$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: mfelDvaJNYpVGfi5a2XhXdYNnpQZN5Mw02OuRSwBNRg= Subject key identifier: 3A:1C:0D:CE:4D:1B:13:6F:0B:C1:E8:08:11:EC:C8:D0:EC:4A:02:55 Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 7D043EDC5AF8ADA04174EAF41B37CE9D1CC10223 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:31:05 +0000 Manifest this update: Tue 02 Jun 2026 21:26:05 +0000 Manifest next update: Wed 03 Jun 2026 23:07:05 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) 3: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: D+ZEnA6rDzmeNrcObrGeoWW7r5daamsCr0qgSZnj6Uw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:04:3e:dc:5a:f8:ad:a0:41:74:ea:f4:1b:37:ce:9d:1c:c1:02:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Jun 2 21:26:05 2026 GMT Not After : Jun 3 23:07:05 2026 GMT Subject: CN=3A1C0DCE4D1B136F0BC1E80811ECC8D0EC4A0255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:70:6e:ac:71:8a:1e:90:3c:df:34:2e:ba: 93:50:6a:37:c1:a3:ea:09:4a:98:e8:43:ed:92:b0: 3c:46:5d:ef:33:80:10:29:f0:5f:ef:cf:0c:57:67: 57:3b:44:9a:ff:57:7c:77:e3:38:98:d2:f0:c9:53: 4b:4d:40:5c:60:ea:f3:17:72:7f:48:ca:90:7f:40: e0:f0:ef:34:53:4d:32:1c:e7:fd:9b:63:00:4c:86: 05:df:2e:79:eb:e2:22:d1:34:ff:70:51:91:5a:ff: a2:d7:b9:93:6a:ee:42:1f:06:58:49:2d:68:37:79: f4:93:b5:c2:24:64:1b:70:22:cf:14:f6:16:12:6e: 27:eb:c3:fd:1f:6f:43:aa:6f:26:00:91:20:9c:2c: 94:3b:61:c5:92:7f:34:4b:ca:36:6f:46:1d:5f:bd: 3a:f4:0c:ef:a0:2a:6c:85:81:ac:68:76:ce:26:a9: 1f:92:4d:17:39:59:ac:f2:c9:c0:d5:e1:b3:d7:76: b4:bb:01:d9:6c:a5:d6:3b:0b:62:97:4e:e9:cb:e1: 6b:0f:20:72:aa:65:72:64:ab:f5:c5:e9:26:91:c9: 2a:fb:10:24:e0:3b:de:49:c9:2e:bf:3b:ad:4e:f1: c0:4f:f8:b2:76:4f:2a:82:5f:25:76:5b:37:b9:ec: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1C:0D:CE:4D:1B:13:6F:0B:C1:E8:08:11:EC:C8:D0:EC:4A:02:55 X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4f:15:99:82:bb:aa:d2:cd:bd:f6:88:04:59:fa:26:6f:0d: 2a:65:60:18:b4:c9:3d:53:f2:1b:8e:52:97:e0:f5:54:41:49: 06:dc:5f:9a:f3:dd:2b:b8:f6:d7:6c:47:03:0d:fa:95:3b:5e: 58:9e:7a:99:38:35:9e:0c:e3:29:17:00:8c:ba:70:ca:30:65: cb:65:b3:49:70:77:59:97:9d:59:1e:ae:e6:25:c1:7e:af:72: 91:d2:9e:46:81:ce:99:b0:8d:43:f7:a4:f9:44:02:00:74:97: c3:91:c1:15:59:3b:88:ca:35:6a:4a:67:8a:ac:a2:ea:4b:6e: d4:0c:8c:be:20:1c:80:59:63:a9:9c:84:8b:0d:01:21:09:be: d2:2c:d3:c6:ce:c4:f7:d4:9f:2f:de:73:e2:bc:82:70:c3:69: 28:d5:25:b1:34:f9:89:48:66:3f:d8:03:4a:4c:61:ea:a4:c5: 71:8f:31:da:13:bf:1e:6e:10:14:ae:a8:44:4e:85:b7:97:72: b9:58:03:bb:44:e8:0d:80:bf:9e:b2:a7:70:33:ba:ea:ce:1d: b3:34:40:51:2c:1f:b7:7e:90:2a:48:7b:79:2f:39:9a:51:e0: 0d:29:3e:0c:83:00:8d:9d:fe:51:f1:9e:15:66:eb:5d:65:dc: a6:30:c8:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQQ+3Fr4raBBdOr0GzfOnRzBAiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA2MDIyMTI2MDVaFw0yNjA2MDMyMzA3MDVaMDMxMTAvBgNV BAMTKDNBMUMwRENFNEQxQjEzNkYwQkMxRTgwODExRUNDOEQwRUM0QTAyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC913BurHGKHpA83zQuupNQajfB o+oJSpjoQ+2SsDxGXe8zgBAp8F/vzwxXZ1c7RJr/V3x34ziY0vDJU0tNQFxg6vMX cn9IypB/QODw7zRTTTIc5/2bYwBMhgXfLnnr4iLRNP9wUZFa/6LXuZNq7kIfBlhJ LWg3efSTtcIkZBtwIs8U9hYSbifrw/0fb0OqbyYAkSCcLJQ7YcWSfzRLyjZvRh1f vTr0DO+gKmyFgaxods4mqR+STRc5WazyycDV4bPXdrS7AdlspdY7C2KXTunL4WsP IHKqZXJkq/XF6SaRySr7ECTgO95JyS6/O61O8cBP+LJ2TyqCXyV2Wze57FBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhwNzk0bE28LwegIEezI0OxKAlUwHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhPFZmCu6rSzb32iARZ+iZvDSplYBi0yT1T 8huOUpfg9VRBSQbcX5rz3Su49tdsRwMN+pU7Xlieepk4NZ4M4ykXAIy6cMowZctl s0lwd1mXnVkeruYlwX6vcpHSnkaBzpmwjUP3pPlEAgB0l8ORwRVZO4jKNWpKZ4qs oupLbtQMjL4gHIBZY6mchIsNASEJvtIs08bOxPfUny/ec+K8gnDDaSjVJbE0+YlI Zj/YA0pMYeqkxXGPMdoTvx5uEBSuqEROhbeXcrlYA7tE6A2Av56yp3AzuurOHbM0 QFEsH7d+kCpIe3kvOZpR4A0pPgyDAI2d/lHxnhVm611l3KYwyII= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:22 2026 by rpki-client