$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft File: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft (raw, json) Hash identifier: fJl3PWp01ta/IRzRvc2anwRLkm0TOO1F+5kPEmvqm9k= Subject key identifier: 67:22:AC:7D:00:17:D7:22:A5:1C:40:66:27:EB:35:4F:AC:C9:82:D0 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 355B03B7791AC3C200DC065FBCF0142FAA6A9EB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:33:41 +0000 Manifest this update: Wed 17 Jun 2026 00:28:41 +0000 Manifest next update: Thu 18 Jun 2026 01:02:41 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: PZ7lOFKqUMwR2D2Tglk0+36W1k5KKwpsrA3YAIXAdvU=) 3: 20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl (hash: bOff/SozkhF8IyyZ/Uu8YthkaSZp9l787wK62KXYRQc=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: eJHqr/PQWEMxhCbNd/8TrNdKcDlxuebXQ2+zU3UL/Ys=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5b:03:b7:79:1a:c3:c2:00:dc:06:5f:bc:f0:14:2f:aa:6a:9e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: Jun 17 00:28:41 2026 GMT Not After : Jun 18 01:02:41 2026 GMT Subject: CN=6722AC7D0017D722A51C406627EB354FACC982D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:1a:b2:08:71:1a:31:0b:55:96:2f:00:01: bb:d8:1e:60:49:d2:01:2c:d6:57:49:25:ce:9f:a1: 9e:2e:8e:58:4e:6d:39:b9:92:85:33:27:4d:7a:df: 53:eb:94:5e:ab:39:45:ba:f0:6c:2f:f7:67:4e:cc: e2:3e:af:db:9e:4e:1d:b2:4a:90:e1:2d:62:33:15: 83:e9:47:7c:5c:29:13:da:4f:56:f7:82:3b:88:5c: d2:72:48:29:a4:c6:47:cb:a5:dc:d5:07:0f:dd:f3: 2b:02:9f:8a:e0:47:b5:33:52:9f:f3:2f:9f:10:53: dd:81:15:3a:60:1a:f4:2c:f0:f6:66:d4:4a:7e:07: a9:95:83:59:e6:77:6c:67:df:15:96:d2:e2:d2:29: a5:f3:d4:e0:2f:06:7f:b4:b5:27:b2:43:4f:a8:4a: 29:29:bb:f5:cb:bb:ab:9b:ea:f6:52:18:92:14:c4: 69:b8:ff:d8:de:10:a4:88:50:68:2f:f6:3c:8a:fa: e4:11:66:a7:89:9f:83:ac:8f:b4:3d:17:b6:cd:49: 1b:3d:aa:a8:bf:9c:60:f8:b6:25:7d:4d:26:97:92: 9c:24:7e:99:ec:20:28:24:e4:19:41:75:cc:13:9d: ee:b3:5f:e0:66:52:01:d5:d6:cf:e6:85:3d:46:43: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:AC:7D:00:17:D7:22:A5:1C:40:66:27:EB:35:4F:AC:C9:82:D0 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b7:f3:f6:be:9d:9d:7c:91:e2:cf:fe:8f:a0:b8:6b:27:f8: 1b:46:fd:42:b7:f7:0b:d3:41:55:14:cc:ab:aa:12:23:c0:e9: 84:98:29:9e:46:64:cb:c0:ca:95:54:0b:52:13:d2:3e:f9:cd: 8a:50:ef:12:7e:69:11:b6:37:78:8e:0b:de:43:00:36:7b:38: 8c:22:ee:39:2f:54:aa:a3:31:6a:dc:b9:be:e7:d6:f7:6f:4a: 19:b9:7e:ab:9e:83:78:7b:aa:77:cc:6b:7a:4e:7f:a9:4c:6e: b6:cf:22:20:6b:aa:f5:1f:f7:d3:3b:0a:76:5d:8c:c1:f8:69: 7a:8e:99:1e:97:1f:18:ce:85:80:b1:b3:0d:9a:f8:d7:93:d3: 73:4a:3c:ff:8a:ee:3d:aa:99:5c:36:59:fd:9a:91:aa:c4:8d: 3d:c8:e2:a8:ef:78:97:9c:ee:7e:05:9b:85:1b:e0:bd:15:85: 0f:2d:d5:e6:29:a1:6b:49:f8:a3:10:e7:3d:ba:1b:87:e4:22: a3:57:d1:59:99:34:c9:b4:ff:97:ca:ba:61:fa:b2:4b:90:86: 54:49:80:c4:e4:7b:dc:73:35:34:4a:d7:0e:91:db:15:97:61: ec:3e:48:7d:d8:42:bc:40:b4:b8:ea:09:e6:e3:7a:3a:dc:9c: 93:f0:29:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVsDt3kaw8IA3AZfvPAUL6pqnrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA2MTcwMDI4NDFaFw0yNjA2MTgwMTAyNDFaMDMxMTAvBgNV BAMTKDY3MjJBQzdEMDAxN0Q3MjJBNTFDNDA2NjI3RUIzNTRGQUNDOTgyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbmxqyCHEaMQtVli8AAbvYHmBJ 0gEs1ldJJc6foZ4ujlhObTm5koUzJ01631PrlF6rOUW68Gwv92dOzOI+r9ueTh2y SpDhLWIzFYPpR3xcKRPaT1b3gjuIXNJySCmkxkfLpdzVBw/d8ysCn4rgR7UzUp/z L58QU92BFTpgGvQs8PZm1Ep+B6mVg1nmd2xn3xWW0uLSKaXz1OAvBn+0tSeyQ0+o Sikpu/XLu6ub6vZSGJIUxGm4/9jeEKSIUGgv9jyK+uQRZqeJn4Osj7Q9F7bNSRs9 qqi/nGD4tiV9TSaXkpwkfpnsICgk5BlBdcwTne6zX+BmUgHV1s/mhT1GQz6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyKsfQAX1yKlHEBmJ+s1T6zJgtAwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5 NUVCQUZDMTFEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK38/a+nZ18keLP/o+guGsn+BtG/UK39wvT QVUUzKuqEiPA6YSYKZ5GZMvAypVUC1IT0j75zYpQ7xJ+aRG2N3iOC95DADZ7OIwi 7jkvVKqjMWrcub7n1vdvShm5fqueg3h7qnfMa3pOf6lMbrbPIiBrqvUf99M7CnZd jMH4aXqOmR6XHxjOhYCxsw2a+NeT03NKPP+K7j2qmVw2Wf2akarEjT3I4qjveJec 7n4Fm4Ub4L0VhQ8t1eYpoWtJ+KMQ5z26G4fkIqNX0VmZNMm0/5fKumH6skuQhlRJ gMTke9xzNTRK1w6R2xWXYew+SH3YQrxAtLjqCebjejrcnJPwKWw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:15 2026 by rpki-client