$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: x4GvCD1kkHuWuhk9kdllKlaG97DDJaF+91hMqpg4Bms= Subject key identifier: A2:E7:A8:E8:8E:73:87:23:B6:43:45:E2:F1:89:9D:FE:76:13:E5:C7 Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 110881987FA63CF8E12E7337B24A8594FCE6EDAB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: 10 Signing time: Wed 13 May 2026 06:54:38 +0000 Manifest this update: Wed 13 May 2026 06:49:38 +0000 Manifest next update: Thu 14 May 2026 09:31:38 +0000 Files and hashes: 1: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: +KKQ3RF+oacuyUTB/h28fPOT38JC4YibL07loDBav2c=) 2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:08:81:98:7f:a6:3c:f8:e1:2e:73:37:b2:4a:85:94:fc:e6:ed:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: May 13 06:49:38 2026 GMT Not After : May 14 09:31:38 2026 GMT Subject: CN=A2E7A8E88E738723B64345E2F1899DFE7613E5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:4b:a1:1d:c4:83:ac:58:9f:8d:52:74:14: 86:78:f9:e5:9e:42:13:3c:4c:9e:e1:2c:d3:4e:cf: 27:df:9e:2b:46:52:71:03:fc:ba:3b:cd:18:59:4d: f3:f5:43:ad:0d:eb:27:9d:42:34:64:02:e7:aa:e5: e1:38:3c:55:30:51:31:2b:f6:8f:c4:78:aa:d5:02: 9b:d5:dd:7e:84:9e:aa:8f:6f:ad:c8:a6:02:ec:b8: ab:4c:62:b6:6b:19:b4:28:f0:ad:49:48:2f:5c:51: 57:e4:be:bc:2d:64:d0:d9:b6:54:02:db:99:aa:2a: e3:b0:9a:d7:20:2c:05:11:f8:4a:52:ab:e5:cc:80: c2:71:23:d8:86:f5:10:4b:c9:6a:f0:7c:ba:85:5b: 3f:05:83:3e:f4:83:45:65:f9:38:45:52:cc:db:c7: c1:06:ee:c5:52:02:c4:de:ae:e4:b8:b8:67:41:a7: 12:bb:1e:05:ed:46:3e:66:ab:0f:91:34:36:6f:40: 65:70:af:ab:81:ec:6e:22:de:f8:8c:e2:b1:bb:99: 5f:28:d8:39:d7:99:56:7b:08:5e:0c:a4:3f:c0:1c: ce:03:e3:be:c8:b1:60:56:35:13:28:85:d2:0b:b5: a4:51:1c:30:99:8b:72:7b:cb:22:0c:8f:d3:e4:cc: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:A8:E8:8E:73:87:23:B6:43:45:E2:F1:89:9D:FE:76:13:E5:C7 X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:37:11:68:53:4d:d7:f2:a1:a5:5f:f6:23:ab:59:2a:de:9a: 3b:32:a4:0c:4f:7a:f1:c4:8a:ec:45:5a:ff:69:ae:ca:3e:c0: ca:6f:91:6a:63:8b:57:48:b3:ae:04:8d:56:87:2e:15:36:8e: cd:ce:8d:ed:0b:ed:b4:17:be:70:37:9b:c2:d4:26:91:ef:2c: 06:fa:43:5c:46:63:b6:d4:b0:b8:b9:df:a3:26:89:3c:4f:63: 51:2c:e4:d6:87:70:d7:67:1f:cb:3d:8c:b2:cc:a1:70:41:f9: 57:64:e3:73:5f:f8:a8:40:3a:1f:7e:70:39:32:c1:7f:40:b4: 12:3a:9b:62:4a:b2:ad:02:c8:0c:2a:e5:bc:17:30:6f:a9:73: 29:c5:21:9c:84:39:69:e6:8a:f7:2a:4b:f9:47:e5:b3:28:ee: 5d:4c:67:64:ed:bc:97:0a:89:09:fc:0a:2f:a6:bb:42:6c:bc: 05:6e:c4:97:f7:3f:78:63:dd:6a:38:88:ab:e9:f3:e7:f6:7e: bb:17:ce:49:a9:6f:10:9a:24:79:2a:68:61:0f:dd:2e:1d:f0: 30:a4:28:12:6c:8c:c7:47:b2:79:34:66:a0:93:de:48:c3:23: 40:84:81:0d:d9:36:8e:be:a2:ab:2b:2c:8a:3e:d2:8f:16:2c: a5:cc:05:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQiBmH+mPPjhLnM3skqFlPzm7aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjA1MTMwNjQ5MzhaFw0yNjA1MTQwOTMxMzhaMDMxMTAvBgNV BAMTKEEyRTdBOEU4OEU3Mzg3MjNCNjQzNDVFMkYxODk5REZFNzYxM0U1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9kuhHcSDrFifjVJ0FIZ4+eWe QhM8TJ7hLNNOzyffnitGUnED/Lo7zRhZTfP1Q60N6yedQjRkAueq5eE4PFUwUTEr 9o/EeKrVApvV3X6EnqqPb63IpgLsuKtMYrZrGbQo8K1JSC9cUVfkvrwtZNDZtlQC 25mqKuOwmtcgLAUR+EpSq+XMgMJxI9iG9RBLyWrwfLqFWz8Fgz70g0Vl+ThFUszb x8EG7sVSAsTeruS4uGdBpxK7HgXtRj5mqw+RNDZvQGVwr6uB7G4i3viM4rG7mV8o 2DnXmVZ7CF4MpD/AHM4D477IsWBWNRMohdILtaRRHDCZi3J7yyIMj9PkzACDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoueo6I5zhyO2Q0Xi8Ymd/nYT5ccwHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA3EWhTTdfyoaVf9iOrWSremjsypAxPevHE iuxFWv9prso+wMpvkWpji1dIs64EjVaHLhU2js3Oje0L7bQXvnA3m8LUJpHvLAb6 Q1xGY7bUsLi536MmiTxPY1Es5NaHcNdnH8s9jLLMoXBB+Vdk43Nf+KhAOh9+cDky wX9AtBI6m2JKsq0CyAwq5bwXMG+pcynFIZyEOWnmivcqS/lH5bMo7l1MZ2TtvJcK iQn8Ci+mu0JsvAVuxJf3P3hj3Wo4iKvp8+f2frsXzkmpbxCaJHkqaGEP3S4d8DCk KBJsjMdHsnk0ZqCT3kjDI0CEgQ3ZNo6+oqsrLIo+0o8WLKXMBS4= -----END CERTIFICATE-----Generated at Wed May 13 13:00:55 2026 by rpki-client