$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: MNa6ZO4W+D5p3zBdPbsbGlUgwTFCn9HjlFSWUz/Vrcs= Subject key identifier: E6:E4:69:FB:A9:33:CF:31:73:C2:D6:9F:CB:A8:B9:80:7D:7F:A1:D1 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 57184C79AF5877E93E43F99B1150643B7AFF44D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:04:43 +0000 Manifest this update: Tue 12 May 2026 14:59:43 +0000 Manifest next update: Wed 13 May 2026 18:57:43 +0000 Files and hashes: 1: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: t+i5HW05vPgBD4hbaw3jgg8Sx1uMnTuqrBivv+egm4M=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:18:4c:79:af:58:77:e9:3e:43:f9:9b:11:50:64:3b:7a:ff:44:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: May 12 14:59:43 2026 GMT Not After : May 13 18:57:43 2026 GMT Subject: CN=E6E469FBA933CF3173C2D69FCBA8B9807D7FA1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:2c:93:32:31:10:1b:3d:3e:65:33:f9:62: 86:0f:77:52:80:7e:53:12:92:e5:b1:2e:1b:f4:a6: 3c:dc:c5:92:60:c2:de:c7:7a:f3:91:05:12:ae:d3: bc:37:26:a3:a0:ac:e6:45:90:96:1b:31:dd:5e:f6: f7:57:78:b9:d4:d9:fd:24:52:76:3a:b3:cd:7b:ed: 12:b1:f4:18:6b:ba:bb:c5:92:d8:a7:71:9b:0a:71: fa:b2:4f:ff:7d:02:61:b3:5d:6f:b9:de:da:76:12: b7:74:89:7f:08:28:23:fd:34:c4:0f:91:5e:7c:47: ca:86:21:af:86:65:17:a0:ee:31:f5:17:eb:7f:e4: 50:9b:71:9f:49:f8:c3:4f:15:dd:ef:6e:fb:4b:ce: a9:5e:eb:b1:01:fa:e1:d2:d4:7f:bb:24:4a:e8:17: ac:1e:85:05:db:10:7b:27:7e:f8:f9:38:ab:3b:94: 8c:33:22:71:22:3f:3e:51:38:42:f2:ae:1a:a9:64: a3:56:a1:22:94:2a:b2:f5:90:44:10:7d:f0:59:e2: a1:7f:52:b8:3d:3b:4c:da:d7:0e:a6:08:28:6c:a6: f4:84:a2:68:26:02:b5:98:73:91:b2:44:12:c5:30: fc:38:87:3a:65:78:a3:f7:8c:f8:c8:51:8c:5a:26: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E4:69:FB:A9:33:CF:31:73:C2:D6:9F:CB:A8:B9:80:7D:7F:A1:D1 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:0d:42:b0:58:7e:3f:39:27:e5:df:8b:ae:79:a5:76:86: b8:39:ec:0f:af:cd:68:0c:dd:3f:5d:d8:8b:1a:ac:3e:18:ab: 7e:0d:b4:83:f1:5d:9e:15:78:6c:45:95:65:73:89:75:73:3d: d6:02:3b:8c:59:3a:73:61:8e:99:53:2d:26:ef:51:5d:46:f6: 1d:58:68:cf:a6:24:00:2b:b7:c5:c0:1b:c8:33:2c:18:97:c7: 73:ce:42:f3:93:1b:34:53:45:a9:68:3a:f9:53:9f:37:49:08: b9:16:31:fb:46:f6:71:a7:3c:85:c1:41:10:f2:ff:c2:2d:04: 95:be:8a:72:6c:a8:ab:7a:da:7a:a0:21:ef:bb:64:eb:0e:89: ee:d8:97:96:fa:07:3c:61:9d:69:60:fe:57:c5:ab:af:ce:40: 19:bd:44:66:f3:6b:57:48:bc:37:2f:20:20:84:6f:68:5f:6d: 4a:9d:54:d7:8d:ee:0f:20:5b:02:e1:67:c2:38:09:01:38:d7: d3:51:52:63:cf:d7:e7:fc:40:96:2a:e7:1b:a0:3b:94:fd:fb: da:de:67:a3:42:db:a4:3d:70:0b:02:a0:5f:eb:88:1a:a6:45: b6:a5:0f:3b:89:25:71:4f:52:15:f4:60:12:c0:3e:0b:18:a2: ef:98:0b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxhMea9Yd+k+Q/mbEVBkO3r/RNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA1MTIxNDU5NDNaFw0yNjA1MTMxODU3NDNaMDMxMTAvBgNV BAMTKEU2RTQ2OUZCQTkzM0NGMzE3M0MyRDY5RkNCQThCOTgwN0Q3RkExRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JiyTMjEQGz0+ZTP5YoYPd1KA flMSkuWxLhv0pjzcxZJgwt7HevORBRKu07w3JqOgrOZFkJYbMd1e9vdXeLnU2f0k UnY6s8177RKx9BhrurvFktincZsKcfqyT/99AmGzXW+53tp2Erd0iX8IKCP9NMQP kV58R8qGIa+GZReg7jH1F+t/5FCbcZ9J+MNPFd3vbvtLzqle67EB+uHS1H+7JEro F6wehQXbEHsnfvj5OKs7lIwzInEiPz5ROELyrhqpZKNWoSKUKrL1kEQQffBZ4qF/ Urg9O0za1w6mCChspvSEomgmArWYc5GyRBLFMPw4hzpleKP3jPjIUYxaJlkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uRp+6kzzzFzwtafy6i5gH1/odEwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB97DUKwWH4/OSfl34uueaV2hrg57A+vzWgM 3T9d2IsarD4Yq34NtIPxXZ4VeGxFlWVziXVzPdYCO4xZOnNhjplTLSbvUV1G9h1Y aM+mJAArt8XAG8gzLBiXx3POQvOTGzRTRaloOvlTnzdJCLkWMftG9nGnPIXBQRDy /8ItBJW+inJsqKt62nqgIe+7ZOsOie7Yl5b6BzxhnWlg/lfFq6/OQBm9RGbza1dI vDcvICCEb2hfbUqdVNeN7g8gWwLhZ8I4CQE419NRUmPP1+f8QJYq5xugO5T9+9re Z6NC26Q9cAsCoF/riBqmRbalDzuJJXFPUhX0YBLAPgsYou+YC2M= -----END CERTIFICATE-----Generated at Wed May 13 02:41:16 2026 by rpki-client