:83:fe:3e: d0:0d:41:d6:1f:1f:fb:71:cc:f6:d5:88:11:01:10: d7:2c:1b:f8:d9:26:82:2d:61:ee:1f:23:c1:71:39: 21:b2:d5:16:3c:2f:8b:4d:a7:d7:64:24:34:ba:0a: 3f:ff:46:3f:70:aa:da:56:7e:91:a4:da:73:1b:15: cc:fd:b0:33:71:88:cd:78:0c:92:4f:ab:e4:26:c2: d8:6a:ae:6e:f2:26:a2:0c:bc:7e:7d:3a:14:4d:5e: 95:cd:8a:b6:6e:f8:b6:69:6a:25:8e:47:06:a1:f6: 74:17:96:e0:71:3d:bc:f5:e8:a0:b1:4f:af:e3:61: f2:1b:da:36:a3:1a:81:f1:98:9e:b5:9d:56:63:19: ee:4f:85:91:f0:64:be:b1:4c:64:c3:a1:5c:47:e5: 37:02:d7:6f:a0:84:42:07:fa:f5:a6:6d:31:e6:29: 3e:4b:e6:71:9e:34:87:09:cb:52:f7:8b:16:9b:cf: 2f:10:b8:cf:be:0a:41:57:25:69:0f:de:06:bd:f1: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:AC:8E:EF:E3:36:29:70:A6:4D:67:66:0F:AE:20:CE:BA:2D:49 X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:61:4d:09:0c:24:a7:31:a5:fb:46:05:09:84:2a:56:39:a1: 7d:ba:af:7d:7d:f0:f1:fb:5d:62:9c:03:a9:02:78:15:97:4a: 61:f2:60:6a:37:21:e2:08:3c:8f:a8:f7:af:cf:ec:1b:c2:42: 96:88:8b:94:aa:17:5e:31:fe:47:d5:10:7f:1b:d2:04:13:d9: 15:be:ef:82:ef:4a:50:32:13:28:f9:60:6b:54:33:f3:35:a5: 12:6b:09:3f:e4:98:a5:03:49:02:78:97:d6:82:c5:91:b6:c0: 8e:71:21:6c:d6:90:65:6b:7b:d5:fa:f2:80:6e:55:90:37:3b: de:b9:61:06:70:74:1e:b7:f6:08:ed:b4:d4:dc:5e:09:5f:d5: d9:70:96:40:6b:dd:75:bf:bd:9f:34:db:4b:39:4d:6f:15:8b: 19:8a:12:f8:d9:b2:fa:9f:e8:24:bb:20:50:0c:dc:2a:8a:70: a3:ee:d5:17:c9:1c:bf:3b:1b:bd:85:78:53:63:bd:82:fb:47: 7a:59:a2:de:97:35:b0:9a:d0:01:54:db:6e:48:2b:3c:e8:6c: c6:c0:f3:ba:e9:46:b1:0c:d2:1e:16:2e:1d:73:5b:50:65:37: 26:09:e4:7f:72:19:0b:18:17:05:59:54:86:6c:a4:ad:59:9b: 69:14:48:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmkxjUFk+PlGLpr+FQCkNYjWVR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA1MTIxODAzMTdaFw0yNjA1MTMyMDU1MTdaMDMxMTAvBgNV BAMTKDUxQjJBQzhFRUZFMzM2Mjk3MEE2NEQ2NzY2MEZBRTIwQ0VCQTJENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Yw7hrZJva355GUDpuIT9bRas f08gJW8OXDKq/LVbFufRGe8kMvVg7rin0BscRvUtsHPGpA7a6IP+PtANQdYfH/tx zPbViBEBENcsG/jZJoItYe4fI8FxOSGy1RY8L4tNp9dkJDS6Cj//Rj9wqtpWfpGk 2nMbFcz9sDNxiM14DJJPq+Qmwthqrm7yJqIMvH59OhRNXpXNirZu+LZpaiWORwah 9nQXluBxPbz16KCxT6/jYfIb2jajGoHxmJ61nVZjGe5PhZHwZL6xTGTDoVxH5TcC 12+ghEIH+vWmbTHmKT5L5nGeNIcJy1L3ixabzy8QuM++CkFXJWkP3ga98QuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbKsju/jNilwpk1nZg+uIM66LUkwHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1hTQkMJKcxpftGBQmEKlY5oX26r3198PH7 XWKcA6kCeBWXSmHyYGo3IeIIPI+o96/P7BvCQpaIi5SqF14x/kfVEH8b0gQT2RW+ 74LvSlAyEyj5YGtUM/M1pRJrCT/kmKUDSQJ4l9aCxZG2wI5xIWzWkGVre9X68oBu VZA3O965YQZwdB639gjttNTcXglf1dlwlkBr3XW/vZ8020s5TW8VixmKEvjZsvqf 6CS7IFAM3CqKcKPu1RfJHL87G72FeFNjvYL7R3pZot6XNbCa0AFU225IKzzobMbA 87rpRrEM0h4WLh1zW1BlNyYJ5H9yGQsYFwVZVIZspK1Zm2kUSDI= -----END CERTIFICATE-----Generated at Wed May 13 06:11:59 2026 by rpki-client