$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: MgEZX9FFYl3yQMznn7sh+xT9pVeavpAU59NNz5d9ups= Subject key identifier: DE:BE:C1:E6:E6:A8:7C:64:A2:8B:62:C7:C5:80:52:47:17:35:6B:7E Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 6B56696E6C3598CF2D06B74CA2670C43F64B2582 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 21:33:16 +0000 Manifest this update: Tue 28 Jul 2026 21:28:16 +0000 Manifest next update: Thu 30 Jul 2026 00:31:16 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 2: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 4: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: xDjosuoP5zA5mk8fDAHPsNF83wXh6+PAdMDjb9qrdeM=) 5: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:56:69:6e:6c:35:98:cf:2d:06:b7:4c:a2:67:0c:43:f6:4b:25:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Jul 28 21:28:16 2026 GMT Not After : Jul 30 00:31:16 2026 GMT Subject: CN=DEBEC1E6E6A87C64A28B62C7C580524717356B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:e8:4c:30:82:b4:ca:23:2a:0a:a9:b8:86: 5a:b1:8e:c9:87:ac:48:cb:fb:93:44:33:0f:4f:46: 57:96:a2:23:63:6d:b2:f1:07:f2:a4:3e:91:10:ac: 43:92:8a:99:b3:eb:16:59:e0:7f:ac:2a:2f:0d:d6: c4:83:07:8a:81:24:09:3f:c5:4a:55:4d:24:e9:89: 6c:81:c2:55:47:6c:9b:79:2b:f5:c9:da:79:fb:b8: 79:7c:92:0f:9d:bc:da:1b:73:bf:88:c1:db:1a:10: 51:d8:a5:f8:b8:65:72:bb:ad:53:c0:66:44:90:29: ba:18:8d:c8:dc:f0:45:89:b0:e6:4c:fe:51:88:bf: 30:4a:40:cc:c9:88:db:16:b5:ef:98:31:3a:6a:99: fc:8e:6d:ad:a8:d1:11:2d:3d:ab:b2:0a:b1:7c:d8: fa:4b:18:f0:47:7c:ee:70:7f:fc:c9:db:22:80:19: cd:dc:19:d3:56:93:5f:f9:d6:a5:d4:7b:ab:d9:00: 1e:10:36:46:73:8e:aa:88:da:c6:37:f6:63:aa:85: 6e:8c:a6:b2:8a:5d:cb:ed:76:7f:fd:cf:b9:2b:21: ac:77:7c:26:09:4e:f6:ac:47:fb:22:63:83:0c:74: e6:c7:68:fc:e5:64:c9:ec:c6:de:8d:76:ba:ce:28: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:C1:E6:E6:A8:7C:64:A2:8B:62:C7:C5:80:52:47:17:35:6B:7E X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:95:61:bb:46:da:5f:5e:b8:bc:4b:eb:7e:23:d3:80:aa:69: 82:39:dc:eb:85:ac:a2:f2:d1:57:d2:09:f0:d0:09:66:ee:65: 4f:19:4a:fc:db:78:35:4c:a5:e3:cd:3d:cf:ae:5e:d8:af:6f: 3f:2c:c5:86:6a:80:97:29:3a:5b:ca:01:73:7a:e0:29:fe:f9: da:24:fe:95:04:0e:16:40:fc:de:92:8d:28:0f:3b:a5:14:e2: 40:22:2e:2c:73:36:c5:f3:1d:dc:a0:dd:97:64:c4:e4:4a:31: fc:ad:0f:45:27:c9:44:39:05:a6:34:6d:e9:38:cf:7f:d9:5b: 81:46:9b:6d:9e:fd:67:ae:96:20:4d:c8:b2:3a:d1:0b:ec:6f: 2c:d2:d9:d7:34:92:a9:13:1b:65:61:e7:d3:77:5c:ba:0c:06: 1d:a9:9c:13:87:9f:8d:bd:9a:0f:56:b4:80:0a:50:54:a2:55: fd:4b:3c:d1:b2:7b:95:f1:f9:b5:34:96:b7:26:25:a9:32:1a: fe:cc:b1:33:50:f6:a2:bc:b5:59:a1:5a:98:6b:97:3c:3c:ef: 52:1e:5a:a4:61:2a:51:1b:2f:7b:53:12:ce:3b:0a:a1:d5:47: 47:25:29:44:c4:98:13:f3:6d:03:89:21:e2:6e:b0:26:e9:fb: 64:4e:1a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1Zpbmw1mM8tBrdMomcMQ/ZLJYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA3MjgyMTI4MTZaFw0yNjA3MzAwMDMxMTZaMDMxMTAvBgNV BAMTKERFQkVDMUU2RTZBODdDNjRBMjhCNjJDN0M1ODA1MjQ3MTczNTZCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+G+hMMIK0yiMqCqm4hlqxjsmH rEjL+5NEMw9PRleWoiNjbbLxB/KkPpEQrEOSipmz6xZZ4H+sKi8N1sSDB4qBJAk/ xUpVTSTpiWyBwlVHbJt5K/XJ2nn7uHl8kg+dvNobc7+IwdsaEFHYpfi4ZXK7rVPA ZkSQKboYjcjc8EWJsOZM/lGIvzBKQMzJiNsWte+YMTpqmfyOba2o0REtPauyCrF8 2PpLGPBHfO5wf/zJ2yKAGc3cGdNWk1/51qXUe6vZAB4QNkZzjqqI2sY39mOqhW6M prKKXcvtdn/9z7krIax3fCYJTvasR/siY4MMdObHaPzlZMnsxt6NdrrOKEZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3r7B5uaofGSii2LHxYBSRxc1a34wHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCVYbtG2l9euLxL634j04CqaYI53OuFrKLy 0VfSCfDQCWbuZU8ZSvzbeDVMpePNPc+uXtivbz8sxYZqgJcpOlvKAXN64Cn++dok /pUEDhZA/N6SjSgPO6UU4kAiLixzNsXzHdyg3ZdkxORKMfytD0UnyUQ5BaY0bek4 z3/ZW4FGm22e/WeuliBNyLI60QvsbyzS2dc0kqkTG2Vh59N3XLoMBh2pnBOHn429 mg9WtIAKUFSiVf1LPNGye5Xx+bU0lrcmJakyGv7MsTNQ9qK8tVmhWphrlzw871Ie WqRhKlEbL3tTEs47CqHVR0clKUTEmBPzbQOJIeJusCbp+2ROGqs= -----END CERTIFICATE-----Generated at Wed Jul 29 00:29:54 2026 by rpki-client