$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft File: 20960DA2C8391ACA821C6A472677485F6C49F24B.mft (raw, json) Hash identifier: ne6cQgI+7a2N1CN6UFNmKwpEv6WBrfrFM+0FtEaqBH4= Subject key identifier: 56:40:6A:E6:C8:E7:2F:BF:0E:B2:4E:5C:53:6D:C5:73:82:DD:8A:DE Authority key identifier: 20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B Certificate issuer: /CN=20960DA2C8391ACA821C6A472677485F6C49F24B Certificate serial: 7721FEE3C0C50E521CB8F66EB5614F08A04785A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:17:57 +0000 Manifest this update: Fri 19 Jun 2026 18:12:57 +0000 Manifest next update: Sat 20 Jun 2026 20:14:57 +0000 Files and hashes: 1: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: DMAkYGbCY1WEwHU0IOjQhVEMGtSyZ2MqAap0CYYpSAU=) 2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BBNbTC9A/ey6lEFNc8kxgn9TphXMnw9EZaQ5gSseJDo=) 3: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: qvATYP4H/eMNe5opq2LHxYvNPQ/hG8JcWnqWytUagjE=) 4: 20960DA2C8391ACA821C6A472677485F6C49F24B.crl (hash: zXw6UgqnCxGphch8+6NaUHNyNimF3TtFeQ/E5q0gQW0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:21:fe:e3:c0:c5:0e:52:1c:b8:f6:6e:b5:61:4f:08:a0:47:85:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20960DA2C8391ACA821C6A472677485F6C49F24B Validity Not Before: Jun 19 18:12:57 2026 GMT Not After : Jun 20 20:14:57 2026 GMT Subject: CN=56406AE6C8E72FBF0EB24E5C536DC57382DD8ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:0f:88:88:4d:b2:b7:b7:ac:4b:86:16:17: e4:3c:0c:52:c7:60:28:5f:71:86:eb:28:f6:20:ac: a3:25:72:89:73:75:32:bd:fc:e3:d6:4d:a5:17:40: d7:d5:b6:00:72:81:12:03:d5:4a:4e:f9:b4:a9:0e: d6:b1:f3:0e:7a:1b:fe:71:c6:09:31:86:60:a6:90: 5f:de:8a:8f:f9:29:d1:b9:90:3f:c0:71:93:f1:95: cd:43:81:8a:ed:bb:17:d3:9d:9a:ba:d7:61:01:14: ac:df:de:d5:7c:ef:e2:71:9b:bd:ed:2d:2d:9e:fd: 21:a0:30:a5:3c:e0:80:96:8c:bd:b8:c5:84:91:2e: 99:b6:70:2c:29:db:29:f4:32:07:91:bb:5a:a2:27: ab:a9:9f:3a:8a:be:09:36:7f:a8:18:d3:56:51:76: da:51:76:31:d3:3f:a0:26:be:b7:3d:df:b8:c0:4d: 9f:1b:71:75:da:1c:61:60:e8:bf:86:48:7f:7f:16: c9:ec:f4:42:3b:e3:06:da:bd:5e:07:f0:68:98:80: 1f:90:fe:19:16:cb:2c:ca:4b:85:f9:54:41:4a:24: 49:a9:42:2a:ca:af:14:37:19:89:47:1a:84:1a:b5: 85:2a:c9:63:4a:b4:69:a6:26:93:45:a3:61:cc:ff: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:6A:E6:C8:E7:2F:BF:0E:B2:4E:5C:53:6D:C5:73:82:DD:8A:DE X509v3 Authority Key Identifier: keyid:20:96:0D:A2:C8:39:1A:CA:82:1C:6A:47:26:77:48:5F:6C:49:F2:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20960DA2C8391ACA821C6A472677485F6C49F24B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/20960DA2C8391ACA821C6A472677485F6C49F24B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8a:aa:21:86:4d:e9:c9:23:27:3c:31:99:9d:41:d2:dc:63: 9b:bb:58:ad:42:d1:c4:49:0e:c5:b2:99:d2:87:c3:f4:57:50: ca:9a:80:d0:0f:f4:81:e5:80:68:32:12:d1:6c:45:ba:67:5e: fa:06:60:ef:ac:e9:18:55:62:98:6e:3e:46:56:c2:36:69:8d: ec:37:ea:9e:7c:55:a0:3f:ea:05:a5:84:9b:72:b0:28:f9:65: 2f:91:cc:06:08:ed:d3:d9:37:7c:92:83:4b:45:97:1d:52:2e: 6c:ce:01:01:66:dc:b8:c8:c9:bb:a8:af:9b:5e:6b:49:3b:0b: a5:4e:a2:99:38:f1:31:47:aa:be:69:25:d3:33:15:df:cd:a3: 50:8a:56:2a:a9:8a:f1:79:16:82:2f:75:f2:8c:46:0c:c4:61: be:de:ff:d8:a7:f6:a1:bf:13:51:af:4a:40:08:1d:4a:89:68: ad:77:ac:b9:42:c9:5f:1a:02:7d:4a:cd:3a:99:9a:32:96:7f: e8:27:0f:48:01:6b:1c:b3:d7:60:da:a0:32:b8:de:c1:db:b9: cf:f5:fe:7e:9a:21:37:e7:ab:be:28:21:25:31:af:fb:d8:63: bc:cf:a5:cc:7e:75:86:aa:94:0a:82:c8:64:05:24:93:cd:c3: 35:7a:e4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyH+48DFDlIcuPZutWFPCKBHhaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2 QzQ5RjI0QjAeFw0yNjA2MTkxODEyNTdaFw0yNjA2MjAyMDE0NTdaMDMxMTAvBgNV BAMTKDU2NDA2QUU2QzhFNzJGQkYwRUIyNEU1QzUzNkRDNTczODJERDhBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVg+IiE2yt7esS4YWF+Q8DFLH YChfcYbrKPYgrKMlcolzdTK9/OPWTaUXQNfVtgBygRID1UpO+bSpDtax8w56G/5x xgkxhmCmkF/eio/5KdG5kD/AcZPxlc1DgYrtuxfTnZq612EBFKzf3tV87+Jxm73t LS2e/SGgMKU84ICWjL24xYSRLpm2cCwp2yn0MgeRu1qiJ6upnzqKvgk2f6gY01ZR dtpRdjHTP6Amvrc937jATZ8bcXXaHGFg6L+GSH9/Fsns9EI74wbavV4H8GiYgB+Q /hkWyyzKS4X5VEFKJEmpQirKrxQ3GYlHGoQatYUqyWNKtGmmJpNFo2HM/zbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkBq5sjnL78Osk5cU23Fc4Ldit4wHwYDVR0j BBgwFoAUIJYNosg5GsqCHGpHJndIX2xJ8kswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2QwMzViM2ItZTZjNS00N2Y4LTk5YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJD ODM5MUFDQTgyMUM2QTQ3MjY3NzQ4NUY2QzQ5RjI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDk2MERBMkM4MzkxQUNBODIxQzZBNDcyNjc3NDg1RjZDNDlG MjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvMjA5NjBEQTJDODM5MUFDQTgyMUM2QTQ3MjY3NzQ4 NUY2QzQ5RjI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKKqiGGTenJIyc8MZmdQdLcY5u7WK1C0cRJ DsWymdKHw/RXUMqagNAP9IHlgGgyEtFsRbpnXvoGYO+s6RhVYphuPkZWwjZpjew3 6p58VaA/6gWlhJtysCj5ZS+RzAYI7dPZN3ySg0tFlx1SLmzOAQFm3LjIybuor5te a0k7C6VOopk48TFHqr5pJdMzFd/No1CKViqpivF5FoIvdfKMRgzEYb7e/9in9qG/ E1GvSkAIHUqJaK13rLlCyV8aAn1KzTqZmjKWf+gnD0gBaxyz12DaoDK43sHbuc/1 /n6aITfnq74oISUxr/vYY7zPpcx+dYaqlAqCyGQFJJPNwzV65J4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:17 2026 by rpki-client