$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: i0emAmBVI4coHGqLUUzpNp2jehXs0UH6+4oaNh5zaqs= Subject key identifier: 97:5E:59:D7:17:1A:10:8D:A9:1E:52:6E:09:C2:6C:5A:92:8C:77:ED Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 6F159376921623001C2CA27EB065B6A3895258A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:18:41 +0000 Manifest this update: Thu 23 Jul 2026 15:13:41 +0000 Manifest next update: Fri 24 Jul 2026 18:22:41 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 4: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: ZNf4DwZSWlJdaBAJGugjr3Y9gxsIkNkhNET//eMKtHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:15:93:76:92:16:23:00:1c:2c:a2:7e:b0:65:b6:a3:89:52:58:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Jul 23 15:13:41 2026 GMT Not After : Jul 24 18:22:41 2026 GMT Subject: CN=975E59D7171A108DA91E526E09C26C5A928C77ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:e2:ab:87:00:41:aa:9e:eb:6a:45:22:7d: 01:b8:ad:22:99:c0:5d:d8:3b:e5:33:7a:96:b7:bb: 37:5f:ca:38:7d:dd:4d:49:9d:ba:17:44:b6:a5:a1: cb:ab:22:b5:a8:c8:29:b3:9a:9a:5b:83:70:65:7e: d9:36:5c:ae:4c:37:46:00:b0:69:07:bf:55:af:a7: f7:d8:57:ce:cb:81:f4:94:97:3b:c9:d0:24:71:51: f7:e8:20:56:8e:6f:93:4e:b3:72:92:af:47:b5:db: d7:a4:03:e5:d5:67:0b:b7:70:d1:a4:fd:08:ff:12: 5c:c1:cf:b2:66:04:04:b9:85:3a:78:16:08:18:4c: 02:2d:41:36:d7:2a:73:54:52:a7:65:6a:6c:f4:39: 23:15:21:19:af:62:81:ac:40:11:60:21:6e:87:db: 84:80:b9:9c:8f:93:3a:29:e6:6c:23:56:bc:58:56: b2:66:90:20:c6:03:e8:73:92:ae:69:4d:b9:62:9d: 3e:9a:9c:0f:f5:ce:52:0a:04:06:50:81:2c:5b:4a: ea:58:e5:cf:20:5f:36:29:02:3c:c8:e0:1d:34:39: 8c:ec:a3:12:a0:5e:db:d3:50:6f:1d:39:c8:74:76: 5c:eb:c8:58:3a:14:fe:e9:83:0b:c8:55:c4:8f:a0: 53:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5E:59:D7:17:1A:10:8D:A9:1E:52:6E:09:C2:6C:5A:92:8C:77:ED X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:08:6a:a7:27:0e:3e:be:33:5b:75:0d:f1:a6:53:9d:3e: ed:7c:64:da:81:91:d0:f1:1e:c0:41:e9:57:1c:ec:9d:88:22: ff:26:05:6e:17:e0:bb:4c:9c:4e:d6:65:c5:6e:d3:0e:e0:9e: 82:7c:a9:d5:dc:1c:0d:c0:2f:a9:84:93:5b:4e:2f:16:fb:e5: eb:f1:56:02:29:0c:f8:01:2a:6c:81:d6:b7:89:97:54:80:1f: 17:b3:60:4e:e0:5c:a1:38:6c:48:8d:01:9f:25:58:f0:d8:63: 01:14:5d:50:d8:1b:1f:78:98:52:4c:81:c6:c0:e9:85:54:5b: 62:95:21:f3:05:1c:bf:c9:d7:bd:eb:2d:ae:da:e6:31:07:a4: 91:c2:d6:67:1a:d8:94:70:fc:e9:56:50:aa:71:ed:cf:a4:aa: 0b:77:2e:45:f4:a5:3e:90:49:f6:4c:5d:d7:d6:54:77:5d:01: 9e:42:64:3a:45:f0:aa:8c:e3:84:5e:fd:a0:b0:8a:65:27:f1: c8:86:6c:91:ad:06:76:d7:86:d2:70:79:61:75:e3:34:14:a3: e6:fe:ea:2d:43:5b:ca:84:67:2e:79:a1:0d:5f:58:d9:8e:18: 25:65:b7:e0:62:28:cb:e5:d0:9b:98:d6:90:ff:fd:cf:6f:36: a7:3b:3b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxWTdpIWIwAcLKJ+sGW2o4lSWKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA3MjMxNTEzNDFaFw0yNjA3MjQxODIyNDFaMDMxMTAvBgNV BAMTKDk3NUU1OUQ3MTcxQTEwOERBOTFFNTI2RTA5QzI2QzVBOTI4Qzc3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tuKrhwBBqp7rakUifQG4rSKZ wF3YO+Uzepa3uzdfyjh93U1JnboXRLalocurIrWoyCmzmppbg3Blftk2XK5MN0YA sGkHv1Wvp/fYV87LgfSUlzvJ0CRxUffoIFaOb5NOs3KSr0e129ekA+XVZwu3cNGk /Qj/ElzBz7JmBAS5hTp4FggYTAItQTbXKnNUUqdlamz0OSMVIRmvYoGsQBFgIW6H 24SAuZyPkzop5mwjVrxYVrJmkCDGA+hzkq5pTblinT6anA/1zlIKBAZQgSxbSupY 5c8gXzYpAjzI4B00OYzsoxKgXtvTUG8dOch0dlzryFg6FP7pgwvIVcSPoFNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl15Z1xcaEI2pHlJuCcJsWpKMd+0wHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjBCGqnJw4+vjNbdQ3xplOdPu18ZNqBkdDx HsBB6Vcc7J2IIv8mBW4X4LtMnE7WZcVu0w7gnoJ8qdXcHA3AL6mEk1tOLxb75evx VgIpDPgBKmyB1reJl1SAHxezYE7gXKE4bEiNAZ8lWPDYYwEUXVDYGx94mFJMgcbA 6YVUW2KVIfMFHL/J173rLa7a5jEHpJHC1mca2JRw/OlWUKpx7c+kqgt3LkX0pT6Q SfZMXdfWVHddAZ5CZDpF8KqM44Re/aCwimUn8ciGbJGtBnbXhtJweWF14zQUo+b+ 6i1DW8qEZy55oQ1fWNmOGCVlt+BiKMvl0JuY1pD//c9vNqc7O1U= -----END CERTIFICATE-----Generated at Fri Jul 24 02:32:57 2026 by rpki-client