$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: z53D9PPJ64dK9OgFQpwTzOkqT00fVzR03Gf0LqfBaRA= Subject key identifier: 46:CA:39:33:D5:A8:17:B7:B6:32:A5:88:8F:02:07:A1:60:81:68:E4 Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 65FC8DE0C2081A26D45A39A1C28B7CF1D3FCC5C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:53 +0000 Manifest this update: Tue 12 May 2026 20:06:53 +0000 Manifest next update: Wed 13 May 2026 20:28:53 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 2: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: 4u/ailx03ITeUpLDn5l2c/qP+jxG/soDJF3q+NgPhlk=) 3: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) 4: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fc:8d:e0:c2:08:1a:26:d4:5a:39:a1:c2:8b:7c:f1:d3:fc:c5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: May 12 20:06:53 2026 GMT Not After : May 13 20:28:53 2026 GMT Subject: CN=46CA3933D5A817B7B632A5888F0207A1608168E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:6b:68:56:b1:84:47:ca:f9:69:d6:87:77: 83:73:16:a1:c7:68:1a:d3:3e:60:82:08:db:2b:b0: 67:be:a8:b2:2b:82:65:f8:59:a0:d6:73:66:0d:e1: e6:90:e9:09:13:97:60:c5:ff:4d:c6:26:74:40:96: b5:05:56:e9:5c:c1:33:d3:96:65:86:51:b2:93:e5: b9:bd:bc:14:b2:4f:81:fd:33:8b:a2:40:aa:be:bd: b8:81:c9:87:ae:fa:1b:44:63:35:dd:ac:51:83:16: 0e:37:b3:f9:16:f7:36:9f:c7:91:74:d1:ba:b0:8a: 2b:1d:c3:bf:3a:66:17:45:4f:5d:bf:d3:ca:1c:0f: 7a:f3:32:59:ab:67:26:b7:76:e1:ba:ae:25:9e:fa: 4e:7f:2f:23:5b:97:75:df:04:89:5b:2a:34:6b:e3: d8:e7:f7:b6:34:e3:21:91:71:cd:b8:d9:bc:2f:e2: 8c:e8:11:31:30:38:ab:4f:ab:06:29:38:90:02:1c: f9:9d:52:91:79:ea:d4:3b:1c:5c:d9:28:cc:c8:30: 99:1f:2b:0f:f8:42:7f:a2:8f:c7:6f:f1:d6:c7:62: be:3d:75:6c:e8:aa:d1:47:ef:84:03:ae:d6:b5:c2: 28:dc:07:f6:e9:84:27:91:62:39:de:d5:15:a4:29: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CA:39:33:D5:A8:17:B7:B6:32:A5:88:8F:02:07:A1:60:81:68:E4 X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:62:86:47:01:d2:f7:f0:bf:51:1f:c9:62:fc:0e:b8:5a: ed:2b:c2:99:ac:22:34:06:94:5a:d0:5f:cc:34:a9:83:b6:93: d2:e0:8e:e0:27:95:f4:49:cd:71:a4:7c:70:d4:ac:d5:be:3d: be:19:fa:8f:24:4e:9e:a2:70:b9:f7:12:17:39:ce:7f:8f:a0: 2d:29:ee:bb:7b:4b:60:ab:1f:e0:cc:fb:d1:28:95:06:c0:1d: fa:eb:1b:c1:f3:2a:e0:66:90:89:5c:0f:b7:11:e9:a2:e0:e2: 5c:b4:74:c9:6f:6a:ae:21:dc:48:61:22:2e:1b:29:20:19:46: 08:b1:39:ee:48:ff:28:db:99:c8:f0:cd:d0:37:4a:55:56:86: 30:57:29:aa:df:76:23:7e:13:66:1f:26:8a:cd:da:a8:eb:d7: e4:42:e3:b1:12:e9:f9:b2:db:4c:dd:37:87:27:7d:bf:09:b3: f2:92:ab:7e:d4:fc:58:49:35:c5:10:33:c0:b7:b3:39:1c:b7: 40:54:bf:e1:db:dd:c9:a7:3f:29:01:4d:5a:32:a8:61:d3:31: d0:da:b0:12:57:5f:c0:28:a7:4a:25:de:d3:30:39:3f:88:8f: ef:8b:55:a3:bb:71:5f:61:61:a3:2c:49:ee:09:b0:98:f8:fc: 09:a5:f3:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfyN4MIIGibUWjmhwot88dP8xcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA1MTIyMDA2NTNaFw0yNjA1MTMyMDI4NTNaMDMxMTAvBgNV BAMTKDQ2Q0EzOTMzRDVBODE3QjdCNjMyQTU4ODhGMDIwN0ExNjA4MTY4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4imtoVrGER8r5adaHd4NzFqHH aBrTPmCCCNsrsGe+qLIrgmX4WaDWc2YN4eaQ6QkTl2DF/03GJnRAlrUFVulcwTPT lmWGUbKT5bm9vBSyT4H9M4uiQKq+vbiByYeu+htEYzXdrFGDFg43s/kW9zafx5F0 0bqwiisdw786ZhdFT12/08ocD3rzMlmrZya3duG6riWe+k5/LyNbl3XfBIlbKjRr 49jn97Y04yGRcc242bwv4ozoETEwOKtPqwYpOJACHPmdUpF56tQ7HFzZKMzIMJkf Kw/4Qn+ij8dv8dbHYr49dWzoqtFH74QDrta1wijcB/bphCeRYjne1RWkKfiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURso5M9WoF7e2MqWIjwIHoWCBaOQwHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAvYoZHAdL38L9RH8li/A64Wu0rwpmsIjQG lFrQX8w0qYO2k9LgjuAnlfRJzXGkfHDUrNW+Pb4Z+o8kTp6icLn3Ehc5zn+PoC0p 7rt7S2CrH+DM+9EolQbAHfrrG8HzKuBmkIlcD7cR6aLg4ly0dMlvaq4h3EhhIi4b KSAZRgixOe5I/yjbmcjwzdA3SlVWhjBXKarfdiN+E2YfJorN2qjr1+RC47ES6fmy 20zdN4cnfb8Js/KSq37U/FhJNcUQM8C3szkct0BUv+Hb3cmnPykBTVoyqGHTMdDa sBJXX8Aop0ol3tMwOT+Ij++LVaO7cV9hYaMsSe4JsJj4/Aml85g= -----END CERTIFICATE-----Generated at Wed May 13 01:14:22 2026 by rpki-client