$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: FpHE1+j/r0V8+ySDLboRJXGp6CXRti1ZuOlF0GBLdyc= Subject key identifier: 52:CC:FA:4D:34:29:E0:63:D6:25:42:A5:B7:B0:1B:2F:28:AA:DB:7F Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 1AC6E30C720E1E02125FE85E7410BC50A31A8920 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:18:45 +0000 Manifest this update: Thu 23 Jul 2026 19:13:45 +0000 Manifest next update: Fri 24 Jul 2026 21:13:45 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) 2: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: vpslHFKe+J/7xXPGgmDWI2YU4hFwCD6LLvhpO3lyB9M=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c6:e3:0c:72:0e:1e:02:12:5f:e8:5e:74:10:bc:50:a3:1a:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: Jul 23 19:13:45 2026 GMT Not After : Jul 24 21:13:45 2026 GMT Subject: CN=52CCFA4D3429E063D62542A5B7B01B2F28AADB7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:ce:2e:3a:7f:48:f2:71:47:7c:c0:04:2b: de:d7:15:d3:db:2c:48:6d:dd:8a:7d:a8:96:0e:99: a3:83:4c:66:90:7c:bd:8a:4a:a1:e4:8f:57:e8:3e: d1:b2:bf:70:ed:21:fd:a5:3f:4f:6f:a0:b5:29:45: e4:12:8f:a0:ad:6c:ac:b3:23:30:1c:7b:0a:1c:57: a1:40:8a:1e:d6:f6:b0:e2:56:7d:e6:6e:c4:16:75: f9:21:51:3f:a6:3b:73:96:1a:3f:e8:d2:fb:32:e3: 16:3a:de:13:5b:c8:4a:72:92:ed:3a:80:3a:f3:92: d4:ea:b9:4d:6e:65:30:08:20:41:4c:34:1f:18:66: af:99:bd:bb:70:0d:83:32:fe:4f:61:c6:84:e6:e7: 7f:9c:aa:45:2f:dd:25:ea:10:48:f7:89:e8:6b:43: a3:08:d8:3c:42:b1:28:83:b2:5a:56:fd:12:5b:35: df:7a:9a:dd:1a:64:5a:4a:d9:71:bd:d7:ad:a7:74: c9:32:59:f7:bf:fe:61:23:d5:15:66:d1:8d:f5:75: c9:12:dc:be:6a:45:60:a4:cf:ec:92:1f:fb:87:76: 33:fe:ce:b8:0a:62:8c:07:a1:cc:04:e2:a5:f5:e6: 45:94:1b:99:97:10:2c:d6:af:41:c7:cc:ef:68:7a: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:FA:4D:34:29:E0:63:D6:25:42:A5:B7:B0:1B:2F:28:AA:DB:7F X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:82:45:c3:0e:0f:d3:e7:e2:8f:1a:f7:bb:f5:f9:10:9d:da: 4c:9e:90:9e:bf:e2:8b:68:3a:e3:84:51:52:f2:85:09:d4:31: 73:67:b2:6c:c9:d2:c8:05:66:b4:a9:13:ff:69:ed:a1:26:e6: 53:6e:e3:ae:ea:a5:18:c5:f8:08:28:1f:44:9a:88:dd:d8:d5: a4:5f:07:d5:75:f2:af:c7:89:61:c9:e4:f6:5a:29:e1:99:7c: 95:fc:86:f8:ab:25:2d:dd:39:b0:a8:7f:22:e1:96:00:7d:e7: eb:36:76:9d:7b:f2:5a:7e:85:a9:bd:6c:19:f4:a5:51:f4:1a: 45:61:77:73:3e:37:fc:ae:d0:16:b3:b9:0c:87:4c:f4:b2:3a: 69:33:0b:31:34:21:14:51:81:95:e2:e4:d2:50:1f:c4:36:49: 4d:5d:e3:98:8e:42:46:cb:fd:32:86:ba:f5:ca:de:fe:7f:00: 78:b8:ac:bd:31:11:36:dc:d5:3e:01:69:70:9d:9a:19:22:49: d1:76:47:f4:0c:42:92:47:e6:96:21:8f:4f:a3:e6:0c:02:eb: 2a:12:3a:ff:75:ef:ae:8f:fb:c4:ba:f8:50:5d:cd:29:03:3b: 1f:72:20:3f:29:87:2f:ae:b9:28:b3:de:4e:d4:51:15:cf:c5: 06:2f:0c:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsbjDHIOHgISX+hedBC8UKMaiSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjA3MjMxOTEzNDVaFw0yNjA3MjQyMTEzNDVaMDMxMTAvBgNV BAMTKDUyQ0NGQTREMzQyOUUwNjNENjI1NDJBNUI3QjAxQjJGMjhBQURCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0584uOn9I8nFHfMAEK97XFdPb LEht3Yp9qJYOmaODTGaQfL2KSqHkj1foPtGyv3DtIf2lP09voLUpReQSj6CtbKyz IzAcewocV6FAih7W9rDiVn3mbsQWdfkhUT+mO3OWGj/o0vsy4xY63hNbyEpyku06 gDrzktTquU1uZTAIIEFMNB8YZq+ZvbtwDYMy/k9hxoTm53+cqkUv3SXqEEj3iehr Q6MI2DxCsSiDslpW/RJbNd96mt0aZFpK2XG9162ndMkyWfe//mEj1RVm0Y31dckS 3L5qRWCkz+ySH/uHdjP+zrgKYowHocwE4qX15kWUG5mXECzWr0HHzO9oeh91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsz6TTQp4GPWJUKlt7AbLyiq238wHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGCRcMOD9Pn4o8a97v1+RCd2kyekJ6/4oto OuOEUVLyhQnUMXNnsmzJ0sgFZrSpE/9p7aEm5lNu467qpRjF+AgoH0SaiN3Y1aRf B9V18q/HiWHJ5PZaKeGZfJX8hvirJS3dObCofyLhlgB95+s2dp178lp+ham9bBn0 pVH0GkVhd3M+N/yu0BazuQyHTPSyOmkzCzE0IRRRgZXi5NJQH8Q2SU1d45iOQkbL /TKGuvXK3v5/AHi4rL0xETbc1T4BaXCdmhkiSdF2R/QMQpJH5pYhj0+j5gwC6yoS Ov91766P+8S6+FBdzSkDOx9yID8phy+uuSiz3k7UURXPxQYvDEg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:29:50 2026 by rpki-client