$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: 01IxWfOwG/Q4AkclJPCP7RdyD+TLbqwYUWSurhmz3fE= Subject key identifier: 77:4F:CC:67:03:14:4D:C6:63:63:02:93:EB:3C:0E:8A:CB:90:1B:CD Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 7969FE07159ACDF205475E9407C7B95B2A636012 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:48:04 +0000 Manifest this update: Thu 23 Jul 2026 14:43:04 +0000 Manifest next update: Fri 24 Jul 2026 18:35:04 +0000 Files and hashes: 1: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 4: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: 4FtYwu1XO7XOM2X20hDlu1r3MlTmQaRVQq3Uuv+lSV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:69:fe:07:15:9a:cd:f2:05:47:5e:94:07:c7:b9:5b:2a:63:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: Jul 23 14:43:04 2026 GMT Not After : Jul 24 18:35:04 2026 GMT Subject: CN=774FCC6703144DC663630293EB3C0E8ACB901BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d3:5f:4f:4c:8c:cb:d4:09:f3:e9:82:0f:28: 62:d7:7f:3b:7b:b5:ca:dc:ab:da:3b:28:8c:57:c0: a0:e3:2c:1e:c5:f2:e4:8f:5c:04:53:8f:d1:5c:dc: 4d:90:38:72:b7:78:bd:91:c3:9d:b1:63:b9:53:45: de:bb:5d:4b:47:28:b0:eb:53:34:02:8c:37:50:b4: ee:29:60:44:d0:dc:75:76:83:dd:b8:7c:98:e5:09: 16:90:7b:3b:2a:9a:b5:ce:11:9d:78:3b:b3:af:ca: 54:c6:d7:96:0c:39:08:82:b0:a3:91:35:7c:94:c7: 7e:c7:04:b8:2d:45:77:2c:6b:8f:a1:74:f3:14:f1: a2:42:e9:cd:45:ba:0b:14:71:68:b5:bb:8b:36:43: 2e:b1:bf:db:73:20:4f:0d:54:90:f2:28:b5:9b:4c: c3:9f:9f:50:ea:0b:f0:1b:30:86:4e:f8:01:3e:f5: d7:e9:70:cb:5c:e1:3c:b0:29:26:92:f3:74:de:61: 05:62:8b:60:1b:4a:10:21:e3:79:bf:83:71:a0:31: f6:a6:3b:d4:d2:70:a4:a6:2a:2e:69:4e:34:dc:fc: 28:47:09:d0:0d:08:68:3a:f8:29:da:98:8a:4e:0b: 5e:7c:c7:df:6d:f5:2b:0f:eb:43:cf:1f:25:a3:7a: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:CC:67:03:14:4D:C6:63:63:02:93:EB:3C:0E:8A:CB:90:1B:CD X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:5c:5e:54:d5:33:f5:7e:03:25:3b:d3:49:96:62:40:7d: 24:f3:48:99:ac:77:95:35:4e:81:f2:99:c9:02:a2:37:32:a4: 1b:4f:b6:9d:f9:47:8a:62:74:4b:d8:3f:7c:1a:2d:bb:9f:b8: 29:5f:94:f8:06:b5:cb:8e:12:1b:83:a7:9e:01:e1:65:af:23: 89:24:fb:78:51:d4:b1:77:95:59:27:ac:34:56:96:88:2c:5d: 8c:78:ab:07:c8:b5:30:8c:62:e9:3f:e6:42:c0:ad:22:50:67: 3a:37:30:28:32:9f:93:45:f6:66:29:80:fb:55:7d:c8:07:87: 82:b7:db:5d:be:66:fd:9e:ac:50:85:05:9b:84:7f:0b:db:17: e9:c5:05:46:9b:0b:3b:ff:28:99:a5:88:bf:1d:9e:02:4a:2b: dd:57:2a:ad:75:c5:11:72:2c:10:56:e2:ce:61:27:12:14:09: 09:a9:33:5b:00:77:9f:5c:72:cc:fc:4e:ef:e0:f5:a9:49:e3: d3:f6:73:ee:c9:15:78:41:fb:f1:99:18:85:21:df:f4:10:72: ec:a0:de:ff:83:c5:56:4a:92:e3:a6:d7:00:3b:af:e3:17:90: 72:98:1c:11:b7:99:f9:9a:3f:d3:cc:c9:ec:7b:6c:c6:7e:c1: 23:97:6d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeWn+BxWazfIFR16UB8e5WypjYBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA3MjMxNDQzMDRaFw0yNjA3MjQxODM1MDRaMDMxMTAvBgNV BAMTKDc3NEZDQzY3MDMxNDREQzY2MzYzMDI5M0VCM0MwRThBQ0I5MDFCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe019PTIzL1Anz6YIPKGLXfzt7 tcrcq9o7KIxXwKDjLB7F8uSPXARTj9Fc3E2QOHK3eL2Rw52xY7lTRd67XUtHKLDr UzQCjDdQtO4pYETQ3HV2g924fJjlCRaQezsqmrXOEZ14O7OvylTG15YMOQiCsKOR NXyUx37HBLgtRXcsa4+hdPMU8aJC6c1FugsUcWi1u4s2Qy6xv9tzIE8NVJDyKLWb TMOfn1DqC/AbMIZO+AE+9dfpcMtc4TywKSaS83TeYQVii2AbShAh43m/g3GgMfam O9TScKSmKi5pTjTc/ChHCdANCGg6+CnamIpOC158x99t9SsP60PPHyWjejUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0/MZwMUTcZjYwKT6zwOisuQG80wHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVYXF5U1TP1fgMlO9NJlmJAfSTzSJmsd5U1 ToHymckCojcypBtPtp35R4pidEvYP3waLbufuClflPgGtcuOEhuDp54B4WWvI4kk +3hR1LF3lVknrDRWlogsXYx4qwfItTCMYuk/5kLArSJQZzo3MCgyn5NF9mYpgPtV fcgHh4K3212+Zv2erFCFBZuEfwvbF+nFBUabCzv/KJmliL8dngJKK91XKq11xRFy LBBW4s5hJxIUCQmpM1sAd59ccsz8Tu/g9alJ49P2c+7JFXhB+/GZGIUh3/QQcuyg 3v+DxVZKkuOm1wA7r+MXkHKYHBG3mfmaP9PMyex7bMZ+wSOXbRM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:29 2026 by rpki-client