$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: n8Ycre+GaNM1se9oA87RhBGpEfvE27SBmEwK/uQq/2s= Subject key identifier: 12:EA:05:AD:9D:58:02:D6:DC:02:6E:40:A4:28:9E:FB:36:2A:D7:0D Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 5A103D2ECDD348C9F76430DF7BB0D3FFB3EA122B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:55:31 +0000 Manifest this update: Fri 24 Jul 2026 04:50:31 +0000 Manifest next update: Sat 25 Jul 2026 07:50:31 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 2: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: inYVmmyvS0SQ2WaYhRIGElDW1pTUsj+k5QiUAKYA3ns=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 4: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:10:3d:2e:cd:d3:48:c9:f7:64:30:df:7b:b0:d3:ff:b3:ea:12:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Jul 24 04:50:31 2026 GMT Not After : Jul 25 07:50:31 2026 GMT Subject: CN=12EA05AD9D5802D6DC026E40A4289EFB362AD70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:c9:57:6f:6a:f6:9f:af:15:af:f8:47:8e: ed:b3:d7:ef:3a:ec:c5:96:68:0a:e8:2c:81:d1:df: 3d:3d:2b:fb:91:3b:98:ef:8f:f7:40:61:68:9d:e5: 04:56:f0:32:02:b4:80:32:1b:38:fb:8e:f8:fc:5e: 33:66:5f:3d:e0:ab:a4:f5:16:af:f0:d4:71:b1:59: f4:90:86:cb:49:06:04:b0:58:17:19:6f:c8:af:87: 94:b0:c3:9a:e9:4e:67:32:e7:44:fa:73:9d:2c:77: 61:83:ee:50:0e:a4:1c:97:f0:d0:61:b5:d4:92:a6: d5:46:04:95:06:53:72:88:99:67:13:f3:3a:d5:7b: 47:88:57:9d:3c:95:9e:6c:fd:e9:b3:f6:68:74:3f: 91:69:d9:cc:85:21:4a:be:87:7c:f5:4a:86:92:d0: 9c:02:1f:25:57:a6:ce:04:2a:9c:17:1a:73:51:f0: 6f:4b:fd:75:5e:73:a7:0f:65:24:36:89:b4:65:fa: 38:2a:97:ae:e0:16:3d:01:3a:ac:83:5a:7f:d8:97: 2d:7d:f5:c3:f1:79:0d:4d:70:94:7c:ec:9f:49:3c: c2:17:88:a3:65:d4:dc:c7:8f:02:fc:2f:ab:3f:c5: f7:a9:fb:bb:d0:24:b9:7a:1f:b9:0d:21:a1:d1:f7: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EA:05:AD:9D:58:02:D6:DC:02:6E:40:A4:28:9E:FB:36:2A:D7:0D X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:25:12:32:7b:3e:05:f1:01:fa:ed:36:9a:f5:42:c4:09:0b: af:97:34:c0:00:93:fb:e4:b1:e1:a6:f2:d8:04:1f:b2:5c:0c: 9e:28:b0:b4:aa:65:8f:3f:df:3e:ec:13:d8:a3:9e:f3:01:af: 52:b2:88:51:2c:a3:7c:64:04:a2:86:0d:be:2b:4f:bb:9c:45: fe:b4:9f:d0:f5:d7:b6:80:db:da:db:ca:3e:9f:5e:03:e3:3b: 5c:b2:ef:7b:0f:63:5f:40:37:29:a9:0f:36:4b:42:f7:9f:6f: 19:3e:a5:54:2f:47:d0:bb:25:7e:e7:15:18:7e:61:14:a7:ed: ca:a2:0a:77:e4:c0:42:ff:0f:c6:27:db:64:90:10:6f:57:ee: 0c:ea:44:14:3c:ac:d1:85:3f:ea:79:2e:d3:8f:90:29:f6:c3: b7:46:8e:33:3b:93:de:62:76:ae:4a:89:94:12:be:21:b8:09: 0d:22:01:da:f6:d0:bf:63:08:bf:9c:b5:28:2e:9c:78:9a:f6: 7c:cf:50:fa:23:02:eb:b9:0c:b0:cf:f7:b8:1e:f4:1d:3c:92: 6d:ae:31:8c:e4:b6:ea:c2:fc:c2:85:71:5d:83:ad:95:6c:81: b1:3e:02:a8:70:85:89:d1:c9:5b:2c:5a:4b:d4:18:09:d5:8c: 9d:73:b2:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhA9Ls3TSMn3ZDDfe7DT/7PqEiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA3MjQwNDUwMzFaFw0yNjA3MjUwNzUwMzFaMDMxMTAvBgNV BAMTKDEyRUEwNUFEOUQ1ODAyRDZEQzAyNkU0MEE0Mjg5RUZCMzYyQUQ3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kclXb2r2n68Vr/hHju2z1+86 7MWWaAroLIHR3z09K/uRO5jvj/dAYWid5QRW8DICtIAyGzj7jvj8XjNmXz3gq6T1 Fq/w1HGxWfSQhstJBgSwWBcZb8ivh5Sww5rpTmcy50T6c50sd2GD7lAOpByX8NBh tdSSptVGBJUGU3KImWcT8zrVe0eIV508lZ5s/emz9mh0P5Fp2cyFIUq+h3z1SoaS 0JwCHyVXps4EKpwXGnNR8G9L/XVec6cPZSQ2ibRl+jgql67gFj0BOqyDWn/Yly19 9cPxeQ1NcJR87J9JPMIXiKNl1NzHjwL8L6s/xfep+7vQJLl6H7kNIaHR9yFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuoFrZ1YAtbcAm5ApCie+zYq1w0wHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADslEjJ7PgXxAfrtNpr1QsQJC6+XNMAAk/vk seGm8tgEH7JcDJ4osLSqZY8/3z7sE9ijnvMBr1KyiFEso3xkBKKGDb4rT7ucRf60 n9D117aA29rbyj6fXgPjO1yy73sPY19ANympDzZLQvefbxk+pVQvR9C7JX7nFRh+ YRSn7cqiCnfkwEL/D8Yn22SQEG9X7gzqRBQ8rNGFP+p5LtOPkCn2w7dGjjM7k95i dq5KiZQSviG4CQ0iAdr20L9jCL+ctSgunHia9nzPUPojAuu5DLDP97ge9B08km2u MYzkturC/MKFcV2DrZVsgbE+AqhwhYnRyVssWkvUGAnVjJ1zstM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:08:21 2026 by rpki-client