$ rpki-client -vvf rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft File: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft (raw, json) Hash identifier: GOnKi19/vLEP7a6yMOvmlPad0Q0+E65OIfE18vPf0P4= Subject key identifier: EB:0B:A5:55:F1:4D:08:F4:E5:23:D7:3C:EA:88:BD:A2:7F:8D:01:AA Authority key identifier: 20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 Certificate issuer: /CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Certificate serial: 2F233703A379F3953FA2F7C9B60BF56062646E13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:14:14 +0000 Manifest this update: Mon 20 Jul 2026 14:09:14 +0000 Manifest next update: Tue 21 Jul 2026 15:50:14 +0000 Files and hashes: 1: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: rXO9gTdPSQGsrR5rUmnzksusGY7II8+DMWGkUGzNqUA=) 2: 20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl (hash: s3jQKuItI58oy2CKQk4tj4oRop7SD0Y5eispbmB+cXQ=) 3: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: Pvijj3PbMpACCVbyxLVtqjTUpSYeYm8MFybvzhiihDM=) 4: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: ipU1a2udwtca/E3v1pmxqgcaK0XTJh0tDNEJJ4f4t7Y=) 5: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: xLoeT+ko7MUw5aLnf4wj8gyqTKfil2TZ1gKntVO+LKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:23:37:03:a3:79:f3:95:3f:a2:f7:c9:b6:0b:f5:60:62:64:6e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7 Validity Not Before: Jul 20 14:09:14 2026 GMT Not After : Jul 21 15:50:14 2026 GMT Subject: CN=EB0BA555F14D08F4E523D73CEA88BDA27F8D01AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:98:e9:bc:a1:72:d2:2d:24:0d:56:3d:73: 3c:93:93:b8:0c:91:42:a0:9b:00:f8:6c:12:d2:6f: bf:84:19:2d:9e:64:bb:b7:64:c2:d6:35:1d:db:03: 30:85:0d:47:c8:3a:87:a0:c4:a7:b2:19:19:34:99: 90:f1:e2:35:7d:64:1d:79:09:ce:56:57:81:f1:9f: 5a:52:67:25:69:ec:b5:b6:26:95:0b:92:d4:80:a0: f8:45:22:f4:d5:94:c7:3f:4f:8a:48:4c:1b:01:0b: 61:12:e2:75:16:45:75:8d:08:04:d3:44:a6:8a:b3: 51:5e:10:a0:36:ca:0a:6d:a2:83:48:69:94:5e:fb: 41:88:83:21:db:fe:42:aa:05:23:11:32:d8:c7:1b: 6d:09:5d:6f:28:f5:83:73:3a:e4:a6:9b:00:9f:ba: 1f:26:f1:d0:94:d1:f5:ca:b6:9e:e9:e0:e2:e9:99: a3:31:9b:d0:04:50:63:cc:a6:ea:1c:43:35:ee:e2: eb:6f:f5:8f:c0:b9:e8:06:fc:de:4b:b5:ec:d6:26: 99:7e:63:ce:97:fe:23:d7:91:cc:b4:db:87:9f:aa: e5:c8:d4:7a:8e:47:48:76:33:84:c2:15:7b:3f:33: ad:96:46:20:a4:39:4b:a4:2f:d7:cd:2f:2b:1d:03: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:A5:55:F1:4D:08:F4:E5:23:D7:3C:EA:88:BD:A2:7F:8D:01:AA X509v3 Authority Key Identifier: keyid:20:B4:FB:5E:02:47:6A:FF:A1:00:3C:5C:90:D3:8F:F4:EC:10:14:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/20B4FB5E02476AFFA1003C5C90D38FF4EC1014B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:00:37:d0:85:bb:5a:b1:80:56:22:be:a6:e3:53:64:f1:f1: 12:a6:7a:68:fa:20:fc:72:5c:4c:f1:c4:d8:80:8a:53:bb:17: a8:99:85:e9:af:98:f3:86:9b:4e:4d:22:83:ec:32:52:ac:de: 64:75:28:79:a6:a9:23:9a:37:20:af:e5:31:6d:04:47:93:f6: 74:aa:de:20:66:4c:7c:8c:03:d2:b2:4a:b7:e0:29:5b:a9:61: c9:b7:3f:5b:51:43:40:5c:c8:b3:ef:ed:2d:03:63:08:6f:66: 1a:a0:33:51:ff:bd:f0:d6:f1:6d:cd:10:3a:cb:c8:f5:38:b1: 1d:82:79:4d:44:e8:1c:ad:f8:a2:e1:16:73:b1:f5:77:9e:17: d6:35:61:85:d6:ce:73:3b:a8:3b:f2:50:89:2e:78:1b:2a:e3: a7:2b:e4:5b:64:6e:01:d4:b0:e2:28:01:34:9d:6d:2c:91:82: f8:fb:aa:5a:3f:88:03:ec:5c:9a:aa:7a:db:f6:de:81:90:47: c3:37:1e:34:27:8b:0f:44:c1:85:5f:fc:18:dd:24:88:76:2b: fe:b9:7b:7b:a2:ef:d0:e7:c1:dc:3d:0a:01:ba:c7:9d:56:9a: 04:bb:af:e3:57:59:c8:1e:c4:92:0a:8e:9f:b7:9f:69:c4:8b: 74:4e:29:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyM3A6N585U/ovfJtgv1YGJkbhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRF QzEwMTRCNzAeFw0yNjA3MjAxNDA5MTRaFw0yNjA3MjExNTUwMTRaMDMxMTAvBgNV BAMTKEVCMEJBNTU1RjE0RDA4RjRFNTIzRDczQ0VBODhCREEyN0Y4RDAxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfJjpvKFy0i0kDVY9czyTk7gM kUKgmwD4bBLSb7+EGS2eZLu3ZMLWNR3bAzCFDUfIOoegxKeyGRk0mZDx4jV9ZB15 Cc5WV4Hxn1pSZyVp7LW2JpULktSAoPhFIvTVlMc/T4pITBsBC2ES4nUWRXWNCATT RKaKs1FeEKA2ygptooNIaZRe+0GIgyHb/kKqBSMRMtjHG20JXW8o9YNzOuSmmwCf uh8m8dCU0fXKtp7p4OLpmaMxm9AEUGPMpuocQzXu4utv9Y/AuegG/N5LtezWJpl+ Y86X/iPXkcy024efquXI1HqOR0h2M4TCFXs/M62WRiCkOUukL9fNLysdA4U7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wulVfFNCPTlI9c86oi9on+NAaowHwYDVR0j BBgwFoAUILT7XgJHav+hADxckNOP9OwQFLcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDAwZjljYzctNGE2OS00YzllLWJiYTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUw MjQ3NkFGRkExMDAzQzVDOTBEMzhGRjRFQzEwMTRCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMEI0RkI1RTAyNDc2QUZGQTEwMDNDNUM5MEQzOEZGNEVDMTAx NEI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvMjBCNEZCNUUwMjQ3NkFGRkExMDAzQzVDOTBEMzhG RjRFQzEwMTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANoAN9CFu1qxgFYivqbjU2Tx8RKmemj6IPxy XEzxxNiAilO7F6iZhemvmPOGm05NIoPsMlKs3mR1KHmmqSOaNyCv5TFtBEeT9nSq 3iBmTHyMA9KySrfgKVupYcm3P1tRQ0BcyLPv7S0DYwhvZhqgM1H/vfDW8W3NEDrL yPU4sR2CeU1E6Byt+KLhFnOx9XeeF9Y1YYXWznM7qDvyUIkueBsq46cr5FtkbgHU sOIoATSdbSyRgvj7qlo/iAPsXJqqetv23oGQR8M3HjQniw9EwYVf/BjdJIh2K/65 e3ui79Dnwdw9CgG6x51WmgS7r+NXWcgexJIKjp+3n2nEi3ROKcs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:29 2026 by rpki-client