$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: EWv/e+P7VpYP1/5e8jVvz4KF51+aQbpudTgDp1D1fmY= Subject key identifier: 77:C7:D3:5C:84:E8:D9:5F:53:2A:93:D7:40:1C:1C:C7:85:92:3D:31 Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 521192BBE69DEECB1849C48567F706C41E395310 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:15:41 +0000 Manifest this update: Tue 12 May 2026 09:10:41 +0000 Manifest next update: Wed 13 May 2026 12:05:41 +0000 Files and hashes: 1: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 4: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: 6SxtXwcFxhrGpzsNRFWsSdGXoo5nTgBBBhScotvCQbk=) 5: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:11:92:bb:e6:9d:ee:cb:18:49:c4:85:67:f7:06:c4:1e:39:53:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: May 12 09:10:41 2026 GMT Not After : May 13 12:05:41 2026 GMT Subject: CN=77C7D35C84E8D95F532A93D7401C1CC785923D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:d5:79:e2:6e:d0:e4:c8:84:d5:7f:3c:6d: c7:a6:29:90:ef:19:5c:f0:c9:6c:48:bc:d2:65:be: 65:f0:1d:50:5d:0e:ca:16:74:19:0b:4f:6d:bc:d7: f0:8d:c7:f2:cb:be:cc:d3:01:e6:91:b8:6d:fd:71: aa:16:00:b8:27:c3:0f:ea:8b:b6:a3:43:9e:af:8e: 86:df:10:c5:3e:45:e9:00:e2:5d:6a:a1:1f:bc:0b: 1e:14:1d:18:bb:d0:61:8b:ef:62:94:bf:3b:08:00: 9b:2b:b5:0c:af:6d:96:99:04:27:41:6f:95:55:38: 70:68:7c:bb:9c:81:69:71:58:cc:d6:fd:2b:5c:e4: e7:29:91:04:d0:a2:52:be:5f:15:f9:48:55:32:de: fc:f1:20:31:69:28:1c:8d:a1:36:3f:0f:e5:7d:12: 6f:1a:17:ff:b0:cb:0f:27:c1:3a:36:44:d8:87:d6: 43:27:89:00:97:e5:df:6d:bf:2a:6f:c3:ab:50:d9: 04:0d:cb:68:78:7b:cc:25:a3:56:58:63:57:62:51: 51:c1:ab:ac:b0:a9:a7:b0:0a:c2:dc:1e:d9:b2:e4: 60:b4:e8:42:56:9a:a2:9c:44:d6:3e:23:96:3a:e7: 8f:ab:55:35:f1:ec:01:7b:f4:3f:33:06:0c:cc:58: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C7:D3:5C:84:E8:D9:5F:53:2A:93:D7:40:1C:1C:C7:85:92:3D:31 X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:09:d9:41:4d:f7:9a:eb:c0:f1:ba:4c:9a:4e:8b:7a:f0:16: f9:6c:20:3c:9a:26:fc:cc:a7:f9:11:db:24:32:63:d9:fc:88: 28:1e:2e:b0:f1:c0:11:7d:3a:4b:fd:2b:54:cd:e0:1d:cd:be: b6:c0:60:20:47:bc:b3:60:12:80:34:60:9a:d8:10:aa:52:69: 10:44:a9:8e:ed:dc:1f:24:64:36:0c:4e:eb:3a:a1:75:75:b5: 82:10:90:96:6f:4c:34:8f:8a:6c:f8:9c:96:bb:cf:d3:cb:82: f4:56:d3:c1:13:a8:e3:90:70:af:8a:1a:05:9c:30:da:2a:ba: 85:a7:55:de:95:aa:97:e3:bc:51:ab:8d:bb:f6:16:bd:4b:7e: bc:ad:17:68:1f:29:0a:6f:2a:1a:6b:27:31:98:da:e4:54:62: ef:dd:84:c1:64:ba:92:6f:ce:f4:0b:20:33:09:b6:1f:fc:6e: 72:4e:17:61:9f:f8:39:55:84:77:8e:4a:11:16:0f:21:bb:b8: 3a:ef:d5:c5:82:eb:62:71:c8:2a:dc:df:13:f3:63:01:98:02: ef:31:d1:04:fe:91:53:e5:af:cd:11:03:16:c7:cd:54:82:3f: 5f:54:66:6b:df:96:0e:41:1b:13:83:1d:03:55:38:5f:2e:34: 0d:db:c1:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhGSu+ad7ssYScSFZ/cGxB45UxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA1MTIwOTEwNDFaFw0yNjA1MTMxMjA1NDFaMDMxMTAvBgNV BAMTKDc3QzdEMzVDODRFOEQ5NUY1MzJBOTNENzQwMUMxQ0M3ODU5MjNEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcstV54m7Q5MiE1X88bcemKZDv GVzwyWxIvNJlvmXwHVBdDsoWdBkLT2281/CNx/LLvszTAeaRuG39caoWALgnww/q i7ajQ56vjobfEMU+RekA4l1qoR+8Cx4UHRi70GGL72KUvzsIAJsrtQyvbZaZBCdB b5VVOHBofLucgWlxWMzW/Stc5OcpkQTQolK+XxX5SFUy3vzxIDFpKByNoTY/D+V9 Em8aF/+wyw8nwTo2RNiH1kMniQCX5d9tvypvw6tQ2QQNy2h4e8wlo1ZYY1diUVHB q6ywqaewCsLcHtmy5GC06EJWmqKcRNY+I5Y654+rVTXx7AF79D8zBgzMWEFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd8fTXITo2V9TKpPXQBwcx4WSPTEwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoJ2UFN95rrwPG6TJpOi3rwFvlsIDyaJvzM p/kR2yQyY9n8iCgeLrDxwBF9Okv9K1TN4B3NvrbAYCBHvLNgEoA0YJrYEKpSaRBE qY7t3B8kZDYMTus6oXV1tYIQkJZvTDSPimz4nJa7z9PLgvRW08ETqOOQcK+KGgWc MNoquoWnVd6VqpfjvFGrjbv2Fr1LfrytF2gfKQpvKhprJzGY2uRUYu/dhMFkupJv zvQLIDMJth/8bnJOF2Gf+DlVhHeOShEWDyG7uDrv1cWC62JxyCrc3xPzYwGYAu8x 0QT+kVPlr80RAxbHzVSCP19UZmvflg5BGxODHQNVOF8uNA3bwY8= -----END CERTIFICATE-----Generated at Wed May 13 03:51:05 2026 by rpki-client