$ rpki-client -vvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: EQlARFf0MF3dlCSN8kL7Chb9aPcK4WQ7OmfgVzubvm4= Subject key identifier: 91:AB:01:CD:3B:8A:DC:F7:96:C2:52:8D:91:3F:8E:AF:39:F5:99:23 Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 01CD9B8C4AD9DBED5865A6C4DD2EEFCA9410A4F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:36:55 +0000 Manifest this update: Tue 02 Jun 2026 09:31:55 +0000 Manifest next update: Wed 03 Jun 2026 11:42:55 +0000 Files and hashes: 1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: XYi4nzm4zaUU60g6hrDQLT+MJpKqvhJm1vlf2JaHrUI=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:cd:9b:8c:4a:d9:db:ed:58:65:a6:c4:dd:2e:ef:ca:94:10:a4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Jun 2 09:31:55 2026 GMT Not After : Jun 3 11:42:55 2026 GMT Subject: CN=91AB01CD3B8ADCF796C2528D913F8EAF39F59923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:f6:85:6a:b8:13:a9:96:c1:72:3f:96:3b: 03:3c:23:15:07:0f:9e:d1:d0:21:6d:d7:95:b5:57: 50:f0:8b:af:e1:fc:60:3d:6c:15:81:0a:e9:54:ec: 1f:72:1d:5e:0c:61:e3:dc:d2:b6:16:3a:bd:aa:9a: fb:66:3e:04:62:05:3c:26:8c:9d:df:fa:83:dd:ae: 7b:2e:c6:3b:eb:8e:fb:85:c3:37:02:1d:54:81:12: 99:3d:11:13:9d:c3:96:8d:30:7c:d0:ab:53:49:34: 10:ed:74:ed:d8:ed:50:48:ef:9a:36:11:a9:08:02: b1:b3:19:8c:70:7e:7e:33:5c:eb:4f:4e:04:01:95: 99:db:cd:80:85:67:93:23:ac:68:3e:32:cc:5b:73: 6e:05:85:d8:4c:0d:79:fd:13:6f:29:02:63:9c:be: fe:96:1a:75:f5:f1:e2:59:20:87:97:cf:c5:d8:68: db:a0:da:04:64:3f:72:b2:df:7d:4b:6c:f9:72:78: a5:49:ff:30:bf:4e:e4:18:b6:7a:02:20:fd:50:ff: 44:80:62:4a:4d:8f:96:1c:6c:0a:c0:fa:de:58:3e: dc:1a:ff:c2:06:32:1d:2f:ad:12:74:d4:97:18:1c: cc:08:12:66:59:96:eb:cb:7c:44:69:6e:fb:a9:38: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:01:CD:3B:8A:DC:F7:96:C2:52:8D:91:3F:8E:AF:39:F5:99:23 X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2f:9d:5a:90:70:74:7e:38:84:64:01:df:e0:d1:c5:b1:d2: 1a:92:c4:d2:02:ca:84:c3:89:0e:0c:87:a9:93:33:dd:08:0c: a0:f1:07:04:28:94:18:c1:b4:73:b9:47:8e:a7:f8:52:f0:ee: 84:4e:6e:bf:09:74:86:a4:ab:89:3b:a1:69:0a:e7:a7:1d:dc: 3f:9c:94:41:b2:d8:03:b7:7a:a2:13:ef:29:e5:8c:54:ed:21: e2:14:a3:6b:ed:be:d3:07:36:4e:52:39:ac:c1:b6:39:8a:5b: 8d:d7:ae:29:48:4b:ce:09:ed:89:06:c2:3a:85:13:47:13:c0: 6b:94:a1:4e:d9:ba:8f:ae:7f:0b:04:0b:51:4c:dc:5a:05:66: f3:4f:ec:08:d9:ae:62:7a:be:17:4b:d2:46:18:52:f5:95:c0: 56:ab:c2:25:d2:cf:36:98:93:9e:65:90:3b:8c:44:aa:f1:c2: e7:b7:1c:2c:76:7f:58:33:7f:9f:18:70:c0:fa:81:38:ee:05: ae:c2:09:d7:dd:fa:f9:e4:fc:24:87:de:00:de:5d:48:85:73: 15:20:1d:d2:4a:46:77:dc:24:da:6a:4f:67:bd:7b:2e:b5:07: 25:b7:54:5e:ca:69:60:d6:c4:ea:9b:d2:1d:53:cb:b8:49:39: 0f:a3:f8:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAc2bjErZ2+1YZabE3S7vypQQpPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA2MDIwOTMxNTVaFw0yNjA2MDMxMTQyNTVaMDMxMTAvBgNV BAMTKDkxQUIwMUNEM0I4QURDRjc5NkMyNTI4RDkxM0Y4RUFGMzlGNTk5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXw/aFargTqZbBcj+WOwM8IxUH D57R0CFt15W1V1Dwi6/h/GA9bBWBCulU7B9yHV4MYePc0rYWOr2qmvtmPgRiBTwm jJ3f+oPdrnsuxjvrjvuFwzcCHVSBEpk9EROdw5aNMHzQq1NJNBDtdO3Y7VBI75o2 EakIArGzGYxwfn4zXOtPTgQBlZnbzYCFZ5MjrGg+Msxbc24FhdhMDXn9E28pAmOc vv6WGnX18eJZIIeXz8XYaNug2gRkP3Ky331LbPlyeKVJ/zC/TuQYtnoCIP1Q/0SA YkpNj5YcbArA+t5YPtwa/8IGMh0vrRJ01JcYHMwIEmZZluvLfERpbvupOBW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkasBzTuK3PeWwlKNkT+Orzn1mSMwHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0vnVqQcHR+OIRkAd/g0cWx0hqSxNICyoTD iQ4Mh6mTM90IDKDxBwQolBjBtHO5R46n+FLw7oRObr8JdIakq4k7oWkK56cd3D+c lEGy2AO3eqIT7ynljFTtIeIUo2vtvtMHNk5SOazBtjmKW43XrilIS84J7YkGwjqF E0cTwGuUoU7Zuo+ufwsEC1FM3FoFZvNP7AjZrmJ6vhdL0kYYUvWVwFarwiXSzzaY k55lkDuMRKrxwue3HCx2f1gzf58YcMD6gTjuBa7CCdfd+vnk/CSH3gDeXUiFcxUg HdJKRnfcJNpqT2e9ey61ByW3VF7KaWDWxOqb0h1Ty7hJOQ+j+Jw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:03 2026 by rpki-client