$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: V/ZS4oICkWHB/REPY4bJqBpbt0C/qn+BYeFEMsNvc0Q= Subject key identifier: 63:E8:72:B1:3C:F7:3B:19:1A:7C:54:8B:E3:68:C2:8F:EF:AA:60:F2 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 5F5C5A21E459EFF048FC4424E16AB99EA015EB12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:31:57 +0000 Manifest this update: Mon 20 Jul 2026 12:26:57 +0000 Manifest next update: Tue 21 Jul 2026 15:57:57 +0000 Files and hashes: 1: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: rgwUvRvZgip8QluSFUPVkZ+zZKjAZ7jHlAh1/MHU7r8=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) 3: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:5a:21:e4:59:ef:f0:48:fc:44:24:e1:6a:b9:9e:a0:15:eb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Jul 20 12:26:57 2026 GMT Not After : Jul 21 15:57:57 2026 GMT Subject: CN=63E872B13CF73B191A7C548BE368C28FEFAA60F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:9d:8d:51:37:e4:89:95:82:5a:9d:a8:e1: 4b:ee:5e:87:a2:6c:23:00:10:30:32:fd:1d:72:7d: d4:42:5a:47:e7:a8:9b:c2:f6:bc:13:23:2d:f8:8b: 02:32:99:90:ea:fc:c4:96:4b:d0:4d:bb:2e:04:5b: 2b:99:fe:53:dc:d5:fd:e5:ec:e1:91:cf:ae:3a:01: c7:0f:bb:25:af:0d:08:85:6e:61:ff:0b:1e:44:d0: 67:c8:0d:3b:7b:d7:e8:5c:6c:59:f7:34:87:36:5f: 19:76:05:26:53:44:81:60:86:23:2e:64:33:67:82: 41:5d:a9:ec:ff:42:b6:e3:fd:4c:3c:c4:81:88:a7: dd:9a:48:6d:ac:2f:1c:56:bd:80:ed:21:34:c9:0b: 44:dd:7a:50:9e:7d:1b:ae:41:68:e4:56:aa:67:2f: cc:a9:71:f9:a6:77:62:35:51:08:40:fd:ac:76:28: 4a:04:ce:d1:30:ed:41:c9:bf:47:3d:30:52:ae:4e: 7f:5e:8b:2d:1a:4f:c3:53:ee:8f:af:e6:43:c5:69: 7b:fb:59:9a:46:81:d9:38:8c:57:04:45:16:c4:43: e0:d9:52:2a:96:34:6a:5a:02:db:eb:61:ee:ea:91: 17:7e:de:d3:8f:7e:f3:13:75:b9:70:b1:67:9a:90: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:72:B1:3C:F7:3B:19:1A:7C:54:8B:E3:68:C2:8F:EF:AA:60:F2 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:dc:92:8b:49:ea:45:6f:c2:01:88:ac:b0:e5:fb:ed:1d: 5e:80:b2:6e:f6:79:34:b3:c7:1e:fa:9f:f0:11:3a:d0:18:0c: b3:2a:1d:64:de:d7:1d:95:71:9e:92:35:30:46:ab:c9:ef:49: 8c:9f:82:66:7e:81:1e:ff:5a:0a:7c:35:36:0c:27:3c:e8:35: ac:c1:42:c6:3f:7a:f9:d5:7e:5d:57:85:c2:65:0e:17:8e:c0: 22:a4:c6:eb:a2:e8:db:72:8b:67:b7:c0:ba:f8:b1:77:9d:60: 15:83:8e:23:43:91:db:d0:2f:b0:6e:a6:f6:8e:41:8e:3b:40: 79:4e:e6:ff:5a:d7:21:ab:7b:51:ae:12:6b:04:5a:3b:56:be: 2b:7e:9f:d9:64:6c:62:a7:a3:b2:2a:08:f9:6e:b0:57:0f:6b: 9f:9c:13:97:82:19:2c:58:c9:b9:72:40:f0:5c:73:e4:8e:a9: 44:c8:6e:39:bc:61:19:86:ea:c5:28:aa:33:08:80:e6:53:d6: 72:bb:c6:00:db:63:80:54:b6:fc:ed:d1:db:dc:b0:24:9d:35: 5b:66:57:b8:d2:1c:47:03:08:d4:16:83:f1:11:99:8d:58:65: 4b:ec:09:ed:ed:26:36:f4:e9:96:20:f9:ba:1b:f4:9c:48:58: b7:d6:76:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1xaIeRZ7/BI/EQk4Wq5nqAV6xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA3MjAxMjI2NTdaFw0yNjA3MjExNTU3NTdaMDMxMTAvBgNV BAMTKDYzRTg3MkIxM0NGNzNCMTkxQTdDNTQ4QkUzNjhDMjhGRUZBQTYwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oZ2NUTfkiZWCWp2o4UvuXoei bCMAEDAy/R1yfdRCWkfnqJvC9rwTIy34iwIymZDq/MSWS9BNuy4EWyuZ/lPc1f3l 7OGRz646AccPuyWvDQiFbmH/Cx5E0GfIDTt71+hcbFn3NIc2Xxl2BSZTRIFghiMu ZDNngkFdqez/Qrbj/Uw8xIGIp92aSG2sLxxWvYDtITTJC0TdelCefRuuQWjkVqpn L8ypcfmmd2I1UQhA/ax2KEoEztEw7UHJv0c9MFKuTn9eiy0aT8NT7o+v5kPFaXv7 WZpGgdk4jFcERRbEQ+DZUiqWNGpaAtvrYe7qkRd+3tOPfvMTdblwsWeakHClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+hysTz3OxkafFSL42jCj++qYPIwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ73JKLSepFb8IBiKyw5fvtHV6Asm72eTSz xx76n/AROtAYDLMqHWTe1x2VcZ6SNTBGq8nvSYyfgmZ+gR7/Wgp8NTYMJzzoNazB QsY/evnVfl1XhcJlDheOwCKkxuui6Ntyi2e3wLr4sXedYBWDjiNDkdvQL7BupvaO QY47QHlO5v9a1yGre1GuEmsEWjtWvit+n9lkbGKno7IqCPlusFcPa5+cE5eCGSxY yblyQPBcc+SOqUTIbjm8YRmG6sUoqjMIgOZT1nK7xgDbY4BUtvzt0dvcsCSdNVtm V7jSHEcDCNQWg/ERmY1YZUvsCe3tJjb06ZYg+bob9JxIWLfWdqg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:33 2026 by rpki-client