$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: 9BU89hs5ohINvxoM0NmaUfuNfuPMkrKLHhVjE8VS0vM= Subject key identifier: 90:A3:C4:5F:FB:29:C8:EF:CC:B6:F9:87:81:04:E9:3E:73:37:39:AC Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 7B16BFAB3E3BE6070C105713D42ADA30E5EBDB98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 15:55:49 +0000 Manifest this update: Wed 23 Sep 2026 15:50:49 +0000 Manifest next update: Thu 24 Sep 2026 17:02:49 +0000 Files and hashes: 1: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: RVlvKaT/zYYNSEdLhAPlDKNrpNPf4ItI/lnmjJYmWV0=) 2: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 3: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 4: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) 5: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:16:bf:ab:3e:3b:e6:07:0c:10:57:13:d4:2a:da:30:e5:eb:db:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Sep 23 15:50:49 2026 GMT Not After : Sep 24 17:02:49 2026 GMT Subject: CN=90A3C45FFB29C8EFCCB6F9878104E93E733739AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:61:ae:60:aa:85:e8:ce:2c:4d:6e:c8:72: 79:0e:91:bd:12:06:42:a7:26:ea:da:71:3b:98:31: 2a:9c:07:99:8a:24:eb:2e:7a:26:b2:2d:65:d4:1f: eb:00:48:12:a1:b6:58:ce:37:49:3f:1f:df:a9:1c: 7b:1e:be:96:6f:2c:cb:c5:16:9f:84:3d:1f:10:42: ba:9a:5a:50:76:74:10:5a:1e:2c:98:d6:47:43:0b: e7:3f:c9:a3:7b:07:c0:51:97:23:9d:7f:c1:25:fb: 0b:d0:5c:ee:83:47:bd:03:f3:9b:af:0e:8b:50:0f: 74:01:90:b9:d1:50:3f:5d:7d:a6:b1:fc:b0:47:e5: 7e:d4:87:cb:56:62:99:35:bc:cc:31:44:b1:41:1c: d8:d4:a8:47:49:3b:bf:4b:fd:6e:f1:33:78:a3:24: bc:be:f5:0a:d7:09:ac:1e:32:17:78:2a:27:73:16: 37:77:64:2e:a6:50:74:76:05:3b:94:af:5c:f5:85: a6:5b:81:68:bd:78:da:30:41:df:da:0b:c3:48:1c: 7a:5c:36:d2:31:fa:ad:41:38:b0:7a:ee:23:99:42: 6e:d9:29:c3:10:54:9b:76:c8:5e:ea:bf:67:f7:04: 5d:6c:5a:50:b6:0e:e3:fe:4e:91:90:f2:27:a7:f2: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:C4:5F:FB:29:C8:EF:CC:B6:F9:87:81:04:E9:3E:73:37:39:AC X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:de:5b:b1:71:00:cb:c4:3f:82:1b:90:cd:6f:4a:dd:b1: 25:ba:bb:76:32:86:1f:97:cf:f9:c9:da:e0:5e:c3:74:45:22: f7:8e:13:9b:c1:48:4d:4d:91:fd:0e:f9:25:80:0f:ff:e9:c6: 7f:68:76:70:10:c4:36:be:59:4b:98:00:78:4a:44:f2:b0:c2: 7a:fc:b5:1c:48:f1:28:19:f4:f4:9f:8d:72:1c:9b:c3:16:8c: 72:a6:41:de:41:06:79:cf:c0:a2:db:c2:35:3a:82:fd:0a:1f: 91:cc:86:88:47:e2:d7:62:ff:04:02:ee:a1:84:17:f6:32:90: 7b:df:18:6c:07:10:bd:1e:0d:38:71:20:b2:f6:e4:e9:e7:75: d0:20:17:e9:46:b3:60:f1:ab:2f:c8:ff:ce:46:69:47:ab:a2: cb:82:0d:e7:9a:cc:d1:e0:f7:99:0f:17:43:b4:43:d1:8c:88: 0c:35:7e:de:a2:79:64:14:65:93:e9:8a:ce:56:56:d0:04:c8: a0:f3:b8:6f:e0:07:00:53:cd:2f:79:3f:3e:0b:63:c5:bc:2c: a1:8c:2b:33:f0:e5:68:1d:dc:ec:56:15:90:8e:f2:92:ce:49: b6:98:cc:2b:bc:1e:51:37:d7:80:b7:c1:39:12:48:33:ab:f6: c6:7e:3d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexa/qz475gcMEFcT1CraMOXr25gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA5MjMxNTUwNDlaFw0yNjA5MjQxNzAyNDlaMDMxMTAvBgNV BAMTKDkwQTNDNDVGRkIyOUM4RUZDQ0I2Rjk4NzgxMDRFOTNFNzMzNzM5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSx2GuYKqF6M4sTW7IcnkOkb0S BkKnJuracTuYMSqcB5mKJOsueiayLWXUH+sASBKhtljON0k/H9+pHHsevpZvLMvF Fp+EPR8QQrqaWlB2dBBaHiyY1kdDC+c/yaN7B8BRlyOdf8El+wvQXO6DR70D85uv DotQD3QBkLnRUD9dfaax/LBH5X7Uh8tWYpk1vMwxRLFBHNjUqEdJO79L/W7xM3ij JLy+9QrXCaweMhd4KidzFjd3ZC6mUHR2BTuUr1z1haZbgWi9eNowQd/aC8NIHHpc NtIx+q1BOLB67iOZQm7ZKcMQVJt2yF7qv2f3BF1sWlC2DuP+TpGQ8ien8n7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKPEX/spyO/MtvmHgQTpPnM3OawwHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpl3luxcQDLxD+CG5DNb0rdsSW6u3Yyhh+X z/nJ2uBew3RFIveOE5vBSE1Nkf0O+SWAD//pxn9odnAQxDa+WUuYAHhKRPKwwnr8 tRxI8SgZ9PSfjXIcm8MWjHKmQd5BBnnPwKLbwjU6gv0KH5HMhohH4tdi/wQC7qGE F/YykHvfGGwHEL0eDThxILL25OnnddAgF+lGs2Dxqy/I/85GaUerosuCDeeazNHg 95kPF0O0Q9GMiAw1ft6ieWQUZZPpis5WVtAEyKDzuG/gBwBTzS95Pz4LY8W8LKGM KzPw5Wgd3OxWFZCO8pLOSbaYzCu8HlE314C3wTkSSDOr9sZ+Pdk= -----END CERTIFICATE-----Generated at Thu Sep 24 09:49:40 2026 by rpki-client