$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft File: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft (raw, json) Hash identifier: 2hYe6MUpuaF+7DyoclPWZjGuXnyWzJ2h0qqq7UcuZlU= Subject key identifier: D4:5C:F9:F4:F0:FC:3A:06:B5:58:04:71:C2:7F:C0:0F:F3:5F:56:FE Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 66053B35F522CED03E76B499B487CB1C60D36B4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:11:05 +0000 Manifest this update: Thu 17 Sep 2026 06:06:05 +0000 Manifest next update: Fri 18 Sep 2026 09:29:05 +0000 Files and hashes: 1: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: xLoeT+ko7MUw5aLnf4wj8gyqTKfil2TZ1gKntVO+LKI=) 2: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=) 3: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: rXO9gTdPSQGsrR5rUmnzksusGY7II8+DMWGkUGzNqUA=) 4: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM=) 5: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl (hash: lz68yjJnjL2ha/BbbdwzsCxAFoLt63+R82UbG9LZ6iY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:3b:35:f5:22:ce:d0:3e:76:b4:99:b4:87:cb:1c:60:d3:6b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: Sep 17 06:06:05 2026 GMT Not After : Sep 18 09:29:05 2026 GMT Subject: CN=D45CF9F4F0FC3A06B5580471C27FC00FF35F56FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6e:e7:f3:1b:a6:c6:52:89:94:c2:44:43:0e: d6:fc:16:fc:8d:f0:31:64:a3:0f:05:41:71:52:ac: b4:fc:d7:1f:fe:dc:1b:1d:a4:5c:53:cb:ef:a4:4c: 3a:27:c0:ae:f9:b9:78:4c:b1:d9:3c:4f:6c:07:d3: c6:cc:7e:77:9d:35:27:f1:ba:e3:ad:23:c8:a3:51: 61:4e:8e:87:b7:c0:77:14:da:4f:55:4a:07:12:dd: d8:80:29:f4:01:98:de:c6:5c:f9:60:ac:e5:79:a0: c8:23:38:34:4b:ad:d7:0d:82:3c:69:b5:cd:5d:c2: f6:5b:10:23:56:86:f1:fb:86:44:b6:ba:3d:10:34: a4:b2:dc:cb:1c:9e:1e:da:61:14:4d:9b:5b:ff:55: eb:3d:ec:c1:af:d2:29:53:c6:12:b1:23:05:cf:da: cd:1f:df:50:ad:5f:bd:7d:b7:db:bc:2d:8b:8e:6d: 6b:c4:c2:01:e3:a3:28:69:24:48:e9:b1:99:72:3b: 63:fc:ff:bb:08:b0:7e:a1:9f:6a:d7:99:b2:e9:45: 06:a7:3a:2c:b0:4f:08:3a:84:b6:92:54:c3:60:16: b6:60:19:f1:cf:83:5f:ac:22:cb:69:75:9c:52:4d: d8:4a:4d:09:89:37:0d:0f:a9:bf:18:63:7c:c3:12: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5C:F9:F4:F0:FC:3A:06:B5:58:04:71:C2:7F:C0:0F:F3:5F:56:FE X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:13:1b:14:33:18:2f:84:7b:c9:12:98:ac:f2:55:75:db:e3: 40:0b:0d:61:0e:fb:d2:e2:dd:49:ad:04:ef:02:69:81:63:6e: fd:6e:f9:04:b8:3e:41:56:05:e6:aa:46:a1:a4:b8:8c:80:0d: 6c:cd:7d:5c:fc:91:51:5f:cd:49:e9:72:82:41:3b:44:9a:6f: c8:f1:2f:29:08:c7:83:eb:a2:64:71:e5:6d:6d:3d:cb:ab:5a: d7:ff:3c:4b:1a:1b:67:38:5f:c0:e2:05:b1:97:36:29:7a:43: 99:7b:af:c1:ab:c7:e6:1b:d4:1a:3e:88:a0:86:39:d8:bf:18: b6:8d:8c:18:0e:3f:02:cb:cc:4c:8d:84:a8:2b:42:d7:58:f0: 33:3d:ac:55:0a:cb:80:7a:0a:7c:4a:fc:65:e0:af:23:29:4d: 6e:67:c4:d5:03:7a:a4:b4:9b:58:fe:3b:38:98:f7:0d:47:4a: 55:32:7d:2e:aa:dd:7d:83:c5:02:8b:41:fa:fb:80:1f:b6:fc: 5c:b6:ae:4a:81:cb:3a:53:94:2d:6c:2c:12:1d:5c:55:c5:b9: b1:3c:89:7b:c5:db:18:ec:dc:13:c5:68:09:0d:a3:ad:bc:94: 38:9f:cc:d1:44:2c:97:48:a0:da:62:9f:19:86:f9:ec:d4:14: 01:11:c1:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgU7NfUiztA+drSZtIfLHGDTa0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA5MTcwNjA2MDVaFw0yNjA5MTgwOTI5MDVaMDMxMTAvBgNV BAMTKEQ0NUNGOUY0RjBGQzNBMDZCNTU4MDQ3MUMyN0ZDMDBGRjM1RjU2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtbufzG6bGUomUwkRDDtb8FvyN 8DFkow8FQXFSrLT81x/+3BsdpFxTy++kTDonwK75uXhMsdk8T2wH08bMfnedNSfx uuOtI8ijUWFOjoe3wHcU2k9VSgcS3diAKfQBmN7GXPlgrOV5oMgjODRLrdcNgjxp tc1dwvZbECNWhvH7hkS2uj0QNKSy3Mscnh7aYRRNm1v/Ves97MGv0ilTxhKxIwXP 2s0f31CtX719t9u8LYuObWvEwgHjoyhpJEjpsZlyO2P8/7sIsH6hn2rXmbLpRQan OiywTwg6hLaSVMNgFrZgGfHPg1+sIstpdZxSTdhKTQmJNw0Pqb8YY3zDEuGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Fz59PD8Oga1WARxwn/AD/NfVv4wHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhG RjRFQzEwMTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMITGxQzGC+Ee8kSmKzyVXXb40ALDWEO+9Li 3UmtBO8CaYFjbv1u+QS4PkFWBeaqRqGkuIyADWzNfVz8kVFfzUnpcoJBO0Sab8jx LykIx4PromRx5W1tPcurWtf/PEsaG2c4X8DiBbGXNil6Q5l7r8Grx+Yb1Bo+iKCG Odi/GLaNjBgOPwLLzEyNhKgrQtdY8DM9rFUKy4B6CnxK/GXgryMpTW5nxNUDeqS0 m1j+OziY9w1HSlUyfS6q3X2DxQKLQfr7gB+2/Fy2rkqByzpTlC1sLBIdXFXFubE8 iXvF2xjs3BPFaAkNo628lDifzNFELJdIoNpinxmG+ezUFAERwf0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:54 2026 by rpki-client