$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: gKFKg6munkXQXKT2WPSbDUC9cfB1Wn67oCBg78mx0jc= Subject key identifier: 1E:6B:3E:18:E4:07:90:39:7E:71:3E:AB:6E:AB:A0:B2:21:6E:1F:5E Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 3EC4B045897FE8580A48DBD1BBA25074F2754059 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:22:40 +0000 Manifest this update: Thu 17 Sep 2026 03:17:40 +0000 Manifest next update: Fri 18 Sep 2026 07:03:40 +0000 Files and hashes: 1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: GFTwxqP8uDUgC8A0T43fYRj1XBcF7HIasOuKmMw4gUI=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c4:b0:45:89:7f:e8:58:0a:48:db:d1:bb:a2:50:74:f2:75:40:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Sep 17 03:17:40 2026 GMT Not After : Sep 18 07:03:40 2026 GMT Subject: CN=1E6B3E18E40790397E713EAB6EABA0B2216E1F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:20:d9:55:ed:24:7a:53:0e:78:a3:8f:bc: 45:fa:c3:5e:b5:4a:10:6e:20:6b:68:cb:24:54:f3: 40:a8:0e:01:9b:80:91:b4:6e:50:64:99:fe:b2:e4: d7:ca:2f:a6:7d:b9:05:84:0f:1a:aa:26:0f:2c:55: 2d:0e:2a:89:0d:35:93:ea:b2:f1:8b:a3:00:4c:26: 24:db:6a:8c:9a:91:48:8f:43:92:9e:09:18:58:be: de:48:ea:39:e1:19:f7:9a:ad:cf:bf:b1:86:76:5a: 07:6f:df:aa:5f:e1:18:ce:ea:21:c1:a8:c2:2c:ae: 22:c8:ef:64:2e:d0:11:99:1f:7d:5f:7b:a9:82:62: 3e:3c:c3:e4:68:32:0f:ee:85:af:6c:ce:f4:12:6c: cf:1f:c7:05:e5:11:68:69:62:18:7b:73:e2:9a:48: d0:80:c6:ee:cc:e0:76:90:9d:e3:83:1f:0f:09:43: c4:ad:6d:46:13:02:05:63:6f:0f:03:a5:47:6a:9e: 33:d2:52:59:42:70:c6:3e:00:19:10:ba:b0:53:9a: 47:6f:1f:fb:25:10:95:82:e8:7b:13:3f:c3:4f:be: 3a:2e:c4:f6:42:2e:fb:1b:25:2b:c7:e0:c8:f2:55: b9:79:da:8b:90:99:e8:d5:80:30:cc:76:15:4b:c2: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:3E:18:E4:07:90:39:7E:71:3E:AB:6E:AB:A0:B2:21:6E:1F:5E X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fe:89:a4:28:a2:01:6c:8c:cd:e2:49:53:46:f9:42:e7:03: 77:f1:4e:31:37:20:af:66:b9:70:fe:b4:b4:88:f0:14:c1:7a: 5b:73:53:13:04:01:7f:85:94:cd:21:73:1b:3e:1e:a8:99:1f: 6f:8e:25:44:d3:bc:5c:22:e8:c6:92:ee:c4:64:63:a8:ca:36: 20:33:cf:9f:77:10:0e:01:e1:bd:9a:3c:96:d0:14:f5:36:3c: 51:6f:e3:6a:e7:aa:11:37:24:aa:42:31:ad:ce:ca:39:0d:a1: 15:72:b6:c1:1e:ec:0e:14:96:a2:cf:8c:eb:89:1c:66:5b:d9: 29:08:75:0a:3b:c9:ae:50:60:cb:49:f7:e7:4c:b1:4d:ef:36: 89:9e:90:12:f3:e4:d9:22:6d:cf:2b:93:cb:30:55:06:93:1a: c0:94:54:4b:61:61:db:77:c5:fb:d3:33:35:bd:8d:fa:18:ff: 71:9d:04:b9:a1:cd:d5:4e:6d:46:41:bc:e3:2e:f9:04:80:c4: 50:e6:ae:8d:bb:81:60:ec:fa:87:bd:7b:3b:98:64:e5:35:ef: 53:db:43:ad:49:a6:99:68:00:ca:09:2d:e4:8d:7b:4d:3a:32: 9d:54:6f:62:1e:4e:d1:65:87:81:27:75:7a:4b:7d:49:81:a6: 6b:70:1f:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsSwRYl/6FgKSNvRu6JQdPJ1QFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA5MTcwMzE3NDBaFw0yNjA5MTgwNzAzNDBaMDMxMTAvBgNV BAMTKDFFNkIzRTE4RTQwNzkwMzk3RTcxM0VBQjZFQUJBMEIyMjE2RTFGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAiDZVe0kelMOeKOPvEX6w161 ShBuIGtoyyRU80CoDgGbgJG0blBkmf6y5NfKL6Z9uQWEDxqqJg8sVS0OKokNNZPq svGLowBMJiTbaoyakUiPQ5KeCRhYvt5I6jnhGfearc+/sYZ2Wgdv36pf4RjO6iHB qMIsriLI72Qu0BGZH31fe6mCYj48w+RoMg/uha9szvQSbM8fxwXlEWhpYhh7c+Ka SNCAxu7M4HaQneODHw8JQ8StbUYTAgVjbw8DpUdqnjPSUllCcMY+ABkQurBTmkdv H/slEJWC6HsTP8NPvjouxPZCLvsbJSvH4MjyVbl52ouQmejVgDDMdhVLwnZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHms+GOQHkDl+cT6rbqugsiFuH14wHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH+iaQoogFsjM3iSVNG+ULnA3fxTjE3IK9m uXD+tLSI8BTBeltzUxMEAX+FlM0hcxs+HqiZH2+OJUTTvFwi6MaS7sRkY6jKNiAz z593EA4B4b2aPJbQFPU2PFFv42rnqhE3JKpCMa3OyjkNoRVytsEe7A4UlqLPjOuJ HGZb2SkIdQo7ya5QYMtJ9+dMsU3vNomekBLz5Nkibc8rk8swVQaTGsCUVEthYdt3 xfvTMzW9jfoY/3GdBLmhzdVObUZBvOMu+QSAxFDmro27gWDs+oe9ezuYZOU171Pb Q61JpploAMoJLeSNe006Mp1Ub2IeTtFlh4EndXpLfUmBpmtwH+8= -----END CERTIFICATE-----Generated at Thu Sep 17 12:41:42 2026 by rpki-client