$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: EYtsHV4dynm2EZ6AkDgKQNBkOT55MktmcktDLUUB5MA= Subject key identifier: 75:70:B4:B3:91:72:AE:DB:D8:13:01:9D:E0:58:95:10:58:55:8E:6A Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 2C82A931DE767ECE22D0CB4C2390C91F1976C511 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:32:44 +0000 Manifest this update: Thu 23 Jul 2026 14:27:44 +0000 Manifest next update: Fri 24 Jul 2026 16:54:44 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 2: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 3: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: 7V60p9+6mXO1cQcThJS+pdM1DNQsKh+5wHV5SIhaTfA=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:a9:31:de:76:7e:ce:22:d0:cb:4c:23:90:c9:1f:19:76:c5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Jul 23 14:27:44 2026 GMT Not After : Jul 24 16:54:44 2026 GMT Subject: CN=7570B4B39172AEDBD813019DE058951058558E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:5d:42:0e:22:b1:f4:87:64:e2:f1:53:d0: 95:eb:60:d1:a2:3f:39:61:1d:05:4c:33:39:3b:1d: 2c:fa:bb:16:2f:21:ac:7d:e0:08:61:2d:f8:ff:f5: 71:90:e2:5e:f6:88:5b:69:8b:2d:7b:f9:f5:03:cb: 49:ed:3b:f4:0f:db:fd:d7:0c:14:79:00:3b:56:0b: 23:9f:cf:af:3c:26:f3:7e:7c:2d:c8:a6:a0:65:89: 76:13:ed:79:94:08:54:98:24:83:f4:62:2e:25:c1: 9b:e8:93:1b:23:7a:fb:cc:bd:1d:1b:f7:e2:a8:f4: 49:df:b2:01:98:3e:9d:c7:91:a4:95:25:49:7f:38: 7d:2f:73:b5:c6:6b:33:21:10:df:e9:55:48:4d:88: 8d:b8:e0:fc:ab:79:a3:ec:40:84:99:fe:bf:06:10: 0b:7a:6c:87:6f:18:1a:9d:65:30:a9:e5:bf:c3:a0: 3e:9e:18:d7:ef:b6:03:5c:86:6a:29:09:ea:88:8c: 6b:30:b9:17:cc:e9:41:9b:fe:4c:74:fb:db:3e:1d: e5:4b:82:dd:ad:e3:c3:b0:61:f6:6e:f1:53:67:19: fd:f3:e1:da:37:41:ab:d2:17:7e:16:d6:5b:c5:e4: 5e:e7:39:12:f7:2e:7e:9a:77:fd:1d:08:e0:5e:50: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:B4:B3:91:72:AE:DB:D8:13:01:9D:E0:58:95:10:58:55:8E:6A X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bb:8d:15:68:27:17:7a:29:e4:8f:9c:cd:68:1e:8a:30:22: 75:71:c4:51:97:7a:de:cb:0e:7c:79:ec:31:01:88:72:58:58: c7:0d:48:09:87:ec:08:8f:3a:5d:36:e4:18:a0:cd:bc:84:ba: 49:f1:b9:56:71:49:84:20:60:63:c3:ed:24:20:29:b1:5a:bf: b0:b2:55:c4:37:45:cc:4f:8c:a3:2d:ab:41:ac:4c:dd:e8:93: 5a:cb:0e:64:40:3e:dc:79:e4:a5:25:c8:0b:be:42:d2:5b:54: 2d:b6:2d:6e:69:1c:28:bf:12:1e:4d:d6:03:a9:a8:5f:2c:8a: aa:c1:78:d6:39:e7:28:6e:a9:bb:b1:72:40:d7:e2:b0:0c:b1: 8d:3a:e1:c3:c1:53:82:98:50:ef:c9:4a:b7:2a:f9:24:fa:3e: 06:ac:41:04:a0:9b:87:6a:25:53:6e:c7:f0:06:a8:1c:19:a6: 44:4c:41:49:dc:40:5d:08:04:09:37:77:de:da:ac:3a:91:34: 57:bb:de:33:70:83:fd:e9:0d:85:d4:a1:97:e4:39:af:86:b5: 87:32:a1:7e:69:87:7c:78:c2:c6:85:05:ee:0d:bf:23:a9:35: f9:85:b2:17:5b:7e:55:53:e4:48:21:1e:9b:b3:2b:ec:51:e9: d6:ad:6a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIKpMd52fs4i0MtMI5DJHxl2xREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA3MjMxNDI3NDRaFw0yNjA3MjQxNjU0NDRaMDMxMTAvBgNV BAMTKDc1NzBCNEIzOTE3MkFFREJEODEzMDE5REUwNTg5NTEwNTg1NThFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8V1CDiKx9Idk4vFT0JXrYNGi PzlhHQVMMzk7HSz6uxYvIax94AhhLfj/9XGQ4l72iFtpiy17+fUDy0ntO/QP2/3X DBR5ADtWCyOfz688JvN+fC3IpqBliXYT7XmUCFSYJIP0Yi4lwZvokxsjevvMvR0b 9+Ko9EnfsgGYPp3HkaSVJUl/OH0vc7XGazMhEN/pVUhNiI244PyreaPsQISZ/r8G EAt6bIdvGBqdZTCp5b/DoD6eGNfvtgNchmopCeqIjGswuRfM6UGb/kx0+9s+HeVL gt2t48OwYfZu8VNnGf3z4do3QavSF34W1lvF5F7nORL3Ln6ad/0dCOBeUAo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdXC0s5FyrtvYEwGd4FiVEFhVjmowHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABm7jRVoJxd6KeSPnM1oHoowInVxxFGXet7L Dnx57DEBiHJYWMcNSAmH7AiPOl025BigzbyEuknxuVZxSYQgYGPD7SQgKbFav7Cy VcQ3RcxPjKMtq0GsTN3ok1rLDmRAPtx55KUlyAu+QtJbVC22LW5pHCi/Eh5N1gOp qF8siqrBeNY55yhuqbuxckDX4rAMsY064cPBU4KYUO/JSrcq+ST6PgasQQSgm4dq JVNux/AGqBwZpkRMQUncQF0IBAk3d97arDqRNFe73jNwg/3pDYXUoZfkOa+GtYcy oX5ph3x4wsaFBe4NvyOpNfmFshdbflVT5EghHpuzK+xR6dataj0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:59:29 2026 by rpki-client