$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: TPE6hW3KcAwDotwVJBR3CAmy8jGi1YywdIgBYq5kBL8= Subject key identifier: 03:CF:FF:53:F0:D0:89:F1:00:DB:43:AC:95:57:53:96:AF:B3:49:C3 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 0D68D10EEE92D8E8111BA575EB86A292B02BF915 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 0214 Signing time: Tue 24 Mar 2026 15:02:00 +0000 Manifest this update: Tue 24 Mar 2026 14:57:00 +0000 Manifest next update: Fri 27 Mar 2026 15:52:00 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=) 2: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: fzvN3+YvDIUJYh1nE8rV9NKjISx6jcD1dIt5XzpcuXA=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:68:d1:0e:ee:92:d8:e8:11:1b:a5:75:eb:86:a2:92:b0:2b:f9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Mar 24 14:57:00 2026 GMT Not After : Mar 27 15:52:00 2026 GMT Subject: CN=03CFFF53F0D089F100DB43AC95575396AFB349C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:a4:b2:12:b9:1c:4a:4f:69:ae:af:11:08: bb:cd:c3:f2:1a:ba:87:b4:e8:9b:08:e8:5b:eb:3c: 58:1a:a6:57:68:dd:c0:60:3e:00:b2:d1:d8:ff:8f: ee:15:73:1b:83:59:1f:25:fe:4d:7f:12:3d:ff:c8: 20:e4:ff:41:51:17:ca:6b:f9:29:18:4a:47:70:df: b6:8d:42:88:4f:93:a3:92:db:d4:5c:44:9f:a1:0f: c8:aa:09:59:40:e7:f2:f8:03:52:39:aa:0d:e2:55: 03:b5:83:8e:57:47:9c:2d:b0:0b:48:08:8f:e2:57: db:bc:1d:03:dd:29:a7:39:98:b6:7f:2c:fd:3f:0a: 38:20:9d:d5:22:ea:a4:4b:54:22:8b:1f:b8:64:7b: f5:21:9c:61:bf:88:85:c1:d8:44:28:cc:07:d1:bc: b2:77:cf:ce:9a:7b:7d:d4:80:4c:a9:ef:ba:64:5e: 67:81:6c:15:f9:db:6d:bd:62:ae:5c:25:a0:af:66: eb:3a:c9:52:bd:2a:d4:5b:16:32:30:55:3d:51:1e: ea:38:ac:8d:00:0c:b8:90:fd:16:47:52:ec:35:a9: bb:8c:d0:25:6d:71:28:77:60:fe:57:2d:cb:b6:01: 4c:04:9e:25:38:fd:88:77:88:bb:7c:40:57:35:6e: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:FF:53:F0:D0:89:F1:00:DB:43:AC:95:57:53:96:AF:B3:49:C3 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d5:b6:84:e7:5a:2c:8b:53:cb:8b:65:c1:b5:60:79:5a:32: 81:e4:40:17:5e:33:24:72:76:e9:80:3a:0c:ff:cb:4b:b7:7b: 90:1d:2d:81:c3:08:f6:94:a1:92:a2:b9:d4:a2:d8:73:54:1d: 2e:b6:65:41:00:64:64:4e:0f:99:72:a5:ea:3d:98:1f:a8:67: 3d:a6:da:03:08:1a:ea:f2:8e:9f:af:de:a3:dc:05:31:09:a5: 5e:00:56:7a:c1:8b:3f:62:39:92:65:9f:f0:60:88:4b:d6:e6: 54:b0:d0:48:18:a0:4f:ef:65:7b:f7:d2:0f:40:39:62:f1:d7: 95:ad:8c:73:95:83:96:90:c6:6a:00:02:e8:ac:7c:5a:41:8b: f2:fa:c4:6d:b6:e2:66:92:4f:0e:62:af:31:5c:32:25:4e:6a: 87:58:6c:63:bb:00:77:98:76:67:24:2e:10:01:5b:1d:8f:a4: 48:06:11:e2:5c:87:fb:a0:f4:56:f4:c2:84:e9:2f:fb:2a:e1: d0:9d:bf:d4:5b:e6:14:98:95:71:d6:73:d6:43:41:08:dd:7e: bf:ed:d1:17:28:f7:83:26:c8:f5:17:b6:26:3f:d7:02:ca:2d: c4:78:36:7c:15:f8:00:6d:d5:77:45:6a:e0:b4:6d:74:68:68: 72:40:4d:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWjRDu6S2OgRG6V164aikrAr+RUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNjAzMjQxNDU3MDBaFw0yNjAzMjcxNTUyMDBaMDMxMTAvBgNV BAMTKDAzQ0ZGRjUzRjBEMDg5RjEwMERCNDNBQzk1NTc1Mzk2QUZCMzQ5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFqSyErkcSk9prq8RCLvNw/Ia uoe06JsI6FvrPFgapldo3cBgPgCy0dj/j+4VcxuDWR8l/k1/Ej3/yCDk/0FRF8pr +SkYSkdw37aNQohPk6OS29RcRJ+hD8iqCVlA5/L4A1I5qg3iVQO1g45XR5wtsAtI CI/iV9u8HQPdKac5mLZ/LP0/CjggndUi6qRLVCKLH7hke/UhnGG/iIXB2EQozAfR vLJ3z86ae33UgEyp77pkXmeBbBX52229Yq5cJaCvZus6yVK9KtRbFjIwVT1RHuo4 rI0ADLiQ/RZHUuw1qbuM0CVtcSh3YP5XLcu2AUwEniU4/Yh3iLt8QFc1bnknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8//U/DQifEA20OslVdTlq+zScMwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELVtoTnWiyLU8uLZcG1YHlaMoHkQBdeMyRy dumAOgz/y0u3e5AdLYHDCPaUoZKiudSi2HNUHS62ZUEAZGROD5lypeo9mB+oZz2m 2gMIGuryjp+v3qPcBTEJpV4AVnrBiz9iOZJln/BgiEvW5lSw0EgYoE/vZXv30g9A OWLx15WtjHOVg5aQxmoAAuisfFpBi/L6xG224maSTw5irzFcMiVOaodYbGO7AHeY dmckLhABWx2PpEgGEeJch/ug9Fb0woTpL/sq4dCdv9Rb5hSYlXHWc9ZDQQjdfr/t 0Rco94MmyPUXtiY/1wLKLcR4NnwV+ABt1XdFauC0bXRoaHJATew= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:52 2026 by rpki-client