$ rpki-client -vvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft File: B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft (raw, json) Hash identifier: w114nh2S/WoUAj+NAHKL9nKgJJ/VAQpGWZaFVTzK3b4= Subject key identifier: 8A:8F:01:6C:84:D8:1D:BF:E4:32:A4:1F:C1:F3:ED:C0:FD:37:9D:BC Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Certificate serial: 578EF422A012444C39F86FEDF909ADC1AA7CD8B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:23:34 +0000 Manifest this update: Tue 12 May 2026 01:18:34 +0000 Manifest next update: Wed 13 May 2026 05:17:34 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=) 2: B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl (hash: MDg+XOKNQF7caWRlc87Jp/NPiVFpLII/YDGRvXDZcfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8e:f4:22:a0:12:44:4c:39:f8:6f:ed:f9:09:ad:c1:aa:7c:d8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D Validity Not Before: May 12 01:18:34 2026 GMT Not After : May 13 05:17:34 2026 GMT Subject: CN=8A8F016C84D81DBFE432A41FC1F3EDC0FD379DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:49:32:bc:55:24:68:16:42:e4:f4:3b:fd: 3b:2c:4c:28:7a:bd:36:33:52:b1:4d:f8:e8:29:a5: e8:b1:43:73:52:e6:55:ba:71:c6:52:98:8d:7c:b4: a1:6c:4f:ff:c8:58:7c:55:34:21:9c:5f:76:99:d6: 0c:42:e4:66:0d:72:7c:7d:88:7e:d4:47:16:f2:ac: 86:a3:1e:73:3e:fd:64:19:22:64:3c:54:92:d4:84: 08:18:d0:cd:91:c3:49:e3:4d:ff:00:70:22:0a:7c: 89:1a:3e:6b:e3:cb:f4:a1:28:53:ba:9f:4f:17:5f: 3f:48:e3:55:c0:9a:e9:5e:bf:c6:c3:48:cc:e0:dc: 6d:e7:47:70:ec:66:15:6d:5a:81:20:c4:ac:27:d5: 7c:ec:b8:b0:07:09:ed:b9:5c:0f:61:08:17:68:cf: cc:0b:e5:a9:13:3a:80:58:80:46:94:92:69:20:5e: 28:08:81:08:1a:5a:03:21:49:ae:3b:8b:a3:40:dc: 57:be:d5:1c:b8:c4:06:64:65:75:1a:2b:1d:25:9d: c9:41:76:cd:f0:4a:aa:26:45:da:1a:bb:d5:1c:39: 5b:f8:03:6a:8e:a1:8f:c1:3d:01:c7:c8:eb:d4:96: 41:e8:e3:7b:21:da:d0:9e:73:a2:d8:1d:96:59:c1: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8F:01:6C:84:D8:1D:BF:E4:32:A4:1F:C1:F3:ED:C0:FD:37:9D:BC X509v3 Authority Key Identifier: keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5d:af:96:3d:d9:1b:9c:02:64:50:9a:5f:5f:67:7f:2e:04: 93:cc:38:89:b5:c4:9a:03:3b:a1:42:97:0f:a3:90:1d:b7:12: 88:23:5c:33:42:11:ac:80:86:33:9e:f6:e5:f2:15:50:df:8d: 14:7b:da:7b:b0:5e:4f:9b:92:3c:b6:8c:a7:de:fc:e6:10:a8: a2:77:fb:5a:a9:3a:ed:53:c6:c4:a1:41:45:69:26:36:50:b1: 52:f6:7d:43:28:bf:c4:20:ab:10:f1:22:e8:9d:2e:b2:10:6f: f7:7b:25:6d:1c:28:ce:2c:78:c2:d0:85:61:ab:4e:e7:ee:8a: 89:3c:77:fc:05:94:21:3b:70:8d:8c:b8:c0:84:4c:1b:8f:c2: a6:5a:09:3b:6e:ca:36:1f:f1:0b:a7:e0:2d:22:ff:fb:84:e2: af:44:bf:a5:75:95:f7:d7:c7:3b:61:67:da:a6:86:b0:5c:2f: de:e2:16:1b:3d:a5:9c:17:f8:43:3e:11:86:01:b4:7b:26:9d: fd:d1:9b:05:d8:ab:87:bb:7d:40:15:1f:c7:1c:9e:0a:f5:b8: 4d:99:db:95:0c:f6:83:5c:ad:da:9a:4a:14:b6:87:89:7b:47: 0c:33:86:ee:6a:c4:ba:0b:33:8a:de:82:79:2c:60:12:3e:fc: cf:84:1a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV470IqASREw5+G/t+Qmtwap82LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIy N0NFRTkzRDAeFw0yNjA1MTIwMTE4MzRaFw0yNjA1MTMwNTE3MzRaMDMxMTAvBgNV BAMTKDhBOEYwMTZDODREODFEQkZFNDMyQTQxRkMxRjNFREMwRkQzNzlEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17UkyvFUkaBZC5PQ7/TssTCh6 vTYzUrFN+OgppeixQ3NS5lW6ccZSmI18tKFsT//IWHxVNCGcX3aZ1gxC5GYNcnx9 iH7URxbyrIajHnM+/WQZImQ8VJLUhAgY0M2Rw0njTf8AcCIKfIkaPmvjy/ShKFO6 n08XXz9I41XAmulev8bDSMzg3G3nR3DsZhVtWoEgxKwn1XzsuLAHCe25XA9hCBdo z8wL5akTOoBYgEaUkmkgXigIgQgaWgMhSa47i6NA3Fe+1Ry4xAZkZXUaKx0lnclB ds3wSqomRdoau9UcOVv4A2qOoY/BPQHHyOvUlkHo43sh2tCec6LYHZZZwRhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUio8BbITYHb/kMqQfwfPtwP03nbwwHwYDVR0j BBgwFoAUsqB/F0jlYbM9uMQyaYGlWyfO6T0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFlMGQxN2MtZWRkMS00MjAyLWI3MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0 OEU1NjFCMzNEQjhDNDMyNjk4MUE1NUIyN0NFRTkzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkEwN0YxNzQ4RTU2MUIzM0RCOEM0MzI2OTgxQTU1QjI3Q0VF OTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvQjJBMDdGMTc0OEU1NjFCMzNEQjhDNDMyNjk4MUE1 NUIyN0NFRTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVdr5Y92RucAmRQml9fZ38uBJPMOIm1xJoD O6FClw+jkB23EogjXDNCEayAhjOe9uXyFVDfjRR72nuwXk+bkjy2jKfe/OYQqKJ3 +1qpOu1TxsShQUVpJjZQsVL2fUMov8QgqxDxIuidLrIQb/d7JW0cKM4seMLQhWGr Tufuiok8d/wFlCE7cI2MuMCETBuPwqZaCTtuyjYf8Qun4C0i//uE4q9Ev6V1lffX xzthZ9qmhrBcL97iFhs9pZwX+EM+EYYBtHsmnf3RmwXYq4e7fUAVH8ccngr1uE2Z 25UM9oNcrdqaShS2h4l7Rwwzhu5qxLoLM4regnksYBI+/M+EGjw= -----END CERTIFICATE-----Generated at Tue May 12 22:19:33 2026 by rpki-client