$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: hzD/79ywpGximyerf4MrsGjbGvMJKAC2+aRpWOXOih8= Subject key identifier: 9F:CD:52:23:9C:4A:47:92:A7:78:C1:74:C4:B7:60:F0:6D:0D:A7:72 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 13ADB29DCA79C3A6479AE5E0E9E8CAC4E9C0041B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: 012A Signing time: Tue 24 Mar 2026 20:12:07 +0000 Manifest this update: Tue 24 Mar 2026 20:07:07 +0000 Manifest next update: Sat 28 Mar 2026 04:07:07 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: ddDgkmGF92CVE3mZLhNBcv8/ac48GjIOpRcTwUbu8q4=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) 3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ad:b2:9d:ca:79:c3:a6:47:9a:e5:e0:e9:e8:ca:c4:e9:c0:04:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Mar 24 20:07:07 2026 GMT Not After : Mar 28 04:07:07 2026 GMT Subject: CN=9FCD52239C4A4792A778C174C4B760F06D0DA772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:ce:b6:aa:be:4b:74:bf:e3:eb:ac:eb:6c: 3a:68:6b:68:48:22:de:f5:33:04:cb:99:47:b8:33: df:68:05:90:d8:0d:99:f5:ee:bc:53:36:54:57:14: c5:b2:42:92:f8:11:e6:d1:2a:4f:76:5d:0e:4d:cf: e7:94:80:bf:b8:9a:ca:5d:20:c4:15:01:fc:2b:05: f6:a4:fb:3c:59:0b:cc:f4:6c:42:9d:a5:15:35:97: f2:7d:ca:ed:4a:c2:15:42:4c:9a:4c:5f:39:aa:06: d1:ee:fa:b8:e8:0b:c5:e1:34:43:9a:4e:2c:ba:5b: 55:c5:45:ed:88:40:5f:24:11:ee:0c:df:42:72:2b: 1e:09:09:09:88:ca:3a:be:cb:07:0c:d1:f1:d7:50: f1:22:af:64:b3:c4:00:db:13:3a:a5:1b:6f:12:1a: 5c:99:46:3b:22:37:51:09:8b:6f:35:d0:41:62:b0: 22:92:4a:f2:3c:85:a7:f4:35:28:f2:a1:19:e8:50: a0:f2:a0:fb:5c:cb:bc:bd:8b:24:54:43:78:37:73: 4a:f8:a0:cc:39:bd:3d:16:b6:ad:4c:62:29:65:e3: dc:1d:20:69:f2:43:9a:6e:6b:08:7a:be:a3:06:b0: 5a:3f:6d:8e:f6:2f:b9:9c:d7:6a:39:f7:f6:71:ae: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CD:52:23:9C:4A:47:92:A7:78:C1:74:C4:B7:60:F0:6D:0D:A7:72 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:12:68:af:5e:bc:54:b2:31:a3:41:91:19:81:8a:e3:6b:48: de:ee:c7:8f:b5:d9:2b:19:ad:f3:a6:f6:be:76:88:27:28:22: 7a:39:a3:1d:c0:47:c1:91:2a:9b:14:84:47:e1:dd:a1:e7:79: ad:6b:5f:a2:d3:ef:49:59:38:49:64:7e:38:93:5d:d1:50:e9: a9:30:1d:41:b6:93:65:fc:4f:86:48:f5:fe:58:9f:eb:9f:f9: 9a:c3:b2:57:b8:d4:8d:bc:a6:b2:99:87:34:a4:04:d2:40:29: d6:8a:ac:b0:ea:d6:7d:c3:34:eb:b5:2c:d9:70:c3:b7:44:21: 3a:16:ff:4c:fe:42:51:2d:c3:6b:c5:29:11:04:dc:69:b9:32: be:21:e2:85:18:a3:c8:52:ce:92:fb:1d:2a:88:c0:2c:c9:24: 08:1a:7c:c1:bf:a3:72:f8:4b:89:95:d0:a4:28:80:38:e7:2e: 52:f8:b4:a0:21:75:bc:0f:39:d2:11:4d:82:1e:4b:90:ed:cc: 2b:b1:2b:d1:18:8e:ed:65:c4:e5:df:c1:9b:d4:51:e8:39:29: 65:65:11:18:17:7d:cf:a2:69:91:b5:7f:6e:d7:a4:c4:fe:73: 98:88:33:17:43:85:1f:a7:8a:a3:7c:97:5d:21:c5:b3:7a:31: ec:55:70:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE62yncp5w6ZHmuXg6ejKxOnABBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNjAzMjQyMDA3MDdaFw0yNjAzMjgwNDA3MDdaMDMxMTAvBgNV BAMTKDlGQ0Q1MjIzOUM0QTQ3OTJBNzc4QzE3NEM0Qjc2MEYwNkQwREE3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/862qr5LdL/j66zrbDpoa2hI It71MwTLmUe4M99oBZDYDZn17rxTNlRXFMWyQpL4EebRKk92XQ5Nz+eUgL+4mspd IMQVAfwrBfak+zxZC8z0bEKdpRU1l/J9yu1KwhVCTJpMXzmqBtHu+rjoC8XhNEOa Tiy6W1XFRe2IQF8kEe4M30JyKx4JCQmIyjq+ywcM0fHXUPEir2SzxADbEzqlG28S GlyZRjsiN1EJi2810EFisCKSSvI8haf0NSjyoRnoUKDyoPtcy7y9iyRUQ3g3c0r4 oMw5vT0Wtq1MYill49wdIGnyQ5puawh6vqMGsFo/bY72L7mc12o59/Zxro6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn81SI5xKR5KneMF0xLdg8G0Np3IwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkSaK9evFSyMaNBkRmBiuNrSN7ux4+12SsZ rfOm9r52iCcoIno5ox3AR8GRKpsUhEfh3aHnea1rX6LT70lZOElkfjiTXdFQ6akw HUG2k2X8T4ZI9f5Yn+uf+ZrDsle41I28prKZhzSkBNJAKdaKrLDq1n3DNOu1LNlw w7dEIToW/0z+QlEtw2vFKREE3Gm5Mr4h4oUYo8hSzpL7HSqIwCzJJAgafMG/o3L4 S4mV0KQogDjnLlL4tKAhdbwPOdIRTYIeS5DtzCuxK9EYju1lxOXfwZvUUeg5KWVl ERgXfc+iaZG1f27XpMT+c5iIMxdDhR+niqN8l10hxbN6MexVcJg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:23 2026 by rpki-client