$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: Dko30eU84cFndeSpq0peA83lGI0xdFnPaOB8D6SEqD4= Subject key identifier: F8:2A:FA:DD:7A:E5:EA:89:E0:E5:1B:82:08:20:F8:0A:16:5B:F9:84 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 51D6189201E70DF0E6931344D74AC79F55C7372E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:41 +0000 Manifest this update: Tue 12 May 2026 23:32:41 +0000 Manifest next update: Thu 14 May 2026 00:44:41 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 4: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: RK0FFlXVEFGbeDi9AMIJVFUoqFh+VkAfzfPzg3BppuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d6:18:92:01:e7:0d:f0:e6:93:13:44:d7:4a:c7:9f:55:c7:37:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: May 12 23:32:41 2026 GMT Not After : May 14 00:44:41 2026 GMT Subject: CN=F82AFADD7AE5EA89E0E51B820820F80A165BF984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:32:45:73:f8:f7:10:99:01:65:a8:36:a2: f6:47:55:82:71:11:3b:a8:88:42:2c:06:c2:4d:80: cc:db:0c:4e:43:0a:4c:4d:c0:61:79:be:14:63:54: 7b:2c:9a:c7:3c:7a:2b:18:b8:a8:e0:7d:7c:78:8b: 9d:8b:d6:df:31:bf:0a:6d:07:4a:ae:ba:f0:d1:5f: 8c:da:b5:14:7e:a4:0e:d8:df:17:cc:1f:42:0d:f6: 13:bf:17:c7:75:77:b7:78:93:bc:6a:49:ce:ac:8b: 7a:75:52:10:3c:e2:2e:90:ff:69:ba:87:ac:b9:4f: e4:cf:5a:d2:4b:63:65:ee:f9:aa:63:cc:5c:37:7f: 7b:99:7e:cb:00:ef:35:4b:75:2e:41:07:ea:a6:f2: ca:81:10:d1:86:83:a0:c5:87:15:7a:ea:f0:ec:7f: d7:89:ff:d1:ea:49:0e:ad:84:f2:1c:66:04:65:22: b1:ac:54:ec:f6:b1:2b:4d:ec:aa:b6:29:07:db:ad: 8b:ef:4a:49:11:f0:ed:82:e0:61:5d:de:fd:1e:0c: 30:b7:79:5c:3f:aa:ae:bb:96:8d:91:2b:1f:1f:82: cd:08:cf:f3:ab:d9:64:ae:59:45:f9:13:77:80:12: a7:e0:91:41:1d:08:8a:e8:88:6d:e6:e5:92:35:e2: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2A:FA:DD:7A:E5:EA:89:E0:E5:1B:82:08:20:F8:0A:16:5B:F9:84 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b5:ef:64:86:e1:4b:24:a2:b5:62:be:f6:fa:9a:c1:60:10: 5a:56:04:93:07:98:ba:20:c8:65:24:fd:3f:73:a5:68:13:6d: 9a:a7:6f:cc:ef:2f:89:17:c5:65:72:32:a2:a9:51:08:f1:18: d5:3b:52:7f:16:78:c0:c9:c7:22:14:21:f0:6f:34:48:b9:48: 6b:da:b8:0d:c6:ec:f9:13:51:e0:4e:37:f7:37:17:ae:7f:01: 51:28:29:76:4f:da:54:4e:a3:ad:1f:ad:f0:66:87:db:b6:f7: dc:14:c4:45:a8:e0:da:e2:55:d2:e2:38:be:59:08:95:a3:f9: 4d:2e:18:4c:b9:c6:f0:81:d2:5f:95:a7:0f:d0:dd:ca:90:2f: cc:0e:76:bf:bd:ab:c6:f8:65:44:7f:ea:11:e2:be:e8:ad:f3: 2c:68:f2:45:db:5f:1f:54:df:e9:78:29:e5:61:e3:68:01:f0: e4:f6:68:f3:59:af:df:bb:46:0e:c9:e6:35:b8:da:c9:bc:11: 38:09:91:fb:ad:81:be:7f:c9:25:c7:16:94:48:47:ab:7e:db: f2:d7:1d:83:12:e0:c8:21:b5:6d:86:1b:5f:36:3b:21:26:69: 6c:cd:ff:7d:8b:6e:94:3c:a3:48:7b:07:89:ed:33:7b:4d:36: dd:19:8b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdYYkgHnDfDmkxNE10rHn1XHNy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA1MTIyMzMyNDFaFw0yNjA1MTQwMDQ0NDFaMDMxMTAvBgNV BAMTKEY4MkFGQUREN0FFNUVBODlFMEU1MUI4MjA4MjBGODBBMTY1QkY5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFzJFc/j3EJkBZag2ovZHVYJx ETuoiEIsBsJNgMzbDE5DCkxNwGF5vhRjVHssmsc8eisYuKjgfXx4i52L1t8xvwpt B0quuvDRX4zatRR+pA7Y3xfMH0IN9hO/F8d1d7d4k7xqSc6si3p1UhA84i6Q/2m6 h6y5T+TPWtJLY2Xu+apjzFw3f3uZfssA7zVLdS5BB+qm8sqBENGGg6DFhxV66vDs f9eJ/9HqSQ6thPIcZgRlIrGsVOz2sStN7Kq2KQfbrYvvSkkR8O2C4GFd3v0eDDC3 eVw/qq67lo2RKx8fgs0Iz/Or2WSuWUX5E3eAEqfgkUEdCIroiG3m5ZI14oDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Cr63Xrl6ong5RuCCCD4ChZb+YQwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm172SG4UskorVivvb6msFgEFpWBJMHmLog yGUk/T9zpWgTbZqnb8zvL4kXxWVyMqKpUQjxGNU7Un8WeMDJxyIUIfBvNEi5SGva uA3G7PkTUeBON/c3F65/AVEoKXZP2lROo60frfBmh9u299wUxEWo4NriVdLiOL5Z CJWj+U0uGEy5xvCB0l+Vpw/Q3cqQL8wOdr+9q8b4ZUR/6hHivuit8yxo8kXbXx9U 3+l4KeVh42gB8OT2aPNZr9+7Rg7J5jW42sm8ETgJkfutgb5/ySXHFpRIR6t+2/LX HYMS4MghtW2GG182OyEmaWzN/32LbpQ8o0h7B4ntM3tNNt0Zixk= -----END CERTIFICATE-----Generated at Wed May 13 05:54:58 2026 by rpki-client