$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: P4do37Rw4yQnu9HPrieOpjk/48EbxEJLZqiQ2gy9/p4= Subject key identifier: A8:A3:C7:1C:3D:86:C0:9F:F3:BB:CE:73:6F:51:44:2D:25:12:E4:E7 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 11E1D56CD96BE30DF8BAEF2E07E5F0EEEE708983 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 06:58:48 +0000 Manifest this update: Tue 02 Jun 2026 06:53:48 +0000 Manifest next update: Wed 03 Jun 2026 10:53:48 +0000 Files and hashes: 1: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: 3i58ujo/PnTwdON5uXIZRmvYKC+oMGfw3+Jngyu6Wos=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:d5:6c:d9:6b:e3:0d:f8:ba:ef:2e:07:e5:f0:ee:ee:70:89:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Jun 2 06:53:48 2026 GMT Not After : Jun 3 10:53:48 2026 GMT Subject: CN=A8A3C71C3D86C09FF3BBCE736F51442D2512E4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:ca:cb:e1:5d:8c:57:7a:93:53:1a:34:7c: 66:39:73:3b:95:b9:b5:a5:37:1a:73:e5:94:6c:95: d7:52:8a:91:fa:81:bd:06:48:85:5a:3b:2f:31:f7: 9e:f8:95:17:53:37:d6:74:4e:f4:76:c3:7e:e7:f3: e2:e3:2d:0b:b5:38:6e:28:5b:6c:ec:8b:26:6b:ec: bf:38:2b:5c:21:1c:4d:9e:b1:be:47:48:5e:c1:2a: a7:f0:f7:38:d2:97:0d:e2:52:f8:f9:4d:32:7b:80: 78:5f:96:00:8f:8b:10:14:55:75:86:c3:12:b6:7d: 7a:59:d3:0d:6f:b1:da:9c:64:bf:b4:65:1b:4e:2c: 3b:52:ac:be:b6:f5:dd:bb:59:0a:31:c0:f5:73:b5: c4:13:cc:e2:e1:98:22:51:fa:5b:95:2b:fa:b9:96: c1:2d:48:71:3d:c1:b2:8b:5d:f3:e9:c3:d3:dd:0b: 09:88:cd:a8:f4:a7:6b:86:4e:5a:c3:2b:20:60:b0: 18:f8:ba:47:bb:b4:4a:27:3a:71:a6:99:48:2c:b2: 06:d8:e6:5b:a0:e9:0a:77:97:41:a2:e9:d7:77:e4: 61:4b:9b:b8:ed:95:86:3d:2e:4d:f4:83:b9:df:87: 7d:68:e3:18:50:cf:97:b7:23:24:19:34:f3:47:59: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:C7:1C:3D:86:C0:9F:F3:BB:CE:73:6F:51:44:2D:25:12:E4:E7 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:e4:d8:31:e9:7b:36:d4:82:90:1e:89:9e:bf:b5:23:a6: a2:dd:fe:7d:75:93:3f:80:1b:fe:d5:d9:f5:64:fb:24:59:f7: 12:61:3f:81:73:8d:64:a5:12:52:d4:22:62:c9:2e:31:0e:58: 9f:ae:0f:a9:30:3f:5e:e5:19:c9:08:b9:6a:36:e4:b6:f4:b1: c0:2d:a2:51:a0:b6:63:0b:b3:7b:77:be:ed:1b:34:38:24:52: 8d:80:f9:42:13:55:25:8d:f6:70:fc:d0:cd:c8:8c:c5:c0:41: aa:8e:0f:db:ca:51:2a:62:25:8e:21:be:ef:00:c5:27:08:9e: 53:e4:ce:a9:d8:28:89:f8:52:26:3f:20:c2:fc:51:31:a2:9a: ff:23:bd:ca:0c:c7:01:68:d0:d5:48:ad:a9:78:6b:ac:f0:e1: a2:a8:5f:4f:5a:48:a0:d4:15:9f:f2:6d:91:5d:3c:cb:c8:d2: 20:88:d8:41:db:55:40:74:e5:f6:99:38:88:af:b0:b6:a7:dd: 54:4f:74:46:8c:74:d1:51:b0:ed:e6:c2:94:b6:fe:3d:0c:56: c1:b0:39:4d:0d:04:75:75:d3:e7:dd:d6:6c:3e:c8:b4:e2:e6: 56:23:1f:73:f5:9c:42:36:61:d1:c6:a3:4a:46:d3:72:41:1b: 88:9f:b4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeHVbNlr4w34uu8uB+Xw7u5wiYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA2MDIwNjUzNDhaFw0yNjA2MDMxMDUzNDhaMDMxMTAvBgNV BAMTKEE4QTNDNzFDM0Q4NkMwOUZGM0JCQ0U3MzZGNTE0NDJEMjUxMkU0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQ8rL4V2MV3qTUxo0fGY5czuV ubWlNxpz5ZRslddSipH6gb0GSIVaOy8x9574lRdTN9Z0TvR2w37n8+LjLQu1OG4o W2zsiyZr7L84K1whHE2esb5HSF7BKqfw9zjSlw3iUvj5TTJ7gHhflgCPixAUVXWG wxK2fXpZ0w1vsdqcZL+0ZRtOLDtSrL629d27WQoxwPVztcQTzOLhmCJR+luVK/q5 lsEtSHE9wbKLXfPpw9PdCwmIzaj0p2uGTlrDKyBgsBj4uke7tEonOnGmmUgssgbY 5lug6Qp3l0Gi6dd35GFLm7jtlYY9Lk30g7nfh31o4xhQz5e3IyQZNPNHWaLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKPHHD2GwJ/zu85zb1FELSUS5OcwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY85Ngx6Xs21IKQHomev7UjpqLd/n11kz+A G/7V2fVk+yRZ9xJhP4FzjWSlElLUImLJLjEOWJ+uD6kwP17lGckIuWo25Lb0scAt olGgtmMLs3t3vu0bNDgkUo2A+UITVSWN9nD80M3IjMXAQaqOD9vKUSpiJY4hvu8A xScInlPkzqnYKIn4UiY/IML8UTGimv8jvcoMxwFo0NVIral4a6zw4aKoX09aSKDU FZ/ybZFdPMvI0iCI2EHbVUB05faZOIivsLan3VRPdEaMdNFRsO3mwpS2/j0MVsGw OU0NBHV10+fd1mw+yLTi5lYjH3P1nEI2YdHGo0pG03JBG4iftDQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:16:33 2026 by rpki-client