$ rpki-client -vvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: eQVmqNNq0pYUrkFjfSI44BvcEwvJlSQjXzj2Yd7qKOg= Subject key identifier: 86:38:B6:56:90:66:89:C7:A3:4B:6C:B7:5E:22:08:58:17:B0:37:81 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 2D5CC0AA3CF50E7DBFF90D649F153E79E4F897F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:45:39 +0000 Manifest this update: Tue 16 Jun 2026 17:40:39 +0000 Manifest next update: Wed 17 Jun 2026 19:31:39 +0000 Files and hashes: 1: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 3: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: k0sAc4yntvu8FSjtUVECSgiKlvkqQk0lVFhX4C7Y/kY=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5c:c0:aa:3c:f5:0e:7d:bf:f9:0d:64:9f:15:3e:79:e4:f8:97:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Jun 16 17:40:39 2026 GMT Not After : Jun 17 19:31:39 2026 GMT Subject: CN=8638B656906689C7A34B6CB75E22085817B03781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:9f:d2:c7:66:09:02:0f:77:b2:90:ef:75: b4:22:6f:8d:24:ca:a3:d2:f9:88:66:6a:60:b9:21: d2:fe:d4:d0:07:04:2a:0f:f8:ee:70:57:d0:c4:4c: b8:1f:7c:17:2c:83:35:7e:95:a1:80:ec:23:2b:3c: 47:27:41:71:2f:b1:97:da:16:aa:31:40:b5:ae:d1: 97:14:da:de:21:4b:b9:99:35:d8:ce:3d:d2:42:5a: c3:ca:66:0d:f4:fe:4d:b7:aa:2d:38:e2:78:f4:c6: e9:55:00:2d:dd:0c:20:ce:4b:5a:ea:bc:38:2b:5a: 2b:65:b5:1c:90:01:ba:ac:10:7b:0d:9f:87:a4:90: a6:d8:be:8d:5a:e9:6d:67:c1:2d:67:0e:2a:40:17: 2a:ad:b5:c5:08:84:c8:05:df:68:23:23:15:2e:d5: 57:b7:c1:64:78:ec:66:46:3e:bb:ab:14:1d:41:a2: dc:98:a1:79:ac:4c:49:72:1e:18:0c:c7:4d:c5:fe: fd:1a:86:ab:d4:be:46:84:97:76:0d:6c:19:76:7e: 65:89:9c:a3:17:2c:b5:d4:cd:29:e3:78:ac:4b:b4: 15:80:08:65:13:81:ee:eb:26:21:9b:7f:82:d0:05: 21:7a:74:f9:02:e3:0c:b3:e0:09:b5:12:d6:ce:8e: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:B6:56:90:66:89:C7:A3:4B:6C:B7:5E:22:08:58:17:B0:37:81 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:27:7c:ce:9a:34:cf:08:b6:e1:10:e0:3a:67:53:99:39:d0: e4:6c:70:9d:f6:d7:4b:05:a9:e7:f2:c5:ce:fe:80:34:86:df: 20:57:a4:48:ae:81:a7:ad:70:d8:3e:fa:73:20:69:13:d5:c5: 1a:4a:20:fe:fe:d7:4c:b3:8f:49:f3:1e:22:52:08:ec:e7:a8: 91:a1:ce:ad:00:3e:79:ae:06:97:f4:d4:31:ff:af:69:39:b4: af:f7:10:41:e8:2e:fd:28:27:81:06:70:03:b3:df:84:f9:39: 0a:76:cd:25:a7:05:51:b1:a6:f5:32:85:af:35:2a:a4:99:1b: 8d:ae:4a:33:53:0b:59:eb:66:5e:9f:af:0d:9b:ca:71:8d:5a: f3:3d:aa:83:23:73:0c:71:3c:84:20:68:d7:66:1f:c5:36:6e: c2:41:8b:d4:59:0b:08:80:b5:38:30:43:c3:4b:65:27:06:5c: 52:10:e2:4a:7c:61:4d:3a:ec:b9:93:b3:7a:2d:49:76:ab:8c: 03:1e:54:df:21:08:d8:9f:33:8b:3b:3a:1c:e6:59:65:ad:4c: 73:07:98:99:6d:a4:55:bd:96:c2:c9:85:f9:40:0a:87:8a:b1: c0:43:61:92:e3:9d:21:a9:48:7e:78:bf:14:56:6e:28:d6:1b: cb:96:ad:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVzAqjz1Dn2/+Q1knxU+eeT4l/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA2MTYxNzQwMzlaFw0yNjA2MTcxOTMxMzlaMDMxMTAvBgNV BAMTKDg2MzhCNjU2OTA2Njg5QzdBMzRCNkNCNzVFMjIwODU4MTdCMDM3ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxJ/Sx2YJAg93spDvdbQib40k yqPS+YhmamC5IdL+1NAHBCoP+O5wV9DETLgffBcsgzV+laGA7CMrPEcnQXEvsZfa FqoxQLWu0ZcU2t4hS7mZNdjOPdJCWsPKZg30/k23qi044nj0xulVAC3dDCDOS1rq vDgrWitltRyQAbqsEHsNn4ekkKbYvo1a6W1nwS1nDipAFyqttcUIhMgF32gjIxUu 1Ve3wWR47GZGPrurFB1BotyYoXmsTElyHhgMx03F/v0ahqvUvkaEl3YNbBl2fmWJ nKMXLLXUzSnjeKxLtBWACGUTge7rJiGbf4LQBSF6dPkC4wyz4Am1EtbOjsPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhji2VpBmicejS2y3XiIIWBewN4EwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcnfM6aNM8ItuEQ4DpnU5k50ORscJ3210sF qefyxc7+gDSG3yBXpEiugaetcNg++nMgaRPVxRpKIP7+10yzj0nzHiJSCOznqJGh zq0APnmuBpf01DH/r2k5tK/3EEHoLv0oJ4EGcAOz34T5OQp2zSWnBVGxpvUyha81 KqSZG42uSjNTC1nrZl6frw2bynGNWvM9qoMjcwxxPIQgaNdmH8U2bsJBi9RZCwiA tTgwQ8NLZScGXFIQ4kp8YU067LmTs3otSXarjAMeVN8hCNifM4s7OhzmWWWtTHMH mJltpFW9lsLJhflACoeKscBDYZLjnSGpSH54vxRWbijWG8uWrc8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client