$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: vPhzRyrm10ptqGaL/BKCt9F9JduHMNipN1J7cQEFYi4= Subject key identifier: D3:99:E8:6D:D6:56:1B:5D:83:64:89:0E:99:1F:AB:64:A2:08:09:9E Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 37DBF05223DF1D28C38E4017F2A037784F27C869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:10:52 +0000 Manifest this update: Thu 23 Jul 2026 21:05:52 +0000 Manifest next update: Sat 25 Jul 2026 00:13:52 +0000 Files and hashes: 1: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 3: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: O+txXRpDRRYnUFizBYqGGJys3cQbffA5EcpBNdjb6Ls=) 4: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:db:f0:52:23:df:1d:28:c3:8e:40:17:f2:a0:37:78:4f:27:c8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Jul 23 21:05:52 2026 GMT Not After : Jul 25 00:13:52 2026 GMT Subject: CN=D399E86DD6561B5D8364890E991FAB64A208099E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:94:2d:79:ca:88:af:ac:c3:22:6b:19:80: c1:5c:19:85:aa:6b:90:65:c2:8b:3b:e5:94:23:9e: fe:b6:b1:a8:d5:8f:fc:39:fc:f0:b6:a9:29:d8:8f: 97:8d:dd:8e:16:de:4c:47:45:bb:7a:76:f5:53:c5: d6:e4:a0:57:9d:ee:80:f7:19:c9:98:31:57:8b:ca: 4a:56:91:df:05:a9:b6:b5:bf:71:6d:d4:88:74:72: de:b7:4d:f1:a1:bd:27:1b:16:6e:57:49:9a:f1:29: 8c:5a:3f:32:bb:0b:37:a8:0b:a0:a0:79:53:82:20: 13:bb:77:1c:db:f1:6a:c4:c9:86:1b:8d:09:e9:b2: 96:f4:56:fe:0f:25:e3:31:33:f0:62:68:bd:ca:75: 60:df:9a:bf:84:dd:d8:43:8e:18:aa:45:f6:d2:29: 03:4f:e0:88:16:5c:20:ac:a5:8c:27:80:3e:77:78: a0:b8:ea:ba:61:ba:25:b6:ea:cd:eb:65:16:c8:9c: d2:a2:42:f9:34:f9:24:07:d5:b9:84:eb:af:1d:e0: 5a:1f:3f:ef:89:18:7e:f4:ca:b0:45:95:c4:9e:0e: 38:bd:05:d0:7d:c8:ca:a8:6e:27:50:39:94:84:45: c8:0e:b5:1d:63:22:5e:a8:65:5d:83:ce:65:4b:3e: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:E8:6D:D6:56:1B:5D:83:64:89:0E:99:1F:AB:64:A2:08:09:9E X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:70:d3:98:36:29:9e:c8:5c:c5:d0:94:36:e2:ff:08:30:ee: 7f:31:57:09:90:6a:ec:c3:7d:6f:a9:a3:05:29:08:01:a1:af: f2:50:08:96:1e:cb:4c:38:56:37:0b:e8:13:fa:a6:f8:82:34: 5f:be:f8:20:6e:46:54:94:30:9b:e5:e9:e3:6a:5f:6f:ab:ab: 20:61:23:41:50:9c:70:92:5c:c2:56:c1:77:f1:c3:84:c3:2a: 17:ea:52:e5:7c:dd:b6:6c:32:de:22:29:c6:00:cd:8b:36:27: d3:c7:08:48:4d:14:03:e4:33:b1:81:d0:3f:62:a4:41:eb:b5: 81:38:b9:ed:11:a3:35:43:7e:67:06:b2:cb:11:4d:c4:7d:41: 6e:84:46:73:d1:10:1a:58:d5:93:43:16:67:48:a0:0b:36:73: 49:57:f0:8c:85:11:2d:d2:3f:69:97:0c:42:9b:a9:d7:55:7e: 71:fd:64:98:e2:0e:fb:f8:6a:3e:ae:25:7b:d6:7d:ed:2d:5d: 9b:e1:2f:87:6f:67:24:06:a4:07:c8:a9:1a:5f:0c:73:01:c9: 14:b2:09:35:06:43:53:c9:96:3c:23:dd:98:42:90:ac:c9:b4: 23:47:0e:4d:02:39:46:42:14:c9:54:dc:d3:43:63:48:67:7a: b7:8f:39:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9vwUiPfHSjDjkAX8qA3eE8nyGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA3MjMyMTA1NTJaFw0yNjA3MjUwMDEzNTJaMDMxMTAvBgNV BAMTKEQzOTlFODZERDY1NjFCNUQ4MzY0ODkwRTk5MUZBQjY0QTIwODA5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qZQtecqIr6zDImsZgMFcGYWq a5Blwos75ZQjnv62sajVj/w5/PC2qSnYj5eN3Y4W3kxHRbt6dvVTxdbkoFed7oD3 GcmYMVeLykpWkd8Fqba1v3Ft1Ih0ct63TfGhvScbFm5XSZrxKYxaPzK7CzeoC6Cg eVOCIBO7dxzb8WrEyYYbjQnpspb0Vv4PJeMxM/BiaL3KdWDfmr+E3dhDjhiqRfbS KQNP4IgWXCCspYwngD53eKC46rphuiW26s3rZRbInNKiQvk0+SQH1bmE668d4Fof P++JGH70yrBFlcSeDji9BdB9yMqobidQOZSERcgOtR1jIl6oZV2DzmVLPru9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05nobdZWG12DZIkOmR+rZKIICZ4wHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdw05g2KZ7IXMXQlDbi/wgw7n8xVwmQauzD fW+powUpCAGhr/JQCJYey0w4VjcL6BP6pviCNF+++CBuRlSUMJvl6eNqX2+rqyBh I0FQnHCSXMJWwXfxw4TDKhfqUuV83bZsMt4iKcYAzYs2J9PHCEhNFAPkM7GB0D9i pEHrtYE4ue0RozVDfmcGsssRTcR9QW6ERnPREBpY1ZNDFmdIoAs2c0lX8IyFES3S P2mXDEKbqddVfnH9ZJjiDvv4aj6uJXvWfe0tXZvhL4dvZyQGpAfIqRpfDHMByRSy CTUGQ1PJljwj3ZhCkKzJtCNHDk0COUZCFMlU3NNDY0hnerePOcE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:04:53 2026 by rpki-client