$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft File: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft (raw, json) Hash identifier: KA4fa8MA/7E4UkYb8f+Dv8+/fq10Z7RPi55YJcJxfy0= Subject key identifier: 87:7C:94:F5:25:18:76:66:95:6E:BE:B6:B0:02:79:1A:90:71:DB:62 Authority key identifier: 0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 Certificate issuer: /CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Certificate serial: 22E01370CCA80190CF394E8535F24BB9353CBAD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 10:46:58 +0000 Manifest this update: Thu 17 Sep 2026 10:41:58 +0000 Manifest next update: Fri 18 Sep 2026 11:20:58 +0000 Files and hashes: 1: 3130332e3136302e3138352e302f32342d3234203d3e20313339393532.roa (hash: 7c9GFWm6MdcJLg2P6c+DTGg5L9Fs6wlnaF02bkc0nhw=) 2: 0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl (hash: VHmBdRlQXNQDD9z77rOTbsdl5RKo3IxxYNu2DQzXK/s=) 3: 3130332e3136302e3138342e302f32342d3234203d3e20313339393532.roa (hash: k9hB5TmUACjkJxeE951FHmSf1SEQX33K8sTdpuXO8BI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e0:13:70:cc:a8:01:90:cf:39:4e:85:35:f2:4b:b9:35:3c:ba:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F20B060149DBF31681B4321BA85D67DEFE9B5A3 Validity Not Before: Sep 17 10:41:58 2026 GMT Not After : Sep 18 11:20:58 2026 GMT Subject: CN=877C94F525187666956EBEB6B002791A9071DB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:a0:a2:52:ea:fb:a0:7a:7c:2b:be:cf:9b: 48:84:f8:58:da:e3:47:e7:dd:b7:97:51:e4:eb:7c: 8f:b4:b6:37:b3:1d:75:bc:88:8a:8b:af:64:15:2c: 1a:f8:b3:e0:86:35:91:92:91:a5:ee:6f:c2:58:79: 67:47:2d:2d:50:9f:e7:fd:a7:1f:23:46:f3:2c:c2: bc:e2:06:30:11:36:7e:19:ce:e5:c5:4f:37:f7:6a: e7:7a:3b:36:c3:77:8a:ab:64:2d:79:e3:e1:bd:4e: 20:69:86:0a:0d:bd:c5:ef:94:6d:7a:be:d6:af:fa: e0:07:b5:73:7f:50:34:58:56:d3:fe:c5:63:ff:9e: c5:4f:a1:2b:df:44:fc:7d:1f:33:ad:2f:2c:ab:1f: 27:59:92:3d:3a:e5:f4:ba:3e:42:de:22:6f:6a:cc: 7c:4a:3b:09:5d:bb:3d:1b:62:a0:ab:cd:14:8f:50: de:f3:14:96:21:2a:52:5a:51:32:41:c4:ed:78:7e: 56:36:61:69:11:6c:ba:b4:60:7d:6f:af:a3:32:9d: 8e:b1:ac:b4:e2:1c:fe:97:c0:d7:a7:91:42:c3:c8: f6:48:0e:39:58:08:20:97:b2:41:89:76:83:ee:c7: 82:20:fa:03:71:55:65:5b:18:b5:0c:b3:7e:8d:b5: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:94:F5:25:18:76:66:95:6E:BE:B6:B0:02:79:1A:90:71:DB:62 X509v3 Authority Key Identifier: keyid:0F:20:B0:60:14:9D:BF:31:68:1B:43:21:BA:85:D6:7D:EF:E9:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/0F20B060149DBF31681B4321BA85D67DEFE9B5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ad:85:07:63:88:fb:55:42:55:f8:99:c9:e1:05:9e:f1:62: 33:c2:18:2f:3d:6b:ab:b4:fc:9b:16:5a:47:8e:c5:2e:50:a0: 6c:4f:db:d8:92:6d:d0:e2:bd:f8:87:d7:c2:69:6e:87:6f:95: 18:9d:a9:83:99:f1:b8:08:36:e1:e4:f4:4c:dd:f3:e8:06:9b: a2:e1:6d:78:d9:c7:94:23:b8:83:24:b0:cf:08:bc:63:11:39: 9b:7b:34:d3:ac:4c:4c:9c:bf:ca:8e:5d:78:52:0a:bf:7a:76: 4b:62:73:8f:f7:bb:26:24:8f:bf:ef:f7:cd:ab:2a:5c:f6:88: d7:8f:7e:ec:4d:f1:13:90:aa:5f:62:ea:63:94:7b:5e:cd:f0: 4f:e4:01:3b:51:31:7a:c3:74:aa:14:67:ee:42:0f:27:b0:5d: ec:4e:13:5d:ce:f5:ba:c6:59:ff:cf:67:60:d2:c4:8a:dc:87: 02:fc:9b:f4:a4:08:26:fb:d1:d4:33:65:df:53:8d:93:6b:de: 73:aa:9d:b5:61:9a:35:fe:00:54:b8:bd:52:d3:6f:f7:db:14: d7:ac:5b:2f:8f:bf:81:ce:51:c7:9c:b9:12:05:ea:0a:7b:51: 00:6c:c6:b0:98:c0:7a:e2:ae:9f:2b:35:ca:6a:b3:d0:45:c6: 7d:37:fc:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuATcMyoAZDPOU6FNfJLuTU8utgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RF RkU5QjVBMzAeFw0yNjA5MTcxMDQxNThaFw0yNjA5MTgxMTIwNThaMDMxMTAvBgNV BAMTKDg3N0M5NEY1MjUxODc2NjY5NTZFQkVCNkIwMDI3OTFBOTA3MURCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjqCiUur7oHp8K77Pm0iE+Fja 40fn3beXUeTrfI+0tjezHXW8iIqLr2QVLBr4s+CGNZGSkaXub8JYeWdHLS1Qn+f9 px8jRvMswrziBjARNn4ZzuXFTzf3aud6OzbDd4qrZC154+G9TiBphgoNvcXvlG16 vtav+uAHtXN/UDRYVtP+xWP/nsVPoSvfRPx9HzOtLyyrHydZkj065fS6PkLeIm9q zHxKOwlduz0bYqCrzRSPUN7zFJYhKlJaUTJBxO14flY2YWkRbLq0YH1vr6MynY6x rLTiHP6XwNenkULDyPZIDjlYCCCXskGJdoPux4Ig+gNxVWVbGLUMs36NtcplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3yU9SUYdmaVbr62sAJ5GpBx22IwHwYDVR0j BBgwFoAUDyCwYBSdvzFoG0MhuoXWfe/ptaMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTY4MmJjYTMtZTg1OC00ZDUyLWIxYTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAx NDlEQkYzMTY4MUI0MzIxQkE4NUQ2N0RFRkU5QjVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRjIwQjA2MDE0OURCRjMxNjgxQjQzMjFCQTg1RDY3REVGRTlC NUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTY4MmJjYTMtZTg1OC00ZDUyLWIx YTMtMmY0YmFlNDdjOWYyLzAvMEYyMEIwNjAxNDlEQkYzMTY4MUI0MzIxQkE4NUQ2 N0RFRkU5QjVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHythQdjiPtVQlX4mcnhBZ7xYjPCGC89a6u0 /JsWWkeOxS5QoGxP29iSbdDivfiH18JpbodvlRidqYOZ8bgINuHk9Ezd8+gGm6Lh bXjZx5QjuIMksM8IvGMROZt7NNOsTEycv8qOXXhSCr96dktic4/3uyYkj7/v982r Klz2iNePfuxN8ROQql9i6mOUe17N8E/kATtRMXrDdKoUZ+5CDyewXexOE13O9brG Wf/PZ2DSxIrchwL8m/SkCCb70dQzZd9TjZNr3nOqnbVhmjX+AFS4vVLTb/fbFNes Wy+Pv4HOUcecuRIF6gp7UQBsxrCYwHrirp8rNcpqs9BFxn03/GE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:34 2026 by rpki-client