$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: KQH5hQHLP4Wi5tBhr8fy5AjZyIB81GtVv2DcES/koys= Subject key identifier: 09:61:B0:5F:B7:11:8B:1E:2F:1A:E7:CF:DB:C2:B2:23:05:80:44:FD Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 39A8A5221E8D65FDB66A6756F6F00E50FCAEB053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 10:30:49 +0000 Manifest this update: Mon 02 Nov 2026 10:25:49 +0000 Manifest next update: Tue 03 Nov 2026 10:43:49 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) 2: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: hHEvwkG6bQZmDlEeo2Tpj4b33g5YOW7Gk4FHOL60HFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a8:a5:22:1e:8d:65:fd:b6:6a:67:56:f6:f0:0e:50:fc:ae:b0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Nov 2 10:25:49 2026 GMT Not After : Nov 3 10:43:49 2026 GMT Subject: CN=0961B05FB7118B1E2F1AE7CFDBC2B223058044FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:10:63:f2:7f:ae:92:5f:fd:ae:2a:1d:32: dd:80:02:94:80:e2:64:d5:a7:98:c1:05:0b:e9:68: f8:e0:bd:5f:a1:0b:4d:d1:7c:c1:0d:ae:f2:d0:5f: eb:9c:bc:13:60:e4:4e:18:15:6b:84:f1:60:b5:78: b5:e7:df:5f:1d:e2:e6:14:68:c9:fc:18:21:94:70: 90:4d:85:c1:e3:9e:c2:49:ac:89:ab:90:73:91:dd: 88:77:34:b6:fb:3b:f0:fd:27:bf:59:e6:72:b4:e5: dd:66:5e:89:3b:b5:9c:92:4d:8a:a0:e3:62:54:ba: c7:21:41:1c:0c:e1:de:7c:a1:3d:95:20:70:9b:58: 8f:88:52:9b:f6:12:9c:e9:df:8b:27:8f:48:b4:1d: e6:89:e6:cb:c5:0d:db:67:60:60:50:41:e6:39:26: f0:89:f7:59:d7:4c:d1:5f:02:80:16:10:5f:0d:c8: f0:3a:6b:7e:51:5b:ba:d2:14:fa:cb:f2:3c:a2:ce: d8:89:da:de:22:79:e3:e1:8f:8f:31:7b:37:b5:63: 9f:8e:d1:0e:ca:db:c0:e2:c2:e0:74:96:97:1b:5e: cf:0c:83:bd:66:13:da:95:1d:1a:51:ff:33:9c:55: 30:ed:a9:b9:8c:06:e1:11:ef:8a:dd:61:9e:64:70: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:61:B0:5F:B7:11:8B:1E:2F:1A:E7:CF:DB:C2:B2:23:05:80:44:FD X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8f:88:ee:22:8b:42:4f:2c:6e:35:ec:3f:e1:dc:e7:e3:9a: 87:29:71:d0:07:79:ae:f1:9b:64:2b:76:62:f7:c5:61:27:c5: 65:c3:8e:80:57:14:8b:c9:1e:e1:b6:f1:03:c3:58:7c:82:27: 43:8a:dc:f3:6a:d9:30:8a:a2:35:5e:03:ea:b7:71:1c:2b:d4: 92:bb:62:3a:65:e6:44:9d:11:c5:ce:24:e5:60:38:43:bd:66: 10:40:4b:89:55:d3:10:15:d5:b0:17:92:f4:e2:88:3e:94:ee: 26:a3:35:f2:ed:be:c9:a0:ba:64:ea:c0:89:2c:b8:10:5c:9b: 3f:65:e1:d2:c2:fe:0d:e5:86:ae:50:f1:9e:b1:96:03:bc:fa: c6:55:7c:fc:ca:53:f3:59:0c:13:a4:f0:2f:24:b7:af:46:c7: 90:29:3d:27:e6:48:52:54:81:82:0a:a7:ae:19:88:1c:3b:67: a3:04:c4:e9:18:72:01:0d:f2:00:06:f2:d9:82:d2:88:a8:af: cf:af:5e:33:5d:25:e9:11:99:76:f6:0c:9c:53:e6:59:05:fc: 6d:d2:be:bd:54:35:e7:f8:28:52:08:a1:22:ab:69:38:8b:3b: 21:68:d2:74:0f:1e:ca:22:05:f3:ae:9d:fe:46:bf:e2:1e:78: 3a:d3:14:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOailIh6NZf22amdW9vAOUPyusFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjExMDIxMDI1NDlaFw0yNjExMDMxMDQzNDlaMDMxMTAvBgNV BAMTKDA5NjFCMDVGQjcxMThCMUUyRjFBRTdDRkRCQzJCMjIzMDU4MDQ0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4xBj8n+ukl/9riodMt2AApSA 4mTVp5jBBQvpaPjgvV+hC03RfMENrvLQX+ucvBNg5E4YFWuE8WC1eLXn318d4uYU aMn8GCGUcJBNhcHjnsJJrImrkHOR3Yh3NLb7O/D9J79Z5nK05d1mXok7tZySTYqg 42JUuschQRwM4d58oT2VIHCbWI+IUpv2Epzp34snj0i0HeaJ5svFDdtnYGBQQeY5 JvCJ91nXTNFfAoAWEF8NyPA6a35RW7rSFPrL8jyiztiJ2t4ieePhj48xeze1Y5+O 0Q7K28DiwuB0lpcbXs8Mg71mE9qVHRpR/zOcVTDtqbmMBuER74rdYZ5kcOidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWGwX7cRix4vGufP28KyIwWARP0wHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCPiO4ii0JPLG417D/h3OfjmocpcdAHea7x m2QrdmL3xWEnxWXDjoBXFIvJHuG28QPDWHyCJ0OK3PNq2TCKojVeA+q3cRwr1JK7 Yjpl5kSdEcXOJOVgOEO9ZhBAS4lV0xAV1bAXkvTiiD6U7iajNfLtvsmgumTqwIks uBBcmz9l4dLC/g3lhq5Q8Z6xlgO8+sZVfPzKU/NZDBOk8C8kt69Gx5ApPSfmSFJU gYIKp64ZiBw7Z6MExOkYcgEN8gAG8tmC0oior8+vXjNdJekRmXb2DJxT5lkF/G3S vr1UNef4KFIIoSKraTiLOyFo0nQPHsoiBfOunf5Gv+IeeDrTFJA= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:22 2026 by rpki-client