$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: VECrwMc1LhJnGWJ9nj8I0uol5sED1Djv1mGbq58y92k= Subject key identifier: E7:FF:AD:EB:0D:AE:6F:43:4C:8C:50:32:B8:F3:81:BD:03:F4:D4:A8 Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 0B4017CA77E9490C6E88BD5723F8D13507618D7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:30:09 +0000 Manifest this update: Mon 20 Jul 2026 23:25:09 +0000 Manifest next update: Wed 22 Jul 2026 00:53:09 +0000 Files and hashes: 1: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 2: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) 3: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: LpfneurAxXB/uvuUr7MgJsbdAi2qVJxXgl3zPIXEq1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:40:17:ca:77:e9:49:0c:6e:88:bd:57:23:f8:d1:35:07:61:8d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Jul 20 23:25:09 2026 GMT Not After : Jul 22 00:53:09 2026 GMT Subject: CN=E7FFADEB0DAE6F434C8C5032B8F381BD03F4D4A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:ee:c8:82:12:be:77:f1:56:73:f6:cd:70: 2c:cf:26:54:10:a6:37:a2:9a:64:98:af:c6:71:6d: 1d:02:3e:e6:94:53:99:89:1e:3d:64:8f:be:f5:ed: 52:e7:16:ef:64:fd:5b:9b:6d:8f:53:7f:e4:9e:a4: 4f:98:ba:60:40:39:3b:50:83:fe:e5:5f:0f:43:5a: 7f:9c:de:2b:02:92:c4:1b:18:a8:3a:a2:fe:28:c5: e6:f4:b8:ac:4a:2f:3f:7a:3e:a5:f1:c9:dc:92:51: 2f:30:f9:a0:51:b8:e9:13:53:f6:b7:b0:3e:2d:11: 0a:50:30:42:60:73:ba:6d:60:59:f5:f3:81:fb:6e: d7:1e:8b:a2:8e:22:18:6c:c6:ec:90:c7:d5:a3:2b: 55:29:c3:1c:2e:02:fd:c5:b1:0b:1c:9c:1f:ab:ce: 03:e7:6b:06:da:13:55:27:2b:3a:85:3c:9e:d5:b3: 08:dd:68:62:69:14:27:20:da:08:a3:f9:bc:bb:d4: 23:e8:a1:f5:bc:33:7c:e7:ab:29:34:59:bc:95:6a: d9:e6:c5:b0:fe:c6:76:0a:33:a9:b7:7b:e5:a4:6a: 4e:a2:91:8f:e0:59:4d:e5:40:0e:de:ce:24:9d:98: fa:2a:75:7a:43:39:3e:ed:63:0c:08:c7:60:03:85: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FF:AD:EB:0D:AE:6F:43:4C:8C:50:32:B8:F3:81:BD:03:F4:D4:A8 X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:de:ee:22:c8:5b:d0:bd:c9:8b:c4:1e:9a:4e:65:00:bb:c4: de:e7:47:9b:3a:db:2c:cf:65:c1:d7:49:8b:23:d3:c1:e0:e5: 5c:03:b4:8f:48:0c:ec:3a:fe:7d:6e:fd:dc:c2:60:dd:cd:17: 06:f0:c1:b6:ed:9d:08:ee:42:1a:d3:e9:cc:91:43:96:66:da: 3d:58:fa:d0:67:ec:1d:fa:48:22:2c:3d:e3:5c:a2:fe:b0:d6: 4f:97:a5:60:e5:8c:ca:eb:25:8a:3c:bc:e5:b4:ae:05:b4:c9: 81:65:36:96:2f:42:c7:64:b7:d4:2f:16:a2:de:58:b2:22:74: 5d:ec:80:63:cd:ce:d6:d4:19:7c:be:d9:58:5e:7f:16:dc:6c: 54:08:86:5b:0d:8d:14:10:10:2f:80:ce:4b:d6:95:04:95:92: 8e:72:c5:cc:92:27:ca:1e:4f:9e:b8:d8:c3:f2:d2:03:dd:c9: db:3f:77:5e:9b:be:93:67:51:58:54:7f:a6:48:36:21:06:6b: f4:2d:77:2b:69:4c:a5:af:8b:73:c4:2e:b6:70:5a:2a:36:d0: 80:d8:da:ab:ff:c9:e4:33:07:e8:6e:37:51:6f:13:9a:c6:67: a9:12:ca:0b:5a:d4:c4:5c:2d:2d:5d:f6:da:fb:80:5e:21:c8: 7f:09:12:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0AXynfpSQxuiL1XI/jRNQdhjXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA3MjAyMzI1MDlaFw0yNjA3MjIwMDUzMDlaMDMxMTAvBgNV BAMTKEU3RkZBREVCMERBRTZGNDM0QzhDNTAzMkI4RjM4MUJEMDNGNEQ0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qO7IghK+d/FWc/bNcCzPJlQQ pjeimmSYr8ZxbR0CPuaUU5mJHj1kj7717VLnFu9k/VubbY9Tf+SepE+YumBAOTtQ g/7lXw9DWn+c3isCksQbGKg6ov4oxeb0uKxKLz96PqXxydySUS8w+aBRuOkTU/a3 sD4tEQpQMEJgc7ptYFn184H7btcei6KOIhhsxuyQx9WjK1UpwxwuAv3FsQscnB+r zgPnawbaE1UnKzqFPJ7VswjdaGJpFCcg2gij+by71CPoofW8M3znqyk0WbyVatnm xbD+xnYKM6m3e+Wkak6ikY/gWU3lQA7eziSdmPoqdXpDOT7tYwwIx2ADhQ55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/+t6w2ub0NMjFAyuPOBvQP01KgwHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETe7iLIW9C9yYvEHppOZQC7xN7nR5s62yzP ZcHXSYsj08Hg5VwDtI9IDOw6/n1u/dzCYN3NFwbwwbbtnQjuQhrT6cyRQ5Zm2j1Y +tBn7B36SCIsPeNcov6w1k+XpWDljMrrJYo8vOW0rgW0yYFlNpYvQsdkt9QvFqLe WLIidF3sgGPNztbUGXy+2VhefxbcbFQIhlsNjRQQEC+AzkvWlQSVko5yxcySJ8oe T5642MPy0gPdyds/d16bvpNnUVhUf6ZINiEGa/QtdytpTKWvi3PELrZwWio20IDY 2qv/yeQzB+huN1FvE5rGZ6kSygta1MRcLS1d9tr7gF4hyH8JEoE= -----END CERTIFICATE-----Generated at Tue Jul 21 08:31:35 2026 by rpki-client