$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: cC1IUXPXdLj+jGNDG0Ld9zUzqUZomyHepmgtVSjKMuU= Subject key identifier: 5C:37:1D:01:BB:E6:05:67:94:FE:01:A2:CB:19:10:C6:80:B6:AF:36 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 11317134C51272D835B07B2BA194F2C4C60086DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:59:28 +0000 Manifest this update: Sun 02 Aug 2026 13:54:28 +0000 Manifest next update: Mon 03 Aug 2026 16:34:28 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) 2: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: MWR0hEqqEnbh7KsgLVk1TOalflJbHUohs35BfYgitW8=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:31:71:34:c5:12:72:d8:35:b0:7b:2b:a1:94:f2:c4:c6:00:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Aug 2 13:54:28 2026 GMT Not After : Aug 3 16:34:28 2026 GMT Subject: CN=5C371D01BBE6056794FE01A2CB1910C680B6AF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:df:46:e9:fe:ba:65:a0:c2:86:ae:e2:ee: bb:01:5f:90:04:a2:88:d1:a4:fa:c7:c8:0f:5d:79: 98:83:f0:be:f0:1e:cc:bf:8d:14:3c:7a:2f:8b:35: c3:97:59:94:3f:83:a0:4a:31:2c:8e:2d:54:69:8a: 99:8b:3a:f0:91:96:cf:24:3c:7c:29:49:4f:f9:0f: b9:ef:84:a7:69:fb:d5:b0:84:da:7f:3a:fe:25:ae: fd:d3:e5:bd:8c:0b:2a:95:99:75:7b:4b:56:32:1a: b6:a4:9a:18:2a:a9:d8:6b:30:81:35:7b:0b:71:68: 57:61:ec:a5:63:46:28:1e:d3:0e:ee:36:73:04:51: 36:3f:f4:b0:14:76:a4:7f:61:6e:7d:2e:3f:0a:10: 06:78:ed:38:0a:00:20:20:01:71:90:7a:84:02:2d: 88:95:cc:01:0f:ce:d4:11:aa:52:a5:8d:ef:34:fa: 88:b0:b3:1f:20:cd:29:20:20:06:f6:06:69:15:f0: 3f:42:12:23:a4:a5:f7:2d:d2:25:05:94:7f:75:1f: 79:0c:82:0b:33:b0:2a:d3:32:b5:33:3c:a1:15:1a: 09:08:29:98:09:86:39:d0:87:5b:0b:40:83:f7:ec: 3e:78:c2:a4:3e:bb:d4:f7:4b:ae:99:9d:52:31:0a: 19:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:37:1D:01:BB:E6:05:67:94:FE:01:A2:CB:19:10:C6:80:B6:AF:36 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0e:6d:b7:8b:62:68:6a:3f:99:a6:62:a2:37:7b:38:f7:f4: 7b:5c:06:67:99:d5:cc:ae:14:f5:df:7a:05:2d:70:96:f5:88: 07:92:a1:d6:a1:fc:3b:bd:0d:76:e7:04:7a:f0:b6:bb:da:d4: 4f:8a:ba:fd:6d:9f:75:40:a4:88:42:b1:db:e7:b5:c7:10:24: 80:92:61:0f:8e:56:5e:7b:20:8f:2d:6f:f5:c5:d4:bd:cc:46: 32:87:63:b1:e2:fd:c9:35:c0:be:d2:0f:e7:4e:d7:13:f9:fb: c1:c5:35:8a:12:06:36:24:f9:09:0e:99:02:1e:5e:df:24:74: a6:20:5a:25:e6:1d:3c:18:2d:76:ce:8c:4b:d2:1b:a0:fc:9e: 60:16:e1:9b:8f:22:2d:6d:eb:7a:4b:6d:df:6c:b8:63:aa:8a: 73:8f:cd:c9:f3:56:18:80:13:ca:c5:0f:b1:36:35:51:f1:40: b4:34:35:1b:e9:8b:fb:bc:e6:40:cd:de:6a:0f:db:ff:5d:a9: 95:67:09:8a:19:e9:32:de:bf:16:e1:1d:1d:a2:6f:70:b2:e1: f1:2c:3e:66:80:7a:58:38:1c:09:e0:a7:c1:07:06:7a:35:a9: 7c:23:dd:2c:f2:ee:52:e4:4a:f2:c6:bf:cd:e5:bd:48:9e:98: 19:be:2c:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETFxNMUSctg1sHsroZTyxMYAht8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA4MDIxMzU0MjhaFw0yNjA4MDMxNjM0MjhaMDMxMTAvBgNV BAMTKDVDMzcxRDAxQkJFNjA1Njc5NEZFMDFBMkNCMTkxMEM2ODBCNkFGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfgd9G6f66ZaDChq7i7rsBX5AE oojRpPrHyA9deZiD8L7wHsy/jRQ8ei+LNcOXWZQ/g6BKMSyOLVRpipmLOvCRls8k PHwpSU/5D7nvhKdp+9WwhNp/Ov4lrv3T5b2MCyqVmXV7S1YyGrakmhgqqdhrMIE1 ewtxaFdh7KVjRige0w7uNnMEUTY/9LAUdqR/YW59Lj8KEAZ47TgKACAgAXGQeoQC LYiVzAEPztQRqlKlje80+oiwsx8gzSkgIAb2BmkV8D9CEiOkpfct0iUFlH91H3kM ggszsCrTMrUzPKEVGgkIKZgJhjnQh1sLQIP37D54wqQ+u9T3S66ZnVIxChkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDcdAbvmBWeU/gGiyxkQxoC2rzYwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEObbeLYmhqP5mmYqI3ezj39HtcBmeZ1cyu FPXfegUtcJb1iAeSodah/Du9DXbnBHrwtrva1E+Kuv1tn3VApIhCsdvntccQJICS YQ+OVl57II8tb/XF1L3MRjKHY7Hi/ck1wL7SD+dO1xP5+8HFNYoSBjYk+QkOmQIe Xt8kdKYgWiXmHTwYLXbOjEvSG6D8nmAW4ZuPIi1t63pLbd9suGOqinOPzcnzVhiA E8rFD7E2NVHxQLQ0NRvpi/u85kDN3moP2/9dqZVnCYoZ6TLevxbhHR2ib3Cy4fEs PmaAelg4HAngp8EHBno1qXwj3Szy7lLkSvLGv83lvUiemBm+LHA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:25 2026 by rpki-client