$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft File: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft (raw, json) Hash identifier: ZMzsZCQBSPf8S6mN2+l1ruRwf59lb9XXzyNlpS85qWY= Subject key identifier: 0A:AE:FF:5D:58:F7:60:7A:3C:79:E0:23:D7:E0:30:B6:D8:FA:60:54 Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A Certificate issuer: /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Certificate serial: 25013F8FEB3C2B3D23CEA9AC1A25B77E5215E7D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:46:25 +0000 Manifest this update: Sat 13 Jun 2026 13:41:25 +0000 Manifest next update: Sun 14 Jun 2026 13:50:25 +0000 Files and hashes: 1: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=) 2: B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl (hash: TOyvnETYUXtNt71CHXqqB5u2Ncuk/iEGtOQx+x1X03s=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9JY1F+KwGXJvl7antQa1PqRmfqNDS9V8/BZVNbC7l70=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: kvmVsZDQSD9BlBvxRekWBk/O0BwjttEmmAz+LyRVfVA=) 5: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: jMHCmemWzlqgxZ2YswjcDvAecxAAHCenpYvUvKB1Aro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:01:3f:8f:eb:3c:2b:3d:23:ce:a9:ac:1a:25:b7:7e:52:15:e7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A Validity Not Before: Jun 13 13:41:25 2026 GMT Not After : Jun 14 13:50:25 2026 GMT Subject: CN=0AAEFF5D58F7607A3C79E023D7E030B6D8FA6054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:bf:da:97:9a:9c:78:64:96:a4:db:46:43: f8:48:64:da:0b:05:0c:fb:2f:4f:05:0b:6a:d1:ca: 46:4a:12:02:70:ef:b6:11:9a:29:e0:4c:be:01:79: ef:a2:3c:be:0e:90:f5:49:29:39:5e:04:5a:1d:bf: ec:2c:0b:2f:a1:70:15:b7:61:a8:67:88:2d:72:f7: bc:bc:0e:fa:32:62:7e:c1:6a:34:f1:29:e2:e0:67: cc:ca:55:f2:fd:85:87:00:ee:bd:95:7a:d9:72:0a: 47:71:6a:57:32:80:38:88:b8:c7:66:61:f8:b6:65: aa:11:28:54:9b:45:bc:d8:3c:8f:17:1f:0c:b8:96: 7e:40:66:91:99:a7:2d:62:9a:1d:7e:10:2a:8c:0d: 38:dc:84:d2:81:5a:66:96:3b:db:2b:ef:81:cd:95: 5c:60:41:68:bf:47:11:d0:a0:62:5e:7f:42:f8:d7: 5f:4f:b4:e2:fe:81:b6:4f:dc:2d:14:1e:91:e6:dd: d6:64:af:bd:98:04:cf:16:78:60:8d:df:6d:43:60: dc:79:04:4f:d6:62:c1:33:a7:f0:e9:f5:28:09:8e: 98:ce:55:64:a1:82:fe:79:b5:03:7d:65:91:b7:bb: ee:f8:7e:46:66:30:ca:6b:42:4b:93:80:de:fa:d1: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AE:FF:5D:58:F7:60:7A:3C:79:E0:23:D7:E0:30:B6:D8:FA:60:54 X509v3 Authority Key Identifier: keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1e:5f:5d:81:c9:6a:88:d5:62:01:e4:77:f6:66:ca:4f:e6: 99:5d:6b:97:f7:a1:24:aa:e4:83:ce:aa:52:69:ba:93:ca:24: 3d:d6:90:71:c6:78:9e:e1:4f:ec:85:e4:82:3f:f6:9d:21:bd: 4f:d5:69:5c:59:aa:a0:23:7e:e2:51:f7:62:48:f3:ce:8c:3f: 39:85:36:f7:c6:0d:ea:e6:da:e6:1c:50:25:fa:4d:54:c8:d8: 74:1b:68:3d:97:96:d9:7e:26:2c:35:f2:ea:43:29:73:5e:94: e0:44:93:70:6d:d0:76:7f:e0:36:eb:b6:f4:97:49:e0:43:08: d7:d8:a5:1b:de:aa:49:02:96:1a:7d:68:ef:76:6a:d2:94:77: 00:e5:40:a5:85:ec:0b:2b:41:fc:ef:fe:c5:05:65:2a:6d:0a: 99:f5:e1:cf:9c:85:a2:40:47:62:41:05:0c:a6:b5:d1:8a:79: db:d4:4c:83:06:b2:79:e6:c1:07:48:85:7e:e9:d8:a7:72:20: 6d:a0:1f:ff:51:cc:d7:97:36:67:b6:cd:94:19:47:77:dc:fa: 6b:a1:71:3c:c3:dc:7e:a1:da:09:d6:2d:8f:4c:a4:7c:c6:62: 22:85:77:04:e0:c2:4e:06:ea:9c:83:2e:4e:72:4b:1f:af:14: 7e:65:f0:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQE/j+s8Kz0jzqmsGiW3flIV59YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIw N0NCMDAxQTAeFw0yNjA2MTMxMzQxMjVaFw0yNjA2MTQxMzUwMjVaMDMxMTAvBgNV BAMTKDBBQUVGRjVENThGNzYwN0EzQzc5RTAyM0Q3RTAzMEI2RDhGQTYwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaL/al5qceGSWpNtGQ/hIZNoL BQz7L08FC2rRykZKEgJw77YRmingTL4Bee+iPL4OkPVJKTleBFodv+wsCy+hcBW3 YahniC1y97y8DvoyYn7BajTxKeLgZ8zKVfL9hYcA7r2VetlyCkdxalcygDiIuMdm Yfi2ZaoRKFSbRbzYPI8XHwy4ln5AZpGZpy1imh1+ECqMDTjchNKBWmaWO9sr74HN lVxgQWi/RxHQoGJef0L4119PtOL+gbZP3C0UHpHm3dZkr72YBM8WeGCN321DYNx5 BE/WYsEzp/Dp9SgJjpjOVWShgv55tQN9ZZG3u+74fkZmMMprQkuTgN760SezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCq7/XVj3YHo8eeAj1+Awttj6YFQwHwYDVR0j BBgwFoAUsvVy9WZtKwu2bj7IKKxDogfLABowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMyODUyOTEtY2U5Mi00MTQ0LTljMTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2 NjZEMkIwQkI2NkUzRUM4MjhBQzQzQTIwN0NCMDAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkY1NzJGNTY2NkQyQjBCQjY2RTNFQzgyOEFDNDNBMjA3Q0Iw MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvQjJGNTcyRjU2NjZEMkIwQkI2NkUzRUM4MjhBQzQz QTIwN0NCMDAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAeX12ByWqI1WIB5Hf2ZspP5plda5f3oSSq 5IPOqlJpupPKJD3WkHHGeJ7hT+yF5II/9p0hvU/VaVxZqqAjfuJR92JI886MPzmF NvfGDerm2uYcUCX6TVTI2HQbaD2Xltl+Jiw18upDKXNelOBEk3Bt0HZ/4DbrtvSX SeBDCNfYpRveqkkClhp9aO92atKUdwDlQKWF7AsrQfzv/sUFZSptCpn14c+chaJA R2JBBQymtdGKedvUTIMGsnnmwQdIhX7p2KdyIG2gH/9RzNeXNme2zZQZR3fc+muh cTzD3H6h2gnWLY9MpHzGYiKFdwTgwk4G6pyDLk5ySx+vFH5l8MM= -----END CERTIFICATE-----Generated at Sat Jun 13 22:06:05 2026 by rpki-client