$ rpki-client -vvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft File: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft (raw, json) Hash identifier: PmSUyhQ4TgxSecfyWnttyfi3eoaZwXAj78yIB9OsGm0= Subject key identifier: 62:B6:F2:E9:88:5A:A8:68:51:FC:08:F0:89:CC:80:C8:9A:D4:C9:4C Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 136BDDC26D09E77A8850EA8FE19DDB4BD7EFDFAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:17:36 +0000 Manifest this update: Thu 23 Jul 2026 10:12:36 +0000 Manifest next update: Fri 24 Jul 2026 13:22:36 +0000 Files and hashes: 1: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: xLoeT+ko7MUw5aLnf4wj8gyqTKfil2TZ1gKntVO+LKI=) 2: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: rXO9gTdPSQGsrR5rUmnzksusGY7II8+DMWGkUGzNqUA=) 3: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM=) 4: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl (hash: OYBBfKVhT82ikmTuD0EKfgmtIIBWc1w1JVUvu+GhHaE=) 5: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6b:dd:c2:6d:09:e7:7a:88:50:ea:8f:e1:9d:db:4b:d7:ef:df:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: Jul 23 10:12:36 2026 GMT Not After : Jul 24 13:22:36 2026 GMT Subject: CN=62B6F2E9885AA86851FC08F089CC80C89AD4C94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8e:e3:b5:24:69:1b:da:9d:8c:9a:b5:6d:c3: db:5d:b7:4a:2d:b4:8c:52:a2:0a:4d:05:99:0e:68: 26:04:b6:f0:5f:94:9f:e3:c5:61:02:e2:c8:65:2e: 6b:04:df:35:3a:ae:7c:b6:6e:e1:46:d8:77:6d:e7: 2b:d9:8b:c3:ad:53:3d:79:04:30:42:09:43:44:33: 39:39:28:ed:ca:d2:82:71:fb:6d:ae:f6:2e:dc:57: 8b:ed:23:e3:17:7e:a9:5f:0a:2a:8b:27:3d:70:59: 22:18:f6:6f:1b:b2:0d:92:e2:80:cd:c1:54:df:60: 07:df:03:bb:9d:7c:7e:7f:9a:5a:b5:9b:36:8d:70: 34:05:7a:99:50:9d:f8:ac:c4:50:57:42:ab:21:fc: 50:14:c3:a7:2e:45:3b:cb:f5:0e:39:00:bd:cf:2a: 89:57:91:9d:19:7b:85:b4:d9:2b:0c:49:e5:9c:6b: dd:8e:d6:18:51:2e:97:28:81:21:25:8a:a3:97:bc: 1f:58:96:62:5f:8e:eb:49:2b:a4:f8:af:41:92:a0: e6:9f:a9:fd:27:2e:3a:d5:f5:79:63:d1:59:0c:ee: 7c:41:f2:5d:4e:54:bb:f8:9b:fd:e2:22:f5:a3:b6: bc:f3:f3:4c:03:cf:7c:e9:21:eb:df:2c:a8:e0:a2: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B6:F2:E9:88:5A:A8:68:51:FC:08:F0:89:CC:80:C8:9A:D4:C9:4C X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:85:74:fb:13:26:71:55:c5:f6:bf:15:5a:f9:1b:5b:cc:d4: 33:8e:d1:34:3b:a3:ab:26:42:49:20:5a:e2:52:4f:e0:f8:a3: 00:73:f0:11:d7:1e:40:e6:79:d8:03:f6:46:6b:78:93:20:13: c3:95:ee:a9:0e:cf:3a:29:aa:92:eb:ef:af:0f:8b:1e:45:8a: f7:2c:ed:19:37:ca:2b:c1:56:ff:20:dc:34:b8:78:87:21:b6: 91:79:30:dd:36:f0:f2:71:c3:84:9e:b1:18:ea:d4:e8:41:09: 2c:71:7c:d8:6d:00:a7:f3:c2:c0:45:84:fa:ba:2a:c5:3b:a7: 9a:94:85:02:71:ae:a2:6c:d4:fb:c6:d1:6c:14:e3:49:a4:93: 27:49:1e:3d:c6:03:0d:23:8e:77:0c:8f:49:cd:66:22:9a:97: b8:33:88:21:fc:7f:ad:99:c7:24:a3:fe:ee:14:59:7f:8a:e1: bc:c3:03:14:d0:95:75:6a:6b:59:68:88:38:be:7e:db:21:51: d4:5e:73:01:7d:0a:bc:82:d2:b1:16:4d:d8:d1:75:7c:52:07: 83:8a:57:9f:60:f2:36:fe:65:fa:d1:a4:f2:1a:6e:aa:d1:b3: 65:dd:66:96:71:ca:56:6e:3b:9e:0e:2a:28:63:05:2a:0d:4f: 29:ba:1d:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2vdwm0J53qIUOqP4Z3bS9fv364wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA3MjMxMDEyMzZaFw0yNjA3MjQxMzIyMzZaMDMxMTAvBgNV BAMTKDYyQjZGMkU5ODg1QUE4Njg1MUZDMDhGMDg5Q0M4MEM4OUFENEM5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjuO1JGkb2p2MmrVtw9tdt0ot tIxSogpNBZkOaCYEtvBflJ/jxWEC4shlLmsE3zU6rny2buFG2Hdt5yvZi8OtUz15 BDBCCUNEMzk5KO3K0oJx+22u9i7cV4vtI+MXfqlfCiqLJz1wWSIY9m8bsg2S4oDN wVTfYAffA7udfH5/mlq1mzaNcDQFeplQnfisxFBXQqsh/FAUw6cuRTvL9Q45AL3P KolXkZ0Ze4W02SsMSeWca92O1hhRLpcogSEliqOXvB9YlmJfjutJK6T4r0GSoOaf qf0nLjrV9Xlj0VkM7nxB8l1OVLv4m/3iIvWjtrzz80wDz3zpIevfLKjgokOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrby6YhaqGhR/AjwicyAyJrUyUwwHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhG RjRFQzEwMTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCFdPsTJnFVxfa/FVr5G1vM1DOO0TQ7o6sm QkkgWuJST+D4owBz8BHXHkDmedgD9kZreJMgE8OV7qkOzzopqpLr768Pix5Fivcs 7Rk3yivBVv8g3DS4eIchtpF5MN028PJxw4SesRjq1OhBCSxxfNhtAKfzwsBFhPq6 KsU7p5qUhQJxrqJs1PvG0WwU40mkkydJHj3GAw0jjncMj0nNZiKal7gziCH8f62Z xySj/u4UWX+K4bzDAxTQlXVqa1loiDi+ftshUdRecwF9CryC0rEWTdjRdXxSB4OK V59g8jb+ZfrRpPIabqrRs2XdZpZxylZuO54OKihjBSoNTym6Hd0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:01 2026 by rpki-client