$ rpki-client -vvvf rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft File: 620E60F2FB189CAF127FF296661B8B00B4E20819.mft (raw, json) Hash identifier: RAFFFqHgZR56I/B/YansY2A6Bhtp3i8+PrTLido2D8A= Subject key identifier: 69:E5:94:87:E5:72:1B:BF:B1:0B:8F:A6:90:EA:F0:21:C3:8C:84:16 Authority key identifier: 62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 Certificate issuer: /CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Certificate serial: 7710666E3583334275816CFDD3E378E63717683E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 19:30:37 +0000 Manifest this update: Tue 22 Sep 2026 19:25:37 +0000 Manifest next update: Wed 23 Sep 2026 22:48:37 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: b54YcN8J7xkvGvscraLrfOupJbxthZjJChKT3D1a1W0=) 2: 620E60F2FB189CAF127FF296661B8B00B4E20819.crl (hash: 3nCTmLRQGkzVGAw4LewIcTCaMaEhTDclDFsS0zQ+HII=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: Xmd83MiBctBMTDyBOlcvMaPuJRo+/rA5uhcdgvtSuzk=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: l8S7b6tSiGmiZ1Dnx2pW1ak6cRNNsMEXAOLZKzioAJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:10:66:6e:35:83:33:42:75:81:6c:fd:d3:e3:78:e6:37:17:68:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620E60F2FB189CAF127FF296661B8B00B4E20819 Validity Not Before: Sep 22 19:25:37 2026 GMT Not After : Sep 23 22:48:37 2026 GMT Subject: CN=69E59487E5721BBFB10B8FA690EAF021C38C8416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:f8:09:ec:c4:85:1b:2b:ba:46:d7:37:51: 0a:77:36:2e:df:af:b0:08:20:d2:01:a4:fc:35:c8: 7d:70:5e:43:0d:a4:a7:56:18:a1:5e:e7:3e:bd:b0: bc:d5:0d:78:af:01:7b:b5:23:d2:c3:9b:32:68:e1: cd:e8:db:17:1f:34:87:07:bd:68:ec:d0:91:a6:63: ae:00:b7:54:99:f2:af:5b:39:6c:a9:8e:13:62:48: 68:2c:3e:ff:42:df:d8:18:00:3a:f6:13:9e:ba:cb: ad:7b:96:8c:56:d7:d7:36:63:7f:c5:e7:c6:d7:9f: 88:df:74:02:3c:eb:38:51:6a:d8:c9:a3:17:79:37: 9e:f3:dd:d1:f9:07:ca:ae:bd:34:8b:18:ea:b9:02: 52:fb:57:85:d2:c7:44:fb:f1:82:fb:dd:41:ad:80: 01:ab:ca:a6:31:b4:4c:98:6b:a5:a5:3d:94:28:70: 69:5b:c3:cb:d4:05:0e:1e:33:5b:3c:d5:56:52:8b: b5:97:76:0b:30:c3:67:ce:8c:b3:1e:71:68:4a:35: 8c:b5:c2:ba:7c:4e:b2:2f:c5:16:9b:e7:03:21:1f: 1e:d9:83:58:0e:93:84:7d:20:21:71:93:6e:02:4e: d6:16:22:2d:c7:40:e9:a2:19:41:16:1d:25:31:e7: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E5:94:87:E5:72:1B:BF:B1:0B:8F:A6:90:EA:F0:21:C3:8C:84:16 X509v3 Authority Key Identifier: keyid:62:0E:60:F2:FB:18:9C:AF:12:7F:F2:96:66:1B:8B:00:B4:E2:08:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/620E60F2FB189CAF127FF296661B8B00B4E20819.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/620E60F2FB189CAF127FF296661B8B00B4E20819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:3c:a8:59:e7:3e:16:dc:e8:53:57:b1:ce:3b:cc:d6:68: f0:0f:c2:3b:88:aa:01:d5:e5:25:1c:e6:df:ea:3c:a5:f5:32: e7:a3:fb:d5:3e:85:0c:59:c4:b8:52:99:9c:f8:f4:a9:58:d1: 0f:ae:b7:15:4b:73:58:68:02:ec:44:7d:01:a7:5e:ed:b2:eb: 50:ed:dd:08:17:84:c5:a5:3c:3f:e7:02:e1:91:df:f4:87:32: 64:69:88:16:0d:68:78:c5:12:84:72:2e:a8:89:1b:7d:e4:62: 59:41:73:53:bb:77:12:f7:a8:84:d8:f1:de:52:65:b1:74:3c: 4b:93:57:d0:97:a8:30:a4:b4:be:75:a6:ff:ed:2b:a4:f6:ec: 91:48:c4:39:03:be:25:30:1a:0a:5f:b4:37:78:0d:04:f9:bf: 6f:ff:99:18:d2:86:88:15:a4:ec:e4:97:c9:f8:69:92:2c:a3: a1:f2:62:71:ae:bc:01:9b:34:c4:0e:4f:4e:f3:52:d1:97:e8: e9:15:7d:ba:02:69:6e:3a:cc:c7:b6:33:bf:2c:a1:1e:6d:b8: 02:0e:b4:b5:aa:b6:3c:ed:a1:65:8a:81:30:60:a5:2c:2b:97: 8e:11:ad:cb:5d:96:9e:e2:0e:b8:04:c5:63:1e:c6:a4:34:f5: 1c:32:0e:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxBmbjWDM0J1gWz90+N45jcXaD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBC NEUyMDgxOTAeFw0yNjA5MjIxOTI1MzdaFw0yNjA5MjMyMjQ4MzdaMDMxMTAvBgNV BAMTKDY5RTU5NDg3RTU3MjFCQkZCMTBCOEZBNjkwRUFGMDIxQzM4Qzg0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJfgJ7MSFGyu6Rtc3UQp3Ni7f r7AIINIBpPw1yH1wXkMNpKdWGKFe5z69sLzVDXivAXu1I9LDmzJo4c3o2xcfNIcH vWjs0JGmY64At1SZ8q9bOWypjhNiSGgsPv9C39gYADr2E566y617loxW19c2Y3/F 58bXn4jfdAI86zhRatjJoxd5N57z3dH5B8quvTSLGOq5AlL7V4XSx0T78YL73UGt gAGryqYxtEyYa6WlPZQocGlbw8vUBQ4eM1s81VZSi7WXdgsww2fOjLMecWhKNYy1 wrp8TrIvxRab5wMhHx7Zg1gOk4R9ICFxk24CTtYWIi3HQOmiGUEWHSUx5+zFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaeWUh+VyG7+xC4+mkOrwIcOMhBYwHwYDVR0j BBgwFoAUYg5g8vsYnK8Sf/KWZhuLALTiCBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjJmNWYwN2MtZjA3Yi00YWFhLWEwYzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJG QjE4OUNBRjEyN0ZGMjk2NjYxQjhCMDBCNEUyMDgxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjBFNjBGMkZCMTg5Q0FGMTI3RkYyOTY2NjFCOEIwMEI0RTIw ODE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvNjIwRTYwRjJGQjE4OUNBRjEyN0ZGMjk2NjYxQjhC MDBCNEUyMDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETiPKhZ5z4W3OhTV7HOO8zWaPAPwjuIqgHV 5SUc5t/qPKX1Muej+9U+hQxZxLhSmZz49KlY0Q+utxVLc1hoAuxEfQGnXu2y61Dt 3QgXhMWlPD/nAuGR3/SHMmRpiBYNaHjFEoRyLqiJG33kYllBc1O7dxL3qITY8d5S ZbF0PEuTV9CXqDCktL51pv/tK6T27JFIxDkDviUwGgpftDd4DQT5v2//mRjShogV pOzkl8n4aZIso6HyYnGuvAGbNMQOT07zUtGX6OkVfboCaW46zMe2M78soR5tuAIO tLWqtjztoWWKgTBgpSwrl44Rrctdlp7iDrgExWMexqQ09RwyDtA= -----END CERTIFICATE-----Generated at Tue Sep 22 22:43:31 2026 by rpki-client