$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft File: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft (raw, json) Hash identifier: hZutUH/P2pQ2X1ekQ3vI1Cquu7bvI6arvhD4wHM7Nd0= Subject key identifier: 43:8A:27:38:B4:92:DE:DA:F3:F8:56:C3:F8:23:8F:DB:22:62:B5:E3 Authority key identifier: D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 Certificate issuer: /CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Certificate serial: 62632A567AD10AF584E4A76ABCB174FAC408B759 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:50:29 +0000 Manifest this update: Thu 23 Jul 2026 20:45:29 +0000 Manifest next update: Fri 24 Jul 2026 23:52:29 +0000 Files and hashes: 1: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: NMwe5J+/CXgAi6nFmZAKAhCZ3C0lGwYdxKCNwpdKULE=) 2: D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl (hash: mtXQGHIee1SBwfwGUOHw5pTCaxic6odEIVzQqAllRnM=) 3: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: NWVRwRUJEoPLPqz3cDGwdvfhxswf8EJ/TbLr4jkDe78=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:63:2a:56:7a:d1:0a:f5:84:e4:a7:6a:bc:b1:74:fa:c4:08:b7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436 Validity Not Before: Jul 23 20:45:29 2026 GMT Not After : Jul 24 23:52:29 2026 GMT Subject: CN=438A2738B492DEDAF3F856C3F8238FDB2262B5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:11:d5:24:3b:fa:2f:37:d3:39:33:a0:52:60: ad:49:af:2a:4b:9b:ce:e3:63:43:88:e9:0c:6c:50: c9:2c:59:83:6f:dc:99:35:f5:b3:bb:f3:23:1c:52: cb:5f:70:49:9e:4d:30:f7:13:f2:32:d4:75:98:39: 39:0f:eb:78:55:fe:c3:1b:85:e2:e8:71:1c:07:31: 46:5b:ac:5b:2d:b4:af:bb:45:7c:36:35:a5:aa:d3: 61:31:1b:9b:3f:fe:0f:11:b1:b5:bc:b9:b7:af:3e: e3:7e:66:ac:13:f4:64:ec:90:53:55:96:94:6b:49: 5c:0f:cb:14:2a:17:bd:5b:ff:83:cf:ff:08:f0:5f: fb:a9:32:33:9a:c4:97:4a:59:76:7e:a4:d7:20:f6: 36:67:d3:65:84:6f:08:a7:dd:93:27:ca:d5:fe:30: 05:98:c3:56:13:4a:18:2e:29:c7:a4:00:b7:f7:87: 5d:75:94:5d:39:6a:ce:b2:bd:66:5f:6b:1f:20:20: e1:1a:b6:06:09:78:98:cc:79:55:53:c0:30:c7:97: 9f:71:53:ba:84:71:60:17:86:c3:70:2c:b2:49:c8: 00:c4:ad:b9:46:5f:a6:87:3c:28:e9:f1:ca:ef:fa: 63:66:24:14:c5:e1:03:d6:ad:10:35:c0:00:7c:29: 83:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:27:38:B4:92:DE:DA:F3:F8:56:C3:F8:23:8F:DB:22:62:B5:E3 X509v3 Authority Key Identifier: keyid:D2:0C:1E:0D:D0:2A:A8:B1:CE:1F:EB:A4:76:97:7C:F8:BB:16:14:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/D20C1E0DD02AA8B1CE1FEBA476977CF8BB161436.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:a4:4b:b0:8d:55:c9:83:4f:5b:f6:ff:ea:e4:ab:28:47: ed:d1:a4:bd:0b:dd:b7:d1:f0:0a:4f:17:2e:aa:4b:b1:79:37: 0a:f9:05:c3:10:b5:b3:9d:da:09:76:b8:dc:86:21:69:5c:30: 73:37:e0:73:77:eb:9c:62:6e:c0:84:db:e6:4f:bb:6a:f7:c9: 34:32:c6:03:2c:cf:1a:9d:07:0b:00:67:a2:05:ac:35:70:9b: 4e:e6:46:22:8b:5c:ab:ec:58:ad:00:27:ce:80:98:22:0a:14: 8c:c9:5b:ad:7b:fe:79:b5:bb:2a:bd:66:b8:70:dc:6c:4f:59: ad:e9:7c:33:13:01:b5:1e:d3:2c:5e:f1:36:1a:94:17:cd:1d: 71:dc:2e:3b:24:91:dd:36:e6:e4:0e:01:ea:6e:6c:27:3a:a8: 8f:7b:b8:74:ee:7e:d2:95:67:79:83:c7:c4:34:3d:75:9c:d8: 86:67:6e:4b:32:c8:df:7f:8c:e6:b2:fe:c2:6b:47:9a:77:ad: 70:18:38:10:79:4b:60:bd:c4:75:41:37:44:74:1c:a8:c1:75: af:77:fd:a2:5e:34:88:32:96:f9:84:f6:24:96:33:06:94:cd: 39:47:09:c7:26:7c:2b:70:99:c5:c8:93:25:f5:88:0e:a0:7b: 7b:ab:c3:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmMqVnrRCvWE5KdqvLF0+sQIt1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdDRjhC QjE2MTQzNjAeFw0yNjA3MjMyMDQ1MjlaFw0yNjA3MjQyMzUyMjlaMDMxMTAvBgNV BAMTKDQzOEEyNzM4QjQ5MkRFREFGM0Y4NTZDM0Y4MjM4RkRCMjI2MkI1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkEdUkO/ovN9M5M6BSYK1JrypL m87jY0OI6QxsUMksWYNv3Jk19bO78yMcUstfcEmeTTD3E/Iy1HWYOTkP63hV/sMb heLocRwHMUZbrFsttK+7RXw2NaWq02ExG5s//g8RsbW8ubevPuN+ZqwT9GTskFNV lpRrSVwPyxQqF71b/4PP/wjwX/upMjOaxJdKWXZ+pNcg9jZn02WEbwin3ZMnytX+ MAWYw1YTShguKcekALf3h111lF05as6yvWZfax8gIOEatgYJeJjMeVVTwDDHl59x U7qEcWAXhsNwLLJJyADErblGX6aHPCjp8crv+mNmJBTF4QPWrRA1wAB8KYOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ4onOLSS3trz+FbD+COP2yJiteMwHwYDVR0j BBgwFoAU0gweDdAqqLHOH+ukdpd8+LsWFDYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNkNzUzNmQtOWUxMC00ZDQ5LWI2Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMERE MDJBQThCMUNFMUZFQkE0NzY5NzdDRjhCQjE2MTQzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjBDMUUwREQwMkFBOEIxQ0UxRkVCQTQ3Njk3N0NGOEJCMTYx NDM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvRDIwQzFFMEREMDJBQThCMUNFMUZFQkE0NzY5NzdD RjhCQjE2MTQzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzypEuwjVXJg09b9v/q5KsoR+3RpL0L3bfR 8ApPFy6qS7F5Nwr5BcMQtbOd2gl2uNyGIWlcMHM34HN365xibsCE2+ZPu2r3yTQy xgMszxqdBwsAZ6IFrDVwm07mRiKLXKvsWK0AJ86AmCIKFIzJW617/nm1uyq9Zrhw 3GxPWa3pfDMTAbUe0yxe8TYalBfNHXHcLjskkd025uQOAepubCc6qI97uHTuftKV Z3mDx8Q0PXWc2IZnbksyyN9/jOay/sJrR5p3rXAYOBB5S2C9xHVBN0R0HKjBda93 /aJeNIgylvmE9iSWMwaUzTlHCccmfCtwmcXIkyX1iA6ge3urw5Y= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:02 2026 by rpki-client