$ rpki-client -vvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: Mievx8wGptrmhfNOzSD0RCneNulnRm9rh3PeQRKQvCo= Subject key identifier: 57:7A:95:B2:4B:88:B1:21:2D:46:89:C6:94:EF:31:6F:0D:3D:23:37 Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 21841EAD2FF1B8374077824ECDAE690C4DC32225 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:53:06 +0000 Manifest this update: Tue 21 Jul 2026 05:48:06 +0000 Manifest next update: Wed 22 Jul 2026 07:16:06 +0000 Files and hashes: 1: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) 2: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: qm6oJcgfiKBp40/1oxlc/1ap9rHCP6HKbCC3Desec8E=) 3: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:84:1e:ad:2f:f1:b8:37:40:77:82:4e:cd:ae:69:0c:4d:c3:22:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Jul 21 05:48:06 2026 GMT Not After : Jul 22 07:16:06 2026 GMT Subject: CN=577A95B24B88B1212D4689C694EF316F0D3D2337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:7c:60:68:f8:b2:8c:93:85:35:17:e1:5c: 6c:b4:7f:34:70:b4:53:c9:0f:5e:ca:1b:6f:56:4f: 13:f8:90:68:b2:9b:94:d0:55:f2:6f:da:7b:97:f8: 2c:06:e1:b8:01:a3:c2:59:c8:ed:66:c9:2c:5a:b6: 5e:de:d0:b1:44:0f:28:ce:32:0f:d8:2a:b9:44:3a: 63:11:4b:ed:8e:28:7d:df:e3:21:b9:10:19:3f:88: ab:b1:51:1b:1b:d3:b8:8b:91:3d:8d:10:e7:ff:0c: 3a:e2:fd:22:76:ae:a2:a1:17:dd:08:38:e0:8e:b7: 90:e4:cb:9e:27:3b:8a:81:95:08:d2:3d:73:49:88: ab:bc:6d:ff:8f:bf:56:58:3e:05:37:47:a7:d3:49: b1:23:f5:d1:25:37:28:96:15:7f:92:2e:5b:7c:1a: 4d:8e:73:e6:2d:63:b7:9e:ea:74:1b:62:63:fd:f9: bf:50:21:00:17:a4:35:44:6a:85:7d:27:47:b3:a9: a6:bd:9c:be:dd:16:fe:88:7e:99:e6:7c:ef:5c:d6: 89:94:cf:35:6c:44:01:9c:df:f4:9a:3e:a0:b8:76: 18:33:c2:af:84:fb:fe:d1:d1:1e:92:bc:18:b7:06: c3:d5:87:51:8a:3e:2c:c8:23:35:3b:16:6d:15:9d: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:95:B2:4B:88:B1:21:2D:46:89:C6:94:EF:31:6F:0D:3D:23:37 X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:66:4f:b7:bb:ad:22:ed:df:f8:69:56:a8:00:e2:0c:3f: 95:e3:da:1f:15:4d:4a:4c:a3:b9:b4:60:26:c2:d6:e3:c0:a3: 62:6a:be:c2:e1:78:db:f1:49:ff:70:6b:4a:c2:ad:1d:19:61: 25:63:3e:cf:d6:b8:3d:63:86:62:b9:55:11:ad:69:3d:b2:19: 1c:65:d7:d3:19:77:4b:63:09:62:97:ff:0c:e2:95:5e:56:e5: a0:58:99:89:f9:41:3d:71:13:ca:9d:30:52:94:41:18:2f:57: 05:90:4e:34:c3:ee:1a:f6:b8:b9:b8:8a:a5:f7:80:04:9c:9c: cd:46:9d:93:03:6a:b4:d4:3c:bd:72:00:8b:ff:76:04:f7:7a: b9:a7:05:07:f2:c6:24:a7:08:e2:e5:97:7d:5e:8d:16:b3:49: 6d:c2:d9:2c:d6:e9:f1:1c:ce:8d:f5:50:0b:00:6b:ed:32:91: 13:1f:30:98:11:92:cb:a7:b4:6c:ab:83:67:42:8e:5c:c1:3d: c9:5a:73:f8:41:92:77:05:86:9f:52:d6:39:bb:61:76:db:78: c4:e9:8b:dd:d2:7b:69:1e:52:d8:5b:d5:22:66:88:a6:8b:20: 04:6c:d6:5b:3e:c6:89:bd:78:90:3b:82:dd:ce:88:7a:9e:81: 11:22:fc:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYQerS/xuDdAd4JOza5pDE3DIiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA3MjEwNTQ4MDZaFw0yNjA3MjIwNzE2MDZaMDMxMTAvBgNV BAMTKDU3N0E5NUIyNEI4OEIxMjEyRDQ2ODlDNjk0RUYzMTZGMEQzRDIzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2MnxgaPiyjJOFNRfhXGy0fzRw tFPJD17KG29WTxP4kGiym5TQVfJv2nuX+CwG4bgBo8JZyO1mySxatl7e0LFEDyjO Mg/YKrlEOmMRS+2OKH3f4yG5EBk/iKuxURsb07iLkT2NEOf/DDri/SJ2rqKhF90I OOCOt5Dky54nO4qBlQjSPXNJiKu8bf+Pv1ZYPgU3R6fTSbEj9dElNyiWFX+SLlt8 Gk2Oc+YtY7ee6nQbYmP9+b9QIQAXpDVEaoV9J0ezqaa9nL7dFv6IfpnmfO9c1omU zzVsRAGc3/SaPqC4dhgzwq+E+/7R0R6SvBi3BsPVh1GKPizIIzU7Fm0VnTnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3qVskuIsSEtRonGlO8xbw09IzcwHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABurZk+3u60i7d/4aVaoAOIMP5Xj2h8VTUpM o7m0YCbC1uPAo2JqvsLheNvxSf9wa0rCrR0ZYSVjPs/WuD1jhmK5VRGtaT2yGRxl 19MZd0tjCWKX/wzilV5W5aBYmYn5QT1xE8qdMFKUQRgvVwWQTjTD7hr2uLm4iqX3 gAScnM1GnZMDarTUPL1yAIv/dgT3ermnBQfyxiSnCOLll31ejRazSW3C2SzW6fEc zo31UAsAa+0ykRMfMJgRksuntGyrg2dCjlzBPclac/hBkncFhp9S1jm7YXbbeMTp i93Se2keUthb1SJmiKaLIARs1ls+xom9eJA7gt3OiHqegREi/Ns= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:11 2026 by rpki-client