$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: 1quafWHl1WO6pt16GCGJ/R/zktEZl3m81hDKRVLF5h4= Subject key identifier: 86:0A:13:8B:A6:24:5B:E0:52:9B:87:D7:A1:6D:AB:20:D3:CA:AD:D3 Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 69A624CE5AD623DA53C97CC1FBC5472B8737DDE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 14:33:19 +0000 Manifest this update: Fri 25 Sep 2026 14:28:19 +0000 Manifest next update: Sat 26 Sep 2026 17:58:19 +0000 Files and hashes: 1: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: qr8Ray1Vmbgd8xhlgysVlQQWd9ZzjQ+0TCZSRAZddzE=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 4: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 5: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a6:24:ce:5a:d6:23:da:53:c9:7c:c1:fb:c5:47:2b:87:37:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Sep 25 14:28:19 2026 GMT Not After : Sep 26 17:58:19 2026 GMT Subject: CN=860A138BA6245BE0529B87D7A16DAB20D3CAADD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:a4:6d:f6:d9:8b:58:41:d0:81:e2:70:a1: eb:81:42:3d:95:e6:d6:ca:26:eb:e9:8d:20:8b:b5: 24:bc:11:bb:d1:14:45:de:6f:ac:f7:d9:a8:64:b2: 6a:ac:ec:ff:32:cf:15:1f:c8:05:09:c1:4b:1a:5d: cc:bc:70:f9:ed:c4:ee:b7:3f:00:28:69:1c:e4:4b: ff:be:cd:1f:42:69:e1:77:39:70:c3:5b:6a:c0:30: e8:8a:f0:18:51:c4:35:b5:f8:38:9a:bb:70:54:02: 94:65:66:cb:d4:4c:cb:d4:b8:b8:4c:a7:a9:5f:a4: 76:07:a0:57:fb:fd:ee:88:3b:ec:85:9c:c2:69:f9: 8e:92:32:6f:ab:21:74:25:b3:89:87:f4:24:71:1f: 1e:cd:f0:85:a4:91:dc:27:13:dc:3a:f8:e0:d3:13: ed:47:54:d3:dc:ae:9f:72:08:ce:19:b8:fa:3e:92: 51:fa:5d:15:77:35:a6:c5:f9:62:8d:5c:e6:76:41: 4d:b8:ae:64:5b:3c:fb:c7:db:5d:89:b9:8b:43:f9: f4:92:1c:c1:83:50:48:00:2d:8b:fd:5e:6f:e9:8e: 1a:22:e2:d9:f6:85:90:89:22:10:07:b4:2b:74:a5: 62:a1:d2:1f:f0:3d:ab:d0:1d:6a:c8:fe:fb:7c:b6: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:13:8B:A6:24:5B:E0:52:9B:87:D7:A1:6D:AB:20:D3:CA:AD:D3 X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6b:00:6d:eb:01:fb:0a:cc:4f:5b:d2:c9:a6:2c:d7:89:bf: bd:22:72:6b:58:2e:af:d2:1c:dc:d5:49:85:4b:8d:57:ba:df: 67:6c:1c:da:b2:a2:b6:a2:9f:2e:8d:6b:0a:11:35:ae:f2:85: b3:99:9f:c8:50:f5:e8:83:74:3d:7b:24:45:6e:68:5a:b7:e1: db:3b:aa:7d:ef:dc:94:77:88:30:85:23:2c:a4:f0:11:69:36: ef:fe:e2:9c:5b:28:d4:46:1d:28:b6:bd:32:7b:97:ac:b4:2d: 86:b3:d9:fd:62:46:38:6d:6b:bd:80:0a:11:13:3e:60:0d:80: e8:bd:8c:49:d6:7d:b4:92:33:ab:ac:af:51:6f:87:f8:83:d4: d3:82:2f:94:f5:01:9d:b4:e4:41:82:14:76:ba:2b:f5:61:68: 17:d4:81:14:53:aa:5a:70:21:7f:f7:1d:65:3b:c0:91:25:6e: ed:bf:01:42:95:ca:ff:fa:9f:58:23:5c:d0:4a:8a:7b:66:7c: 75:e5:2b:bd:9e:cd:49:87:77:57:27:69:49:60:2f:6d:fe:5e: 2d:17:05:ca:69:5f:7e:9a:b5:ee:4f:e9:43:29:56:a0:91:28: fd:bf:e8:d9:d4:ec:81:76:b7:74:8f:f0:cb:27:03:c5:c3:df: 35:24:2f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaYkzlrWI9pTyXzB+8VHK4c33eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA5MjUxNDI4MTlaFw0yNjA5MjYxNzU4MTlaMDMxMTAvBgNV BAMTKDg2MEExMzhCQTYyNDVCRTA1MjlCODdEN0ExNkRBQjIwRDNDQUFERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVqRt9tmLWEHQgeJwoeuBQj2V 5tbKJuvpjSCLtSS8EbvRFEXeb6z32ahksmqs7P8yzxUfyAUJwUsaXcy8cPntxO63 PwAoaRzkS/++zR9CaeF3OXDDW2rAMOiK8BhRxDW1+Diau3BUApRlZsvUTMvUuLhM p6lfpHYHoFf7/e6IO+yFnMJp+Y6SMm+rIXQls4mH9CRxHx7N8IWkkdwnE9w6+ODT E+1HVNPcrp9yCM4ZuPo+klH6XRV3NabF+WKNXOZ2QU24rmRbPPvH212JuYtD+fSS HMGDUEgALYv9Xm/pjhoi4tn2hZCJIhAHtCt0pWKh0h/wPavQHWrI/vt8tjJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgoTi6YkW+BSm4fXoW2rINPKrdMwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRrAG3rAfsKzE9b0smmLNeJv70icmtYLq/S HNzVSYVLjVe632dsHNqyorainy6NawoRNa7yhbOZn8hQ9eiDdD17JEVuaFq34ds7 qn3v3JR3iDCFIyyk8BFpNu/+4pxbKNRGHSi2vTJ7l6y0LYaz2f1iRjhta72AChET PmANgOi9jEnWfbSSM6usr1Fvh/iD1NOCL5T1AZ205EGCFHa6K/VhaBfUgRRTqlpw IX/3HWU7wJElbu2/AUKVyv/6n1gjXNBKintmfHXlK72ezUmHd1cnaUlgL23+Xi0X BcppX36ate5P6UMpVqCRKP2/6NnU7IF2t3SP8MsnA8XD3zUkL8s= -----END CERTIFICATE-----Generated at Fri Sep 25 20:19:41 2026 by rpki-client