$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: XsDJMCQLstpMeqXgY9tnei2NuPwEn10axeTrVIGLxk8= Subject key identifier: 62:9D:44:CB:A6:CF:05:8E:AC:8E:9C:95:16:23:7E:43:2D:A7:7C:B4 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 063F04F46EE7CDFB8FBF3ACF6604B00D75ACF8C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 04:12:56 +0000 Manifest this update: Mon 02 Nov 2026 04:07:56 +0000 Manifest next update: Tue 03 Nov 2026 07:20:56 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 3: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: bA3H30BxyWOSAh76RJbMsk84By7ozSN62c+G3SI8IiE=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3f:04:f4:6e:e7:cd:fb:8f:bf:3a:cf:66:04:b0:0d:75:ac:f8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Nov 2 04:07:56 2026 GMT Not After : Nov 3 07:20:56 2026 GMT Subject: CN=629D44CBA6CF058EAC8E9C9516237E432DA77CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:28:37:9c:bd:45:d4:75:de:5d:85:4b:b8:7f: 65:c4:69:e0:04:0a:f5:1c:83:a0:ba:72:7f:f5:cd: 2a:2d:81:b7:d2:cf:5c:f6:bb:4e:2f:dc:ca:5f:e2: bc:75:90:00:4e:9d:1b:7b:ce:b7:7a:67:f8:db:24: 99:b4:c6:ab:f4:76:08:ef:5a:40:b6:57:d0:30:c7: 8d:fe:1d:73:fc:81:ac:6a:78:19:58:60:dc:81:59: da:d6:f8:8a:57:a2:c9:6c:48:92:d9:51:9c:ae:c8: 0f:ae:74:89:c3:9a:c6:6f:6b:b4:0a:e5:3a:09:0f: 26:6d:f1:c0:63:ec:35:29:69:23:b6:4e:d8:d1:0c: 80:ad:96:1e:a4:1d:43:99:ca:66:63:25:c1:81:ab: f5:92:9b:58:6a:f4:80:3d:45:7f:8f:98:4f:c2:7e: 14:17:b3:49:ab:b6:74:75:71:19:78:8a:e0:c4:d6: 77:c0:cb:f8:c8:02:a3:d0:0c:ed:cf:68:1d:e3:d7: c4:70:98:b4:3e:1a:dc:cb:04:76:dc:5c:1b:b3:a3: f7:2a:35:3c:b7:ab:bb:9d:a7:99:79:96:15:95:a9: 4d:01:63:61:eb:59:31:9a:0e:50:c5:4f:f2:ff:ae: a4:ed:64:da:17:ff:b6:6b:85:e6:ba:3d:60:18:31: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:44:CB:A6:CF:05:8E:AC:8E:9C:95:16:23:7E:43:2D:A7:7C:B4 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fa:ac:55:ae:a5:5c:d4:1b:d3:3c:f5:ff:41:b3:f6:80:e8: 5e:ab:09:63:fd:a9:0d:45:90:6f:8c:5c:96:57:5d:27:46:ae: 5c:1d:e1:a2:9b:2d:7c:f6:e3:11:e0:2f:4d:11:9f:7c:13:c0: df:d4:4f:52:75:fb:22:5b:7a:bd:af:ad:60:fe:82:19:5a:54: 81:d7:2d:fd:4e:83:58:11:3e:82:ee:3a:cc:9e:34:1c:ff:f1: 9d:f8:85:ed:df:50:cb:d1:06:1f:14:3c:3c:fc:c9:a7:dc:da: 8b:08:e1:a2:bd:4f:58:0e:13:6f:31:83:e1:f8:a6:e6:dc:4f: 23:fd:68:75:cd:63:c9:8e:3d:1a:20:c3:04:1d:84:ce:4f:f0: 92:90:0e:a8:7d:dc:4e:4a:d9:c7:de:85:79:f4:ad:44:01:55: 6a:03:56:32:6c:0b:20:d5:96:04:c5:a7:e2:cc:06:a7:f4:b3: 99:0b:c8:3c:f3:8d:74:10:b1:84:e7:27:32:21:13:d3:90:3d: f9:dc:c1:f9:08:73:ff:c1:45:8d:45:db:1b:9a:c9:e9:34:64: f4:fb:c6:bc:49:1c:5c:1a:5a:de:d9:3e:af:2b:fd:b6:53:e2: eb:cb:a6:cb:79:55:d0:70:2a:40:16:7d:8f:1a:1f:df:70:83: 72:0c:b3:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBj8E9G7nzfuPvzrPZgSwDXWs+MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjExMDIwNDA3NTZaFw0yNjExMDMwNzIwNTZaMDMxMTAvBgNV BAMTKDYyOUQ0NENCQTZDRjA1OEVBQzhFOUM5NTE2MjM3RTQzMkRBNzdDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+KDecvUXUdd5dhUu4f2XEaeAE CvUcg6C6cn/1zSotgbfSz1z2u04v3Mpf4rx1kABOnRt7zrd6Z/jbJJm0xqv0dgjv WkC2V9Awx43+HXP8gaxqeBlYYNyBWdrW+IpXoslsSJLZUZyuyA+udInDmsZva7QK 5ToJDyZt8cBj7DUpaSO2TtjRDICtlh6kHUOZymZjJcGBq/WSm1hq9IA9RX+PmE/C fhQXs0mrtnR1cRl4iuDE1nfAy/jIAqPQDO3PaB3j18RwmLQ+GtzLBHbcXBuzo/cq NTy3q7udp5l5lhWVqU0BY2HrWTGaDlDFT/L/rqTtZNoX/7Zrhea6PWAYMc2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYp1Ey6bPBY6sjpyVFiN+Qy2nfLQwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT6rFWupVzUG9M89f9Bs/aA6F6rCWP9qQ1F kG+MXJZXXSdGrlwd4aKbLXz24xHgL00Rn3wTwN/UT1J1+yJber2vrWD+ghlaVIHX Lf1Og1gRPoLuOsyeNBz/8Z34he3fUMvRBh8UPDz8yafc2osI4aK9T1gOE28xg+H4 pubcTyP9aHXNY8mOPRogwwQdhM5P8JKQDqh93E5K2cfehXn0rUQBVWoDVjJsCyDV lgTFp+LMBqf0s5kLyDzzjXQQsYTnJzIhE9OQPfncwfkIc//BRY1F2xuayek0ZPT7 xrxJHFwaWt7ZPq8r/bZT4uvLpst5VdBwKkAWfY8aH99wg3IMsy0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:05 2026 by rpki-client