$ rpki-client -vvf rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft File: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft (raw, json) Hash identifier: ipyPSJn3ylMEAkqb1YMbeJLw/qN4PKC3K1LiVfopneg= Subject key identifier: 73:43:22:C3:43:4C:41:E8:06:55:54:37:D3:98:47:96:C2:C8:F6:93 Authority key identifier: 20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 Certificate issuer: /CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Certificate serial: 244155C84C478533220F51870343834BBD22ACB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:31:32 +0000 Manifest this update: Tue 16 Jun 2026 18:26:32 +0000 Manifest next update: Wed 17 Jun 2026 19:36:32 +0000 Files and hashes: 1: 20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl (hash: +XbeR4zFoth92S2huNgyE5PAGymFpB4nlH4FLKvRK10=) 2: 3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (hash: r0Gg/zKNGtmT6o5+BprFlCiKD1vB9gPWIu5WDkU9BlY=) 3: 3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (hash: PoH09i0hb4/ERjsqjI9l7z6YXlvUpEoIIQX53M9xnOM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:41:55:c8:4c:47:85:33:22:0f:51:87:03:43:83:4b:bd:22:ac:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DB1585229FF1D4E2D6BD3ACC136A4920B1F409 Validity Not Before: Jun 16 18:26:32 2026 GMT Not After : Jun 17 19:36:32 2026 GMT Subject: CN=734322C3434C41E806555437D3984796C2C8F693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:f6:ae:e5:e7:99:6f:70:ae:e5:6f:ce:3c: 29:a4:23:81:05:24:c6:cf:a7:ac:ac:dd:fb:7a:19: f0:40:2a:10:21:4e:19:14:1c:4d:1e:99:0f:80:6f: 90:77:a6:87:67:4c:20:5c:bb:c6:f5:cd:12:5d:14: ec:75:f6:21:f6:df:80:f9:1f:65:5c:66:0f:a5:dc: ed:00:d8:1a:28:40:de:5a:c8:a0:49:79:15:48:5b: c9:d8:48:27:cb:26:47:97:30:5e:78:41:ef:06:18: 05:54:61:c3:df:1b:09:aa:e3:91:12:71:77:74:f4: e9:72:5f:e6:fe:0d:88:af:fc:c9:4d:e5:e4:34:56: c9:7d:54:42:71:ba:38:94:5d:f0:17:b6:3b:39:e9: f7:d7:82:ce:da:be:37:c7:95:c6:e1:b9:ad:29:d6: 0e:fd:96:0e:0d:0e:2d:17:bc:37:bb:70:9f:ba:f0: 21:55:7b:4e:32:b2:cb:af:32:03:c9:85:69:e8:31: 37:70:7d:93:30:ef:31:91:14:90:16:6d:97:9e:fd: b5:27:cd:8e:86:58:a3:83:fa:b1:56:bd:ab:ad:47: ad:82:a0:1b:8a:f0:6d:bf:65:33:16:8f:ec:c8:4a: 48:e2:4b:59:64:6a:e3:0f:41:d3:be:9c:c4:82:36: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:43:22:C3:43:4C:41:E8:06:55:54:37:D3:98:47:96:C2:C8:F6:93 X509v3 Authority Key Identifier: keyid:20:DB:15:85:22:9F:F1:D4:E2:D6:BD:3A:CC:13:6A:49:20:B1:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/20DB1585229FF1D4E2D6BD3ACC136A4920B1F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2f:da:cd:ae:f4:83:13:f1:43:1b:23:01:c4:f6:a2:eb:ec: 30:42:7f:3c:36:6a:0b:3e:f3:c5:ea:c6:ec:ba:7c:f3:2f:e3: 56:7c:f2:8e:5b:97:13:9a:ba:84:b2:d5:4d:12:f0:98:bf:c6: 7a:3f:1d:32:a3:63:fc:77:f0:bf:fa:96:38:7a:b4:c5:b4:ec: 90:20:f3:92:69:60:dc:9f:7e:48:de:c7:57:c7:07:7f:18:43: 21:d3:74:2a:88:72:20:3f:fa:fc:40:6a:7a:34:9f:0a:b7:3a: 03:be:d9:bf:8c:b0:9e:81:69:ca:de:f9:0a:4e:a8:ec:ec:0a: ba:a3:45:36:ae:80:b0:28:59:96:0e:7c:a8:de:69:0e:c1:eb: 56:a1:49:6d:61:67:85:b9:9b:0c:eb:d6:d0:6b:e3:87:69:4a: 73:b9:e2:53:0a:7a:d6:65:cd:d5:18:b8:ab:3f:77:13:fa:05: e2:78:e3:be:99:cd:92:e1:dd:a2:4e:5d:cb:7f:55:f5:9a:39: 43:63:a5:9b:d9:30:15:d6:ea:a3:83:78:45:fd:06:d2:6c:1b: 11:78:d0:d5:a8:87:00:2c:c2:ea:73:24:4a:27:f7:69:9f:91: b7:5d:34:c1:5f:74:66:88:6a:3c:81:a0:8f:75:4d:17:59:92: 71:b8:80:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEFVyExHhTMiD1GHA0ODS70irLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZBNDky MEIxRjQwOTAeFw0yNjA2MTYxODI2MzJaFw0yNjA2MTcxOTM2MzJaMDMxMTAvBgNV BAMTKDczNDMyMkMzNDM0QzQxRTgwNjU1NTQzN0QzOTg0Nzk2QzJDOEY2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRnvau5eeZb3Cu5W/OPCmkI4EF JMbPp6ys3ft6GfBAKhAhThkUHE0emQ+Ab5B3podnTCBcu8b1zRJdFOx19iH234D5 H2VcZg+l3O0A2BooQN5ayKBJeRVIW8nYSCfLJkeXMF54Qe8GGAVUYcPfGwmq45ES cXd09OlyX+b+DYiv/MlN5eQ0Vsl9VEJxujiUXfAXtjs56ffXgs7avjfHlcbhua0p 1g79lg4NDi0XvDe7cJ+68CFVe04yssuvMgPJhWnoMTdwfZMw7zGRFJAWbZee/bUn zY6GWKOD+rFWvautR62CoBuK8G2/ZTMWj+zISkjiS1lkauMPQdO+nMSCNkzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0Miw0NMQegGVVQ305hHlsLI9pMwHwYDVR0j BBgwFoAUINsVhSKf8dTi1r06zBNqSSCx9AkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4YzAzODMtNjI5Zi00NmUyLWIxMTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUy MjlGRjFENEUyRDZCRDNBQ0MxMzZBNDkyMEIxRjQwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMERCMTU4NTIyOUZGMUQ0RTJENkJEM0FDQzEzNkE0OTIwQjFG NDA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4YzAzODMtNjI5Zi00NmUyLWIx MTQtMTg4Y2M5MjFhNmE1LzAvMjBEQjE1ODUyMjlGRjFENEUyRDZCRDNBQ0MxMzZB NDkyMEIxRjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwv2s2u9IMT8UMbIwHE9qLr7DBCfzw2ags+ 88Xqxuy6fPMv41Z88o5blxOauoSy1U0S8Ji/xno/HTKjY/x38L/6ljh6tMW07JAg 85JpYNyffkjex1fHB38YQyHTdCqIciA/+vxAano0nwq3OgO+2b+MsJ6Bacre+QpO qOzsCrqjRTaugLAoWZYOfKjeaQ7B61ahSW1hZ4W5mwzr1tBr44dpSnO54lMKetZl zdUYuKs/dxP6BeJ4476ZzZLh3aJOXct/VfWaOUNjpZvZMBXW6qODeEX9BtJsGxF4 0NWohwAswupzJEon92mfkbddNMFfdGaIajyBoI91TRdZknG4gPY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:16 2026 by rpki-client