$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: gKQ0XWH9alZd57GKZSze4pVhskp7l+DMbWfCFlOsc+4= Subject key identifier: B3:48:30:3E:65:DF:C5:C5:42:C3:BD:CC:CD:4D:83:3E:A8:99:AF:3B Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 13FF4BE38F8D58A6752CF8DC1B30E3731F8935BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: EA Signing time: Fri 23 Oct 2026 22:11:47 +0000 Manifest this update: Fri 23 Oct 2026 22:06:47 +0000 Manifest next update: Sun 25 Oct 2026 00:53:47 +0000 Files and hashes: 1: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 3: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) 4: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: AGGja+74NpSIlnpilHvBIK9SWWTrNiz9Qz0MtSIVx+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 00:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ff:4b:e3:8f:8d:58:a6:75:2c:f8:dc:1b:30:e3:73:1f:89:35:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Oct 23 22:06:47 2026 GMT Not After : Oct 25 00:53:47 2026 GMT Subject: CN=B348303E65DFC5C542C3BDCCCD4D833EA899AF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:b4:0a:ab:68:13:11:fa:af:68:a2:84:58: 78:14:e9:8d:6d:6b:c6:c7:72:b1:7d:af:f2:c9:93: 49:f5:e8:74:8d:08:8b:52:60:69:18:9f:91:03:81: 85:6d:f8:fd:89:66:8a:41:45:ac:a9:80:02:01:21: 3f:cf:97:6e:3e:9f:84:7e:c4:38:38:0f:05:ec:18: 7c:48:a9:73:2a:d0:ab:90:73:09:80:b9:80:33:cb: 13:1d:87:06:e0:75:3c:19:3f:4a:3c:8a:a5:33:24: 51:c5:72:f4:06:d7:52:44:60:ae:e0:4d:a1:07:8d: 03:28:ee:f5:dc:be:cf:7d:50:c4:61:de:6b:25:db: 7c:29:c1:23:ee:b5:b9:3c:00:85:bf:ff:ed:86:7a: 71:04:e7:ca:29:63:48:a4:4a:b9:30:1b:ab:64:2d: 12:d1:16:92:0b:13:56:6d:82:7d:10:10:50:01:03: 7f:02:56:3f:d9:12:cb:57:db:52:be:b0:08:3f:70: 93:3b:68:0f:85:44:e7:36:ec:5e:5d:96:d9:0d:c6: 01:0e:58:78:a3:18:31:f8:67:19:26:d3:ec:18:5d: 4d:38:d2:3f:91:73:6a:3e:79:5e:f2:97:8b:4e:1f: 42:71:79:0c:32:b1:7f:b1:6f:76:31:66:32:7c:f6: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:30:3E:65:DF:C5:C5:42:C3:BD:CC:CD:4D:83:3E:A8:99:AF:3B X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:5d:6d:2e:c9:64:9b:5f:89:b3:10:e6:52:8c:e4:6e:00: af:40:c9:d7:29:5b:19:70:7d:da:bd:db:89:64:71:de:e0:fc: 90:c7:44:ba:1d:51:d3:bc:75:4d:0a:db:fa:16:c0:02:54:2f: ab:01:63:cc:c1:40:41:1f:f7:49:ba:4f:be:61:e8:30:a8:9d: df:52:1b:61:4a:31:1d:ab:ae:3d:21:72:b3:a7:f0:81:46:02: a4:4f:59:68:7d:49:02:d5:fb:8b:0d:46:c0:0e:bf:5d:0e:ee: 62:d2:f6:0e:3f:0b:30:04:c0:ad:a0:40:e9:da:70:05:95:b9: 41:12:04:38:f7:11:c8:c2:89:bd:d6:54:4b:5e:62:1e:e5:34: e7:0e:6a:6e:24:c8:9f:8a:53:8a:36:19:d8:e3:ea:d2:2d:d9: 94:ec:12:4c:06:9c:b0:17:ff:f7:e4:df:cd:6e:c1:2b:cd:39: 3e:c5:66:f7:fa:79:e5:a7:c7:a0:5b:21:c5:c6:a2:f6:88:6f: 68:0a:a4:85:bb:6d:e1:c2:25:91:ae:dc:3d:b9:54:4d:cc:50: ca:f7:dc:7c:db:3d:6a:a4:da:86:92:87:7d:d5:48:ec:f0:11: 80:3c:f1:a3:da:50:7a:83:7a:10:e0:a0:62:c0:9f:e4:cb:96: a7:5d:bd:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/9L44+NWKZ1LPjcGzDjcx+JNb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjEwMjMyMjA2NDdaFw0yNjEwMjUwMDUzNDdaMDMxMTAvBgNV BAMTKEIzNDgzMDNFNjVERkM1QzU0MkMzQkRDQ0NENEQ4MzNFQTg5OUFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wLQKq2gTEfqvaKKEWHgU6Y1t a8bHcrF9r/LJk0n16HSNCItSYGkYn5EDgYVt+P2JZopBRaypgAIBIT/Pl24+n4R+ xDg4DwXsGHxIqXMq0KuQcwmAuYAzyxMdhwbgdTwZP0o8iqUzJFHFcvQG11JEYK7g TaEHjQMo7vXcvs99UMRh3msl23wpwSPutbk8AIW//+2GenEE58opY0ikSrkwG6tk LRLRFpILE1Ztgn0QEFABA38CVj/ZEstX21K+sAg/cJM7aA+FROc27F5dltkNxgEO WHijGDH4Zxkm0+wYXU040j+Rc2o+eV7yl4tOH0JxeQwysX+xb3YxZjJ89iozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs0gwPmXfxcVCw73MzU2DPqiZrzswHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY7XW0uyWSbX4mzEOZSjORuAK9AydcpWxlw fdq924lkcd7g/JDHRLodUdO8dU0K2/oWwAJUL6sBY8zBQEEf90m6T75h6DCond9S G2FKMR2rrj0hcrOn8IFGAqRPWWh9SQLV+4sNRsAOv10O7mLS9g4/CzAEwK2gQOna cAWVuUESBDj3EcjCib3WVEteYh7lNOcOam4kyJ+KU4o2Gdjj6tIt2ZTsEkwGnLAX //fk381uwSvNOT7FZvf6eeWnx6BbIcXGovaIb2gKpIW7beHCJZGu3D25VE3MUMr3 3HzbPWqk2oaSh33VSOzwEYA88aPaUHqDehDgoGLAn+TLlqddvWw= -----END CERTIFICATE-----Generated at Sat Oct 24 18:50:09 2026 by rpki-client