$ rpki-client -vvf rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft File: B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft (raw, json) Hash identifier: culS+V3bb0lHZV7UHvCzOtaIOqxXf/KQyt/u6t48SWY= Subject key identifier: 53:31:D4:AF:68:AE:F6:61:45:8A:71:5E:D4:BE:FF:AA:38:20:2A:A4 Authority key identifier: B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC Certificate issuer: /CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Certificate serial: 70A352B9AA63221AD598F6A398071E4890F56B31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:14:37 +0000 Manifest this update: Tue 02 Jun 2026 16:09:37 +0000 Manifest next update: Wed 03 Jun 2026 17:02:37 +0000 Files and hashes: 1: B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl (hash: fhfqsOAc5COQVQ4ZeP81EfzeIwGmiLdGS3AWxX/BLYU=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: c6pFiJSk1UQhVnz9HO0WDm1mZbg2xnGEy69Z/hHQfrI=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: lh47cqtqX+UfhZbQx7DPwZTGhdNBwMPbLmUFIaoV1ag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a3:52:b9:aa:63:22:1a:d5:98:f6:a3:98:07:1e:48:90:f5:6b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2E914D7D403B45C4BBC28E36684785887ACEDBC Validity Not Before: Jun 2 16:09:37 2026 GMT Not After : Jun 3 17:02:37 2026 GMT Subject: CN=5331D4AF68AEF661458A715ED4BEFFAA38202AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:0f:f5:fd:de:ee:cb:da:6e:fb:e6:6e:65: b4:3c:a2:13:ed:55:e6:3c:e1:06:27:f5:c5:c0:70: 57:65:33:20:c3:08:8e:78:c3:a2:dd:42:97:4b:8f: e0:37:50:c3:07:c8:10:c7:43:1f:4a:a5:31:a6:25: 7e:bf:c8:75:5c:42:dc:58:c2:fd:00:dc:98:ff:55: 96:6b:1a:95:a6:cc:2b:a1:32:3c:58:8a:b2:71:62: 23:93:46:eb:02:d1:e3:1f:62:75:a7:ad:28:53:ac: 34:24:32:c3:14:ae:3e:21:eb:d3:48:f8:2d:ec:64: 41:35:f2:ad:b3:14:92:79:20:17:64:fe:f0:01:94: 34:9c:58:91:8a:48:10:36:bc:73:39:2b:ec:1f:36: 6b:ec:23:2c:79:bf:2b:fa:48:21:97:07:76:b7:f5: e9:3a:b1:83:1b:a2:a6:b9:2f:cb:df:f7:e0:3b:86: 10:61:d4:e9:ce:b9:e2:48:45:a6:2d:9f:63:57:73: b3:65:2b:b3:3b:39:85:a6:be:46:84:e0:88:65:bb: a6:98:c7:56:42:65:0d:d5:81:ae:1f:b4:4f:8f:01: 96:0e:e9:e2:46:80:23:54:96:32:f4:c8:b6:b0:ff: 91:f0:7a:45:22:f1:ab:d8:6f:77:19:78:08:7a:39: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:31:D4:AF:68:AE:F6:61:45:8A:71:5E:D4:BE:FF:AA:38:20:2A:A4 X509v3 Authority Key Identifier: keyid:B2:E9:14:D7:D4:03:B4:5C:4B:BC:28:E3:66:84:78:58:87:AC:ED:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2E914D7D403B45C4BBC28E36684785887ACEDBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/B2E914D7D403B45C4BBC28E36684785887ACEDBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:eb:c2:b9:70:c2:e9:6b:da:e3:09:b5:80:50:c9:30:b5:db: 72:82:9e:af:6a:15:ae:9b:1d:aa:15:80:8f:a4:f1:0f:06:af: 9c:87:c2:dc:74:d8:9d:53:6b:36:3a:47:a0:b9:55:49:1b:08: 30:ab:06:1b:31:88:e8:89:f1:82:92:ee:81:72:d9:10:2a:26: 1c:c5:5a:24:dd:96:99:6b:ce:f4:ce:fc:a9:43:99:98:05:43: 9c:c2:81:3d:15:50:fa:c9:ee:4f:a8:6e:2e:c9:d6:d9:53:80: 70:0d:1f:d1:77:a4:3e:8c:49:42:e5:74:64:67:ce:cf:75:e1: ba:ff:23:ff:a5:58:d8:c7:a9:a8:96:de:ef:ea:20:a1:01:8b: 01:b7:d5:60:99:3e:39:33:ca:6f:c2:40:92:ac:92:69:1c:43: fc:76:5f:c4:24:c8:eb:de:b7:cd:de:b4:02:75:83:34:93:55: 8b:1c:8b:01:91:fe:93:3e:2d:86:52:6e:3e:71:84:f4:24:e6: 2c:90:17:d7:73:5e:56:56:4d:03:92:eb:6e:99:40:96:1f:13: 9b:56:98:95:93:82:39:94:c0:24:40:4f:1c:58:c3:42:2b:77: 41:27:e1:1c:c5:07:01:d9:01:17:a5:00:68:58:f2:3a:14:27: d4:e9:49:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKNSuapjIhrVmPajmAceSJD1azEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4 N0FDRURCQzAeFw0yNjA2MDIxNjA5MzdaFw0yNjA2MDMxNzAyMzdaMDMxMTAvBgNV BAMTKDUzMzFENEFGNjhBRUY2NjE0NThBNzE1RUQ0QkVGRkFBMzgyMDJBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51A/1/d7uy9pu++ZuZbQ8ohPt VeY84QYn9cXAcFdlMyDDCI54w6LdQpdLj+A3UMMHyBDHQx9KpTGmJX6/yHVcQtxY wv0A3Jj/VZZrGpWmzCuhMjxYirJxYiOTRusC0eMfYnWnrShTrDQkMsMUrj4h69NI +C3sZEE18q2zFJJ5IBdk/vABlDScWJGKSBA2vHM5K+wfNmvsIyx5vyv6SCGXB3a3 9ek6sYMboqa5L8vf9+A7hhBh1OnOueJIRaYtn2NXc7NlK7M7OYWmvkaE4Ihlu6aY x1ZCZQ3Vga4ftE+PAZYO6eJGgCNUljL0yLaw/5HwekUi8avYb3cZeAh6OQwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUzHUr2iu9mFFinFe1L7/qjggKqQwHwYDVR0j BBgwFoAUsukU19QDtFxLvCjjZoR4WIes7bwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVlMjQxNWMtN2Q0Zi00NDI3LTgzMmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdE NDAzQjQ1QzRCQkMyOEUzNjY4NDc4NTg4N0FDRURCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkU5MTREN0Q0MDNCNDVDNEJCQzI4RTM2Njg0Nzg1ODg3QUNF REJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvQjJFOTE0RDdENDAzQjQ1QzRCQkMyOEUzNjY4NDc4 NTg4N0FDRURCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjrwrlwwulr2uMJtYBQyTC123KCnq9qFa6b HaoVgI+k8Q8Gr5yHwtx02J1TazY6R6C5VUkbCDCrBhsxiOiJ8YKS7oFy2RAqJhzF WiTdlplrzvTO/KlDmZgFQ5zCgT0VUPrJ7k+obi7J1tlTgHANH9F3pD6MSULldGRn zs914br/I/+lWNjHqaiW3u/qIKEBiwG31WCZPjkzym/CQJKskmkcQ/x2X8QkyOve t83etAJ1gzSTVYsciwGR/pM+LYZSbj5xhPQk5iyQF9dzXlZWTQOS626ZQJYfE5tW mJWTgjmUwCRATxxYw0Ird0En4RzFBwHZARelAGhY8joUJ9TpSV8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:49 2026 by rpki-client