$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: UJRMbJsYI4n0XEGaPx+3GZH39Lo/eQNCtII8dwrrmYs= Subject key identifier: 2A:28:73:01:66:4A:19:75:C4:C9:17:A7:19:16:6B:72:0E:E2:7F:E0 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 09D45191EEEF0C6492B106BF6138B36635C98873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 04DA Signing time: Tue 03 Mar 2026 07:00:54 +0000 Manifest this update: Tue 03 Mar 2026 06:55:54 +0000 Manifest next update: Fri 06 Mar 2026 12:08:54 +0000 Files and hashes: 1: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: /Sxj6NrAbsQ9OQGjIAD7ibQpUKmsuCgCzsO1hrL5+tk=) 2: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: mrVcWkYKkNNL+5Z0dua06HvGJVSXAbMBn3dbcArjm/g=) 3: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: U7NnTgw4+RWSqCZvvYrAIpdq9+m5qm4ziARKzADWCYw=) 4: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: BUWXw4dtky6u3IS1OVmdebvECXrPIBW5iPpOPegzgSU=) 5: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: qNe08ONmrtJrbqnJHhzOzL4yLMKznA4CGtzFIsSxWok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 12:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d4:51:91:ee:ef:0c:64:92:b1:06:bf:61:38:b3:66:35:c9:88:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Mar 3 06:55:54 2026 GMT Not After : Mar 6 12:08:54 2026 GMT Subject: CN=2A287301664A1975C4C917A719166B720EE27FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:22:a9:f9:2a:e2:3e:48:13:b4:12:20:24: c2:eb:99:39:63:2e:58:7c:3f:9f:6c:86:30:a5:80: 3e:e4:9b:4d:10:1f:08:1f:35:e5:5c:04:04:a0:ce: 95:64:db:9e:aa:96:5e:62:13:c8:1c:85:d1:d0:d2: 4f:11:e0:6c:11:dc:8e:c0:97:90:51:4d:7d:5d:3b: e5:76:f5:2b:6d:85:74:53:41:a1:1a:1e:bd:1e:33: 60:e3:80:13:57:dc:d8:6a:d4:36:e0:2f:09:0e:56: 41:a8:5d:cb:2d:23:9c:94:94:53:eb:56:49:f8:ba: f4:bc:87:6f:34:d4:43:a7:4b:d3:27:e4:78:98:7f: 5a:e9:ed:76:a8:f1:44:2f:34:ab:97:d6:a4:1a:8f: 98:d9:77:42:0e:b9:3f:ce:d9:d2:9d:f9:0f:5b:3f: 45:d0:a7:19:77:43:88:4d:5e:c2:a8:13:4a:1a:f8: eb:f9:46:9f:f1:8a:cd:19:ef:47:37:6e:ce:83:96: f7:b1:cf:82:c0:12:1a:82:6d:a7:36:0c:0a:6d:b0: af:b4:e4:08:9c:c8:3b:28:61:d9:82:63:59:8d:3c: c5:c3:68:1c:e4:42:86:62:20:02:ce:e8:36:c0:0e: 49:52:5e:ed:bd:ae:19:8e:1e:e8:8b:dc:2d:eb:a6: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:28:73:01:66:4A:19:75:C4:C9:17:A7:19:16:6B:72:0E:E2:7F:E0 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:20:95:26:2e:72:2b:56:97:07:a2:ba:90:6a:fd:5a:1f:53: d9:fc:dd:bc:7a:ce:bd:a6:3a:6d:ee:11:21:71:12:fd:3d:a7: e5:2a:44:6f:93:6b:6c:73:6a:c5:8a:6e:91:98:f9:f2:6e:a5: a3:95:34:71:0a:ce:cd:72:16:5b:fc:fc:1a:29:af:0b:b0:5e: b5:c1:10:ee:8d:dd:c8:fc:eb:6a:49:6f:d4:24:47:5e:0a:78: 29:6a:9b:b0:06:53:b8:e8:15:af:eb:ff:42:2c:b3:80:e3:37: 97:b9:5d:c3:73:48:a4:6e:35:61:3d:93:3d:dd:88:a5:a7:c2: 99:b2:c2:cb:e3:ae:0a:37:a9:c8:eb:bf:f8:9d:2c:15:c3:66: 57:0f:63:09:c7:fc:fe:22:17:a5:06:cd:f8:c5:e2:4d:0d:9f: fe:3a:b5:a6:1d:b4:5e:47:c9:bb:11:8f:63:f3:59:2a:da:63: 06:fb:3e:7a:aa:55:41:86:7a:d1:b4:46:82:80:c6:fe:2c:2c: 53:4b:7c:b2:5c:99:a1:cc:f9:b9:00:6c:4d:a3:e7:2f:81:01: da:b9:8c:ea:15:6c:97:fc:63:46:17:34:17:70:2f:7f:15:1b: 26:5b:56:1e:64:a3:8a:a0:39:6b:dc:da:e9:d7:b6:a2:44:39: b6:bd:92:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdRRke7vDGSSsQa/YTizZjXJiHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNjAzMDMwNjU1NTRaFw0yNjAzMDYxMjA4NTRaMDMxMTAvBgNV BAMTKDJBMjg3MzAxNjY0QTE5NzVDNEM5MTdBNzE5MTY2QjcyMEVFMjdGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuCKp+SriPkgTtBIgJMLrmTlj Llh8P59shjClgD7km00QHwgfNeVcBASgzpVk256qll5iE8gchdHQ0k8R4GwR3I7A l5BRTX1dO+V29StthXRTQaEaHr0eM2DjgBNX3Nhq1DbgLwkOVkGoXcstI5yUlFPr Vkn4uvS8h2801EOnS9Mn5HiYf1rp7Xao8UQvNKuX1qQaj5jZd0IOuT/O2dKd+Q9b P0XQpxl3Q4hNXsKoE0oa+Ov5Rp/xis0Z70c3bs6Dlvexz4LAEhqCbac2DAptsK+0 5AicyDsoYdmCY1mNPMXDaBzkQoZiIALO6DbADklSXu29rhmOHuiL3C3rptY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKihzAWZKGXXEyRenGRZrcg7if+AwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkglSYucitWlweiupBq/VofU9n83bx6zr2m Om3uESFxEv09p+UqRG+Ta2xzasWKbpGY+fJupaOVNHEKzs1yFlv8/BoprwuwXrXB EO6N3cj862pJb9QkR14KeClqm7AGU7joFa/r/0Iss4DjN5e5XcNzSKRuNWE9kz3d iKWnwpmywsvjrgo3qcjrv/idLBXDZlcPYwnH/P4iF6UGzfjF4k0Nn/46taYdtF5H ybsRj2PzWSraYwb7PnqqVUGGetG0RoKAxv4sLFNLfLJcmaHM+bkAbE2j5y+BAdq5 jOoVbJf8Y0YXNBdwL38VGyZbVh5ko4qgOWvc2unXtqJEOba9km8= -----END CERTIFICATE-----Generated at Tue Mar 3 13:47:51 2026 by rpki-client