$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: yjOh8/h8Nu4yxs2PLqAWfGFKBsNWirrsJN/5L5LxGPs= Subject key identifier: 54:77:43:89:A7:E1:87:03:E4:1C:D0:FD:C7:30:53:9D:52:F3:E2:CC Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 20DF3472465DA3E77A6D7F0E11991E92627F8BDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 21:37:21 +0000 Manifest this update: Thu 24 Sep 2026 21:32:21 +0000 Manifest next update: Fri 25 Sep 2026 22:32:21 +0000 Files and hashes: 1: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 3: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 5: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: rVamkcHnVCzZg1s/eiKhp+whzG2d1926ZKB+t1+qr9A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:34:72:46:5d:a3:e7:7a:6d:7f:0e:11:99:1e:92:62:7f:8b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Sep 24 21:32:21 2026 GMT Not After : Sep 25 22:32:21 2026 GMT Subject: CN=54774389A7E18703E41CD0FDC730539D52F3E2CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:22:81:74:7d:28:9e:87:33:ef:8b:0b:34: bd:df:10:73:36:35:f9:13:8f:de:61:b7:4e:22:43: fc:15:17:27:35:51:69:0d:6b:24:01:8c:b9:7a:22: ad:70:3b:27:8d:76:aa:59:1b:94:5d:23:fc:b8:3a: b1:0f:2c:08:35:cb:09:4e:2d:0a:5f:0b:79:09:b4: f6:46:2a:90:e0:06:63:d6:7e:ec:fb:7c:9b:be:00: 3e:9f:a1:b3:aa:cc:4e:3d:39:43:7c:4c:80:f3:a3: 81:5f:6d:20:66:e2:eb:cd:c1:05:2d:68:07:67:ff: 82:99:c1:c3:00:1c:9a:ce:fa:be:9d:5b:15:14:95: 95:4a:1a:bc:82:dc:ed:90:a7:2a:0b:cc:36:30:87: 15:a1:ef:f9:8f:2c:11:43:bd:ea:5d:bc:9e:d1:54: 65:c8:47:3f:cd:3b:26:1e:5f:7a:48:db:7f:d2:7c: f9:7f:32:3d:cf:93:ae:da:29:cb:4b:03:7d:4d:00: b3:e0:23:56:99:8e:1f:0c:cd:32:e0:10:48:99:25: 76:40:f0:55:4d:99:d2:6a:90:ef:ee:0b:e5:ff:a4: b6:02:44:68:b6:c0:67:29:71:63:ce:91:d4:57:89: b4:2e:fa:2d:b4:d3:d2:d8:91:78:9a:09:e6:da:03: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:77:43:89:A7:E1:87:03:E4:1C:D0:FD:C7:30:53:9D:52:F3:E2:CC X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:47:b4:38:62:e3:86:79:4b:46:e8:2e:4a:7b:04:5f:e6:33: 68:c5:7f:05:88:62:7d:36:4d:98:46:c7:5a:bf:cd:f5:07:1f: b5:8f:2b:f0:d5:90:c2:9b:25:71:71:5c:77:3a:a0:0f:77:ee: 28:3e:52:10:3b:d6:fb:96:b0:11:01:17:12:5d:7c:ac:a0:a2: 52:97:dd:d9:4b:60:55:96:4e:52:c8:0c:cf:90:20:3b:da:88: 88:b4:d5:1f:de:ae:a7:dd:0b:db:2f:1e:1b:c9:bb:78:a8:e2: c3:fb:31:f4:8c:1e:31:f3:b7:c0:37:32:a5:95:1a:68:25:21: 2a:e0:77:5a:6b:0a:85:3b:37:3c:11:83:c6:c0:84:d9:90:e8: 81:76:86:e1:3d:6f:07:a6:7a:1a:1a:ac:01:66:f4:76:58:5c: 48:c4:00:8c:81:01:fa:ae:10:94:12:10:03:5b:1f:1e:02:0b: d0:60:eb:e5:52:2b:64:fe:77:75:47:4c:f2:69:29:98:bc:b7: 27:7c:d7:95:ed:2b:d6:55:4c:d0:e3:9b:2d:5f:96:4c:54:4e: 31:6b:81:0a:9f:b3:c3:3a:03:43:d1:12:85:ff:91:08:70:4c: b0:77:7b:6f:dc:e3:2b:cc:85:a4:89:dc:88:09:0a:2e:46:0c: be:14:14:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN80ckZdo+d6bX8OEZkekmJ/i98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA5MjQyMTMyMjFaFw0yNjA5MjUyMjMyMjFaMDMxMTAvBgNV BAMTKDU0Nzc0Mzg5QTdFMTg3MDNFNDFDRDBGREM3MzA1MzlENTJGM0UyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLyKBdH0onocz74sLNL3fEHM2 NfkTj95ht04iQ/wVFyc1UWkNayQBjLl6Iq1wOyeNdqpZG5RdI/y4OrEPLAg1ywlO LQpfC3kJtPZGKpDgBmPWfuz7fJu+AD6fobOqzE49OUN8TIDzo4FfbSBm4uvNwQUt aAdn/4KZwcMAHJrO+r6dWxUUlZVKGryC3O2QpyoLzDYwhxWh7/mPLBFDvepdvJ7R VGXIRz/NOyYeX3pI23/SfPl/Mj3Pk67aKctLA31NALPgI1aZjh8MzTLgEEiZJXZA 8FVNmdJqkO/uC+X/pLYCRGi2wGcpcWPOkdRXibQu+i2009LYkXiaCebaA9xbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVHdDiafhhwPkHND9xzBTnVLz4swwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdHtDhi44Z5S0boLkp7BF/mM2jFfwWIYn02 TZhGx1q/zfUHH7WPK/DVkMKbJXFxXHc6oA937ig+UhA71vuWsBEBFxJdfKygolKX 3dlLYFWWTlLIDM+QIDvaiIi01R/erqfdC9svHhvJu3io4sP7MfSMHjHzt8A3MqWV GmglISrgd1prCoU7NzwRg8bAhNmQ6IF2huE9bwemehoarAFm9HZYXEjEAIyBAfqu EJQSEANbHx4CC9Bg6+VSK2T+d3VHTPJpKZi8tyd815XtK9ZVTNDjmy1flkxUTjFr gQqfs8M6A0PREoX/kQhwTLB3e2/c4yvMhaSJ3IgJCi5GDL4UFCs= -----END CERTIFICATE-----Generated at Fri Sep 25 15:53:43 2026 by rpki-client