$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: q2I9j/Ct7aC1+U5vTqqqMRvDJ35Aa/cLB2vWWGW9yDk= Subject key identifier: E7:4F:C5:4D:87:82:81:F4:A4:3C:4E:0A:73:FD:00:F9:78:8E:84:B4 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 297D47BE1428413E15C6B0DAFDEBF4339D009ACC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:36:21 +0000 Manifest this update: Thu 24 Sep 2026 08:31:21 +0000 Manifest next update: Fri 25 Sep 2026 10:36:21 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) 2: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: dxI9NDHs6HtkMU+vR8qS3bbIv+1gMi5AE3GgzvSl6Jc=) 3: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7d:47:be:14:28:41:3e:15:c6:b0:da:fd:eb:f4:33:9d:00:9a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Sep 24 08:31:21 2026 GMT Not After : Sep 25 10:36:21 2026 GMT Subject: CN=E74FC54D878281F4A43C4E0A73FD00F9788E84B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:46:70:82:1e:22:14:72:f0:19:11:e1:b7: ae:f5:cb:c9:42:39:0f:9e:96:1d:7f:fc:66:a4:cd: d5:89:c8:75:07:6b:3f:99:c0:40:f6:19:92:f5:2b: 4c:5c:2d:cd:77:2a:b1:22:5c:f7:ce:73:aa:26:b8: c1:90:86:ab:bd:4f:ca:41:23:9b:0b:6c:fb:ed:94: 7b:88:4f:0b:0b:e3:93:32:65:c0:d5:fb:94:c5:dd: ff:66:bf:53:56:ca:27:ef:3e:a5:bf:3b:3d:03:33: 3f:a4:28:2f:d1:2f:c1:c3:e9:74:b3:84:a8:4c:71: bb:80:ba:fa:14:b6:4f:a8:a2:d6:48:d9:71:48:49: b1:af:6f:27:86:53:f3:c0:41:1f:9d:53:57:36:4f: 8b:66:62:2d:a2:94:1c:76:d8:2a:85:8f:cd:9c:59: 30:4f:d5:c3:ce:9a:45:4e:06:b1:61:a3:13:05:10: bb:8d:58:2d:4c:b3:a7:9b:33:63:de:6a:3d:58:9b: db:08:72:74:9f:2e:82:5b:71:83:44:ef:aa:6f:78: 51:c3:35:bf:e1:a9:c7:f1:67:99:4a:64:7b:5d:64: 5f:b2:ea:83:f2:af:42:15:30:94:b6:c0:a7:0c:b9: 3f:7e:b3:5a:60:66:cd:7d:36:3a:1d:55:f1:85:80: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4F:C5:4D:87:82:81:F4:A4:3C:4E:0A:73:FD:00:F9:78:8E:84:B4 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:01:12:a0:12:fb:16:33:8d:77:c6:cf:c5:fe:e1:f3:20:d8: 9c:38:b0:ba:f6:d0:02:34:8b:37:0a:31:ed:05:bb:9d:1b:46: 97:90:d3:30:8b:9e:bd:54:eb:dc:ad:00:3f:df:9c:47:a2:5c: 89:70:83:4e:83:a1:a4:72:de:98:bf:fc:1a:d2:d8:1f:18:b0: 90:d4:83:5e:63:dd:34:45:64:f8:58:af:db:8c:66:7b:4b:fb: c9:ad:a2:0a:8d:e8:a9:1a:9b:7f:f0:79:0e:54:5f:de:04:e9: 0b:41:dd:64:43:e1:ba:a3:89:fb:70:48:68:99:6b:42:55:88: 30:89:23:b0:01:f8:f7:d9:7e:d3:3a:78:29:bb:16:df:c9:c5: f4:83:bb:c4:71:67:03:0c:28:03:bf:09:62:bd:84:61:6a:3b: 38:20:81:d1:03:3d:3a:35:b4:be:9c:11:af:de:fb:1e:a3:84: 9f:06:aa:e9:21:22:57:d9:6e:76:8d:e3:0b:42:ce:99:ce:cb: f0:83:90:69:99:e6:53:42:4b:f4:91:71:34:3c:b3:3e:e6:1a: e9:65:9a:bf:55:99:0f:02:68:64:1a:bd:04:74:3e:4d:b9:0c: 29:af:7e:df:66:8f:d1:fd:47:a5:70:94:ae:b7:c0:62:f6:7c: a4:2a:c9:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKX1HvhQoQT4VxrDa/ev0M50AmswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA5MjQwODMxMjFaFw0yNjA5MjUxMDM2MjFaMDMxMTAvBgNV BAMTKEU3NEZDNTREODc4MjgxRjRBNDNDNEUwQTczRkQwMEY5Nzg4RTg0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+0Zwgh4iFHLwGRHht671y8lC OQ+elh1//GakzdWJyHUHaz+ZwED2GZL1K0xcLc13KrEiXPfOc6omuMGQhqu9T8pB I5sLbPvtlHuITwsL45MyZcDV+5TF3f9mv1NWyifvPqW/Oz0DMz+kKC/RL8HD6XSz hKhMcbuAuvoUtk+ootZI2XFISbGvbyeGU/PAQR+dU1c2T4tmYi2ilBx22CqFj82c WTBP1cPOmkVOBrFhoxMFELuNWC1Ms6ebM2Peaj1Ym9sIcnSfLoJbcYNE76pveFHD Nb/hqcfxZ5lKZHtdZF+y6oPyr0IVMJS2wKcMuT9+s1pgZs19NjodVfGFgN+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50/FTYeCgfSkPE4Kc/0A+XiOhLQwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcBEqAS+xYzjXfGz8X+4fMg2Jw4sLr20AI0 izcKMe0Fu50bRpeQ0zCLnr1U69ytAD/fnEeiXIlwg06DoaRy3pi//BrS2B8YsJDU g15j3TRFZPhYr9uMZntL+8mtogqN6Kkam3/weQ5UX94E6QtB3WRD4bqjiftwSGiZ a0JViDCJI7AB+PfZftM6eCm7Ft/JxfSDu8RxZwMMKAO/CWK9hGFqOzgggdEDPTo1 tL6cEa/e+x6jhJ8GqukhIlfZbnaN4wtCzpnOy/CDkGmZ5lNCS/SRcTQ8sz7mGull mr9VmQ8CaGQavQR0Pk25DCmvft9mj9H9R6VwlK63wGL2fKQqyd0= -----END CERTIFICATE-----Generated at Fri Sep 25 03:11:11 2026 by rpki-client