$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: V4RBSmd4jcOkbr2J7M3YNgteimDxFGs7gySFoc5qntE= Subject key identifier: 23:75:80:67:D8:7F:DC:36:93:3F:25:A6:5E:3C:B7:B4:68:94:76:0C Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 71FAD589B4212CC2A6CA1FFC5C1B59D0B357369A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 025F Signing time: Wed 22 Apr 2026 11:10:54 +0000 Manifest this update: Wed 22 Apr 2026 11:05:54 +0000 Manifest next update: Sat 25 Apr 2026 18:01:54 +0000 Files and hashes: 1: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) 2: 3130332e3135362e3134372e302f32342d3234203d3e20313338383130.roa (hash: OxuN/KCMHtMTDCyaI0bgtvQy256j5b/74mmzW3WQvFc=) 3: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: TFcuZWSLMqq3jKAAjExIJpp6lxnsf1/u0febdVzXJpU=) 4: 3130332e3135362e3134362e302f32342d3234203d3e20313431303933.roa (hash: Cy07xYSyUWFjvR0x0kDQ3HZDqKe9RyYBEeT67hsabqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 18:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fa:d5:89:b4:21:2c:c2:a6:ca:1f:fc:5c:1b:59:d0:b3:57:36:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Apr 22 11:05:54 2026 GMT Not After : Apr 25 18:01:54 2026 GMT Subject: CN=23758067D87FDC36933F25A65E3CB7B46894760C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:11:62:d8:c0:98:0b:b5:ac:b5:48:15:a2: 03:e3:e7:cd:81:9a:f0:a6:50:13:78:d8:13:9c:58: 2e:8f:7d:29:b5:0f:8c:c2:79:59:14:3a:31:f1:94: e1:80:3d:ad:d5:14:50:ce:a1:50:e6:40:67:fa:00: b0:6d:76:bb:e8:d2:f2:e9:0a:83:8c:ed:5d:c4:e5: 9d:7b:5a:b0:62:b6:6a:51:72:d0:a9:c3:6e:fd:8c: 9a:bb:cc:0a:78:d6:e3:55:9f:0a:c8:3d:77:11:2c: 3c:1a:6a:5b:8e:75:e5:89:3d:bb:c8:8f:05:e0:10: b8:f8:d6:b6:15:1c:41:e5:02:f2:ac:17:e4:54:af: 60:73:43:67:a3:22:5c:ba:4f:5c:f7:d2:0d:27:a8: 8e:89:95:1c:5a:7b:ce:41:08:fc:aa:7a:81:19:06: 8e:fe:f5:4e:31:7c:b4:33:9c:7d:00:10:38:4e:22: 4d:63:34:48:da:d9:a9:89:54:25:b0:c6:f0:e7:f3: f3:82:82:83:cd:52:ea:63:90:72:4b:b3:7a:5a:47: 10:8e:fd:62:96:9b:d8:87:f1:7b:2a:81:f1:72:92: b5:b8:c6:58:58:dd:5b:69:64:a9:b0:e2:ee:aa:27: b4:fe:d6:e2:df:a3:8c:e8:19:2e:52:85:7b:fb:26: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:80:67:D8:7F:DC:36:93:3F:25:A6:5E:3C:B7:B4:68:94:76:0C X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:53:7f:e7:1d:ba:ce:6c:3b:74:56:4e:72:6a:2d:a6:17:e1: 4a:d6:46:bf:4f:61:6a:34:82:78:27:44:6f:0b:92:48:da:69: 35:38:37:03:69:5b:68:57:64:2c:3b:60:69:71:1d:c4:ac:d5: b0:10:9a:2e:06:21:46:ac:c6:f5:cd:19:6a:b7:97:36:0e:ad: 04:af:fa:02:b3:32:b7:0c:32:df:a2:a8:76:00:f1:5f:c9:ae: e5:2e:6f:53:5e:0a:89:32:41:8e:98:e0:45:78:03:e5:07:41: 0a:a6:5c:2a:53:f7:f6:be:ac:44:3b:dc:45:23:c2:8f:8b:e1: 6e:6f:eb:74:5f:f6:91:52:f3:3b:39:c1:3d:88:e6:a6:d2:44: 64:e0:6b:bd:1a:44:5d:5c:9c:4c:ae:78:82:9b:1c:ba:04:76: 27:90:41:87:f6:86:4a:6e:67:43:93:a2:0e:9d:ce:a9:2f:24: f5:31:7e:2f:5b:ac:e3:9f:51:f7:c5:ac:1a:da:19:a3:b1:d6: 11:73:0b:c3:34:e8:e7:fc:6e:6a:3f:92:07:72:76:8e:1c:fd: 6c:54:53:df:c9:94:a4:20:1f:94:98:ea:79:da:f8:41:9e:55: b3:98:48:7c:b5:92:8b:3a:86:dc:a0:36:94:1a:c3:a6:93:1e: 2e:62:71:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfrVibQhLMKmyh/8XBtZ0LNXNpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNjA0MjIxMTA1NTRaFw0yNjA0MjUxODAxNTRaMDMxMTAvBgNV BAMTKDIzNzU4MDY3RDg3RkRDMzY5MzNGMjVBNjVFM0NCN0I0Njg5NDc2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXxFi2MCYC7WstUgVogPj582B mvCmUBN42BOcWC6PfSm1D4zCeVkUOjHxlOGAPa3VFFDOoVDmQGf6ALBtdrvo0vLp CoOM7V3E5Z17WrBitmpRctCpw279jJq7zAp41uNVnwrIPXcRLDwaaluOdeWJPbvI jwXgELj41rYVHEHlAvKsF+RUr2BzQ2ejIly6T1z30g0nqI6JlRxae85BCPyqeoEZ Bo7+9U4xfLQznH0AEDhOIk1jNEja2amJVCWwxvDn8/OCgoPNUupjkHJLs3paRxCO /WKWm9iH8XsqgfFykrW4xlhY3VtpZKmw4u6qJ7T+1uLfo4zoGS5ShXv7JrmRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3WAZ9h/3DaTPyWmXjy3tGiUdgwwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZTf+cdus5sO3RWTnJqLaYX4UrWRr9PYWo0 gngnRG8LkkjaaTU4NwNpW2hXZCw7YGlxHcSs1bAQmi4GIUasxvXNGWq3lzYOrQSv +gKzMrcMMt+iqHYA8V/JruUub1NeCokyQY6Y4EV4A+UHQQqmXCpT9/a+rEQ73EUj wo+L4W5v63Rf9pFS8zs5wT2I5qbSRGTga70aRF1cnEyueIKbHLoEdieQQYf2hkpu Z0OTog6dzqkvJPUxfi9brOOfUffFrBraGaOx1hFzC8M06Of8bmo/kgdydo4c/WxU U9/JlKQgH5SY6nna+EGeVbOYSHy1kos6htygNpQaw6aTHi5icSY= -----END CERTIFICATE-----Generated at Wed Apr 22 15:15:29 2026 by rpki-client