$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: T4Uhbn9NPjvmLv6c8oe4cu/Yhz4zAXt01SOiU6LHhKI= Subject key identifier: 66:6F:EF:ED:4F:02:F9:45:90:6D:6C:5C:DE:0B:75:E8:22:A1:D0:F6 Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 5D84C0393E7D8DBBF4AF1255F772DA99FE240920 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:32:01 +0000 Manifest this update: Mon 21 Sep 2026 20:27:01 +0000 Manifest next update: Tue 22 Sep 2026 20:32:01 +0000 Files and hashes: 1: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 3: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 5: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: Yy8nqIUPz0NC10LPl1J7gfYf3lYstHdSSpN/cM6+ERE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:84:c0:39:3e:7d:8d:bb:f4:af:12:55:f7:72:da:99:fe:24:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Sep 21 20:27:01 2026 GMT Not After : Sep 22 20:32:01 2026 GMT Subject: CN=666FEFED4F02F945906D6C5CDE0B75E822A1D0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:cc:45:31:ed:81:3e:79:20:5b:f8:df:69: 2d:8d:9d:fa:8e:ae:ba:0b:b5:b3:09:af:97:ef:16: 13:9f:ba:c2:ef:6e:24:c1:66:cf:92:67:72:8e:7d: 72:3d:bb:20:be:1a:34:de:a7:b7:53:b4:cd:d7:2c: 84:49:a9:b2:ab:48:13:3f:b5:04:67:b8:76:e5:64: d5:dc:a0:b3:b9:0a:fa:ea:39:05:49:0a:70:7b:21: 3d:bd:b6:c9:8b:0b:79:2e:75:f3:6d:f5:79:6b:34: d7:27:ba:fe:ed:5c:88:f3:ba:c0:31:44:12:3e:04: ea:4b:ea:e8:10:72:f3:52:60:d3:c1:d9:11:d1:55: 88:c8:31:ab:7b:21:4a:dc:b6:f1:1c:29:9a:6c:da: 0b:f8:d4:9a:ec:bc:be:57:a8:51:35:3d:e9:bf:60: 44:fa:5b:db:e8:ca:3e:58:fe:24:42:5c:f2:73:5b: 46:bf:1b:ca:38:3c:ee:e2:50:c4:eb:d4:2e:5f:2f: d5:17:39:51:6a:c1:6a:39:23:28:ff:e6:ec:4d:c7: b9:0d:ad:6e:db:06:b9:b9:49:d0:f0:42:98:76:c4: d5:b9:60:55:45:a1:0d:4e:fa:f1:3e:2d:58:7f:af: 2b:e8:d5:87:61:80:3f:5a:f3:a4:98:3a:f6:cd:28: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6F:EF:ED:4F:02:F9:45:90:6D:6C:5C:DE:0B:75:E8:22:A1:D0:F6 X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:80:32:e8:54:91:13:2c:5f:64:4c:79:cf:fe:6f:8c:a5:60: 75:45:57:77:b8:b3:1b:a1:60:22:8a:cb:b3:19:6e:0a:8b:9f: a3:81:c7:3b:9b:8d:ec:08:66:c5:a8:a5:57:63:c5:82:3b:b9: 71:63:67:53:8c:3b:ec:54:8e:03:57:7e:1c:83:2f:cf:04:36: cd:f5:69:33:b0:d9:a5:92:30:34:17:32:91:f6:27:be:94:a6: f7:27:14:fe:ec:4c:e9:0f:0f:8b:1c:4d:af:e0:09:1c:85:1d: 87:84:04:6a:b6:e1:a6:17:b5:d8:f0:aa:27:c4:8a:d9:44:f2: 40:2c:c3:40:6c:f3:80:13:42:f7:0a:d6:ad:ab:71:3e:bf:76: 4d:dd:33:9f:68:4a:50:8d:5f:d7:a4:72:0e:0a:60:fc:99:10: 59:93:a6:c5:4c:05:4a:b2:4f:50:d2:7a:e8:c6:5b:f4:03:b4: 0e:d8:41:50:6b:7a:06:28:b4:f7:da:21:65:d2:97:7f:af:26: a3:4e:7f:41:09:84:ee:d8:19:f4:61:79:74:9b:b3:c2:05:2a: 93:46:79:9f:03:7a:74:31:11:15:43:fd:cf:c7:45:3a:03:d4: 88:2e:4f:88:b1:bb:e7:5c:69:31:55:6c:7a:fb:83:9a:6c:39: 76:55:03:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYTAOT59jbv0rxJV93Lamf4kCSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA5MjEyMDI3MDFaFw0yNjA5MjIyMDMyMDFaMDMxMTAvBgNV BAMTKDY2NkZFRkVENEYwMkY5NDU5MDZENkM1Q0RFMEI3NUU4MjJBMUQwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZMxFMe2BPnkgW/jfaS2NnfqO rroLtbMJr5fvFhOfusLvbiTBZs+SZ3KOfXI9uyC+GjTep7dTtM3XLIRJqbKrSBM/ tQRnuHblZNXcoLO5CvrqOQVJCnB7IT29tsmLC3kudfNt9XlrNNcnuv7tXIjzusAx RBI+BOpL6ugQcvNSYNPB2RHRVYjIMat7IUrctvEcKZps2gv41JrsvL5XqFE1Pem/ YET6W9voyj5Y/iRCXPJzW0a/G8o4PO7iUMTr1C5fL9UXOVFqwWo5Iyj/5uxNx7kN rW7bBrm5SdDwQph2xNW5YFVFoQ1O+vE+LVh/ryvo1YdhgD9a86SYOvbNKEN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZm/v7U8C+UWQbWxc3gt16CKh0PYwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeAMuhUkRMsX2RMec/+b4ylYHVFV3e4sxuh YCKKy7MZbgqLn6OBxzubjewIZsWopVdjxYI7uXFjZ1OMO+xUjgNXfhyDL88ENs31 aTOw2aWSMDQXMpH2J76UpvcnFP7sTOkPD4scTa/gCRyFHYeEBGq24aYXtdjwqifE itlE8kAsw0Bs84ATQvcK1q2rcT6/dk3dM59oSlCNX9ekcg4KYPyZEFmTpsVMBUqy T1DSeujGW/QDtA7YQVBregYotPfaIWXSl3+vJqNOf0EJhO7YGfRheXSbs8IFKpNG eZ8DenQxERVD/c/HRToD1IguT4ixu+dcaTFVbHr7g5psOXZVA8I= -----END CERTIFICATE-----Generated at Tue Sep 22 12:27:18 2026 by rpki-client