$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: q/3kOAvxmz0ORPdEp0l6tjNJbpBPZ/QsHcVPyK6qq3o= Subject key identifier: 07:51:D1:8F:1C:AD:A3:83:CF:0C:0E:E0:02:60:AC:DE:5D:09:A6:19 Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 3C5DFF1034EA75276FD09960DDE72E51E7DE9871 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:09:25 +0000 Manifest this update: Tue 02 Jun 2026 20:04:25 +0000 Manifest next update: Wed 03 Jun 2026 23:10:25 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 2: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) 3: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: waGH+8kOdLr02pImdd5lWg0kys2O/zxcRIj7+dbRzHc=) 4: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:ff:10:34:ea:75:27:6f:d0:99:60:dd:e7:2e:51:e7:de:98:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Jun 2 20:04:25 2026 GMT Not After : Jun 3 23:10:25 2026 GMT Subject: CN=0751D18F1CADA383CF0C0EE00260ACDE5D09A619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:13:db:ff:fd:4c:66:f7:6f:eb:75:b0:db: c5:bd:c1:bc:8e:ee:07:4b:7c:20:de:1b:bf:97:87: 39:8d:35:f3:74:cc:74:c7:5c:49:34:ab:12:0d:20: d3:07:b7:08:02:8c:c6:a7:b3:5b:a0:2b:0f:c7:3b: e6:b9:ee:b9:a2:94:08:e1:c3:86:cc:ff:35:7b:2c: 16:ad:1c:c4:9a:5d:f5:a2:bc:0e:fe:be:7e:c2:04: 86:c2:e8:96:7d:8f:36:98:7b:f8:53:00:17:83:0a: 0b:94:92:8a:7e:80:7e:83:79:7a:91:c0:e8:a0:db: f9:c7:17:26:5b:a4:26:17:a6:27:9d:d1:8c:d3:34: 9b:8a:bd:ec:56:ce:18:30:ce:5f:b6:7c:95:a9:2c: 59:3d:ff:42:23:6e:a7:4b:dd:4d:ea:4e:51:cb:94: d6:0f:a6:8d:21:38:0c:d7:f1:34:39:90:91:75:10: 7a:99:9a:df:a6:7b:3e:cb:ac:74:51:df:ff:83:f9: e6:7e:c1:bd:7c:c1:7c:01:d6:45:de:41:a5:4f:21: 24:e5:65:d4:4d:2a:af:77:a4:91:33:6b:a4:47:af: 59:3f:e8:6a:9a:66:12:57:94:89:27:45:2b:6c:73: d9:5d:bc:dc:ae:7d:4d:13:5c:ff:ff:d7:47:36:ac: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:51:D1:8F:1C:AD:A3:83:CF:0C:0E:E0:02:60:AC:DE:5D:09:A6:19 X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:92:0b:cd:3b:0b:48:5b:d1:8a:1b:b5:14:82:89:9e:c8: 71:a8:13:4f:16:f7:76:50:0f:21:12:77:a7:35:a3:85:0c:ad: 47:b8:35:5b:5e:54:e1:b0:a3:97:20:6c:56:2e:e4:90:a6:98: c2:77:b0:ed:8a:e5:ef:da:0b:e3:e2:48:d1:4a:69:97:5e:12: 8c:6c:d9:0c:e5:17:9c:ba:01:64:6b:77:6a:1b:fb:13:af:b5: 86:d0:7c:a4:8a:f4:54:4f:0b:2a:8b:63:bb:ed:a7:e9:a9:de: 33:8b:01:be:6a:21:cc:64:1f:9a:91:51:06:12:0a:4d:0a:24: 75:f7:fc:dc:32:4b:9d:2a:d2:29:59:66:31:52:df:2f:f8:a5: 49:7a:64:c2:02:c9:cf:73:77:9f:d5:1e:d0:1f:5c:61:36:b5: 59:26:9e:da:af:2b:f7:06:3f:03:e4:ce:21:25:a0:49:1d:67: 99:96:9e:5c:52:a4:27:af:0f:ad:5a:2c:ff:58:5d:4d:f2:2d: e0:c7:d5:46:0c:d6:c9:87:89:9a:48:b1:33:58:e5:be:57:05: 87:fe:72:75:56:49:1e:5b:a2:ab:57:d2:09:76:06:60:a5:7a: 9d:aa:3f:14:04:ff:f9:51:b5:bc:95:00:99:33:ff:dc:be:71: f2:d4:13:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF3/EDTqdSdv0Jlg3ecuUefemHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA2MDIyMDA0MjVaFw0yNjA2MDMyMzEwMjVaMDMxMTAvBgNV BAMTKDA3NTFEMThGMUNBREEzODNDRjBDMEVFMDAyNjBBQ0RFNUQwOUE2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeRPb//1MZvdv63Ww28W9wbyO 7gdLfCDeG7+XhzmNNfN0zHTHXEk0qxININMHtwgCjMans1ugKw/HO+a57rmilAjh w4bM/zV7LBatHMSaXfWivA7+vn7CBIbC6JZ9jzaYe/hTABeDCguUkop+gH6DeXqR wOig2/nHFyZbpCYXpied0YzTNJuKvexWzhgwzl+2fJWpLFk9/0IjbqdL3U3qTlHL lNYPpo0hOAzX8TQ5kJF1EHqZmt+mez7LrHRR3/+D+eZ+wb18wXwB1kXeQaVPISTl ZdRNKq93pJEza6RHr1k/6GqaZhJXlIknRStsc9ldvNyufU0TXP//10c2rHHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1HRjxyto4PPDA7gAmCs3l0JphkwHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJPkgvNOwtIW9GKG7UUgomeyHGoE08W93ZQ DyESd6c1o4UMrUe4NVteVOGwo5cgbFYu5JCmmMJ3sO2K5e/aC+PiSNFKaZdeEoxs 2QzlF5y6AWRrd2ob+xOvtYbQfKSK9FRPCyqLY7vtp+mp3jOLAb5qIcxkH5qRUQYS Ck0KJHX3/NwyS50q0ilZZjFS3y/4pUl6ZMICyc9zd5/VHtAfXGE2tVkmntqvK/cG PwPkziEloEkdZ5mWnlxSpCevD61aLP9YXU3yLeDH1UYM1smHiZpIsTNY5b5XBYf+ cnVWSR5boqtX0gl2BmClep2qPxQE//lRtbyVAJkz/9y+cfLUE3w= -----END CERTIFICATE-----Generated at Wed Jun 3 04:37:09 2026 by rpki-client