$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: rn2w4D8pEPSMD9mtHuRY7pMPHeLrYK3M7QeJYQA4fHw= Subject key identifier: FD:27:84:5E:2E:D1:2E:A7:13:E3:FE:B8:3F:75:F7:A2:4D:06:D4:A4 Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 39011A09A71F74CD19DC4FA640F56A496A6CEEC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 02:31:06 +0000 Manifest this update: Thu 03 Sep 2026 02:26:06 +0000 Manifest next update: Fri 04 Sep 2026 05:34:06 +0000 Files and hashes: 1: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: DWMz9bq8D2QcS8waTmZKwLvMQKG5P75TRWMVlypEimA=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 3: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 4: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:01:1a:09:a7:1f:74:cd:19:dc:4f:a6:40:f5:6a:49:6a:6c:ee:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Sep 3 02:26:06 2026 GMT Not After : Sep 4 05:34:06 2026 GMT Subject: CN=FD27845E2ED12EA713E3FEB83F75F7A24D06D4A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:98:c3:ef:53:18:ea:11:f3:22:0b:7c:3f: 8d:2a:9c:73:e7:7c:51:d1:4e:0e:e2:da:c2:81:37: 01:dc:76:f8:09:f2:ce:44:1e:c7:86:f1:4f:35:f0: a1:49:5a:20:11:aa:ff:0c:b6:ea:d3:8d:89:e5:e9: 45:f7:f1:52:a2:68:09:af:3d:1f:5b:e1:9b:0c:1d: f3:ae:f2:37:b8:b4:e9:3c:06:8a:29:46:9e:10:03: e4:29:f8:c0:6c:a6:0b:10:0c:2e:87:4a:e1:92:fe: 75:59:26:2d:db:19:83:b3:c8:d8:20:7e:b1:23:11: 32:21:9e:f5:1e:3f:47:d4:78:f9:13:fb:51:c3:13: df:7b:b6:81:36:d9:5f:fb:e3:f3:7d:98:3d:4a:dc: 49:f6:ae:b0:f3:99:f8:fa:1a:5b:9f:47:d2:56:1e: af:51:6c:7e:94:9a:a7:d2:2a:9c:9e:e8:36:ad:4d: 95:ef:11:b3:57:0f:3f:69:84:07:50:90:77:5f:2d: 92:71:b3:34:c8:92:66:6a:83:0f:2b:a0:d1:3a:57: 82:54:a6:8b:fa:1f:45:b3:8f:c8:55:25:2f:22:aa: 33:d5:49:49:dd:37:79:a7:0d:bb:5d:53:cd:58:b6: e1:f1:80:06:dd:73:d3:2c:a5:60:fc:15:f9:77:fc: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:27:84:5E:2E:D1:2E:A7:13:E3:FE:B8:3F:75:F7:A2:4D:06:D4:A4 X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a5:f4:3f:38:d6:ea:56:24:28:ea:a2:f6:6d:77:0e:9d:37: dd:23:d2:ba:a2:9b:c7:3e:9b:8d:53:b5:88:56:21:42:d7:0a: 8d:fb:09:6f:83:69:d5:72:7f:b7:68:32:f2:85:22:59:1b:b4: 8a:4a:47:20:aa:c7:20:11:e8:45:e4:0d:bb:98:b0:1d:17:41: 32:10:8f:d6:d2:5f:6f:c2:d9:6a:74:ed:c3:e5:f7:30:83:2e: 21:e4:5a:26:4c:60:d2:f5:56:28:29:e0:99:e5:76:d2:fb:6c: 99:ca:c1:52:9c:cb:11:9e:f3:71:5f:83:af:a7:dc:11:7b:f3: 07:9f:15:99:ad:90:43:91:0f:78:8f:45:35:17:32:60:fd:d7: 25:05:d7:4a:35:6b:d1:8c:e5:48:fc:83:f5:24:92:2e:e3:8b: b9:20:b1:f3:cc:29:d1:4e:4f:b1:8e:45:ad:cb:31:f9:6e:74: c0:e4:ca:3f:3a:72:3e:39:9a:04:5e:e4:3a:8d:66:6d:21:fb: 99:1e:47:a2:29:d9:8d:37:13:5e:c0:e7:2b:53:35:60:2a:56: 11:41:ed:d5:18:04:7c:95:12:c0:64:85:ab:88:c4:27:c9:8d: 75:8d:88:46:c0:ec:31:59:b8:30:a9:e7:3c:70:b1:dd:8d:71: 0a:b7:23:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQEaCacfdM0Z3E+mQPVqSWps7sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA5MDMwMjI2MDZaFw0yNjA5MDQwNTM0MDZaMDMxMTAvBgNV BAMTKEZEMjc4NDVFMkVEMTJFQTcxM0UzRkVCODNGNzVGN0EyNEQwNkQ0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCE5jD71MY6hHzIgt8P40qnHPn fFHRTg7i2sKBNwHcdvgJ8s5EHseG8U818KFJWiARqv8MturTjYnl6UX38VKiaAmv PR9b4ZsMHfOu8je4tOk8BoopRp4QA+Qp+MBspgsQDC6HSuGS/nVZJi3bGYOzyNgg frEjETIhnvUeP0fUePkT+1HDE997toE22V/74/N9mD1K3En2rrDzmfj6GlufR9JW Hq9RbH6UmqfSKpye6DatTZXvEbNXDz9phAdQkHdfLZJxszTIkmZqgw8roNE6V4JU pov6H0Wzj8hVJS8iqjPVSUndN3mnDbtdU81YtuHxgAbdc9MspWD8Ffl3/AiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/SeEXi7RLqcT4/64P3X3ok0G1KQwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6l9D841upWJCjqovZtdw6dN90j0rqim8c+ m41TtYhWIULXCo37CW+DadVyf7doMvKFIlkbtIpKRyCqxyAR6EXkDbuYsB0XQTIQ j9bSX2/C2Wp07cPl9zCDLiHkWiZMYNL1Vigp4JnldtL7bJnKwVKcyxGe83Ffg6+n 3BF78wefFZmtkEORD3iPRTUXMmD91yUF10o1a9GM5Uj8g/Ukki7ji7kgsfPMKdFO T7GORa3LMfludMDkyj86cj45mgRe5DqNZm0h+5keR6Ip2Y03E17A5ytTNWAqVhFB 7dUYBHyVEsBkhauIxCfJjXWNiEbA7DFZuDCp5zxwsd2NcQq3I4E= -----END CERTIFICATE-----Generated at Thu Sep 3 05:20:13 2026 by rpki-client