$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: 4pUaxBCHANzgF9S7Scla9F03nd3sWGC0eYS4OzUPc0g= Subject key identifier: 6A:A2:A1:45:F8:46:DB:08:3A:29:9F:7F:4B:17:97:83:0A:3C:9E:EE Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 19BC29F1B8357CBFA4132EE53C0E5E8C1926BE42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: EA Signing time: Sat 24 Oct 2026 19:43:54 +0000 Manifest this update: Sat 24 Oct 2026 19:38:54 +0000 Manifest next update: Sun 25 Oct 2026 20:32:54 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 4: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 5: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: cRBfZIF9sLStVPSCjtn/c7XJ4TbbCsz8WiJvX79Hdks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bc:29:f1:b8:35:7c:bf:a4:13:2e:e5:3c:0e:5e:8c:19:26:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Oct 24 19:38:54 2026 GMT Not After : Oct 25 20:32:54 2026 GMT Subject: CN=6AA2A145F846DB083A299F7F4B1797830A3C9EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:d2:2b:79:c2:7c:d0:f6:61:a1:02:68:df: 0f:d1:e4:25:dd:0a:72:71:aa:08:0d:74:09:0b:50: 50:b4:71:df:36:7d:75:7d:38:25:cf:20:a0:46:04: 66:5b:a3:d8:12:01:e8:3c:6a:0e:0d:69:29:5e:95: 77:eb:58:3c:ae:e2:10:31:c4:f4:da:b7:03:22:20: 26:ad:d6:17:96:d6:62:3f:46:62:f9:d9:51:15:cc: 35:89:30:55:37:33:f1:90:82:15:a7:7f:82:d0:b1: ef:87:51:b8:ef:66:bb:56:54:68:7c:e8:76:20:e7: 82:d0:69:c7:0d:0b:5d:57:c9:7e:93:05:35:39:63: f2:ac:10:af:53:81:e9:bc:8a:69:2f:b6:8a:2c:44: 7e:9e:ba:29:60:0d:01:9b:63:b9:63:35:53:da:03: f6:9a:97:22:fd:31:61:a7:50:11:37:93:13:c8:dc: 33:9e:cd:ec:d8:79:11:ae:26:82:d7:52:a3:ab:d3: 09:52:2e:d5:2c:86:e6:21:bc:23:1b:28:b6:36:3e: ef:60:f5:fe:ff:cf:0d:09:e4:dd:bb:38:7e:83:a3: be:ad:bb:f9:53:54:9a:82:5c:b4:99:51:c7:20:71: 5c:bc:a3:42:8d:22:28:a9:2c:58:6b:a9:16:87:6c: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:A1:45:F8:46:DB:08:3A:29:9F:7F:4B:17:97:83:0A:3C:9E:EE X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:50:93:0c:3b:16:99:56:51:3f:b3:63:15:f0:06:bf:0c:32: 56:e7:e1:1b:68:9e:ee:66:5a:a3:84:e8:62:cb:41:33:f3:21: d2:c3:cd:31:10:fe:d7:31:2c:0c:56:3c:56:9f:ce:1f:b6:ec: 64:c7:ed:3d:47:96:a7:8f:ff:1c:3c:98:40:9c:b6:71:46:98: 77:9d:f0:b9:2b:3f:e9:f6:c2:11:b7:f2:4b:2e:a0:a5:34:0c: 88:06:fb:ea:5c:3c:93:03:f7:30:b3:42:a9:44:84:b8:e6:70: b1:97:58:25:f3:b8:56:db:5a:8b:bb:48:73:66:98:3f:83:52: d7:70:39:9d:1a:5c:ca:c5:4d:de:d3:3f:8f:be:27:c9:3f:9a: ac:65:3b:59:73:81:3f:50:fd:9f:f1:2b:eb:a0:ae:84:84:d3: 46:d8:f9:59:1f:53:94:16:fd:3d:cf:94:e2:1c:08:b1:04:a1: 50:8b:a7:ac:de:b3:55:12:7d:98:f3:ff:a6:e4:07:4b:78:97: 59:9e:ba:78:d1:f5:3c:35:e2:40:64:e2:5d:81:fe:f0:c2:86: 38:de:4b:47:98:be:26:dd:75:87:e5:e3:16:f7:8e:bb:a3:00: 04:c2:07:51:bc:e7:d3:ed:1f:58:a9:82:66:64:37:1c:6e:7d: e6:0f:ab:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbwp8bg1fL+kEy7lPA5ejBkmvkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjEwMjQxOTM4NTRaFw0yNjEwMjUyMDMyNTRaMDMxMTAvBgNV BAMTKDZBQTJBMTQ1Rjg0NkRCMDgzQTI5OUY3RjRCMTc5NzgzMEEzQzlFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YtIrecJ80PZhoQJo3w/R5CXd CnJxqggNdAkLUFC0cd82fXV9OCXPIKBGBGZbo9gSAeg8ag4NaSlelXfrWDyu4hAx xPTatwMiICat1heW1mI/RmL52VEVzDWJMFU3M/GQghWnf4LQse+HUbjvZrtWVGh8 6HYg54LQaccNC11XyX6TBTU5Y/KsEK9Tgem8imkvtoosRH6euilgDQGbY7ljNVPa A/aalyL9MWGnUBE3kxPI3DOezezYeRGuJoLXUqOr0wlSLtUshuYhvCMbKLY2Pu9g 9f7/zw0J5N27OH6Do76tu/lTVJqCXLSZUccgcVy8o0KNIiipLFhrqRaHbJSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaqKhRfhG2wg6KZ9/SxeXgwo8nu4wHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtQkww7FplWUT+zYxXwBr8MMlbn4Rtonu5m WqOE6GLLQTPzIdLDzTEQ/tcxLAxWPFafzh+27GTH7T1HlqeP/xw8mECctnFGmHed 8LkrP+n2whG38ksuoKU0DIgG++pcPJMD9zCzQqlEhLjmcLGXWCXzuFbbWou7SHNm mD+DUtdwOZ0aXMrFTd7TP4++J8k/mqxlO1lzgT9Q/Z/xK+ugroSE00bY+VkfU5QW /T3PlOIcCLEEoVCLp6zes1USfZjz/6bkB0t4l1meunjR9Tw14kBk4l2B/vDChjje S0eYvibddYfl4xb3jrujAATCB1G859PtH1ipgmZkNxxufeYPqy0= -----END CERTIFICATE-----Generated at Sun Oct 25 09:08:06 2026 by rpki-client