$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: G4UIKNSCGC5PhNoHYrmnG2L9P0hvLrS4gmpq2K4fIxU= Subject key identifier: 4B:24:41:DD:0E:07:B9:42:66:6C:3E:36:21:52:DD:48:90:98:9C:16 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 75105F7FEB88B54A79237E03B4C98BCA4806B30C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0380 Signing time: Wed 25 Mar 2026 06:11:52 +0000 Manifest this update: Wed 25 Mar 2026 06:06:52 +0000 Manifest next update: Sat 28 Mar 2026 15:16:52 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 3: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 5: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: e9DZ7xgZlfBa+fWYQjbPon+nG9EYNTbmCjbDyEllCX4=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:10:5f:7f:eb:88:b5:4a:79:23:7e:03:b4:c9:8b:ca:48:06:b3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Mar 25 06:06:52 2026 GMT Not After : Mar 28 15:16:52 2026 GMT Subject: CN=4B2441DD0E07B942666C3E362152DD4890989C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:b9:89:a4:75:f8:e2:f2:7c:6f:a0:96:a3: 1b:89:e4:b5:da:dc:db:84:1c:29:a5:c2:a3:a5:73: 01:c9:37:da:c4:d4:5a:f7:b7:d3:fc:a0:2e:83:e6: 72:0a:01:65:0d:06:79:ce:a7:ec:9f:af:6a:f8:8d: 09:00:8d:52:cc:26:a7:9e:16:1d:09:b7:7f:59:f5: de:5b:60:ee:2e:f4:33:12:c9:e0:20:c2:97:c6:f3: 0d:58:46:8c:a9:2b:4c:62:20:ef:0a:cc:23:35:7b: 65:ae:24:11:87:35:29:a1:15:55:5d:0f:d8:1c:49: c9:81:19:67:f1:3d:f8:c6:f8:4c:3a:07:99:75:37: ea:97:8e:77:a8:82:53:37:7a:21:0a:4b:4f:81:62: 91:82:7d:8f:48:25:d1:5f:b7:e0:dd:c1:b7:a4:bd: 63:37:49:bf:c2:43:85:cb:40:9e:c0:50:fe:33:72: 3f:b1:fb:6f:3a:da:e7:95:27:c8:42:3b:09:18:a6: ad:9d:7d:20:a5:7b:24:c0:ed:88:5c:07:de:34:74: 74:41:5a:92:65:bf:3b:58:ec:48:b5:06:8f:3b:1b: 89:b0:e4:f6:f1:fc:12:b8:4c:c0:a4:af:ac:a5:39: fd:ae:9d:c2:32:3d:8a:ff:43:d5:ee:60:e9:7f:4b: f6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:24:41:DD:0E:07:B9:42:66:6C:3E:36:21:52:DD:48:90:98:9C:16 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:04:f2:dc:47:24:f5:b5:a2:0a:09:e9:35:c9:3c:31:6f: 06:5d:ae:6f:f4:d6:3b:bf:78:8f:a1:3e:7a:7b:85:9b:82:d7: 84:be:4c:57:4e:93:9a:34:f8:03:d5:1e:03:a2:02:32:d4:62: 20:87:32:53:fb:a7:22:01:9f:6e:01:56:ea:70:b2:25:2c:03: bd:af:05:df:33:88:8b:50:36:c8:ec:9f:6c:6f:7d:9b:29:dd: 32:3f:05:2e:85:94:bb:f4:90:60:6e:05:83:c4:a4:f2:e4:e4: 93:50:fe:7b:00:c6:e5:8d:be:5e:40:ec:0d:da:a7:83:94:19: c8:1a:50:b8:c9:64:33:d0:2d:af:80:8c:ac:d6:42:a4:db:d1: 46:3b:79:57:f9:29:34:65:b3:92:8a:0a:04:35:1b:b0:fd:d6: d7:f9:49:e6:60:74:6d:8a:e8:a9:06:14:87:96:1c:83:46:0b: 70:f1:74:b6:ae:30:89:60:be:2d:5d:bc:eb:d3:bd:b9:69:e6: 0b:39:35:bb:1d:7b:45:89:9c:5f:4a:06:c6:fb:fe:ba:ab:35: bc:7c:05:d6:41:71:4e:66:e0:a9:4f:ac:99:5c:10:ce:a0:90: 6a:f2:ca:4a:04:61:5d:cc:8d:4a:f7:c6:2d:15:92:13:a2:45: 16:3e:7a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRBff+uItUp5I34DtMmLykgGswwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNjAzMjUwNjA2NTJaFw0yNjAzMjgxNTE2NTJaMDMxMTAvBgNV BAMTKDRCMjQ0MUREMEUwN0I5NDI2NjZDM0UzNjIxNTJERDQ4OTA5ODlDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S7mJpHX44vJ8b6CWoxuJ5LXa 3NuEHCmlwqOlcwHJN9rE1Fr3t9P8oC6D5nIKAWUNBnnOp+yfr2r4jQkAjVLMJqee Fh0Jt39Z9d5bYO4u9DMSyeAgwpfG8w1YRoypK0xiIO8KzCM1e2WuJBGHNSmhFVVd D9gcScmBGWfxPfjG+Ew6B5l1N+qXjneoglM3eiEKS0+BYpGCfY9IJdFft+Ddwbek vWM3Sb/CQ4XLQJ7AUP4zcj+x+2862ueVJ8hCOwkYpq2dfSCleyTA7YhcB940dHRB WpJlvztY7Ei1Bo87G4mw5Pbx/BK4TMCkr6ylOf2uncIyPYr/Q9XuYOl/S/YtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSyRB3Q4HuUJmbD42IVLdSJCYnBYwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFhBPLcRyT1taIKCek1yTwxbwZdrm/01ju/ eI+hPnp7hZuC14S+TFdOk5o0+APVHgOiAjLUYiCHMlP7pyIBn24BVupwsiUsA72v Bd8ziItQNsjsn2xvfZsp3TI/BS6FlLv0kGBuBYPEpPLk5JNQ/nsAxuWNvl5A7A3a p4OUGcgaULjJZDPQLa+AjKzWQqTb0UY7eVf5KTRls5KKCgQ1G7D91tf5SeZgdG2K 6KkGFIeWHINGC3DxdLauMIlgvi1dvOvTvblp5gs5Nbsde0WJnF9KBsb7/rqrNbx8 BdZBcU5m4KlPrJlcEM6gkGryykoEYV3MjUr3xi0VkhOiRRY+eq8= -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:45 2026 by rpki-client