$ rpki-client -vvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: XIFLkVCbu0pKSW6ACwWBD35xXclrq2HNt2CwBbKd8nc= Subject key identifier: E2:30:77:0A:52:69:AD:E7:D6:8D:5E:A9:0E:E5:99:25:99:D4:75:3D Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 602CBDAEBD058C5C8AAD9EF538A09E8EE03FDB7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:57:55 +0000 Manifest this update: Fri 24 Jul 2026 02:52:55 +0000 Manifest next update: Sat 25 Jul 2026 05:46:55 +0000 Files and hashes: 1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) 3: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: EFJS36vHQLt6fZnHlCajizpU0fGxCff5EAXBXqTlH/Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2c:bd:ae:bd:05:8c:5c:8a:ad:9e:f5:38:a0:9e:8e:e0:3f:db:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Jul 24 02:52:55 2026 GMT Not After : Jul 25 05:46:55 2026 GMT Subject: CN=E230770A5269ADE7D68D5EA90EE5992599D4753D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:b1:86:a7:ba:b7:2f:7e:eb:d8:d4:7a:88: 41:0b:23:93:9c:33:aa:e0:22:1d:87:0a:50:5a:4e: 1a:8a:40:fd:e6:b8:36:12:40:61:52:ad:98:f2:4e: f9:45:f6:7d:f3:e2:99:c9:56:16:23:9c:af:d7:56: bb:81:9d:82:36:95:16:0b:db:30:9e:b8:c1:fd:54: 2d:8f:96:3a:96:a5:45:30:44:89:ff:45:85:b0:43: c2:77:87:61:1d:5e:50:02:43:ca:5f:47:0f:f4:07: 29:22:3a:92:70:cd:16:c0:bd:3c:69:8c:c6:35:6d: 4e:a3:fb:b9:ee:8d:08:59:8b:90:61:f5:71:25:3c: d9:dd:9f:4d:68:ab:79:33:d2:e1:c3:95:28:7c:7a: e5:b8:62:9f:08:36:79:6b:8f:16:b5:ea:14:38:ad: 06:d2:ab:ce:a1:d3:29:b8:42:07:7a:d7:72:f5:d4: 98:7e:2c:4e:90:8d:57:bd:13:02:6f:81:86:b4:45: d6:60:0b:7e:69:b7:a6:1c:92:a7:79:8f:ca:64:e8: 0d:34:b0:45:26:59:fa:55:e6:ca:89:da:1e:46:13: 4e:06:2b:f5:16:9a:03:c1:0d:95:9d:76:d7:5b:04: 19:bb:93:27:e0:01:a0:5b:df:6c:e4:62:ef:fa:83: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:30:77:0A:52:69:AD:E7:D6:8D:5E:A9:0E:E5:99:25:99:D4:75:3D X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0f:19:29:d6:e9:04:50:31:d5:5c:39:68:ce:97:c1:6a:8d: 32:32:d8:0e:01:d7:82:e4:6f:67:84:21:e2:2f:e7:83:44:53: e4:7e:11:d9:f7:3c:9d:bf:8a:bf:e9:9d:6b:c3:d8:a5:d1:47: 24:a2:94:07:f5:70:de:3f:68:4a:8f:d5:a9:95:f7:d1:81:01: 11:fe:1b:cc:dc:77:da:8b:79:cf:73:4c:b2:9c:2b:ec:92:dd: 08:b6:6c:4f:62:af:ce:63:cc:ef:33:1b:36:b6:00:3f:1e:78: e2:00:c1:b7:1b:b8:bb:58:56:1a:d4:5e:d3:7b:6d:33:a0:82: 23:0b:9b:61:28:f4:1c:23:0a:71:ce:26:15:a1:5b:8a:12:a8: bd:99:99:c9:85:b2:1c:a3:c2:ef:b0:03:fa:1a:08:80:bf:a1: 2d:6c:ed:de:02:a9:8e:cf:93:0e:68:3c:e4:a6:21:9b:6f:8e: cf:02:c1:94:80:45:d4:3f:0e:06:ed:9c:67:42:d4:45:cc:8d: 17:fa:e1:b9:f0:6e:b4:bc:3a:15:8d:58:21:d2:1d:bc:de:5a: e9:a2:dc:64:a3:49:18:67:69:8b:6b:73:f0:c6:b1:f9:4a:48: e9:ad:21:a3:41:65:8d:76:d0:f7:ce:be:70:5a:3c:60:07:a5: 64:19:f7:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCy9rr0FjFyKrZ71OKCejuA/230wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA3MjQwMjUyNTVaFw0yNjA3MjUwNTQ2NTVaMDMxMTAvBgNV BAMTKEUyMzA3NzBBNTI2OUFERTdENjhENUVBOTBFRTU5OTI1OTlENDc1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HLGGp7q3L37r2NR6iEELI5Oc M6rgIh2HClBaThqKQP3muDYSQGFSrZjyTvlF9n3z4pnJVhYjnK/XVruBnYI2lRYL 2zCeuMH9VC2PljqWpUUwRIn/RYWwQ8J3h2EdXlACQ8pfRw/0BykiOpJwzRbAvTxp jMY1bU6j+7nujQhZi5Bh9XElPNndn01oq3kz0uHDlSh8euW4Yp8INnlrjxa16hQ4 rQbSq86h0ym4Qgd613L11Jh+LE6QjVe9EwJvgYa0RdZgC35pt6Yckqd5j8pk6A00 sEUmWfpV5sqJ2h5GE04GK/UWmgPBDZWddtdbBBm7kyfgAaBb32zkYu/6g57FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jB3ClJprefWjV6pDuWZJZnUdT0wHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUPGSnW6QRQMdVcOWjOl8FqjTIy2A4B14Lk b2eEIeIv54NEU+R+Edn3PJ2/ir/pnWvD2KXRRySilAf1cN4/aEqP1amV99GBARH+ G8zcd9qLec9zTLKcK+yS3Qi2bE9ir85jzO8zGza2AD8eeOIAwbcbuLtYVhrUXtN7 bTOggiMLm2Eo9BwjCnHOJhWhW4oSqL2ZmcmFshyjwu+wA/oaCIC/oS1s7d4CqY7P kw5oPOSmIZtvjs8CwZSARdQ/DgbtnGdC1EXMjRf64bnwbrS8OhWNWCHSHbzeWumi 3GSjSRhnaYtrc/DGsflKSOmtIaNBZY120PfOvnBaPGAHpWQZ98k= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:55 2026 by rpki-client