
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
File: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft (raw, json)
Hash identifier: J8xjScUuKZYcBVT/dmFaGctWX1XoJmUziISgm5iq+Bo=
Subject key identifier: FC:22:ED:B5:67:42:73:3B:C5:0A:96:88:BA:DB:F7:9E:2E:3D:F7:AF
Authority key identifier: 20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0
Certificate issuer: /CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0
Certificate serial: 646023D45B6237F15FCA3EDF012C5198B1ED1D97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 20:39:05 +0000
Manifest this update: Tue 16 Jun 2026 20:34:05 +0000
Manifest next update: Thu 18 Jun 2026 00:13:05 +0000
Files and hashes: 1: 20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl (hash: im1gS662xeUsLDoTrXMFM7SA81pksUnZqzuF95y6iPM=)
2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: V8Sm4MJLCeArZFqOXIIvvpIosd8jOLT+tH/fFf0pEo4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl
rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:23:d4:5b:62:37:f1:5f:ca:3e:df:01:2c:51:98:b1:ed:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20E9C0C818AE4F546A542A6A72EFADA600A4C6E0
Validity
Not Before: Jun 16 20:34:05 2026 GMT
Not After : Jun 18 00:13:05 2026 GMT
Subject: CN=FC22EDB56742733BC50A9688BADBF79E2E3DF7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:6e:d8:00:71:d2:c9:68:9e:48:a0:24:63:
a4:e5:c4:6c:fb:2c:8b:79:a3:de:44:8c:6d:46:3b:
57:9d:02:92:0e:38:d1:9a:03:0d:5c:fb:f2:8f:c6:
ed:e9:3e:85:94:56:c6:07:06:b9:64:5d:d8:aa:09:
d5:e6:d9:08:ed:25:41:c1:05:81:a6:b8:d4:ee:f7:
58:b3:64:ee:d7:17:b2:90:87:ed:28:5b:37:e9:f9:
1e:4d:94:7b:e4:7a:93:87:5d:48:34:25:5e:0e:87:
5f:e7:fa:42:c8:67:13:5d:8e:bc:cd:f9:5b:33:34:
93:33:b3:12:d8:fd:5f:90:46:36:bc:d7:7a:a0:38:
37:26:08:c2:a2:dc:10:f2:07:88:d4:71:11:cc:ca:
d7:a1:ba:62:68:f4:a8:4c:cd:9c:50:bb:f0:9c:1d:
ff:5e:56:01:77:a4:6a:1c:fb:aa:91:fc:1b:cc:d5:
61:06:74:fa:f9:82:9a:55:53:a5:74:2c:e7:6b:fe:
48:e3:d1:48:5f:87:ba:5a:2a:8c:f1:79:51:85:0f:
94:4a:e1:21:78:a9:9c:a8:19:79:a5:22:e2:49:8c:
e3:1c:b6:c5:2d:85:06:ad:6f:04:a9:58:df:8f:1c:
24:63:a1:cd:09:a9:0d:b6:25:b1:6b:68:67:21:d5:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:ED:B5:67:42:73:3B:C5:0A:96:88:BA:DB:F7:9E:2E:3D:F7:AF
X509v3 Authority Key Identifier:
keyid:20:E9:C0:C8:18:AE:4F:54:6A:54:2A:6A:72:EF:AD:A6:00:A4:C6:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/20E9C0C818AE4F546A542A6A72EFADA600A4C6E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:af:cb:1c:5b:ff:e9:b1:32:bc:1c:b6:b1:71:f9:d1:bb:88:
23:94:de:6a:df:08:0a:ff:f8:27:3c:f2:4c:f2:07:55:c4:80:
5f:d9:a6:f2:45:7d:48:1f:0c:8f:a5:60:da:cb:6d:7f:33:ee:
0a:5a:37:1f:a6:91:c9:c1:bc:ab:56:b8:b0:18:85:bd:b8:8e:
d3:a4:49:b6:28:1e:11:2f:d8:4c:7f:c8:62:c6:f9:2f:cf:f3:
31:fb:97:06:db:7b:f9:49:91:50:d7:d8:e1:1b:6c:95:99:79:
a3:aa:62:d6:14:8d:87:c1:3b:79:95:53:79:db:f4:8a:e7:0c:
3f:fa:e3:cf:58:0e:85:0f:d5:5d:81:5f:d3:36:ef:1a:13:13:
a6:a5:e2:97:81:2a:ce:ab:6d:c6:55:7b:1d:24:e9:6a:43:e0:
c1:be:10:0c:43:06:6a:9e:a9:6d:d3:8b:76:e9:6c:74:73:17:
79:9c:53:52:45:f6:f4:ee:9e:82:d1:77:2d:83:93:cf:f7:ec:
d0:b0:b1:c2:6f:2f:7c:a7:5f:d9:50:46:4f:0f:17:85:2b:86:
ec:3a:4e:ca:97:74:4d:0a:95:0d:39:78:17:e9:25:4e:4d:d2:
a5:d2:15:50:ec:5e:1d:4d:1e:f6:e5:45:ab:cc:eb:76:d2:ca:
45:e6:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:19 2026 by rpki-client