$ rpki-client -vvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: Ns058TQwY6hbvtXJ0aZoLemyoY6lU7rTYa7k83PuYng= Subject key identifier: CC:39:AB:DB:DF:1F:24:3B:FE:48:F1:82:43:F0:22:A3:B5:72:CE:7A Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 576A0C713D2EE9563E49B5357973B816FB3736FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:29:47 +0000 Manifest this update: Fri 24 Jul 2026 00:24:47 +0000 Manifest next update: Sat 25 Jul 2026 03:20:47 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) 2: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: O1Kq2KtGy/ZteENSi23R5H8J/oDopjs8F9rLplOc9dA=) 3: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6a:0c:71:3d:2e:e9:56:3e:49:b5:35:79:73:b8:16:fb:37:36:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Jul 24 00:24:47 2026 GMT Not After : Jul 25 03:20:47 2026 GMT Subject: CN=CC39ABDBDF1F243BFE48F18243F022A3B572CE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:34:2c:7b:34:95:50:a6:48:28:1b:bc:b0: 60:61:15:fe:02:a3:ab:5e:44:cf:4a:71:b9:8b:b9: 49:cc:a4:ed:d9:1f:a1:62:3d:70:39:85:35:9f:e1: f6:9a:1f:74:68:5b:20:bb:b6:32:f1:2f:0b:af:1e: 10:3c:e6:0d:f4:e0:6b:ba:32:7c:6d:f9:8e:8f:b6: ce:3c:27:a6:75:a6:b2:be:e6:a9:29:be:0f:ea:70: d2:75:9f:c6:c9:a0:13:1d:46:db:f7:b2:0a:5e:bc: 82:2e:ac:dd:84:23:72:03:3b:13:33:ae:31:77:dc: 26:65:bb:a5:e4:ed:50:4c:e1:0f:9f:33:12:34:15: 82:9c:b8:a6:70:b0:74:a4:1a:b7:f8:56:65:9b:62: 67:28:b6:d2:66:8d:6b:09:3c:e2:8c:ef:be:9c:56: b2:59:0d:7b:8a:ba:24:d4:5b:84:8f:05:38:6a:a9: a5:a4:0e:2a:d0:c3:d6:cf:fb:9f:f1:17:a1:d6:f2: 0e:7d:0e:e2:66:85:aa:f8:6a:18:a6:48:b3:0e:d5: d4:3f:74:75:05:eb:8d:7a:68:d8:d1:36:f5:05:8c: 6e:e8:56:64:53:31:cd:6e:d3:12:1c:b0:ed:fc:50: 2d:a4:61:e0:c3:f5:00:4b:d8:a7:5e:58:33:d0:25: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:AB:DB:DF:1F:24:3B:FE:48:F1:82:43:F0:22:A3:B5:72:CE:7A X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:8c:2a:02:67:f7:61:53:b1:53:87:50:28:cc:2c:52:94: 61:65:c1:54:51:72:17:1e:c0:df:6a:00:a0:be:14:32:45:35: 0a:e1:5c:de:5b:16:1b:a4:7b:fb:e3:3e:01:08:0a:0e:f5:a4: 8f:d1:e7:0a:0c:cb:14:f0:cc:0e:49:f8:84:cb:80:d5:27:85: fe:1f:a2:c2:47:0e:9c:b3:7c:e4:2e:47:93:c4:f0:ba:51:6b: ea:00:a4:52:d3:3c:3a:b3:8e:af:ef:a8:9b:3e:a2:40:f3:23: b1:7d:c1:37:f4:a8:a7:2e:5e:9e:03:db:3e:e2:62:ec:86:20: 1c:01:2c:14:0c:b4:d0:19:f8:39:ce:3d:d6:63:14:81:7b:35: 35:31:73:a7:a7:a8:1b:f0:d9:11:47:d6:a7:30:78:71:1f:b0: f8:81:80:4e:c7:65:2c:37:3e:93:9d:6b:d9:d8:2e:1e:9d:2f: 20:e4:34:dd:88:4f:b9:0d:15:91:2d:97:f9:58:25:29:46:d3: a5:ff:54:f1:0d:97:0f:c5:11:14:1d:c5:99:c1:40:ed:f6:1c: 95:51:24:91:e2:84:92:a8:6a:42:59:41:c2:2a:d4:98:3c:64: bf:b7:2c:b2:bc:72:b1:52:18:88:bc:a4:64:b5:9a:22:2d:ef: 68:60:90:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2oMcT0u6VY+SbU1eXO4Fvs3NvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA3MjQwMDI0NDdaFw0yNjA3MjUwMzIwNDdaMDMxMTAvBgNV BAMTKENDMzlBQkRCREYxRjI0M0JGRTQ4RjE4MjQzRjAyMkEzQjU3MkNFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvDQsezSVUKZIKBu8sGBhFf4C o6teRM9KcbmLuUnMpO3ZH6FiPXA5hTWf4faaH3RoWyC7tjLxLwuvHhA85g304Gu6 Mnxt+Y6Pts48J6Z1prK+5qkpvg/qcNJ1n8bJoBMdRtv3sgpevIIurN2EI3IDOxMz rjF33CZlu6Xk7VBM4Q+fMxI0FYKcuKZwsHSkGrf4VmWbYmcottJmjWsJPOKM776c VrJZDXuKuiTUW4SPBThqqaWkDirQw9bP+5/xF6HW8g59DuJmhar4ahimSLMO1dQ/ dHUF6416aNjRNvUFjG7oVmRTMc1u0xIcsO38UC2kYeDD9QBL2KdeWDPQJefBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDmr298fJDv+SPGCQ/Aio7VyznowHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVRjCoCZ/dhU7FTh1AozCxSlGFlwVRRchce wN9qAKC+FDJFNQrhXN5bFhuke/vjPgEICg71pI/R5woMyxTwzA5J+ITLgNUnhf4f osJHDpyzfOQuR5PE8LpRa+oApFLTPDqzjq/vqJs+okDzI7F9wTf0qKcuXp4D2z7i YuyGIBwBLBQMtNAZ+DnOPdZjFIF7NTUxc6enqBvw2RFH1qcweHEfsPiBgE7HZSw3 PpOda9nYLh6dLyDkNN2IT7kNFZEtl/lYJSlG06X/VPENlw/FERQdxZnBQO32HJVR JJHihJKoakJZQcIq1Jg8ZL+3LLK8crFSGIi8pGS1miIt72hgkOY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:27 2026 by rpki-client