$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: aRjMFyxayOwZgqI0nmu18ikcd3RaQdxFF8LubX/4dD8= Subject key identifier: 17:3D:7A:DB:56:A4:93:DD:8F:2F:27:A0:B5:02:11:CB:CA:A2:45:E2 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 563DBFC7B57FAB28166EB1A036D7EB3BAC509EE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04F2 Signing time: Wed 25 Mar 2026 17:21:18 +0000 Manifest this update: Wed 25 Mar 2026 17:16:18 +0000 Manifest next update: Sat 28 Mar 2026 20:46:18 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) 2: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 3: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) 5: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: 0ma+p/6HpolDZ54omIEf3UPtlOuhx5nqqEAO6w9pAf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3d:bf:c7:b5:7f:ab:28:16:6e:b1:a0:36:d7:eb:3b:ac:50:9e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Mar 25 17:16:18 2026 GMT Not After : Mar 28 20:46:18 2026 GMT Subject: CN=173D7ADB56A493DD8F2F27A0B50211CBCAA245E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:8a:43:17:b6:00:06:9b:1d:55:d2:53:e7: 1e:ab:56:be:86:63:6a:19:c0:7b:29:6d:c5:26:66: a7:f9:c7:76:b0:1f:cb:cc:70:e2:5f:8c:04:bf:24: 26:b0:61:1c:d6:d1:f0:70:da:6e:ac:33:87:dc:e6: 76:5a:ae:d3:74:30:6f:f1:52:d6:2e:28:99:72:6d: 80:a9:40:1a:53:fe:86:32:e1:94:5c:6c:22:93:5e: 28:66:f2:67:29:a6:b7:a4:5f:6b:20:10:75:a4:10: 80:25:4d:a5:73:a2:96:6f:a2:fb:76:8b:03:42:a8: ea:e7:85:b2:e4:c7:66:2c:fc:27:59:77:10:1f:e8: d6:69:9a:01:61:64:a9:cd:fb:f1:66:c8:eb:8f:b4: 22:21:c2:0c:d6:09:72:89:94:7d:96:e8:9c:04:cf: 27:4c:e2:f2:d0:73:18:c2:b2:b2:90:7c:0f:fd:8f: ee:86:1e:2c:96:c2:0d:4b:9d:b2:5a:4f:e2:f2:14: d6:7e:92:57:e9:f7:d7:e4:d1:30:c6:36:9a:3b:ff: d1:43:fd:b6:db:1a:c8:a0:3b:79:a8:e8:5b:c5:f9: 3a:8d:62:4f:2a:c1:e2:da:6a:f0:c2:75:64:63:42: 36:4e:ba:25:dc:1f:28:25:20:a3:48:f9:49:1b:60: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3D:7A:DB:56:A4:93:DD:8F:2F:27:A0:B5:02:11:CB:CA:A2:45:E2 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d5:17:c8:42:44:43:58:36:e2:1c:0f:1e:80:de:d2:b8:03: 3d:e1:32:4f:2a:f1:0e:2a:f0:c2:bb:17:8c:99:97:1c:d1:b2: 1f:d9:5b:73:a9:6c:06:88:47:5e:38:52:da:08:cd:9b:4d:e2: b0:5f:9b:a0:de:f1:34:65:94:5a:b6:a6:b8:95:2f:4c:64:a0: fc:ce:29:12:cc:db:14:b1:a9:d2:ea:a0:0f:7f:81:5b:84:67: 45:46:3b:f2:89:ec:18:2c:06:b6:10:e0:cd:c5:73:ee:2d:dd: d0:08:82:7c:91:f8:e7:f4:c3:59:bb:81:5e:20:bd:9d:75:71: 17:06:96:a8:8e:24:c5:ee:f8:da:d2:09:81:06:d8:c3:3f:42: 6a:9e:84:b8:22:76:1f:f6:42:1d:20:83:2d:92:fa:39:ce:b2: 8d:0c:c3:4d:1d:8e:ce:5f:c1:80:0e:88:97:a3:fe:83:57:d0: e2:e7:d6:f3:07:11:3f:35:a6:00:ad:87:85:d6:84:ef:e3:de: f6:bc:10:99:6e:34:ca:97:12:83:48:bf:d2:8e:ae:6a:96:9a: 67:a4:fe:72:28:11:b2:03:21:c4:4f:7f:bf:bb:3d:80:ad:13: 3f:2c:10:f0:e9:93:00:8b:29:cb:fb:25:a0:d3:c1:87:14:da: b6:a0:d9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVj2/x7V/qygWbrGgNtfrO6xQnuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNjAzMjUxNzE2MThaFw0yNjAzMjgyMDQ2MThaMDMxMTAvBgNV BAMTKDE3M0Q3QURCNTZBNDkzREQ4RjJGMjdBMEI1MDIxMUNCQ0FBMjQ1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoIopDF7YABpsdVdJT5x6rVr6G Y2oZwHspbcUmZqf5x3awH8vMcOJfjAS/JCawYRzW0fBw2m6sM4fc5nZartN0MG/x UtYuKJlybYCpQBpT/oYy4ZRcbCKTXihm8mcpprekX2sgEHWkEIAlTaVzopZvovt2 iwNCqOrnhbLkx2Ys/CdZdxAf6NZpmgFhZKnN+/FmyOuPtCIhwgzWCXKJlH2W6JwE zydM4vLQcxjCsrKQfA/9j+6GHiyWwg1LnbJaT+LyFNZ+klfp99fk0TDGNpo7/9FD /bbbGsigO3mo6FvF+TqNYk8qweLaavDCdWRjQjZOuiXcHyglIKNI+UkbYHC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFz1621akk92PLyegtQIRy8qiReIwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzVF8hCRENYNuIcDx6A3tK4Az3hMk8q8Q4q 8MK7F4yZlxzRsh/ZW3OpbAaIR144UtoIzZtN4rBfm6De8TRllFq2priVL0xkoPzO KRLM2xSxqdLqoA9/gVuEZ0VGO/KJ7BgsBrYQ4M3Fc+4t3dAIgnyR+Of0w1m7gV4g vZ11cRcGlqiOJMXu+NrSCYEG2MM/QmqehLgidh/2Qh0ggy2S+jnOso0Mw00djs5f wYAOiJej/oNX0OLn1vMHET81pgCth4XWhO/j3va8EJluNMqXEoNIv9KOrmqWmmek /nIoEbIDIcRPf7+7PYCtEz8sEPDpkwCLKcv7JaDTwYcU2rag2RY= -----END CERTIFICATE-----Generated at Thu Mar 26 22:35:54 2026 by rpki-client