$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: 6qdrUOF/BB10aYTGRrGVMneZiXS+Cqme0lJV9fFJNcY= Subject key identifier: 6C:2C:E7:B9:D9:45:A9:44:49:2B:E3:BF:5E:00:D6:9F:F7:48:35:1C Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 323D3DF5255A5D4D50FE7B7E83AAA691DD8CAFDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 12:33:25 +0000 Manifest this update: Fri 17 Jul 2026 12:28:25 +0000 Manifest next update: Sat 18 Jul 2026 14:21:25 +0000 Files and hashes: 1: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: PfaSLCQvUo3yiYk6Qutk2Q9K26Hw7cHpWqc/ldXKWTc=) 2: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 14:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3d:3d:f5:25:5a:5d:4d:50:fe:7b:7e:83:aa:a6:91:dd:8c:af:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Jul 17 12:28:25 2026 GMT Not After : Jul 18 14:21:25 2026 GMT Subject: CN=6C2CE7B9D945A944492BE3BF5E00D69FF748351C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:9a:4c:12:37:2e:14:fb:d9:c8:f4:75:44: c6:eb:5f:1d:82:78:24:4f:cb:d7:85:e2:f2:6e:d3: 43:20:7c:53:41:2f:8e:b8:d3:a9:97:f1:82:10:a1: e5:8b:12:c2:66:02:ee:58:c2:25:fb:17:82:c6:42: 8d:d8:dc:13:7a:8f:81:eb:3f:2b:a0:0c:cb:66:2c: 82:78:1e:0c:cf:33:ee:69:3e:5a:5f:3f:79:4e:b9: b2:e0:5a:f6:de:97:f1:22:4b:c7:54:34:95:29:89: 0a:2d:3b:39:21:aa:ac:3e:35:62:d3:02:57:71:dc: fe:d1:a2:35:20:87:db:a1:54:11:a2:40:74:5b:23: 44:d0:c4:57:89:ff:31:ad:42:1f:d4:a4:5b:c8:e4: f6:1e:64:67:10:3c:a6:b5:89:1f:7f:dd:06:99:1a: 17:a7:ad:83:5d:62:a1:b1:cf:6b:6c:a5:25:4b:a4: 5b:04:2e:7b:d8:97:e3:1c:53:a0:ef:db:68:cb:ca: 5d:6e:ca:42:aa:3c:f9:a7:c4:b8:2b:bd:55:02:92: e3:18:70:cb:58:70:07:95:1b:0c:2e:79:fb:09:54: 4c:fe:69:ad:33:83:28:02:d6:ad:59:0f:fc:8b:4f: fc:3b:9e:be:46:93:51:23:f6:c6:62:16:1a:00:a6: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:E7:B9:D9:45:A9:44:49:2B:E3:BF:5E:00:D6:9F:F7:48:35:1C X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c2:9f:10:d0:0a:69:86:02:89:fb:4f:9f:ba:2e:fc:4b:f3: 32:15:ef:36:ca:fd:31:2f:69:0f:36:92:64:4d:5a:98:65:ee: 60:fd:f6:a2:9c:1e:73:51:40:ca:c7:8d:36:8a:c0:e3:43:ab: 3d:b1:2c:94:72:ac:77:55:92:92:62:bf:1d:54:b0:19:cc:1a: 39:6e:d6:21:3e:12:93:9b:be:cd:b5:d8:86:91:1e:22:a9:ce: d7:77:f4:42:27:3d:a8:e5:0f:1e:15:16:f4:fb:07:1a:40:df: 66:a9:6e:81:92:b5:6c:a2:2c:5e:75:6d:5d:38:d3:ef:63:9a: 5f:7c:35:76:67:a2:be:4a:8b:d3:38:9d:ff:08:f7:33:7b:bf: 9d:c8:fd:22:55:e0:ac:a6:fd:18:a0:47:ec:80:d8:ee:ae:24: 30:9c:5e:44:9d:27:44:5c:59:ff:7d:fb:4b:56:d4:f4:d4:38: e6:5c:b6:1a:3e:4d:1d:05:dc:b9:61:68:f4:38:08:ad:98:28: 1d:7b:42:a4:8f:0e:eb:15:c8:4d:b4:34:35:c8:0e:ce:e4:cf: 24:01:25:4a:0d:72:3e:c0:9f:65:cd:05:8c:31:5b:51:5d:b3: 45:bc:ee:9f:58:b9:30:25:48:f7:32:36:f1:26:83:74:3d:32: 5d:3f:af:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMj099SVaXU1Q/nt+g6qmkd2Mr98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA3MTcxMjI4MjVaFw0yNjA3MTgxNDIxMjVaMDMxMTAvBgNV BAMTKDZDMkNFN0I5RDk0NUE5NDQ0OTJCRTNCRjVFMDBENjlGRjc0ODM1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YJpMEjcuFPvZyPR1RMbrXx2C eCRPy9eF4vJu00MgfFNBL46406mX8YIQoeWLEsJmAu5YwiX7F4LGQo3Y3BN6j4Hr PyugDMtmLIJ4HgzPM+5pPlpfP3lOubLgWvbel/EiS8dUNJUpiQotOzkhqqw+NWLT Aldx3P7RojUgh9uhVBGiQHRbI0TQxFeJ/zGtQh/UpFvI5PYeZGcQPKa1iR9/3QaZ GhenrYNdYqGxz2tspSVLpFsELnvYl+McU6Dv22jLyl1uykKqPPmnxLgrvVUCkuMY cMtYcAeVGwwuefsJVEz+aa0zgygC1q1ZD/yLT/w7nr5Gk1Ej9sZiFhoApiJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCznudlFqURJK+O/XgDWn/dINRwwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnCnxDQCmmGAon7T5+6LvxL8zIV7zbK/TEv aQ82kmRNWphl7mD99qKcHnNRQMrHjTaKwONDqz2xLJRyrHdVkpJivx1UsBnMGjlu 1iE+EpObvs212IaRHiKpztd39EInPajlDx4VFvT7BxpA32apboGStWyiLF51bV04 0+9jml98NXZnor5Ki9M4nf8I9zN7v53I/SJV4Kym/RigR+yA2O6uJDCcXkSdJ0Rc Wf99+0tW1PTUOOZctho+TR0F3LlhaPQ4CK2YKB17QqSPDusVyE20NDXIDs7kzyQB JUoNcj7An2XNBYwxW1Fds0W87p9YuTAlSPcyNvEmg3Q9Ml0/r+8= -----END CERTIFICATE-----Generated at Sat Jul 18 02:23:55 2026 by rpki-client