$ rpki-client -vvf rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft File: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft (raw, json) Hash identifier: Yl0Rl/ZIKp+bCmp2q1oTSCMigvx898IFbuq2dfqhEwU= Subject key identifier: 75:47:41:A7:C7:AC:74:FA:67:BE:D7:A6:D4:8B:E6:08:8B:B0:53:27 Authority key identifier: 20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 Certificate issuer: /CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Certificate serial: 47826904698E31C7B85E1487DC0CA2A72E0DFC5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 00:41:43 +0000 Manifest this update: Tue 21 Jul 2026 00:36:43 +0000 Manifest next update: Wed 22 Jul 2026 01:21:43 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: tatwrYHu7JXRVNAEJ7zvfFLaGPSecYMyGR6xa2Isi2s=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: DmkUsE6kINSF6XD/3Zq+sJqW+TGuGAU9gHKB12XCOEU=) 3: 206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl (hash: xHtwom8eFStB0OOTSGgEFkEUKdxjSAE1qn2SOmTWaNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:69:04:69:8e:31:c7:b8:5e:14:87:dc:0c:a2:a7:2e:0d:fc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206EBD04AE332A983FD5EB49B8B9C0022E577DE2 Validity Not Before: Jul 21 00:36:43 2026 GMT Not After : Jul 22 01:21:43 2026 GMT Subject: CN=754741A7C7AC74FA67BED7A6D48BE6088BB05327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:52:6d:19:b1:82:9c:76:95:e3:d8:7d:13: 61:04:ca:89:ac:25:8b:42:e2:0d:df:dd:93:c1:39: e2:d0:16:3c:33:f6:37:d5:c8:af:80:cd:bd:97:21: d5:49:fa:0a:77:9d:28:bb:e8:65:e3:67:1a:34:de: 36:6e:bb:ab:a1:99:b5:2d:97:59:e8:c5:88:24:eb: 81:cd:07:b0:83:d5:83:bb:23:75:de:6d:5d:d0:18: ca:a1:ce:49:09:97:1e:fb:97:fa:b1:3c:f5:5d:04: e1:a5:12:20:ba:41:e1:29:af:dd:bd:9b:3b:b4:af: ca:cd:71:17:d8:b9:a9:a0:24:55:61:2b:64:ac:ba: 2b:5d:ab:86:3d:ea:a8:bc:15:88:bc:b1:05:fa:54: 8f:23:9b:2f:5f:62:ff:b3:5b:36:e1:e4:b5:d1:15: ff:4d:ca:1b:e9:91:cc:f1:5b:7b:7c:f3:f0:be:71: ba:57:de:b0:ba:bb:6e:65:da:a3:2e:d1:4e:7c:06: a0:44:a1:e2:1c:fa:de:db:ea:ff:50:b5:5f:7f:6e: 6b:5c:fb:bf:4d:ac:02:a3:28:40:d4:00:a8:46:13: 1c:0e:8a:0a:ff:18:4a:58:13:6f:67:8d:2c:1f:00: 4a:75:b6:6e:38:7a:7f:3a:ef:03:78:56:0e:6f:f7: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:47:41:A7:C7:AC:74:FA:67:BE:D7:A6:D4:8B:E6:08:8B:B0:53:27 X509v3 Authority Key Identifier: keyid:20:6E:BD:04:AE:33:2A:98:3F:D5:EB:49:B8:B9:C0:02:2E:57:7D:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/206EBD04AE332A983FD5EB49B8B9C0022E577DE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:52:3f:98:35:6e:91:ff:19:31:e7:1c:c8:81:b7:ae:61:ce: 09:20:e4:12:01:c9:29:e7:f8:5a:c3:e1:4d:51:c3:94:29:43: 86:2a:5f:5c:4a:f9:5a:8f:28:70:c2:81:17:eb:4d:9b:82:6d: ff:65:70:eb:5b:18:57:1e:a6:17:89:4a:f5:9e:73:34:e6:f0: 4c:28:bd:37:ae:c3:1a:bf:56:01:88:ad:ef:c3:8a:89:72:ac: 1a:ff:34:66:30:6b:fa:38:c2:70:e7:07:79:fd:e9:87:cf:ba: 42:5e:97:4e:ef:de:fd:f3:30:23:1f:e7:6f:5f:bc:c3:64:bc: d5:0b:78:9e:97:92:13:db:ff:b8:c9:d5:17:a0:4e:00:13:cf: 70:1e:7d:e4:87:8a:7b:f8:5a:3c:24:73:bb:a9:14:63:7e:ff: d8:cb:3f:51:ba:f1:66:ba:f6:47:82:eb:98:8d:fa:0f:0c:a0: 89:7f:14:00:98:e6:a5:ba:9f:c3:04:a9:ec:d7:82:29:3e:5b: fd:a6:6d:dd:ca:2d:53:79:d1:e9:6a:e7:52:ad:9a:66:bf:f6: 51:ce:c3:76:7a:52:87:90:fd:a4:75:d8:7c:6e:2e:16:ca:d2: 0c:d3:b2:62:59:66:3f:6f:73:41:b3:eb:83:32:21:28:36:96: 60:4f:0a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4JpBGmOMce4XhSH3Ayipy4N/FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIy RTU3N0RFMjAeFw0yNjA3MjEwMDM2NDNaFw0yNjA3MjIwMTIxNDNaMDMxMTAvBgNV BAMTKDc1NDc0MUE3QzdBQzc0RkE2N0JFRDdBNkQ0OEJFNjA4OEJCMDUzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTk1JtGbGCnHaV49h9E2EEyoms JYtC4g3f3ZPBOeLQFjwz9jfVyK+Azb2XIdVJ+gp3nSi76GXjZxo03jZuu6uhmbUt l1noxYgk64HNB7CD1YO7I3XebV3QGMqhzkkJlx77l/qxPPVdBOGlEiC6QeEpr929 mzu0r8rNcRfYuamgJFVhK2Ssuitdq4Y96qi8FYi8sQX6VI8jmy9fYv+zWzbh5LXR Ff9NyhvpkczxW3t88/C+cbpX3rC6u25l2qMu0U58BqBEoeIc+t7b6v9QtV9/bmtc +79NrAKjKEDUAKhGExwOigr/GEpYE29njSwfAEp1tm44en867wN4Vg5v97dJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUdBp8esdPpnvtem1IvmCIuwUycwHwYDVR0j BBgwFoAUIG69BK4zKpg/1etJuLnAAi5XfeIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWRmNDE2NGUtNzRlNS00MGQ2LTlhMzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRB RTMzMkE5ODNGRDVFQjQ5QjhCOUMwMDIyRTU3N0RFMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDZFQkQwNEFFMzMyQTk4M0ZENUVCNDlCOEI5QzAwMjJFNTc3 REUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvMjA2RUJEMDRBRTMzMkE5ODNGRDVFQjQ5QjhCOUMw MDIyRTU3N0RFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVSP5g1bpH/GTHnHMiBt65hzgkg5BIBySnn +FrD4U1Rw5QpQ4YqX1xK+VqPKHDCgRfrTZuCbf9lcOtbGFcepheJSvWeczTm8Ewo vTeuwxq/VgGIre/DiolyrBr/NGYwa/o4wnDnB3n96YfPukJel07v3v3zMCMf529f vMNkvNULeJ6XkhPb/7jJ1RegTgATz3AefeSHinv4Wjwkc7upFGN+/9jLP1G68Wa6 9keC65iN+g8MoIl/FACY5qW6n8MEqezXgik+W/2mbd3KLVN50elq51Ktmma/9lHO w3Z6UoeQ/aR12HxuLhbK0gzTsmJZZj9vc0Gz64MyISg2lmBPCqQ= -----END CERTIFICATE-----Generated at Tue Jul 21 08:24:14 2026 by rpki-client