$ rpki-client -vvvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: a1KEWG9kL3W5nPumjQEhHwpxD4jWZmpRJfOmM+SAKSE= Subject key identifier: 19:77:68:AD:CD:1C:B5:7A:E3:DB:8D:C9:FE:11:DE:6F:39:2D:B6:69 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 1A7D7C7E9F4813D4D9C1E3BC953CE6EF6B4577EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:38:33 +0000 Manifest this update: Thu 24 Sep 2026 22:33:33 +0000 Manifest next update: Sat 26 Sep 2026 00:21:33 +0000 Files and hashes: 1: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: scc1a/dhbSVq5Res2krhddKqi6ov1vlGPibkHKVmlfw=) 2: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7d:7c:7e:9f:48:13:d4:d9:c1:e3:bc:95:3c:e6:ef:6b:45:77:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Sep 24 22:33:33 2026 GMT Not After : Sep 26 00:21:33 2026 GMT Subject: CN=197768ADCD1CB57AE3DB8DC9FE11DE6F392DB669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:6f:56:0b:e3:96:93:1a:75:90:4d:8a:e6: 4b:bb:5f:bf:1e:aa:a2:9d:fd:a7:66:e7:05:b4:e2: 1c:2a:05:b9:f7:3f:7c:b3:bf:b5:7e:a2:32:4b:d5: 60:f9:e3:bc:ca:16:85:be:59:b0:07:af:ff:6a:fb: 97:8f:06:98:43:df:8b:b1:d9:26:d4:bb:d1:d8:ee: 6b:f1:45:82:10:ce:3e:92:31:34:98:3b:84:b2:d0: 57:c0:33:2d:8e:0c:6c:cd:23:7c:c2:c8:a2:7a:0a: ea:ea:76:e2:0e:36:f8:4f:d2:72:0b:56:15:47:ab: 15:ad:a4:1f:ae:ea:37:8f:96:08:f5:7c:c7:dd:05: 00:15:d0:ff:91:29:ac:e9:fb:07:fb:2b:10:1f:f1: 86:82:e8:47:bb:46:d3:73:9a:2c:60:09:08:25:98: eb:ef:2b:f8:e4:cf:d8:0b:dc:a5:6b:94:47:76:6b: 3c:7b:37:3b:11:49:2d:0d:eb:e1:16:d4:a8:97:c2: 94:ef:d5:bb:50:f5:46:c4:9c:88:9f:a2:d7:6c:52: 0a:cb:8c:61:a8:b1:f9:d9:92:a6:fc:29:e7:7b:dc: 5f:8d:c2:93:55:0c:33:55:24:65:ba:d9:03:37:cf: 22:fd:a3:4a:2a:b2:4e:ea:4e:9a:c5:a4:1a:d1:2c: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:77:68:AD:CD:1C:B5:7A:E3:DB:8D:C9:FE:11:DE:6F:39:2D:B6:69 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:79:5a:7e:45:5d:77:09:c3:7f:68:a7:5e:75:d9:24:f5:b9: 76:79:44:6d:05:3b:a4:57:86:e5:17:0c:60:7c:99:85:c1:8b: 85:89:db:fd:09:e2:79:d9:15:aa:a6:bb:4b:cc:96:90:23:45: 09:87:7b:ec:f4:17:57:e8:bf:9b:55:bd:a3:78:3d:10:f2:d0: 40:29:00:ea:3f:e7:22:39:3c:1e:22:37:31:e3:7e:b6:6e:ac: fb:85:18:d9:a1:e1:b5:9c:33:97:08:6c:27:b8:98:5b:03:8d: 74:be:6c:9c:62:6c:ed:c1:02:5a:60:04:41:52:ea:d6:68:81: b4:6d:c5:ef:2a:c0:bd:9c:45:ec:8d:dc:98:8d:b3:0f:e1:eb: 7b:7d:0a:4d:52:c0:28:d1:e4:87:be:f0:c0:bf:a0:4f:4b:55: 84:cf:14:1c:32:fe:92:3f:01:e7:19:fb:9d:4a:36:25:a6:e1: 35:a1:59:ae:d8:66:eb:57:d0:bd:41:35:ae:99:df:12:06:9d: 03:e2:8b:7a:56:bf:a0:eb:12:00:b5:5f:da:b9:93:2a:a8:1b: 44:4b:c7:96:81:3e:0a:66:fc:db:4d:ba:1a:1f:7c:1a:7f:0f: 24:65:79:67:75:4b:2b:80:8b:cd:0d:fa:0a:ec:f2:96:17:23: 5c:15:64:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGn18fp9IE9TZweO8lTzm72tFd+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA5MjQyMjMzMzNaFw0yNjA5MjYwMDIxMzNaMDMxMTAvBgNV BAMTKDE5Nzc2OEFEQ0QxQ0I1N0FFM0RCOERDOUZFMTFERTZGMzkyREI2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSm9WC+OWkxp1kE2K5ku7X78e qqKd/adm5wW04hwqBbn3P3yzv7V+ojJL1WD547zKFoW+WbAHr/9q+5ePBphD34ux 2SbUu9HY7mvxRYIQzj6SMTSYO4Sy0FfAMy2ODGzNI3zCyKJ6CurqduIONvhP0nIL VhVHqxWtpB+u6jePlgj1fMfdBQAV0P+RKazp+wf7KxAf8YaC6Ee7RtNzmixgCQgl mOvvK/jkz9gL3KVrlEd2azx7NzsRSS0N6+EW1KiXwpTv1btQ9UbEnIifotdsUgrL jGGosfnZkqb8Ked73F+NwpNVDDNVJGW62QM3zyL9o0oqsk7qTprFpBrRLL45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXdorc0ctXrj243J/hHebzkttmkwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ5Wn5FXXcJw39op1512ST1uXZ5RG0FO6RX huUXDGB8mYXBi4WJ2/0J4nnZFaqmu0vMlpAjRQmHe+z0F1fov5tVvaN4PRDy0EAp AOo/5yI5PB4iNzHjfrZurPuFGNmh4bWcM5cIbCe4mFsDjXS+bJxibO3BAlpgBEFS 6tZogbRtxe8qwL2cReyN3JiNsw/h63t9Ck1SwCjR5Ie+8MC/oE9LVYTPFBwy/pI/ AecZ+51KNiWm4TWhWa7YZutX0L1BNa6Z3xIGnQPii3pWv6DrEgC1X9q5kyqoG0RL x5aBPgpm/NtNuhoffBp/DyRleWd1SyuAi80N+grs8pYXI1wVZJk= -----END CERTIFICATE-----Generated at Fri Sep 25 04:52:46 2026 by rpki-client