$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json) Hash identifier: SJHZ/6qCIA8CWZ8YDkpZJy9MvmTnswPOzaNx1Em4WNo= Subject key identifier: 8C:77:4D:31:DF:44:8C:47:08:DF:19:23:94:C9:A0:D0:5A:23:0B:20 Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Certificate serial: 406B8BC7C7B8833E608AF0A2E72998412F72C6A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:37:46 +0000 Manifest this update: Tue 21 Jul 2026 05:32:46 +0000 Manifest next update: Wed 22 Jul 2026 08:39:46 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=) 2: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: mdBogaSsBiUvUzqKkvZQcZoVuYds53/ZSshR60Smxhk=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6b:8b:c7:c7:b8:83:3e:60:8a:f0:a2:e7:29:98:41:2f:72:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39 Validity Not Before: Jul 21 05:32:46 2026 GMT Not After : Jul 22 08:39:46 2026 GMT Subject: CN=8C774D31DF448C4708DF192394C9A0D05A230B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:c4:c6:be:75:f4:88:c2:de:d7:66:d2:b1: 06:b8:37:d4:06:f5:6f:29:35:1c:89:29:51:08:4a: a1:45:79:a1:49:fe:8b:d0:12:a4:e4:81:fa:cb:2e: 6e:37:41:2a:ba:ae:77:a1:b0:95:e0:f2:6b:4c:6d: 3f:8b:44:e1:66:68:b3:83:63:82:56:6a:0e:83:99: cc:bf:78:94:e7:86:19:ed:e7:58:68:5d:a3:5c:d6: 19:28:0c:c7:7d:f3:b9:e4:96:bc:80:db:3c:7c:04: 41:12:c8:58:20:4c:c8:cf:82:df:0f:8e:c8:83:9b: 3c:da:9f:c7:5a:12:df:50:86:a8:d1:b8:da:53:21: 47:57:2f:e6:6b:17:a2:0f:69:24:24:9b:44:44:d7: 1f:aa:d4:d7:c6:63:47:5e:86:e4:c2:d6:27:50:19: d0:05:44:4e:7e:b4:20:3d:77:d9:e1:71:78:69:a4: 02:0d:bd:90:71:68:ad:93:cf:1f:6b:88:2f:15:23: 28:b7:54:ae:a3:89:ba:6e:b1:aa:5d:21:64:92:4b: b6:eb:7f:a5:5e:c1:3e:3e:be:4c:ec:e3:58:06:99: 49:bb:1e:09:95:d1:2e:4e:db:69:a6:84:ed:cd:e6: 80:55:25:c6:f8:52:39:f9:4d:34:2e:a1:36:1c:e6: 4e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:77:4D:31:DF:44:8C:47:08:DF:19:23:94:C9:A0:D0:5A:23:0B:20 X509v3 Authority Key Identifier: keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ae:47:9a:0e:bb:2a:0b:03:9b:6c:b5:63:46:5d:21:e3:0e: e1:18:a2:1b:da:4d:1e:c4:41:6c:55:ac:ab:aa:b4:1c:ba:a3: d9:3f:73:13:88:10:f3:fd:e1:3d:77:76:a6:c7:5e:b6:c0:55: 65:a8:91:fc:b7:2a:eb:f9:a5:8d:2f:fd:c5:c7:dd:7a:a0:0b: dd:a4:43:f1:91:c5:64:59:18:50:9a:ce:5c:02:fc:20:2b:85: 9f:f0:f5:48:3c:93:a8:02:72:b4:0a:04:22:7c:45:c7:7c:95: 3e:b4:9b:e6:5a:ef:8f:a0:2b:df:6f:e1:3f:ba:5a:1b:63:71: 54:12:a0:72:f4:78:3b:71:82:4b:fd:f7:f0:2a:6e:9a:bf:50: 7a:cc:8d:13:b4:ae:3e:e7:64:ab:c7:49:97:27:5b:23:cb:66: f5:22:69:58:93:6f:2b:d2:1e:53:50:e4:93:ad:fb:da:27:d3: b0:62:68:0f:bf:5f:86:69:31:82:11:6e:9a:91:d1:72:d9:4c: 12:2c:bd:97:1f:87:60:f4:5d:f6:b9:d9:ed:9c:06:76:52:f0: c9:67:39:8f:fe:e3:78:9e:a4:65:0b:66:6a:c8:35:6b:fa:5a: d3:78:58:52:b9:5f:c5:70:ae:b9:47:8b:69:7c:32:81:40:a5: cc:8d:40:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGuLx8e4gz5givCi5ymYQS9yxqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYz NTA3MEQzOTAeFw0yNjA3MjEwNTMyNDZaFw0yNjA3MjIwODM5NDZaMDMxMTAvBgNV BAMTKDhDNzc0RDMxREY0NDhDNDcwOERGMTkyMzk0QzlBMEQwNUEyMzBCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIcTGvnX0iMLe12bSsQa4N9QG 9W8pNRyJKVEISqFFeaFJ/ovQEqTkgfrLLm43QSq6rnehsJXg8mtMbT+LROFmaLOD Y4JWag6Dmcy/eJTnhhnt51hoXaNc1hkoDMd987nklryA2zx8BEESyFggTMjPgt8P jsiDmzzan8daEt9QhqjRuNpTIUdXL+ZrF6IPaSQkm0RE1x+q1NfGY0dehuTC1idQ GdAFRE5+tCA9d9nhcXhppAINvZBxaK2Tzx9riC8VIyi3VK6jibpusapdIWSSS7br f6VewT4+vkzs41gGmUm7HgmV0S5O22mmhO3N5oBVJcb4Ujn5TTQuoTYc5k7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjHdNMd9EjEcI3xkjlMmg0FojCyAwHwYDVR0j BBgwFoAUIIQId73Ny57J7W3KxfTIXzUHDTkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjZkODg0OTYtYjJiYS00ZDEzLTk4MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdC RENEQ0I5RUM5RUQ2RENBQzVGNEM4NUYzNTA3MEQzOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDg0MDg3N0JEQ0RDQjlFQzlFRDZEQ0FDNUY0Qzg1RjM1MDcw RDM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvMjA4NDA4NzdCRENEQ0I5RUM5RUQ2RENBQzVGNEM4 NUYzNTA3MEQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiuR5oOuyoLA5tstWNGXSHjDuEYohvaTR7E QWxVrKuqtBy6o9k/cxOIEPP94T13dqbHXrbAVWWokfy3Kuv5pY0v/cXH3XqgC92k Q/GRxWRZGFCazlwC/CArhZ/w9Ug8k6gCcrQKBCJ8Rcd8lT60m+Za74+gK99v4T+6 WhtjcVQSoHL0eDtxgkv99/Aqbpq/UHrMjRO0rj7nZKvHSZcnWyPLZvUiaViTbyvS HlNQ5JOt+9on07BiaA+/X4ZpMYIRbpqR0XLZTBIsvZcfh2D0Xfa52e2cBnZS8Mln OY/+43iepGULZmrINWv6WtN4WFK5X8VwrrlHi2l8MoFApcyNQKA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:17 2026 by rpki-client