$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: uW5uXaG7FY9YH3enjyAkEYoG7Rjfef+mb3T0oPaYvUk= Subject key identifier: E5:A6:5D:BB:98:14:70:F0:63:54:90:97:60:48:35:FD:86:9C:9C:DF Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 5AE45541A2F31C934B9AA2FFD57432AB8387E73D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:14:11 +0000 Manifest this update: Wed 16 Sep 2026 20:09:11 +0000 Manifest next update: Thu 17 Sep 2026 21:08:11 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 2: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: N2/kORLh1HX1geLJv5c9UCrv9EVOBjS0kasZzqeIfVA=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e4:55:41:a2:f3:1c:93:4b:9a:a2:ff:d5:74:32:ab:83:87:e7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Sep 16 20:09:11 2026 GMT Not After : Sep 17 21:08:11 2026 GMT Subject: CN=E5A65DBB981470F063549097604835FD869C9CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:b6:10:11:48:68:c9:b7:53:47:2f:8b:da: e6:2d:eb:ff:b8:05:bc:6b:87:40:36:ed:c6:05:17: c4:41:03:99:bd:fb:33:54:71:73:fd:05:8c:43:6c: bb:4a:3a:24:47:8d:69:5a:68:cf:0a:10:61:29:58: 05:2c:28:0d:00:cc:3c:54:7c:8b:b0:68:0e:c1:0a: de:75:4a:35:2a:10:c6:5c:14:b8:1b:8e:eb:88:f4: 59:fe:47:60:8a:f4:fd:7f:62:2d:ea:35:86:32:b8: 6e:be:a8:c3:5b:33:16:0b:36:3f:73:94:b2:9e:53: 41:6f:03:f1:1b:cb:61:34:a5:7e:f0:0f:df:6a:16: ca:69:e1:71:e3:1d:97:90:10:bc:6a:7b:e7:45:5d: 82:68:de:ba:2f:f2:cb:cb:13:b6:12:14:66:00:f6: 0c:ea:4f:0f:0b:18:b0:92:18:89:3d:0e:bb:c0:4f: e6:6c:81:65:f0:88:87:03:8b:7d:dc:6c:f1:7c:59: fd:50:b9:8c:15:e6:52:60:ec:3b:d7:c0:fa:c5:ae: b6:a4:cf:a9:03:4f:57:28:77:af:9c:77:20:a7:a3: bf:50:3c:47:f6:94:d8:43:b0:22:41:34:35:dc:13: 08:08:b0:bd:52:e7:c5:db:61:b6:a2:7e:52:53:f1: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:5D:BB:98:14:70:F0:63:54:90:97:60:48:35:FD:86:9C:9C:DF X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:ad:9f:c9:b1:e5:38:c9:5b:f4:71:9a:34:64:46:e4:75: aa:4b:75:82:a4:7c:93:b6:18:f4:dd:4c:eb:37:45:5b:2e:2e: f1:f1:a4:b7:07:50:5a:c5:a8:79:e8:9d:91:44:9a:66:8a:dc: 1a:14:06:50:45:7d:14:65:6f:8a:b2:9f:c8:35:fc:c4:6d:77: d7:a7:2a:ee:a1:fc:4c:48:46:3d:f0:5b:47:54:4a:0f:65:7c: eb:c7:56:99:85:9c:31:4d:6e:7a:01:7b:0f:18:aa:a1:34:d1: 56:0e:da:3b:f7:4e:e4:89:d5:77:29:97:7e:c5:ff:cc:ac:2e: 0a:11:14:0d:1f:7c:e0:34:66:d2:73:ed:11:fb:61:bf:42:4b: 65:61:60:10:4d:b6:12:e5:2c:d1:3c:40:f7:cd:74:5b:b2:1d: f8:b3:ab:a2:16:81:08:58:ad:f7:3d:e0:a1:bb:6f:35:56:84: 48:34:20:ee:af:80:3e:00:1a:fc:00:3c:f2:d4:fc:b5:68:2b: 3e:52:22:6f:eb:11:53:e4:6f:c4:10:c6:28:aa:10:e1:fa:04: 05:e1:7f:80:ff:af:50:08:5e:7c:0a:c0:dc:3b:3d:6a:cb:04: 46:1a:2c:cf:81:26:db:ba:81:39:e4:7d:5f:c3:14:09:d9:f2: 53:94:e5:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuRVQaLzHJNLmqL/1XQyq4OH5z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA5MTYyMDA5MTFaFw0yNjA5MTcyMTA4MTFaMDMxMTAvBgNV BAMTKEU1QTY1REJCOTgxNDcwRjA2MzU0OTA5NzYwNDgzNUZEODY5QzlDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/B7YQEUhoybdTRy+L2uYt6/+4 Bbxrh0A27cYFF8RBA5m9+zNUcXP9BYxDbLtKOiRHjWlaaM8KEGEpWAUsKA0AzDxU fIuwaA7BCt51SjUqEMZcFLgbjuuI9Fn+R2CK9P1/Yi3qNYYyuG6+qMNbMxYLNj9z lLKeU0FvA/Eby2E0pX7wD99qFspp4XHjHZeQELxqe+dFXYJo3rov8svLE7YSFGYA 9gzqTw8LGLCSGIk9DrvAT+ZsgWXwiIcDi33cbPF8Wf1QuYwV5lJg7DvXwPrFrrak z6kDT1cod6+cdyCno79QPEf2lNhDsCJBNDXcEwgIsL1S58XbYbaiflJT8ajnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5aZdu5gUcPBjVJCXYEg1/YacnN8wHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApIrZ/JseU4yVv0cZo0ZEbkdapLdYKkfJO2 GPTdTOs3RVsuLvHxpLcHUFrFqHnonZFEmmaK3BoUBlBFfRRlb4qyn8g1/MRtd9en Ku6h/ExIRj3wW0dUSg9lfOvHVpmFnDFNbnoBew8YqqE00VYO2jv3TuSJ1Xcpl37F /8ysLgoRFA0ffOA0ZtJz7RH7Yb9CS2VhYBBNthLlLNE8QPfNdFuyHfizq6IWgQhY rfc94KG7bzVWhEg0IO6vgD4AGvwAPPLU/LVoKz5SIm/rEVPkb8QQxiiqEOH6BAXh f4D/r1AIXnwKwNw7PWrLBEYaLM+BJtu6gTnkfV/DFAnZ8lOU5ZA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:29 2026 by rpki-client