$ rpki-client -vvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json) Hash identifier: oGY6SmByAQCaDS/I16dXEDO6gycxoGs2XPAsjYyR80M= Subject key identifier: AB:1F:6B:71:4A:91:2E:44:F6:08:29:6E:58:EB:D0:31:30:3C:88:D6 Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Certificate serial: 61C864FA48C1D2FEE76E885DAB674AF145E8A8A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:00:44 +0000 Manifest this update: Mon 20 Jul 2026 23:55:44 +0000 Manifest next update: Wed 22 Jul 2026 01:59:44 +0000 Files and hashes: 1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: Drll+K86151IapSa2UKfqUqo0v2EReRBlyyma9fycKA=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c8:64:fa:48:c1:d2:fe:e7:6e:88:5d:ab:67:4a:f1:45:e8:a8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0 Validity Not Before: Jul 20 23:55:44 2026 GMT Not After : Jul 22 01:59:44 2026 GMT Subject: CN=AB1F6B714A912E44F608296E58EBD031303C88D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:d5:7e:71:27:b2:71:01:49:84:8a:61:02: e9:ac:8b:5d:9d:1b:01:bc:b0:84:03:26:8b:be:bd: 68:c7:96:20:9b:54:9c:2e:b8:be:51:05:65:b2:c6: 48:79:fa:90:6d:40:2b:1c:b3:05:22:cc:8e:27:88: b5:ba:2b:60:20:9d:1c:0b:91:f4:71:36:3b:75:0c: b4:44:a6:92:e5:cb:bd:ad:00:42:4c:ed:fc:48:47: 62:96:70:fe:b5:55:19:ef:d4:9c:10:79:df:9f:29: 89:ed:18:65:f7:4b:ea:66:d0:77:3e:e5:97:a3:90: 53:80:79:16:da:28:f4:29:9b:06:2e:8d:83:7c:ed: 87:60:fe:df:ac:69:3f:90:41:b0:d3:b8:7c:77:30: bd:ca:1d:5c:1a:d5:83:a0:00:3f:55:18:a1:fa:0b: d3:01:6d:a4:ea:b1:c1:1a:5a:04:de:54:63:ef:fe: a5:d2:fc:98:2f:13:56:80:7a:31:13:9b:23:c5:3e: 88:8d:47:44:97:e3:d7:c0:4f:b1:e8:f5:02:2c:2c: a5:09:44:96:4c:07:31:e2:11:df:4c:41:47:b3:d3: 61:cc:65:8a:ea:48:19:d9:8e:20:13:d6:89:62:54: 82:61:77:40:43:36:92:76:1f:d8:86:8a:9e:76:6d: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1F:6B:71:4A:91:2E:44:F6:08:29:6E:58:EB:D0:31:30:3C:88:D6 X509v3 Authority Key Identifier: keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c4:c5:eb:1f:31:14:c7:c8:06:53:bd:70:a9:b5:eb:55:07: c1:ba:a6:46:80:5d:3e:df:e7:1d:01:1e:88:b5:9c:6c:d8:e7: c1:dd:70:07:c5:dc:84:e7:8a:e4:29:fc:b3:3a:17:9e:8c:88: 03:e0:ea:02:da:11:5f:1b:9d:b2:b7:09:dd:c8:4f:56:0e:70: f0:d5:34:e8:15:06:20:1f:97:4a:4f:26:d8:22:76:f3:fa:3f: 9f:3d:1c:d8:e4:4c:fb:e0:06:19:96:ff:5d:9d:86:c1:4d:ac: f4:15:79:85:53:76:49:ec:b4:da:97:94:7e:ec:5d:c4:12:59: aa:46:2c:2c:a7:44:f7:1d:91:f6:77:a2:55:10:62:c5:bf:38: 2d:6f:7a:98:05:46:99:d0:77:29:18:2f:7a:00:ed:3d:64:9f: e1:63:6c:ce:b0:99:5e:38:7d:67:61:33:b0:e3:4b:3e:21:5f: 18:78:51:4a:7d:6b:90:b9:99:1e:1c:af:b3:a5:e1:bd:13:5b: a0:74:82:84:5f:09:0c:9e:1d:b2:d5:ee:53:7f:35:b7:ee:f9: 56:2c:69:28:a9:02:e7:12:b6:d8:63:5c:4a:da:b5:6d:3e:7a: 32:ad:e8:ba:b2:49:f0:cc:8c:16:04:3c:00:d0:bc:1f:cb:f8: 34:c4:c2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYchk+kjB0v7nbohdq2dK8UXoqKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYw MEE0QzZFMDAeFw0yNjA3MjAyMzU1NDRaFw0yNjA3MjIwMTU5NDRaMDMxMTAvBgNV BAMTKEFCMUY2QjcxNEE5MTJFNDRGNjA4Mjk2RTU4RUJEMDMxMzAzQzg4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tNV+cSeycQFJhIphAumsi12d GwG8sIQDJou+vWjHliCbVJwuuL5RBWWyxkh5+pBtQCscswUizI4niLW6K2AgnRwL kfRxNjt1DLREppLly72tAEJM7fxIR2KWcP61VRnv1JwQed+fKYntGGX3S+pm0Hc+ 5ZejkFOAeRbaKPQpmwYujYN87Ydg/t+saT+QQbDTuHx3ML3KHVwa1YOgAD9VGKH6 C9MBbaTqscEaWgTeVGPv/qXS/JgvE1aAejETmyPFPoiNR0SX49fAT7Ho9QIsLKUJ RJZMBzHiEd9MQUez02HMZYrqSBnZjiAT1oliVIJhd0BDNpJ2H9iGip52bYnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqx9rcUqRLkT2CCluWOvQMTA8iNYwHwYDVR0j BBgwFoAUIOnAyBiuT1RqVCpqcu+tpgCkxuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzMyMDU1NmQtY2MyMS00ZTU3LWE1YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgx OEFFNEY1NDZBNTQyQTZBNzJFRkFEQTYwMEE0QzZFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEU5QzBDODE4QUU0RjU0NkE1NDJBNkE3MkVGQURBNjAwQTRD NkUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMjBFOUMwQzgxOEFFNEY1NDZBNTQyQTZBNzJFRkFE QTYwMEE0QzZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/ExesfMRTHyAZTvXCptetVB8G6pkaAXT7f 5x0BHoi1nGzY58HdcAfF3ITniuQp/LM6F56MiAPg6gLaEV8bnbK3Cd3IT1YOcPDV NOgVBiAfl0pPJtgidvP6P589HNjkTPvgBhmW/12dhsFNrPQVeYVTdknstNqXlH7s XcQSWapGLCynRPcdkfZ3olUQYsW/OC1vepgFRpnQdykYL3oA7T1kn+FjbM6wmV44 fWdhM7DjSz4hXxh4UUp9a5C5mR4cr7Ol4b0TW6B0goRfCQyeHbLV7lN/Nbfu+VYs aSipAucStthjXEratW0+ejKt6LqySfDMjBYEPADQvB/L+DTEwrE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:42 2026 by rpki-client