$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: pfvJ0Z1DMtA17r+nQfXgFjbfUXxN6bmHpNIEHkI2qGI= Subject key identifier: E3:51:C6:8C:5B:08:B3:A6:04:04:C4:1A:86:D1:F3:34:F8:4A:D4:2A Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 72F84C3964D6DD0884392C4E8BB852799B5C197D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 04:45:20 +0000 Manifest this update: Fri 24 Jul 2026 04:40:20 +0000 Manifest next update: Sat 25 Jul 2026 04:59:20 +0000 Files and hashes: 1: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: u3+lmMGIOkrDXgPtT4HYvKTKy/6psY3RhINY8Q008i8=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f8:4c:39:64:d6:dd:08:84:39:2c:4e:8b:b8:52:79:9b:5c:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Jul 24 04:40:20 2026 GMT Not After : Jul 25 04:59:20 2026 GMT Subject: CN=E351C68C5B08B3A60404C41A86D1F334F84AD42A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:15:22:9c:b5:e2:70:11:64:cd:ea:0d:1b: 2d:00:a0:cf:32:ac:da:f4:84:73:ec:43:83:f1:22: 0c:ff:92:59:5d:23:7b:d7:d9:e8:02:3a:88:c7:14: 61:71:60:a4:7b:ef:3b:2a:33:ad:0a:77:12:a4:91: 84:f9:b8:32:fd:b8:ea:5f:e4:2a:1b:5d:e5:3d:74: e3:f6:c9:d7:40:5b:64:e3:df:c0:d1:83:e6:15:b0: 21:78:29:f0:96:d9:b2:85:83:cb:c2:c5:75:81:6a: b7:c9:2d:c7:bc:66:b5:64:a6:27:68:0e:2e:e9:7d: be:15:72:a9:b1:ad:60:ee:3c:ec:8c:cf:40:02:54: ab:7a:9a:c6:41:ec:13:29:67:14:92:89:d9:56:03: 65:60:3d:6d:7d:27:1a:27:0a:17:52:c1:30:74:43: 9a:b0:c7:7d:14:48:60:ac:cc:94:eb:0e:e2:7f:cc: 24:53:80:52:76:1e:19:8c:c3:10:f1:bf:b8:86:b9: 41:9a:4d:bb:e4:e0:e6:3b:18:e0:85:12:45:56:14: c5:53:37:4b:a4:04:d0:b5:25:32:23:0d:08:f0:e3: d9:d2:db:55:7d:7b:fe:4e:c4:bf:64:db:d2:16:d5: 9d:22:da:73:34:6d:73:0c:a7:eb:d5:39:dd:a8:63: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:C6:8C:5B:08:B3:A6:04:04:C4:1A:86:D1:F3:34:F8:4A:D4:2A X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ba:61:1a:c1:78:46:bd:ad:90:2e:b6:a7:92:3f:03:97:2b: e0:6a:4e:01:97:b7:49:5c:f7:d9:d5:5d:26:49:99:d8:aa:a6: 69:71:52:35:78:33:c2:94:5f:53:08:09:32:79:78:6b:0c:28: 17:bb:90:b4:fd:70:c5:d2:9c:8b:2e:f5:ed:d6:bb:de:3f:cd: c4:89:1e:11:3f:e0:55:53:e1:d7:9d:01:4c:1b:bb:39:ed:9e: f1:10:e1:a6:d5:cb:74:23:15:bd:d9:06:e1:f1:20:69:c5:c5: 88:ea:8f:6b:75:63:07:4a:28:e2:1c:eb:a6:f1:0b:a1:dc:cf: c5:9a:d7:be:89:5b:2e:3f:cd:b3:50:16:a0:33:64:0c:9b:54: a2:b3:bf:95:e0:4b:82:96:d8:04:cd:a3:48:94:36:b9:a7:b4: c8:17:ea:a5:be:82:04:31:8f:c2:8c:6b:9d:0f:ad:cb:e7:a6: 9c:6f:fb:b4:02:91:1f:7e:ae:df:89:94:a2:09:d2:88:8a:80: fd:48:31:a3:23:35:94:4b:c8:f4:c0:23:7e:35:62:c1:30:26: 03:76:f8:fe:2c:d4:a5:af:65:51:2c:b6:ee:73:6b:eb:e9:8c: 1c:a2:64:bc:e3:8c:0f:df:13:f4:15:96:d3:81:05:b0:24:c9: e6:f1:ee:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvhMOWTW3QiEOSxOi7hSeZtcGX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA3MjQwNDQwMjBaFw0yNjA3MjUwNDU5MjBaMDMxMTAvBgNV BAMTKEUzNTFDNjhDNUIwOEIzQTYwNDA0QzQxQTg2RDFGMzM0Rjg0QUQ0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0RUinLXicBFkzeoNGy0AoM8y rNr0hHPsQ4PxIgz/klldI3vX2egCOojHFGFxYKR77zsqM60KdxKkkYT5uDL9uOpf 5CobXeU9dOP2yddAW2Tj38DRg+YVsCF4KfCW2bKFg8vCxXWBarfJLce8ZrVkpido Di7pfb4VcqmxrWDuPOyMz0ACVKt6msZB7BMpZxSSidlWA2VgPW19JxonChdSwTB0 Q5qwx30USGCszJTrDuJ/zCRTgFJ2HhmMwxDxv7iGuUGaTbvk4OY7GOCFEkVWFMVT N0ukBNC1JTIjDQjw49nS21V9e/5OxL9k29IW1Z0i2nM0bXMMp+vVOd2oY5+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41HGjFsIs6YEBMQahtHzNPhK1CowHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC26YRrBeEa9rZAutqeSPwOXK+BqTgGXt0lc 99nVXSZJmdiqpmlxUjV4M8KUX1MICTJ5eGsMKBe7kLT9cMXSnIsu9e3Wu94/zcSJ HhE/4FVT4dedAUwbuzntnvEQ4abVy3QjFb3ZBuHxIGnFxYjqj2t1YwdKKOIc66bx C6Hcz8Wa176JWy4/zbNQFqAzZAybVKKzv5XgS4KW2ATNo0iUNrmntMgX6qW+ggQx j8KMa50Prcvnppxv+7QCkR9+rt+JlKIJ0oiKgP1IMaMjNZRLyPTAI341YsEwJgN2 +P4s1KWvZVEstu5za+vpjByiZLzjjA/fE/QVltOBBbAkyebx7qI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:54 2026 by rpki-client