$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: 58iLxPUFmOk/D6RKx20T6r4WI2h6HcEKzqOHwh1hgt0= Subject key identifier: 7B:27:C0:99:26:80:96:EB:FD:76:2E:D8:6B:2F:E2:48:0B:9D:2D:4A Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 6D7045A90ADF9CB5EAB13436C5210F8D1BF6BF90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:29:15 +0000 Manifest this update: Tue 02 Jun 2026 11:24:15 +0000 Manifest next update: Wed 03 Jun 2026 12:22:15 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 2: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: dv4rBXGi5mdUGqvR5ubEbaTpfDtI5Wpf+GPrH0XaJIg=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 4: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:70:45:a9:0a:df:9c:b5:ea:b1:34:36:c5:21:0f:8d:1b:f6:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Jun 2 11:24:15 2026 GMT Not After : Jun 3 12:22:15 2026 GMT Subject: CN=7B27C099268096EBFD762ED86B2FE2480B9D2D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2f:52:18:dd:1e:cc:8d:c8:bf:92:d4:ab:9a: 43:fe:60:c7:8f:ca:bb:2e:a9:ab:12:86:45:18:af: 5d:26:32:f0:84:9a:f0:99:81:d3:57:e4:be:78:c8: aa:82:0c:22:0d:8b:12:07:b5:ed:f9:2c:f3:a6:85: 48:e3:73:3a:0e:98:b7:0b:95:50:a8:ba:1b:e6:d5: aa:52:e0:e0:9b:bc:6e:27:32:19:f2:c6:e0:7c:c7: 84:16:8e:0a:33:82:b2:07:04:49:a4:a9:f9:19:80: 19:20:bd:a3:47:89:12:82:5b:ca:d7:dc:06:c9:c0: 60:2b:fe:8f:e4:0b:4d:51:ba:ec:0d:47:50:22:ee: 9e:03:67:68:61:51:98:a6:34:20:0f:55:50:48:ba: 86:40:44:2b:2c:b7:92:c7:d7:ee:fd:38:57:50:1f: 87:84:f5:93:d4:5f:44:67:a6:36:c7:72:4e:c3:db: 8e:03:40:37:db:49:e2:3b:a2:6f:95:30:aa:83:cc: c3:10:f9:fc:c2:e9:c7:84:40:c2:9b:f7:59:07:91: 93:22:c6:e5:1e:da:34:25:c4:c0:60:96:fd:54:5e: b6:5f:6f:33:5b:c0:61:6e:71:31:f4:5a:8a:52:43: 9b:bb:81:8c:d7:e2:9c:81:8a:c4:19:7a:6b:68:b9: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:27:C0:99:26:80:96:EB:FD:76:2E:D8:6B:2F:E2:48:0B:9D:2D:4A X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:39:52:6d:a8:ef:66:5b:31:88:96:36:50:fa:8f:50:01:98: 7e:25:06:e2:5d:fa:fe:3f:77:d2:7c:a7:0a:e1:92:95:02:f9: fb:ce:29:d8:7b:c3:7a:9a:dd:b5:2c:b2:48:5e:2a:e7:e1:b3: b1:f8:2e:e0:cd:0e:c4:f6:f6:e0:c0:72:a1:db:52:80:7b:a4: 38:2e:cd:5b:74:1c:cf:5d:0d:b8:a9:c2:c0:91:c6:a0:93:44: 37:d4:40:ed:8d:9e:ee:13:59:4d:4c:ff:28:2d:98:04:8e:5b: 90:f8:b9:96:39:46:51:8e:4a:ff:e8:45:66:fa:af:4f:d0:44: 74:b3:77:2a:89:6f:d9:a9:ef:78:59:df:c5:cb:b6:de:0b:7f: 2f:a9:4a:67:5c:4c:aa:98:c7:4b:f6:66:4c:9a:cd:33:16:8e: cf:1e:8a:00:97:bb:b4:0f:fd:0f:1e:90:5b:80:4d:fb:c9:e0: f8:be:55:f6:cb:2b:1c:e2:c6:04:a6:31:72:51:96:db:6d:af: fe:ba:c8:b8:b8:f2:d9:af:5e:ef:a2:82:71:0e:47:8b:9d:9f: 77:a2:7f:7c:c4:54:e9:71:c7:1e:1f:1f:2c:73:31:6b:d6:fb: 8e:01:88:cb:5a:1c:23:61:cb:3a:00:4f:b7:6d:5e:a2:c2:7e: 9b:7f:99:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXBFqQrfnLXqsTQ2xSEPjRv2v5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA2MDIxMTI0MTVaFw0yNjA2MDMxMjIyMTVaMDMxMTAvBgNV BAMTKDdCMjdDMDk5MjY4MDk2RUJGRDc2MkVEODZCMkZFMjQ4MEI5RDJENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2L1IY3R7Mjci/ktSrmkP+YMeP yrsuqasShkUYr10mMvCEmvCZgdNX5L54yKqCDCINixIHte35LPOmhUjjczoOmLcL lVCouhvm1apS4OCbvG4nMhnyxuB8x4QWjgozgrIHBEmkqfkZgBkgvaNHiRKCW8rX 3AbJwGAr/o/kC01RuuwNR1Ai7p4DZ2hhUZimNCAPVVBIuoZARCsst5LH1+79OFdQ H4eE9ZPUX0RnpjbHck7D244DQDfbSeI7om+VMKqDzMMQ+fzC6ceEQMKb91kHkZMi xuUe2jQlxMBglv1UXrZfbzNbwGFucTH0WopSQ5u7gYzX4pyBisQZemtouc7JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyfAmSaAluv9di7Yay/iSAudLUowHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK45Um2o72ZbMYiWNlD6j1ABmH4lBuJd+v4/ d9J8pwrhkpUC+fvOKdh7w3qa3bUsskheKufhs7H4LuDNDsT29uDAcqHbUoB7pDgu zVt0HM9dDbipwsCRxqCTRDfUQO2Nnu4TWU1M/ygtmASOW5D4uZY5RlGOSv/oRWb6 r0/QRHSzdyqJb9mp73hZ38XLtt4Lfy+pSmdcTKqYx0v2ZkyazTMWjs8eigCXu7QP /Q8ekFuATfvJ4Pi+VfbLKxzixgSmMXJRltttr/66yLi48tmvXu+ignEOR4udn3ei f3zEVOlxxx4fHyxzMWvW+44BiMtaHCNhyzoAT7dtXqLCfpt/mfc= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:07 2026 by rpki-client