$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: lBZ7W8nRgrpAJMTFxEPdiVnF45pKSUCrWzwiMqGhTpU= Subject key identifier: 46:92:C1:CB:FE:87:13:CD:3A:2C:A1:6B:40:AB:07:DA:52:FE:18:26 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 34E04D9895B48D616FB5EB3AE1860815869F7620 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 19:36:48 +0000 Manifest this update: Thu 03 Sep 2026 19:31:48 +0000 Manifest next update: Fri 04 Sep 2026 22:32:48 +0000 Files and hashes: 1: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: h1s8fG6HgYoeacY4mGEprrpEvGU+Fc0BPAbQBmhoqFI=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 22:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e0:4d:98:95:b4:8d:61:6f:b5:eb:3a:e1:86:08:15:86:9f:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Sep 3 19:31:48 2026 GMT Not After : Sep 4 22:32:48 2026 GMT Subject: CN=4692C1CBFE8713CD3A2CA16B40AB07DA52FE1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:5d:0c:6d:4c:a8:54:13:e5:05:db:e6:e6: 06:46:6d:96:aa:06:f4:9b:a3:80:be:d4:a1:94:bf: 2a:52:87:9d:db:5e:a4:63:68:13:e3:e7:08:0e:3a: 9f:2b:fb:1e:fe:ad:44:b2:9d:a4:ff:bd:12:24:af: 19:17:2c:e9:e4:38:86:f1:b6:d8:11:44:79:5b:1b: b2:f3:c2:cf:13:e1:88:0e:49:a2:85:e8:3e:2b:48: db:d0:79:99:fa:d1:df:b4:2b:26:36:5d:1b:19:54: a4:f5:84:ff:5a:d3:df:a2:e7:de:6b:fb:a7:42:a6: 44:6e:0d:e7:63:23:7a:0a:9f:16:8e:f4:c0:f1:0e: f1:34:81:28:54:4f:00:ae:8d:f7:31:39:e7:54:08: bd:fe:65:a1:58:75:80:26:8f:d5:17:ca:aa:76:27: 30:c9:59:e8:f3:2d:c3:c3:4d:1d:5c:08:6d:93:47: 67:f1:c0:75:04:b7:ce:b1:b2:66:ab:6c:64:d4:c1: 29:d2:7a:58:23:f7:d5:65:f6:81:cb:4e:47:65:8f: fd:86:94:ea:8d:bb:60:7b:f9:0b:e6:51:9d:0d:37: e7:46:c8:6b:6d:cf:09:9c:0c:45:3c:3c:d8:f8:a1: f2:15:c9:d8:6e:b4:db:35:b9:01:b2:0b:9c:60:53: 1d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:92:C1:CB:FE:87:13:CD:3A:2C:A1:6B:40:AB:07:DA:52:FE:18:26 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7f:27:b1:4e:65:54:d5:0b:75:05:af:59:29:a5:aa:1a:48: 2e:fa:1d:55:4b:da:c2:9c:5a:9a:d9:a4:c7:0a:62:fc:a8:43: bb:d5:86:8b:0e:16:25:38:1b:84:cd:32:c5:e0:a7:46:00:c6: 9e:5d:1f:90:1f:71:90:e6:1c:11:7c:46:e9:16:1f:05:ba:ed: 57:33:d8:69:a9:20:e7:a1:89:da:0b:9c:ca:00:0b:d8:84:64: 9c:86:ed:f9:56:f4:5b:70:bf:0a:af:3c:74:90:be:13:06:22: c6:bd:6e:37:f1:a6:5f:57:c5:9f:6e:fc:a2:cb:38:b5:db:51: 9d:41:01:47:f2:6e:e0:24:be:06:2c:99:cb:ba:6a:61:6c:a4: 65:35:15:10:6c:2f:6a:5d:8b:55:68:8f:ed:28:a8:43:05:dc: f1:2e:cd:dc:82:70:20:b8:ce:07:d1:d6:69:40:14:2b:ca:79: 07:9c:9a:4d:c5:53:01:7a:1e:6a:b1:72:c4:d6:db:d7:ad:57: 39:28:67:8b:4c:8d:c7:bc:5d:60:22:f6:49:22:7a:fe:bd:f9: 34:3a:20:4c:b6:19:8b:35:ca:16:4c:ef:3c:66:1d:2b:84:eb: de:df:a6:4e:db:48:f6:cc:58:ed:b1:0d:97:37:da:30:7d:91: 08:02:f9:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOBNmJW0jWFvtes64YYIFYafdiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA5MDMxOTMxNDhaFw0yNjA5MDQyMjMyNDhaMDMxMTAvBgNV BAMTKDQ2OTJDMUNCRkU4NzEzQ0QzQTJDQTE2QjQwQUIwN0RBNTJGRTE4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+F0MbUyoVBPlBdvm5gZGbZaq BvSbo4C+1KGUvypSh53bXqRjaBPj5wgOOp8r+x7+rUSynaT/vRIkrxkXLOnkOIbx ttgRRHlbG7Lzws8T4YgOSaKF6D4rSNvQeZn60d+0KyY2XRsZVKT1hP9a09+i595r +6dCpkRuDedjI3oKnxaO9MDxDvE0gShUTwCujfcxOedUCL3+ZaFYdYAmj9UXyqp2 JzDJWejzLcPDTR1cCG2TR2fxwHUEt86xsmarbGTUwSnSelgj99Vl9oHLTkdlj/2G lOqNu2B7+QvmUZ0NN+dGyGttzwmcDEU8PNj4ofIVydhutNs1uQGyC5xgUx1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpLBy/6HE806LKFrQKsH2lL+GCYwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp/J7FOZVTVC3UFr1kppaoaSC76HVVL2sKc WprZpMcKYvyoQ7vVhosOFiU4G4TNMsXgp0YAxp5dH5AfcZDmHBF8RukWHwW67Vcz 2GmpIOehidoLnMoAC9iEZJyG7flW9FtwvwqvPHSQvhMGIsa9bjfxpl9XxZ9u/KLL OLXbUZ1BAUfybuAkvgYsmcu6amFspGU1FRBsL2pdi1Voj+0oqEMF3PEuzdyCcCC4 zgfR1mlAFCvKeQecmk3FUwF6HmqxcsTW29etVzkoZ4tMjce8XWAi9kkiev69+TQ6 IEy2GYs1yhZM7zxmHSuE697fpk7bSPbMWO2xDZc32jB9kQgC+a0= -----END CERTIFICATE-----Generated at Fri Sep 4 10:40:02 2026 by rpki-client