$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft File: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft (raw, json) Hash identifier: 8LF3le6W45KKWl8I0oMQT9xgJh3w3GrLNUJ94/1ublw= Subject key identifier: CA:79:53:F1:30:D4:1E:57:44:A8:0B:F6:7A:F0:41:0C:2D:F1:8A:10 Authority key identifier: D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 Certificate issuer: /CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Certificate serial: EE236BF46DB00EDB55829C94524BF0DBF3769D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:49:56 +0000 Manifest this update: Wed 16 Sep 2026 16:44:56 +0000 Manifest next update: Thu 17 Sep 2026 19:59:56 +0000 Files and hashes: 1: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl (hash: Us3E8bE9htWUGTWahKGFw6zp/9Keej2+ibEhZR5WIAw=) 2: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: NWVRwRUJEoPLPqz3cDGwdvfhxswf8EJ/TbLr4jkDe78=) 3: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: NMwe5J+/CXgAi6nFmZAKAhCZ3C0lGwYdxKCNwpdKULE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ee:23:6b:f4:6d:b0:0e:db:55:82:9c:94:52:4b:f0:db:f3:76:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Validity Not Before: Sep 16 16:44:56 2026 GMT Not After : Sep 17 19:59:56 2026 GMT Subject: CN=CA7953F130D41E5744A80BF67AF0410C2DF18A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:c1:ad:72:e7:20:c5:36:ea:8c:a3:8a:c5: 21:6a:02:74:c7:a5:00:cc:d5:43:1c:7c:50:f2:11: 60:d8:b5:8b:f1:0a:fd:d6:f7:ac:6e:07:f5:b6:a7: 2e:7b:19:f2:a6:16:94:74:49:15:d2:1e:6c:90:88: 99:3c:4b:cc:da:dd:dc:5c:18:f3:7b:2a:5b:06:71: 5d:09:c5:57:80:54:1f:9c:26:38:0a:d0:bd:80:89: 2b:9c:1d:df:67:06:5b:08:ec:34:2d:d8:6e:92:78: f8:57:a2:63:95:43:9b:c9:bf:9c:a2:84:71:de:ee: 81:17:f7:e2:cf:19:62:45:33:9f:e6:b2:54:48:16: f6:ec:7b:f2:dc:63:43:05:1a:23:01:50:e3:48:93: 74:1d:86:55:66:48:c6:d7:86:a6:0a:31:40:68:3e: 54:f0:d6:a1:b2:c8:f1:55:4a:4e:0a:ac:e7:b8:94: ee:6a:bc:c8:ed:d1:c4:fe:27:2e:e0:d8:c4:f9:cc: 9a:79:a4:06:9f:87:84:58:4d:ba:6e:49:68:5f:00: bd:96:8a:54:93:a5:3d:fd:16:47:0e:1d:94:9d:c3: 77:7e:82:77:1d:32:47:fe:82:02:6b:08:da:53:84: 7f:b9:89:8b:dc:fb:a7:a4:ba:4e:d2:67:51:35:81: 25:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:79:53:F1:30:D4:1E:57:44:A8:0B:F6:7A:F0:41:0C:2D:F1:8A:10 X509v3 Authority Key Identifier: keyid:D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6a:ee:73:8a:d4:0d:57:a3:2f:44:51:7a:5b:3b:66:47:45: 90:03:08:5b:94:88:de:75:da:a8:86:e7:3d:e0:0f:c8:5e:71: 83:32:7e:49:7d:21:e2:57:26:0c:de:93:31:e4:31:7a:c9:5b: 70:ab:d7:73:5b:f9:3d:2d:80:68:b9:3d:b3:af:30:53:63:92: d5:27:57:fb:7c:65:16:77:a3:13:10:60:83:37:cf:c6:31:2f: 25:79:78:44:0e:f5:ab:da:ff:23:cb:c3:af:39:7d:b3:75:de: 8b:d9:ec:21:00:f0:16:e3:29:d9:db:54:e7:c0:a9:7d:68:fe: 1e:f9:1c:df:49:9a:66:22:75:1b:dc:fe:5a:ab:7e:d4:3d:b1: ab:97:d2:31:08:bc:aa:34:7b:9c:bd:ec:f0:37:3a:12:c5:d5: ae:9c:3d:81:d6:ca:12:75:fc:fa:c6:b3:ef:2a:4b:16:5d:41: 60:fc:7d:18:4a:36:93:32:78:de:37:82:f5:ba:0d:dc:82:10: ac:e5:c3:1d:df:06:cd:c4:65:9d:9f:f0:fb:40:f6:46:88:e8: bc:be:3d:3f:d0:29:c2:b0:e3:bc:d6:65:da:e8:bf:d2:e7:33: 5d:2c:57:de:29:9e:d5:b0:55:7c:53:66:c9:dc:09:a7:30:26: 17:c1:4b:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAO4ja/RtsA7bVYKclFJL8Nvzdp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdDRjhC QjE2MTQzNjAeFw0yNjA5MTYxNjQ0NTZaFw0yNjA5MTcxOTU5NTZaMDMxMTAvBgNV BAMTKENBNzk1M0YxMzBENDFFNTc0NEE4MEJGNjdBRjA0MTBDMkRGMThBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp8GtcucgxTbqjKOKxSFqAnTH pQDM1UMcfFDyEWDYtYvxCv3W96xuB/W2py57GfKmFpR0SRXSHmyQiJk8S8za3dxc GPN7KlsGcV0JxVeAVB+cJjgK0L2AiSucHd9nBlsI7DQt2G6SePhXomOVQ5vJv5yi hHHe7oEX9+LPGWJFM5/mslRIFvbse/LcY0MFGiMBUONIk3QdhlVmSMbXhqYKMUBo PlTw1qGyyPFVSk4KrOe4lO5qvMjt0cT+Jy7g2MT5zJp5pAafh4RYTbpuSWhfAL2W ilSTpT39FkcOHZSdw3d+gncdMkf+ggJrCNpThH+5iYvc+6ekuk7SZ1E1gSUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynlT8TDUHldEqAv2evBBDC3xihAwHwYDVR0j BBgwFoAU0gweDdAqqLHOH+ukdpd8+LsWFDYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNkNzUzNmQtOWUxMC00ZDQ5LWI2Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMERE MDJBQThCMUNFMUZFQkE0NzY5NzdDRjhCQjE2MTQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjBDMUUwREQwMkFBOEIxQ0UxRkVCQTQ3Njk3N0NGOEJCMTYx NDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdD RjhCQjE2MTQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBq7nOK1A1Xoy9EUXpbO2ZHRZADCFuUiN51 2qiG5z3gD8hecYMyfkl9IeJXJgzekzHkMXrJW3Cr13Nb+T0tgGi5PbOvMFNjktUn V/t8ZRZ3oxMQYIM3z8YxLyV5eEQO9ava/yPLw685fbN13ovZ7CEA8BbjKdnbVOfA qX1o/h75HN9JmmYidRvc/lqrftQ9sauX0jEIvKo0e5y97PA3OhLF1a6cPYHWyhJ1 /PrGs+8qSxZdQWD8fRhKNpMyeN43gvW6DdyCEKzlwx3fBs3EZZ2f8PtA9kaI6Ly+ PT/QKcKw47zWZdrov9LnM10sV94pntWwVXxTZsncCacwJhfBSzg= -----END CERTIFICATE-----Generated at Thu Sep 17 07:32:20 2026 by rpki-client