
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft
File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json)
Hash identifier: khMxogsjXZVD1ya+LEZxkI6CFsyQglkv2xONB40qTTs=
Subject key identifier: AD:A1:88:54:6F:DA:2C:CA:8D:F6:11:EC:D0:77:9B:6B:58:09:48:0A
Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B
Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B
Certificate serial: 127521F7A1D1A0AC6C7A2D96EAF5CCC962E3A7BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 02:15:49 +0000
Manifest this update: Thu 03 Sep 2026 02:10:49 +0000
Manifest next update: Fri 04 Sep 2026 04:57:49 +0000
Files and hashes: 1: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: p9uXGh2f1+dvMhCADx3F3Skr5IcaPyg0Ubl+sgTHvrw=)
2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=)
3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=)
4: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl
rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:75:21:f7:a1:d1:a0:ac:6c:7a:2d:96:ea:f5:cc:c9:62:e3:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B
Validity
Not Before: Sep 3 02:10:49 2026 GMT
Not After : Sep 4 04:57:49 2026 GMT
Subject: CN=ADA188546FDA2CCA8DF611ECD0779B6B5809480A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:ca:04:a9:1c:ae:a8:e3:74:54:a0:34:3d:
e3:af:07:9c:14:05:47:38:e5:4e:07:da:2c:84:6e:
ac:86:07:3f:77:48:f7:fd:38:b1:01:0c:7c:d7:b8:
19:64:92:d2:88:4a:26:96:f1:e6:33:95:ae:28:90:
19:e9:4e:98:d8:88:fc:98:75:00:0b:fa:84:d3:08:
0d:a1:f4:fe:e4:08:a8:9d:23:3f:51:0d:6c:45:8d:
ae:95:39:40:94:95:19:76:f7:b5:21:66:c7:53:4c:
ae:95:74:11:a9:51:06:1f:bd:c5:88:8b:b6:e3:02:
d8:1b:a4:30:6f:76:90:3b:91:64:e3:63:0a:8a:1f:
98:71:39:b6:fd:c6:8a:d1:95:3a:f1:16:41:0c:b7:
ba:08:9b:1f:8a:d8:e6:a8:46:de:13:08:1b:40:3c:
90:88:d1:48:6f:a1:ad:8a:09:e9:91:b2:1a:59:48:
31:15:81:ed:e4:89:a8:0b:ed:24:b9:59:d3:b0:29:
45:34:40:63:e1:9a:bb:a0:05:ca:a7:ed:94:d2:39:
26:0d:66:f0:2e:03:ce:42:c7:93:61:63:56:57:c8:
05:3d:1b:d0:c9:be:65:c4:f8:5d:a4:dd:8c:3f:95:
a5:c2:23:a8:78:bf:37:ba:ac:11:0e:19:0e:77:58:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:88:54:6F:DA:2C:CA:8D:F6:11:EC:D0:77:9B:6B:58:09:48:0A
X509v3 Authority Key Identifier:
keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:90:6d:cf:1d:c6:db:09:0f:3e:5b:f3:b9:a2:b4:9a:f3:84:
6c:4d:29:1c:f0:2b:a0:27:58:83:e6:1a:d6:a7:04:74:7b:96:
1c:0e:01:a0:e7:7c:ed:17:f5:d0:93:84:8a:ae:8c:30:84:9a:
05:94:a5:da:ba:de:6d:b8:fc:ee:90:5b:e6:22:e7:ea:40:96:
2b:6d:f0:f6:03:3f:ea:de:15:74:a8:7b:49:05:7b:da:08:cc:
87:71:62:99:0a:39:d2:28:4f:31:63:5d:59:7d:14:e5:00:cb:
93:53:67:ef:3d:13:0f:d6:10:cf:de:34:b2:c3:38:24:b6:9f:
93:74:68:66:d7:c6:ba:ee:65:d9:fc:bb:87:bb:8a:41:67:7a:
b4:3e:44:5f:f1:7b:42:e5:10:71:17:74:b6:78:fc:48:72:9d:
ba:4d:d9:d6:36:dd:dc:fb:db:e0:0b:c9:4f:65:34:c8:72:75:
c4:2d:05:3c:1b:ac:dd:50:82:4f:0a:4f:ac:a3:a6:02:2e:d5:
8c:5c:dd:c8:d7:cd:81:25:51:0f:de:26:12:53:64:7c:f5:89:
64:a1:9e:94:3b:6d:e2:f3:0d:35:64:ef:30:2d:da:e3:96:eb:
14:c5:72:03:2f:5a:0c:7a:b7:9b:d2:97:d0:9b:89:00:59:32:
8a:97:1f:22
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEnUh96HRoKxsei2W6vXMyWLjp7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2
QzQ5RjI0QjAeFw0yNjA5MDMwMjEwNDlaFw0yNjA5MDQwNDU3NDlaMDMxMTAvBgNV
BAMTKEFEQTE4ODU0NkZEQTJDQ0E4REY2MTFFQ0QwNzc5QjZCNTgwOTQ4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrsoEqRyuqON0VKA0PeOvB5wU
BUc45U4H2iyEbqyGBz93SPf9OLEBDHzXuBlkktKISiaW8eYzla4okBnpTpjYiPyY
dQAL+oTTCA2h9P7kCKidIz9RDWxFja6VOUCUlRl297UhZsdTTK6VdBGpUQYfvcWI
i7bjAtgbpDBvdpA7kWTjYwqKH5hxObb9xorRlTrxFkEMt7oImx+K2OaoRt4TCBtA
PJCI0Uhvoa2KCemRshpZSDEVge3kiagL7SS5WdOwKUU0QGPhmrugBcqn7ZTSOSYN
ZvAuA85Cx5NhY1ZXyAU9G9DJvmXE+F2k3Yw/laXCI6h4vze6rBEOGQ53WK13AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUraGIVG/aLMqN9hHs0Heba1gJSAowHwYDVR0j
BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD
ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG
MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5
YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4
NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFeQbc8dxtsJDz5b87mitJrzhGxNKRzwK6An
WIPmGtanBHR7lhwOAaDnfO0X9dCThIqujDCEmgWUpdq63m24/O6QW+Yi5+pAlitt
8PYDP+reFXSoe0kFe9oIzIdxYpkKOdIoTzFjXVl9FOUAy5NTZ+89Ew/WEM/eNLLD
OCS2n5N0aGbXxrruZdn8u4e7ikFnerQ+RF/xe0LlEHEXdLZ4/EhynbpN2dY23dz7
2+ALyU9lNMhydcQtBTwbrN1Qgk8KT6yjpgIu1Yxc3cjXzYElUQ/eJhJTZHz1iWSh
npQ7beLzDTVk7zAt2uOW6xTFcgMvWgx6t5vSl9CbiQBZMoqXHyI=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:48 2026 by rpki-client