$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: p3mykbSqnDmVaAhvkmOGWWs8uotmdUSVzPhGDddjlrs= Subject key identifier: B7:D7:A5:D1:DF:8B:08:E6:50:EB:5F:D6:E7:1A:BE:4C:66:01:12:BB Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 50B01CA654EF7742AEA9935625D956446A02C7FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 0127 Signing time: Tue 24 Mar 2026 17:42:20 +0000 Manifest this update: Tue 24 Mar 2026 17:37:20 +0000 Manifest next update: Fri 27 Mar 2026 18:55:20 +0000 Files and hashes: 1: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: nqS45BO5SU1x4BYYnHtjb0myV+d76PFXRNSZWkgUpbo=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b0:1c:a6:54:ef:77:42:ae:a9:93:56:25:d9:56:44:6a:02:c7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Mar 24 17:37:20 2026 GMT Not After : Mar 27 18:55:20 2026 GMT Subject: CN=B7D7A5D1DF8B08E650EB5FD6E71ABE4C660112BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:27:82:66:35:d3:b9:87:85:38:cb:0f:cf: 8e:43:da:1d:65:9d:50:f1:d5:ce:32:1e:4c:bd:b4: 6f:cd:02:5a:34:d8:26:43:1a:f1:9b:f3:b2:4a:e1: 86:e1:c2:63:8b:c9:f1:cf:4d:04:b9:8d:c7:39:51: 52:03:6f:50:2c:e1:06:01:c4:8c:fe:87:f2:7e:a9: 1a:d8:d0:fc:56:3d:da:af:33:54:d0:c6:7a:bf:89: eb:fb:9c:ab:de:08:b1:42:80:6a:20:1d:3a:bc:35: 48:a1:a3:78:50:90:6f:79:f1:7e:a0:1d:96:8f:77: a9:d5:97:46:5f:ef:df:d4:62:6e:26:54:32:6d:3b: 6f:9b:3a:c3:f2:24:b7:eb:1e:c7:dd:e2:51:74:8d: 5a:75:89:48:da:4d:8d:c0:e1:9e:78:35:9e:95:6b: 0a:59:88:7f:fa:1f:b2:c1:43:0e:51:2e:ad:f5:96: 1e:32:89:53:5d:52:56:51:59:b5:40:d9:bd:98:3e: 74:c4:0c:f9:76:a8:bd:bd:f1:10:75:4d:24:81:9b: c9:ef:d6:c8:88:a7:4f:8f:30:8c:3e:76:48:26:b8: 87:a2:6a:5c:b3:fe:bd:38:54:27:70:69:e6:ca:59: 31:00:27:2f:da:04:64:4f:75:06:91:ae:3a:a0:81: 61:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D7:A5:D1:DF:8B:08:E6:50:EB:5F:D6:E7:1A:BE:4C:66:01:12:BB X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:26:62:8c:d4:3c:e1:16:b6:2d:f7:31:ae:46:b2:cc:80:c9: eb:0c:40:49:a3:b3:55:cb:56:ec:2d:cd:e3:66:1e:1f:b0:7a: fd:e0:01:79:b0:bb:6a:f5:45:bc:5d:c7:5a:7a:c6:f1:99:05: 12:9d:a5:d6:68:be:5d:d5:8d:eb:5d:bb:9c:07:12:a8:8f:cd: 38:29:09:fb:5e:a1:d9:38:4e:9c:35:a6:e9:29:83:c9:2d:d6: 9d:f5:22:96:91:46:53:4f:ff:d1:cc:bf:54:b8:92:68:89:46: 5d:01:8c:7d:84:0e:a1:8a:2a:3f:a3:95:5c:24:dc:fa:91:f5: f0:cb:27:69:3f:4e:b6:ca:ac:8a:b9:29:4a:df:0a:c9:6c:ac: bc:e8:8c:45:b6:d6:6c:4e:e8:2e:b7:f3:45:66:02:be:38:7d: 5d:17:cc:dd:7e:8f:2d:c1:82:95:3d:68:fb:40:bc:d7:e2:9d: f7:04:cb:b0:38:e4:05:16:52:5a:84:e0:54:5a:f4:51:52:6b: 52:04:e2:9d:0a:16:ce:66:12:bd:e4:47:6e:a4:95:4b:e9:79: 99:f4:c0:67:f4:7b:68:db:97:cc:93:a8:3a:e0:1e:09:46:21: de:dc:d7:3e:e7:2c:d4:48:39:34:13:37:cf:8b:59:05:b0:1b: 22:29:8e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULAcplTvd0KuqZNWJdlWRGoCx/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjAzMjQxNzM3MjBaFw0yNjAzMjcxODU1MjBaMDMxMTAvBgNV BAMTKEI3RDdBNUQxREY4QjA4RTY1MEVCNUZENkU3MUFCRTRDNjYwMTEyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZaCeCZjXTuYeFOMsPz45D2h1l nVDx1c4yHky9tG/NAlo02CZDGvGb87JK4YbhwmOLyfHPTQS5jcc5UVIDb1As4QYB xIz+h/J+qRrY0PxWPdqvM1TQxnq/iev7nKveCLFCgGogHTq8NUiho3hQkG958X6g HZaPd6nVl0Zf79/UYm4mVDJtO2+bOsPyJLfrHsfd4lF0jVp1iUjaTY3A4Z54NZ6V awpZiH/6H7LBQw5RLq31lh4yiVNdUlZRWbVA2b2YPnTEDPl2qL298RB1TSSBm8nv 1siIp0+PMIw+dkgmuIeialyz/r04VCdwaebKWTEAJy/aBGRPdQaRrjqggWFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9el0d+LCOZQ61/W5xq+TGYBErswHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkmYozUPOEWti33Ma5GssyAyesMQEmjs1XL VuwtzeNmHh+wev3gAXmwu2r1Rbxdx1p6xvGZBRKdpdZovl3Vjetdu5wHEqiPzTgp Cfteodk4Tpw1pukpg8kt1p31IpaRRlNP/9HMv1S4kmiJRl0BjH2EDqGKKj+jlVwk 3PqR9fDLJ2k/TrbKrIq5KUrfCslsrLzojEW21mxO6C6380VmAr44fV0XzN1+jy3B gpU9aPtAvNfinfcEy7A45AUWUlqE4FRa9FFSa1IE4p0KFs5mEr3kR26klUvpeZn0 wGf0e2jbl8yTqDrgHglGId7c1z7nLNRIOTQTN8+LWQWwGyIpjk4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:20 2026 by rpki-client