$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft File: 202AE8066C06A8D8247209E512833DDA85B77BB8.mft (raw, json) Hash identifier: v7djDqMPsE5MDXHAb0mmyoY8vq+SLDIih8UeyafkvZ8= Subject key identifier: 7D:85:89:CF:65:8D:59:63:82:61:CF:BC:EE:19:0D:9D:50:C8:31:B9 Authority key identifier: 20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 Certificate issuer: /CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Certificate serial: 33748C21489A345855DB6347A46EA755EA8D77C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:41:53 +0000 Manifest this update: Mon 20 Jul 2026 20:36:53 +0000 Manifest next update: Tue 21 Jul 2026 22:49:53 +0000 Files and hashes: 1: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: Lfhcsuq0sTwRRhPKyKhPGs2CL51mhkSyNfRDvbtgTl8=) 2: 202AE8066C06A8D8247209E512833DDA85B77BB8.crl (hash: jKtIn87kfECA0Z98n1NmZiSCA06Y1y6MouZV+41CjWY=) 3: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: VqpFZFZX8l9YzsFUEW1KN7wbhAWqil6y6lntU3UefIg=) 4: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: 7tCfrY+RtB6+WkTyes1RDW6n/IACRq2QGZK0+NvNBQg=) 5: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: cqtnc1i5sl/i5SSZ+1p5ccjOtXsU77bjgEVzGiDIIzQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:74:8c:21:48:9a:34:58:55:db:63:47:a4:6e:a7:55:ea:8d:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202AE8066C06A8D8247209E512833DDA85B77BB8 Validity Not Before: Jul 20 20:36:53 2026 GMT Not After : Jul 21 22:49:53 2026 GMT Subject: CN=7D8589CF658D59638261CFBCEE190D9D50C831B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:3b:ad:18:79:c1:b4:ec:6e:66:f9:a6:95: 5b:46:d7:94:07:b5:b8:41:d5:76:16:3e:87:2a:cf: 89:31:00:03:93:11:40:60:f9:da:a2:6b:7c:eb:19: 5a:00:70:54:c6:b0:bd:6e:5d:3f:b4:73:94:65:58: 9e:47:b5:ed:ab:0b:b5:c4:33:1b:db:b7:49:76:b6: 93:07:9c:4a:3c:67:ea:03:46:28:49:eb:9a:db:f2: 68:cb:99:df:31:48:14:87:20:14:1b:be:4b:d5:b2: 63:96:b6:a0:f1:84:e3:c7:e8:0c:fb:8f:70:c8:ca: 6b:c1:d8:2d:e3:cd:f5:a1:2f:be:29:a5:70:18:79: bf:1b:c1:58:f4:11:73:7b:91:28:75:09:a5:ce:07: 97:82:07:5d:3a:3a:01:e1:90:0b:f3:22:71:17:ae: 29:da:e8:63:53:43:79:d9:eb:e1:07:53:1d:0f:9b: 2e:c5:05:64:d1:bc:5e:de:68:ce:d5:b0:fe:a0:dc: 8d:2c:92:79:c7:05:0b:26:61:44:9f:01:b8:87:43: c9:19:92:2a:5d:58:95:be:c3:af:a4:5d:cc:fb:c8: 1e:ba:79:26:c6:d5:bc:85:77:b9:b2:c6:07:9b:cd: 29:c9:ae:8e:5f:2d:9f:cf:dd:92:d3:20:1a:2e:2b: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:85:89:CF:65:8D:59:63:82:61:CF:BC:EE:19:0D:9D:50:C8:31:B9 X509v3 Authority Key Identifier: keyid:20:2A:E8:06:6C:06:A8:D8:24:72:09:E5:12:83:3D:DA:85:B7:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202AE8066C06A8D8247209E512833DDA85B77BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/202AE8066C06A8D8247209E512833DDA85B77BB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a6:0a:95:97:da:60:14:11:c3:f8:e6:df:5f:ce:65:c1:d9: de:22:5b:30:71:86:cd:c8:7f:2d:66:2e:b7:07:4a:00:6a:83: ba:cd:d1:72:5f:00:6c:df:8c:65:f4:b0:73:e3:a9:7f:fe:60: 1d:f3:db:eb:98:e8:c5:fb:84:a3:be:0c:da:71:36:61:0f:b5: f6:c5:0e:8e:01:aa:45:af:66:d6:bb:1b:f5:a8:5e:36:55:69: e4:41:6b:b5:1b:bf:a1:d0:cb:28:26:a9:9e:e7:33:67:fc:df: 20:b4:76:a8:f4:23:08:ac:56:93:72:3a:17:6d:2e:4d:8a:b3: 6a:7c:b8:ee:7b:6f:58:00:c8:36:51:db:2a:30:6e:c2:7f:87: e9:51:ca:ed:11:00:82:75:d9:d7:2e:b1:df:0b:3c:2f:4e:ca: 17:83:51:a8:39:e4:2f:8a:74:f3:5e:ed:48:92:56:87:f2:1d: 7e:07:a9:17:2d:c3:ce:25:d9:48:fd:b5:aa:a8:a1:45:49:d3: 86:e8:dc:b1:24:48:1f:f7:82:1f:13:f3:57:30:e8:07:cd:6c: 61:1c:fa:01:c6:31:1e:dc:5e:33:30:53:a8:69:c3:ab:2d:d5: 79:bd:9a:6a:e2:54:72:ea:b8:ff:27:45:c6:fc:71:26:5c:af: c5:42:11:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3SMIUiaNFhV22NHpG6nVeqNd8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNEREE4 NUI3N0JCODAeFw0yNjA3MjAyMDM2NTNaFw0yNjA3MjEyMjQ5NTNaMDMxMTAvBgNV BAMTKDdEODU4OUNGNjU4RDU5NjM4MjYxQ0ZCQ0VFMTkwRDlENTBDODMxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7TutGHnBtOxuZvmmlVtG15QH tbhB1XYWPocqz4kxAAOTEUBg+dqia3zrGVoAcFTGsL1uXT+0c5RlWJ5Hte2rC7XE Mxvbt0l2tpMHnEo8Z+oDRihJ65rb8mjLmd8xSBSHIBQbvkvVsmOWtqDxhOPH6Az7 j3DIymvB2C3jzfWhL74ppXAYeb8bwVj0EXN7kSh1CaXOB5eCB106OgHhkAvzInEX rina6GNTQ3nZ6+EHUx0Pmy7FBWTRvF7eaM7VsP6g3I0sknnHBQsmYUSfAbiHQ8kZ kipdWJW+w6+kXcz7yB66eSbG1byFd7myxgebzSnJro5fLZ/P3ZLTIBouKymVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYWJz2WNWWOCYc+87hkNnVDIMbkwHwYDVR0j BBgwFoAUICroBmwGqNgkcgnlEoM92oW3e7gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJmMTQxN2EtNTcxOC00MDcxLTlmMzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2 QzA2QThEODI0NzIwOUU1MTI4MzNEREE4NUI3N0JCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDJBRTgwNjZDMDZBOEQ4MjQ3MjA5RTUxMjgzM0REQTg1Qjc3 QkI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvMjAyQUU4MDY2QzA2QThEODI0NzIwOUU1MTI4MzNE REE4NUI3N0JCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGmCpWX2mAUEcP45t9fzmXB2d4iWzBxhs3I fy1mLrcHSgBqg7rN0XJfAGzfjGX0sHPjqX/+YB3z2+uY6MX7hKO+DNpxNmEPtfbF Do4BqkWvZta7G/WoXjZVaeRBa7Ubv6HQyygmqZ7nM2f83yC0dqj0IwisVpNyOhdt Lk2Ks2p8uO57b1gAyDZR2yowbsJ/h+lRyu0RAIJ12dcusd8LPC9OyheDUag55C+K dPNe7UiSVofyHX4HqRctw84l2Uj9taqooUVJ04bo3LEkSB/3gh8T81cw6AfNbGEc +gHGMR7cXjMwU6hpw6st1Xm9mmriVHLquP8nRcb8cSZcr8VCEdI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:39 2026 by rpki-client