$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: do3MULSK0ReQj+1wzkf4CfdwtVLh9PiBdx7hs0UGJhA= Subject key identifier: 9A:87:38:56:34:55:94:84:3C:47:9C:5A:7E:BE:7E:9A:40:78:22:AA Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 76E8E6BA096317C3AF3CB2DAE2F2EB5B4A044623 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:51:15 +0000 Manifest this update: Wed 16 Sep 2026 17:46:15 +0000 Manifest next update: Thu 17 Sep 2026 19:01:15 +0000 Files and hashes: 1: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) 2: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: DFIkqlzJVJSTPsfMiBrMdr2NJ5HvSwmWpRBJUscyDHY=) 3: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e8:e6:ba:09:63:17:c3:af:3c:b2:da:e2:f2:eb:5b:4a:04:46:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Sep 16 17:46:15 2026 GMT Not After : Sep 17 19:01:15 2026 GMT Subject: CN=9A873856345594843C479C5A7EBE7E9A407822AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:e6:1f:21:94:fa:e5:d2:e3:2a:f6:4e:7f: 41:06:65:1b:52:bb:1c:30:e4:24:69:ca:bd:43:86: df:07:eb:07:cb:da:26:b0:fa:cc:67:5e:45:03:e9: 94:07:41:44:1c:06:98:04:87:27:23:c1:c6:bf:59: 27:7f:e3:e0:6f:5c:be:35:c8:eb:42:46:36:16:4c: 92:3b:d3:97:25:da:fe:05:f5:3c:e6:a9:ea:67:55: 7e:8d:c3:79:49:34:2a:a7:de:6c:19:ef:fa:e1:4a: 6f:5b:c2:2d:fb:f4:f3:c3:0e:0c:37:6e:b1:48:81: da:20:65:7e:c9:93:a4:b0:00:0a:73:43:ad:0f:e0: fd:81:0f:d9:b5:13:df:fc:67:0c:31:b5:57:c8:ca: 24:11:36:48:97:85:ec:82:8d:ab:1a:0d:83:2d:a2: ac:11:5b:00:b4:9c:65:89:2b:12:f2:0e:cd:df:d2: 1a:92:6c:85:d1:c1:c8:36:6a:23:28:9c:27:b8:29: 62:e5:e9:5e:85:f7:37:97:8c:4b:29:7d:0d:37:23: ef:ef:04:04:4d:16:05:2e:a9:a4:01:11:0e:21:45: f6:3f:b1:a3:8c:9a:d9:43:64:ae:cf:b3:f0:7a:55: c2:54:7c:dd:5e:df:83:0e:bd:94:1d:d7:65:c3:aa: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:87:38:56:34:55:94:84:3C:47:9C:5A:7E:BE:7E:9A:40:78:22:AA X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c9:0d:f7:fa:89:b6:8b:ff:e2:61:71:3e:cf:40:ea:b1:31: a2:b6:0d:56:2c:96:d2:c8:1a:a1:d1:cd:f7:ad:fa:57:b3:f2: a9:0c:1b:d6:b0:a8:e0:dc:00:16:28:e3:81:58:a2:28:3d:9d: f1:1d:f0:f3:32:5c:c1:75:60:0d:b9:78:f4:44:5c:64:7f:18: 10:f1:43:bb:4d:df:24:24:12:c8:ed:71:db:39:6c:cd:9a:a7: 82:35:59:eb:b9:ce:42:0a:ba:ae:f7:1e:11:16:57:ae:ea:a9: 39:90:23:1d:db:ab:51:23:d5:38:2e:39:d2:dd:c7:d5:89:51: 23:2e:78:69:78:df:eb:ef:c5:a1:55:0c:a0:a3:67:55:ad:7d: 13:5d:81:7e:96:82:f9:09:f5:5a:97:56:54:70:bd:cd:ee:af: 83:31:33:23:3f:22:75:e7:8f:49:fb:56:18:b3:d1:75:9d:aa: 0c:d8:58:6d:94:5f:66:a9:12:d6:88:7f:07:8c:cb:0a:5f:16: cb:50:76:a3:7e:51:f9:18:b3:e1:c8:c9:0f:f1:b9:3e:70:2e: 79:6d:29:1e:07:09:90:ea:bf:98:92:99:7b:16:bd:8e:5f:49: 52:33:44:14:9b:35:3d:35:ae:b6:41:1d:20:d0:58:4c:b7:a4: e7:a0:d2:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdujmugljF8OvPLLa4vLrW0oERiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA5MTYxNzQ2MTVaFw0yNjA5MTcxOTAxMTVaMDMxMTAvBgNV BAMTKDlBODczODU2MzQ1NTk0ODQzQzQ3OUM1QTdFQkU3RTlBNDA3ODIyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWr+YfIZT65dLjKvZOf0EGZRtS uxww5CRpyr1Dht8H6wfL2iaw+sxnXkUD6ZQHQUQcBpgEhycjwca/WSd/4+BvXL41 yOtCRjYWTJI705cl2v4F9TzmqepnVX6Nw3lJNCqn3mwZ7/rhSm9bwi379PPDDgw3 brFIgdogZX7Jk6SwAApzQ60P4P2BD9m1E9/8ZwwxtVfIyiQRNkiXheyCjasaDYMt oqwRWwC0nGWJKxLyDs3f0hqSbIXRwcg2aiMonCe4KWLl6V6F9zeXjEspfQ03I+/v BARNFgUuqaQBEQ4hRfY/saOMmtlDZK7Ps/B6VcJUfN1e34MOvZQd12XDqr9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmoc4VjRVlIQ8R5xafr5+mkB4IqowHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPJDff6ibaL/+JhcT7PQOqxMaK2DVYsltLI GqHRzfet+lez8qkMG9awqODcABYo44FYoig9nfEd8PMyXMF1YA25ePREXGR/GBDx Q7tN3yQkEsjtcds5bM2ap4I1Weu5zkIKuq73HhEWV67qqTmQIx3bq1Ej1TguOdLd x9WJUSMueGl43+vvxaFVDKCjZ1WtfRNdgX6WgvkJ9VqXVlRwvc3ur4MxMyM/InXn j0n7Vhiz0XWdqgzYWG2UX2apEtaIfweMywpfFstQdqN+UfkYs+HIyQ/xuT5wLnlt KR4HCZDqv5iSmXsWvY5fSVIzRBSbNT01rrZBHSDQWEy3pOeg0mc= -----END CERTIFICATE-----Generated at Thu Sep 17 09:33:05 2026 by rpki-client