$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: U0c85wDUrYBQMsGQQUFhBE/2osLUshBXkZXlOjYvgEM= Subject key identifier: 5B:87:0A:70:72:BB:0C:3A:C6:F0:FF:2F:69:B2:83:79:65:22:96:BD Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 03CED26AA71D441CA629611AB5EFFD69839C64A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:35:05 +0000 Manifest this update: Fri 24 Jul 2026 04:30:05 +0000 Manifest next update: Sat 25 Jul 2026 06:58:05 +0000 Files and hashes: 1: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: D/7thi6SMn3BQmfr6qnUYeZikAielb5xShGxpoi0Nu4=) 2: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) 3: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 4: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ce:d2:6a:a7:1d:44:1c:a6:29:61:1a:b5:ef:fd:69:83:9c:64:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Jul 24 04:30:05 2026 GMT Not After : Jul 25 06:58:05 2026 GMT Subject: CN=5B870A7072BB0C3AC6F0FF2F69B28379652296BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:65:31:3c:d3:57:fe:5b:6a:a0:24:90:18: 50:e2:50:c1:ef:3e:9c:32:2b:6b:7e:19:d3:d0:0a: 4e:cf:66:6b:c1:b4:ea:19:80:ed:66:74:24:19:b2: 23:6a:a9:79:1d:4b:4e:83:4a:a8:0b:04:9c:a0:59: a1:e2:fa:31:41:f7:8e:2f:21:47:5f:1c:81:30:fa: d0:7d:ec:11:1b:95:d8:86:ae:30:cd:ae:8c:ef:76: 46:2a:57:82:f6:6e:7f:8a:66:29:42:5f:ca:35:97: 5e:63:1f:e9:ab:57:06:2a:d5:58:8a:00:3b:28:c5: 32:f8:fa:b4:fd:8c:40:79:02:0a:2d:cf:32:9d:e2: 7e:7f:bf:4a:90:75:d8:b2:2d:21:c2:a4:5c:64:67: 0f:5b:c0:b6:40:05:c5:43:b9:c6:88:51:ab:7a:ae: 0b:83:d0:dc:94:6d:4d:56:aa:49:9d:5a:05:03:27: f6:c4:73:b2:fa:cc:ec:ca:3c:23:82:d5:ac:d8:03: ea:0c:6a:33:9d:f3:b4:69:74:a8:b6:5a:85:bf:83: 1c:c8:1e:b4:79:ed:fb:82:44:f3:59:28:f5:41:da: 45:6c:d1:e6:f7:0f:a8:a2:b5:4f:7a:6a:a6:de:7d: c5:29:e9:15:17:cb:f1:da:aa:62:4c:f4:d4:cc:4a: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:0A:70:72:BB:0C:3A:C6:F0:FF:2F:69:B2:83:79:65:22:96:BD X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4f:87:c4:07:2f:52:95:6f:8b:99:a2:19:51:35:e4:5f:6d: a0:ea:df:9a:b3:8c:5f:54:8c:e9:8f:70:a9:ff:2e:c8:ba:c7: 2b:6d:dd:05:2a:dd:15:39:c2:14:21:2c:5b:a8:02:f4:bd:6a: d5:ac:dc:81:9b:73:70:59:3d:03:0a:9f:a6:fb:a1:af:51:7b: 5e:db:f7:bb:21:a2:03:c3:43:29:0f:89:e2:0d:5c:39:82:c6: 91:fb:63:30:5e:62:e6:30:8e:ab:64:9e:1a:51:48:d3:a8:9a: 63:d9:8b:6a:d6:97:29:f5:5e:4c:32:94:91:d1:87:fc:cd:52: b3:99:b2:ec:fa:63:38:54:8d:db:bb:79:f7:aa:db:52:d8:4f: a4:14:00:bd:08:ea:f8:5b:75:bd:50:db:8c:9b:66:b1:27:5b: 9c:ae:11:bb:74:b0:95:e0:71:36:e6:78:a5:08:fa:de:da:2d: 58:3c:6f:01:74:f4:09:f4:45:62:be:50:88:68:87:9c:d1:88: b7:a0:c0:ff:31:58:bd:08:2c:2f:71:41:79:eb:53:d9:41:d9: 12:bc:4a:a6:6f:1d:cf:73:90:4a:1c:a5:0e:09:15:e7:54:4b: 3a:92:3b:e9:e9:f4:47:26:e8:73:71:f7:87:8d:29:e1:ef:45: 44:89:04:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA87SaqcdRBymKWEate/9aYOcZKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA3MjQwNDMwMDVaFw0yNjA3MjUwNjU4MDVaMDMxMTAvBgNV BAMTKDVCODcwQTcwNzJCQjBDM0FDNkYwRkYyRjY5QjI4Mzc5NjUyMjk2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vWUxPNNX/ltqoCSQGFDiUMHv PpwyK2t+GdPQCk7PZmvBtOoZgO1mdCQZsiNqqXkdS06DSqgLBJygWaHi+jFB944v IUdfHIEw+tB97BEbldiGrjDNrozvdkYqV4L2bn+KZilCX8o1l15jH+mrVwYq1ViK ADsoxTL4+rT9jEB5AgotzzKd4n5/v0qQddiyLSHCpFxkZw9bwLZABcVDucaIUat6 rguD0NyUbU1WqkmdWgUDJ/bEc7L6zOzKPCOC1azYA+oMajOd87RpdKi2WoW/gxzI HrR57fuCRPNZKPVB2kVs0eb3D6iitU96aqbefcUp6RUXy/HaqmJM9NTMSjM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4cKcHK7DDrG8P8vabKDeWUilr0wHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApPh8QHL1KVb4uZohlRNeRfbaDq35qzjF9U jOmPcKn/Lsi6xytt3QUq3RU5whQhLFuoAvS9atWs3IGbc3BZPQMKn6b7oa9Re17b 97shogPDQykPieINXDmCxpH7YzBeYuYwjqtknhpRSNOommPZi2rWlyn1XkwylJHR h/zNUrOZsuz6YzhUjdu7efeq21LYT6QUAL0I6vhbdb1Q24ybZrEnW5yuEbt0sJXg cTbmeKUI+t7aLVg8bwF09An0RWK+UIhoh5zRiLegwP8xWL0ILC9xQXnrU9lB2RK8 SqZvHc9zkEocpQ4JFedUSzqSO+np9Ecm6HNx94eNKeHvRUSJBPA= -----END CERTIFICATE-----Generated at Fri Jul 24 06:21:22 2026 by rpki-client