$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: hKFN6Weicjh8Ge70eIH9tJGRJMJKQxbea5PAFIIzi68= Subject key identifier: AC:68:BD:18:35:33:1E:51:C7:7C:8E:BB:EE:67:4D:E3:77:6C:BC:B2 Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 014C001DA623F2384282CAE32ADBC4D1472EE511 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: EA Signing time: Sat 24 Oct 2026 12:19:18 +0000 Manifest this update: Sat 24 Oct 2026 12:14:18 +0000 Manifest next update: Sun 25 Oct 2026 13:35:18 +0000 Files and hashes: 1: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: JVpdF64HeAARRAJQ8msUvu/wmGd49oE/TaW5tekm2oM=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4c:00:1d:a6:23:f2:38:42:82:ca:e3:2a:db:c4:d1:47:2e:e5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: Oct 24 12:14:18 2026 GMT Not After : Oct 25 13:35:18 2026 GMT Subject: CN=AC68BD1835331E51C77C8EBBEE674DE3776CBCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:ed:37:97:92:bb:04:3c:6f:07:28:28:e9: 05:a8:38:0f:be:c7:ec:dc:23:71:2e:6c:3d:07:38: 1c:04:eb:71:ed:54:b7:b5:a3:8a:c4:17:1e:95:c8: 7e:1c:38:e6:6e:b5:e1:e0:f5:5c:00:8d:c5:24:3f: 45:32:86:90:2e:06:8a:ab:8e:b4:fa:09:f8:89:b8: 66:b0:47:44:e5:0c:8b:98:df:9c:f7:ba:59:be:9d: 6e:3b:48:1c:ff:44:0a:bb:eb:68:49:c3:b7:13:21: a9:14:f4:8a:bc:27:09:3a:e1:2b:64:3e:09:a5:cc: 1e:53:91:c3:9c:e6:42:08:43:cc:5c:fd:7f:81:bd: 34:3f:ad:69:99:1a:59:8b:f8:c4:ef:98:91:d4:01: f7:1f:b2:b1:00:ba:fe:34:4d:5f:3a:c9:7c:e9:4a: 3b:32:89:01:1d:6a:dc:a1:d6:e7:1d:aa:b8:63:fe: d8:3d:77:71:0d:23:8d:e7:0e:17:b4:79:c5:ab:0b: 93:28:1c:ea:06:13:43:4d:2b:82:13:98:ba:b2:75: 72:42:9d:92:14:c8:5e:67:92:98:c0:df:a5:98:3a: db:c0:d2:d7:b5:7b:5f:9c:26:a8:7c:5b:9c:0a:e8: 4d:1c:7b:d5:23:9d:93:f7:ce:67:b7:38:3f:33:ec: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:68:BD:18:35:33:1E:51:C7:7C:8E:BB:EE:67:4D:E3:77:6C:BC:B2 X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:76:8d:6c:d6:9b:5a:fa:f2:5f:dd:ed:75:25:0d:e1:42:ed: b7:31:e1:0e:6d:66:60:8c:a6:e1:aa:23:f0:9c:4f:c4:05:97: 85:c0:23:a4:f8:2f:69:09:76:f2:cb:98:29:f8:9b:85:83:ea: ad:07:1c:c4:2c:d8:47:d7:65:75:e5:40:1e:bc:3b:58:82:f0: 41:cc:74:3b:9f:d2:81:cb:43:b1:e8:3e:84:f0:92:cb:9a:1e: e2:42:a8:25:74:56:4d:ed:0b:16:99:1e:c6:f5:4c:74:8c:13: 23:50:b6:20:b6:0d:96:a5:7d:1a:1d:f5:95:3f:29:89:1e:bf: 87:4b:a4:b7:2c:e8:f6:97:54:b7:f4:84:5f:73:e4:e3:ee:90: a8:d3:c1:f5:cd:5c:0a:14:09:85:d6:e6:16:14:5a:b9:66:81: d5:14:0d:f7:d9:45:ad:cd:fd:ca:d7:30:d9:11:ad:fa:6d:40: 05:08:cb:2d:8c:f7:74:cc:20:9a:71:29:b6:88:f0:c8:fd:05: e5:81:9d:2b:39:10:cf:5e:0c:7d:79:8c:55:8d:c4:40:3d:59: fc:e4:e5:d8:02:40:0f:b1:83:cd:58:c7:ab:3f:df:82:d0:7f: df:fc:97:91:71:55:65:bb:5a:18:03:ae:e7:02:0d:95:91:f9: 2b:cc:fc:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUwAHaYj8jhCgsrjKtvE0Ucu5REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjEwMjQxMjE0MThaFw0yNjEwMjUxMzM1MThaMDMxMTAvBgNV BAMTKEFDNjhCRDE4MzUzMzFFNTFDNzdDOEVCQkVFNjc0REUzNzc2Q0JDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0u03l5K7BDxvBygo6QWoOA++ x+zcI3EubD0HOBwE63HtVLe1o4rEFx6VyH4cOOZuteHg9VwAjcUkP0UyhpAuBoqr jrT6CfiJuGawR0TlDIuY35z3ulm+nW47SBz/RAq762hJw7cTIakU9Iq8Jwk64Stk PgmlzB5TkcOc5kIIQ8xc/X+BvTQ/rWmZGlmL+MTvmJHUAfcfsrEAuv40TV86yXzp SjsyiQEdatyh1ucdqrhj/tg9d3ENI43nDhe0ecWrC5MoHOoGE0NNK4ITmLqydXJC nZIUyF5nkpjA36WYOtvA0te1e1+cJqh8W5wK6E0ce9UjnZP3zme3OD8z7Og3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGi9GDUzHlHHfI677mdN43dsvLIwHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB2jWzWm1r68l/d7XUlDeFC7bcx4Q5tZmCM puGqI/CcT8QFl4XAI6T4L2kJdvLLmCn4m4WD6q0HHMQs2EfXZXXlQB68O1iC8EHM dDuf0oHLQ7HoPoTwksuaHuJCqCV0Vk3tCxaZHsb1THSMEyNQtiC2DZalfRod9ZU/ KYkev4dLpLcs6PaXVLf0hF9z5OPukKjTwfXNXAoUCYXW5hYUWrlmgdUUDffZRa3N /crXMNkRrfptQAUIyy2M93TMIJpxKbaI8Mj9BeWBnSs5EM9eDH15jFWNxEA9Wfzk 5dgCQA+xg81Yx6s/34LQf9/8l5FxVWW7WhgDrucCDZWR+SvM/EI= -----END CERTIFICATE-----Generated at Sat Oct 24 20:38:48 2026 by rpki-client