$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: pBu53AwnbvKt1vKLiTnSA1YF1r//qzTnZMrIXDhJeQE= Subject key identifier: 86:C7:55:22:80:74:0D:9A:5F:2F:93:10:3D:E2:CA:7A:30:02:BD:14 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 5A95E04E2A97BE24F89F0301D7B14D44F9E4179B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:21:18 +0000 Manifest this update: Thu 23 Jul 2026 13:16:18 +0000 Manifest next update: Fri 24 Jul 2026 14:15:18 +0000 Files and hashes: 1: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: mjwMzUlKgZ3sY9DSOkE9HjPOjQRAaLSmGxVeW1tgkdc=) 2: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) 3: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:95:e0:4e:2a:97:be:24:f8:9f:03:01:d7:b1:4d:44:f9:e4:17:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Jul 23 13:16:18 2026 GMT Not After : Jul 24 14:15:18 2026 GMT Subject: CN=86C7552280740D9A5F2F93103DE2CA7A3002BD14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:3e:cf:4f:8d:66:2b:ba:63:bd:52:98:87: ea:7c:ff:6f:fc:e3:db:5b:e7:18:e5:22:25:bb:e1: 98:88:18:17:19:cc:15:9c:f8:84:f0:92:57:6e:ea: ea:86:e7:ef:9d:6d:a6:86:04:ab:45:70:20:3f:78: db:52:57:65:50:80:89:68:94:48:16:b0:8f:f1:86: be:c5:6d:9f:55:f9:70:7c:90:b2:d1:63:0a:05:ce: d1:17:74:7a:c3:aa:22:7a:67:cc:c4:2a:c9:0b:43: c5:03:07:1d:20:30:d3:3b:66:b9:4a:4a:54:65:d6: 44:1f:a4:df:b0:1c:5f:6d:9f:72:97:6d:91:43:f3: 9e:15:07:ef:45:56:78:77:b4:5c:35:02:96:ee:4f: 4c:b2:d9:7c:5e:17:0b:fe:d1:f8:16:38:92:92:74: 53:5d:7b:54:7e:94:65:29:a7:11:9b:8a:fa:85:79: d4:e9:91:e0:c9:51:bb:b7:b1:95:c1:5e:5a:6f:f9: 78:cf:e3:89:59:3a:01:8b:f8:72:28:f3:18:32:77: 01:a7:de:e8:10:15:6f:49:25:f9:cc:70:dc:cc:f1: 40:50:d7:17:4c:f1:1a:21:0c:24:c4:ae:84:90:e5: 9b:d8:e3:fb:21:88:a2:ae:16:d9:8a:d4:de:00:49: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C7:55:22:80:74:0D:9A:5F:2F:93:10:3D:E2:CA:7A:30:02:BD:14 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:44:fe:be:71:1d:b2:f8:97:56:57:1b:26:b7:7c:a7:eb:aa: e1:8c:c4:51:38:85:74:11:1a:b3:7f:8c:76:d7:7b:b2:7d:f2: 5f:6f:55:2d:80:8d:26:1c:0f:8e:9d:5f:0b:fa:73:c4:47:f6: 71:00:52:a6:a2:3c:66:6c:50:ca:16:af:18:ce:13:e7:bf:cd: 2d:de:c6:44:95:72:fe:82:25:77:ab:d8:d8:74:a1:51:8b:dd: e3:f4:fe:da:06:35:16:0b:b7:32:6e:5b:71:0b:bd:09:87:89: 6a:ce:b5:e3:32:0d:02:80:7b:44:85:6a:c5:e7:8f:e7:62:c9: 8d:b3:42:30:6b:d6:6c:4f:63:29:d4:ca:b3:6b:2d:55:67:56: 63:f2:47:81:3b:e8:c8:e2:66:56:45:7c:0c:b8:96:c9:99:d0: e4:7b:5b:32:2e:51:9a:33:af:36:f8:89:63:21:86:2e:b3:50: 1c:b6:d6:8a:3b:12:60:90:56:94:54:4e:6a:b3:b1:27:a7:4e: 61:5a:e3:80:4b:55:10:2a:7f:ab:cc:6f:7c:9f:f6:49:e0:a4: ea:14:8c:5e:f0:1f:4f:9c:25:d0:38:95:18:12:a0:b2:12:80: 9c:4a:56:e7:ea:27:8c:01:f7:28:b9:48:9c:39:87:8f:13:b7: 19:67:71:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpXgTiqXviT4nwMB17FNRPnkF5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA3MjMxMzE2MThaFw0yNjA3MjQxNDE1MThaMDMxMTAvBgNV BAMTKDg2Qzc1NTIyODA3NDBEOUE1RjJGOTMxMDNERTJDQTdBMzAwMkJEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIcj7PT41mK7pjvVKYh+p8/2/8 49tb5xjlIiW74ZiIGBcZzBWc+ITwkldu6uqG5++dbaaGBKtFcCA/eNtSV2VQgIlo lEgWsI/xhr7FbZ9V+XB8kLLRYwoFztEXdHrDqiJ6Z8zEKskLQ8UDBx0gMNM7ZrlK SlRl1kQfpN+wHF9tn3KXbZFD854VB+9FVnh3tFw1ApbuT0yy2XxeFwv+0fgWOJKS dFNde1R+lGUppxGbivqFedTpkeDJUbu3sZXBXlpv+XjP44lZOgGL+HIo8xgydwGn 3ugQFW9JJfnMcNzM8UBQ1xdM8RohDCTEroSQ5ZvY4/shiKKuFtmK1N4ASXz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsdVIoB0DZpfL5MQPeLKejACvRQwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBE/r5xHbL4l1ZXGya3fKfrquGMxFE4hXQR GrN/jHbXe7J98l9vVS2AjSYcD46dXwv6c8RH9nEAUqaiPGZsUMoWrxjOE+e/zS3e xkSVcv6CJXer2Nh0oVGL3eP0/toGNRYLtzJuW3ELvQmHiWrOteMyDQKAe0SFasXn j+diyY2zQjBr1mxPYynUyrNrLVVnVmPyR4E76MjiZlZFfAy4lsmZ0OR7WzIuUZoz rzb4iWMhhi6zUBy21oo7EmCQVpRUTmqzsSenTmFa44BLVRAqf6vMb3yf9kngpOoU jF7wH0+cJdA4lRgSoLISgJxKVufqJ4wB9yi5SJw5h48TtxlncY0= -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:09 2026 by rpki-client