$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: pPlsIaUCBNoUC3Qfx1nIbuWbo9kPe7KZCWw/T8duPj4= Subject key identifier: DE:EE:C1:CB:5A:B7:07:A2:22:C0:FE:C3:FE:9D:AD:D1:4B:4F:58:FB Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 0247E14A5DF3855B553ABD694E43B0420DD95901 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:37:34 +0000 Manifest this update: Fri 24 Jul 2026 02:32:34 +0000 Manifest next update: Sat 25 Jul 2026 03:51:34 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) 3: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: KhyxxmAcvK0B2GQrjCUBogCe/YeS2GS/KDtdZ8SkjK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:47:e1:4a:5d:f3:85:5b:55:3a:bd:69:4e:43:b0:42:0d:d9:59:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Jul 24 02:32:34 2026 GMT Not After : Jul 25 03:51:34 2026 GMT Subject: CN=DEEEC1CB5AB707A222C0FEC3FE9DADD14B4F58FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:37:c1:49:a2:11:59:b3:fa:b6:60:c0:81: a1:1b:3a:2d:ed:bb:1f:0d:a3:88:16:b9:3d:df:db: e2:3b:ee:24:93:bb:04:17:79:59:12:ad:b4:38:89: 07:ce:75:90:a9:2c:a3:a9:3b:f9:1a:10:e0:cc:b8: 26:44:6c:55:f8:b5:69:9b:c2:05:76:b8:8a:a9:da: 7a:4c:0c:16:4f:d5:80:ff:d0:c1:73:40:ac:58:fc: 98:c4:32:2b:79:2f:42:f8:ff:35:94:0b:a4:29:0c: f4:79:d8:c6:d5:07:b4:3a:51:ef:5e:cc:e2:27:86: b0:20:ac:6e:8b:21:c8:d6:13:97:4b:9e:24:d7:56: 20:84:f4:e2:5b:57:dc:b0:bf:85:a8:c4:ff:fb:d0: 51:44:bb:a3:e7:41:06:42:b5:68:29:09:82:f7:68: e7:c4:5b:0e:6a:49:ad:34:8b:6e:de:70:99:e3:c7: 7f:10:f9:c4:c9:fc:3f:c1:df:2b:09:8b:1a:f5:7a: 7c:34:2b:67:e1:9b:3c:a8:80:e8:89:06:a4:0b:96: b0:81:19:6f:94:69:a4:0c:3c:45:6c:a4:4e:08:15: 9e:ce:c7:5c:fc:e8:cd:6e:5c:b6:6c:d3:b3:a7:7e: 7f:0e:28:80:f6:6f:a3:a5:58:5e:fc:86:c9:78:47: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:C1:CB:5A:B7:07:A2:22:C0:FE:C3:FE:9D:AD:D1:4B:4F:58:FB X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7a:49:34:6c:0b:bb:d8:ac:d9:26:f6:81:13:45:c3:f1:3c: 70:de:91:fe:15:b5:0d:41:59:e9:cc:62:e1:50:13:6b:00:87: d0:ce:ba:85:9e:b9:b4:61:71:2e:b9:81:02:43:56:3f:2e:b3: bc:4f:3d:f7:d1:94:6b:aa:0e:67:e2:1b:da:9f:dc:ee:02:9e: b2:06:ab:ac:51:83:de:13:95:4d:5f:3a:19:8b:b8:c4:53:f1: 75:69:b7:f9:ee:78:af:65:ee:19:a4:9d:80:55:b0:49:fc:39: fd:82:d9:f0:14:e0:e3:c7:c5:7f:23:b9:d1:04:eb:67:bb:5b: 91:6f:0f:96:83:03:eb:a0:7b:85:d3:22:11:60:7c:59:4f:92: 5e:76:46:bb:bf:f5:84:9c:16:c2:11:da:1a:3f:fc:f5:9c:83: 92:bd:2a:05:5d:07:db:25:20:56:cb:ec:64:7c:89:18:00:bc: c5:51:15:9a:87:8b:d0:bd:95:6c:73:1c:06:18:07:30:d3:85: bd:d4:32:8c:02:43:5a:ad:59:b2:39:d1:cc:44:84:77:c9:ec: 10:19:e4:5d:2f:5e:c1:33:25:00:21:77:bb:7c:6e:e9:1f:49: 09:59:0e:4e:1b:cd:27:0a:56:f2:02:94:73:e2:1f:07:84:75: 25:f5:95:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkfhSl3zhVtVOr1pTkOwQg3ZWQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA3MjQwMjMyMzRaFw0yNjA3MjUwMzUxMzRaMDMxMTAvBgNV BAMTKERFRUVDMUNCNUFCNzA3QTIyMkMwRkVDM0ZFOURBREQxNEI0RjU4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6zfBSaIRWbP6tmDAgaEbOi3t ux8No4gWuT3f2+I77iSTuwQXeVkSrbQ4iQfOdZCpLKOpO/kaEODMuCZEbFX4tWmb wgV2uIqp2npMDBZP1YD/0MFzQKxY/JjEMit5L0L4/zWUC6QpDPR52MbVB7Q6Ue9e zOInhrAgrG6LIcjWE5dLniTXViCE9OJbV9ywv4WoxP/70FFEu6PnQQZCtWgpCYL3 aOfEWw5qSa00i27ecJnjx38Q+cTJ/D/B3ysJixr1enw0K2fhmzyogOiJBqQLlrCB GW+UaaQMPEVspE4IFZ7Ox1z86M1uXLZs07Onfn8OKID2b6OlWF78hsl4RwJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3u7By1q3B6IiwP7D/p2t0UtPWPswHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB6STRsC7vYrNkm9oETRcPxPHDekf4VtQ1B WenMYuFQE2sAh9DOuoWeubRhcS65gQJDVj8us7xPPffRlGuqDmfiG9qf3O4CnrIG q6xRg94TlU1fOhmLuMRT8XVpt/nueK9l7hmknYBVsEn8Of2C2fAU4OPHxX8judEE 62e7W5FvD5aDA+uge4XTIhFgfFlPkl52Rru/9YScFsIR2ho//PWcg5K9KgVdB9sl IFbL7GR8iRgAvMVRFZqHi9C9lWxzHAYYBzDThb3UMowCQ1qtWbI50cxEhHfJ7BAZ 5F0vXsEzJQAhd7t8bukfSQlZDk4bzScKVvIClHPiHweEdSX1lWA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:13 2026 by rpki-client