$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: 3rVzb3NdlrTLAgrMPHzddJIoA4c+reymZhN/P5if+FE= Subject key identifier: 5C:16:30:39:0C:54:F5:3B:4F:3C:21:1B:68:14:72:6C:2D:0B:2F:6A Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 6099CCF9776F40EABF5CC99378FBA657FE0B55EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:20:19 +0000 Manifest this update: Wed 16 Sep 2026 21:15:19 +0000 Manifest next update: Fri 18 Sep 2026 00:06:19 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) 2: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: DR+Kq5Gq5/RBzbzcVBoy+qoBFpIyk92MK9gD0EOkJJQ=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:cc:f9:77:6f:40:ea:bf:5c:c9:93:78:fb:a6:57:fe:0b:55:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Sep 16 21:15:19 2026 GMT Not After : Sep 18 00:06:19 2026 GMT Subject: CN=5C1630390C54F53B4F3C211B6814726C2D0B2F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:0b:c3:bf:90:0a:1e:d1:75:85:c2:53:73: cf:bd:bd:62:c3:84:b3:9f:b6:bf:47:fd:e5:a6:21: 67:96:d1:71:67:fc:a3:b9:62:25:58:34:13:60:bb: 85:45:aa:9a:67:6c:64:90:a8:2b:f4:8b:fc:8f:1f: 07:8c:7a:bc:c8:ff:ec:e4:ab:ad:3e:65:56:01:bc: cd:39:2c:2b:5a:f5:9a:d9:87:92:9d:16:22:b0:9c: 48:2c:9a:77:6e:be:1b:f6:19:33:ad:1a:b6:f6:95: da:1f:a8:bc:28:e4:4e:a8:e3:64:57:71:95:d5:3b: b2:d9:80:41:bb:35:6f:22:21:90:82:61:9f:99:fb: 3c:e9:d8:9f:44:7a:b7:b3:ec:e2:85:df:46:6c:4d: 31:0b:66:f4:1a:7c:05:b0:0e:1a:0b:1f:4e:46:f0: 24:a2:59:be:60:7f:94:ff:e8:53:0b:0b:5b:f2:22: e0:31:4d:45:ce:d3:ee:54:8f:3d:f9:6f:a1:8d:2a: 54:4d:b3:c4:52:54:c6:e1:49:0f:20:d4:5f:f0:19: 0e:7f:f3:75:e9:d8:b0:6a:97:71:85:9e:ec:77:df: a6:b2:6b:ad:f9:65:04:78:3e:66:aa:f8:a3:f1:8c: e2:a1:16:bc:8c:b2:66:5c:e4:ec:33:52:00:4b:f2: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:16:30:39:0C:54:F5:3B:4F:3C:21:1B:68:14:72:6C:2D:0B:2F:6A X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d3:00:57:68:c3:c0:83:61:18:e2:92:56:cc:84:64:da:12: 48:0b:0a:21:79:0e:a9:c6:62:cd:cf:ba:f0:2e:02:c8:79:7f: db:8a:46:7d:fb:dd:d6:ea:d2:7b:e4:f6:5a:02:3e:7c:ab:6d: 46:07:26:4a:62:e1:d9:b5:3e:83:07:34:1e:f1:a2:f8:3e:92: 8b:84:77:d8:2b:82:b1:cc:c8:44:6f:e8:72:6a:f1:e7:8b:bc: c1:9b:20:66:f9:6e:af:c2:e5:d4:ba:0e:c1:fc:95:6f:cf:36: 01:6a:12:7f:c5:37:d4:69:a5:11:32:eb:16:58:60:3f:f4:90: 7a:9a:20:ac:21:d0:c4:c3:c5:6c:2b:6d:29:f4:9b:bf:91:9a: 9b:8e:22:25:d1:55:cf:e4:df:d2:d1:f1:09:14:dc:e6:41:ea: 0d:13:c1:b8:0a:1b:e6:d4:2e:c5:8d:af:83:f5:ee:df:70:c5: 21:0b:69:81:2b:36:df:f7:8d:23:be:15:70:1d:21:e8:b0:46: a2:1a:84:0c:b4:19:b1:13:2e:18:b1:34:50:75:9b:e2:17:9b: 0f:61:7a:fc:71:b8:48:5e:40:5b:bf:b8:5a:87:4b:ba:9b:5a: 57:8e:a2:28:2f:65:3a:b0:2b:0c:07:06:8c:38:28:71:1f:16: 72:46:e2:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJnM+XdvQOq/XMmTePumV/4LVe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA5MTYyMTE1MTlaFw0yNjA5MTgwMDA2MTlaMDMxMTAvBgNV BAMTKDVDMTYzMDM5MEM1NEY1M0I0RjNDMjExQjY4MTQ3MjZDMkQwQjJGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnAvDv5AKHtF1hcJTc8+9vWLD hLOftr9H/eWmIWeW0XFn/KO5YiVYNBNgu4VFqppnbGSQqCv0i/yPHweMerzI/+zk q60+ZVYBvM05LCta9ZrZh5KdFiKwnEgsmnduvhv2GTOtGrb2ldofqLwo5E6o42RX cZXVO7LZgEG7NW8iIZCCYZ+Z+zzp2J9Eerez7OKF30ZsTTELZvQafAWwDhoLH05G 8CSiWb5gf5T/6FMLC1vyIuAxTUXO0+5Ujz35b6GNKlRNs8RSVMbhSQ8g1F/wGQ5/ 83Xp2LBql3GFnux336aya635ZQR4Pmaq+KPxjOKhFryMsmZc5OwzUgBL8v8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBYwOQxU9TtPPCEbaBRybC0LL2owHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzTAFdow8CDYRjiklbMhGTaEkgLCiF5DqnG Ys3PuvAuAsh5f9uKRn373dbq0nvk9loCPnyrbUYHJkpi4dm1PoMHNB7xovg+kouE d9grgrHMyERv6HJq8eeLvMGbIGb5bq/C5dS6DsH8lW/PNgFqEn/FN9RppREy6xZY YD/0kHqaIKwh0MTDxWwrbSn0m7+RmpuOIiXRVc/k39LR8QkU3OZB6g0TwbgKG+bU LsWNr4P17t9wxSELaYErNt/3jSO+FXAdIeiwRqIahAy0GbETLhixNFB1m+IXmw9h evxxuEheQFu/uFqHS7qbWleOoigvZTqwKwwHBow4KHEfFnJG4to= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:41 2026 by rpki-client