$ rpki-client -vvf rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft File: BE64AB23612B159BE54939807CB20423D340D326.mft (raw, json) Hash identifier: zgUkZib3IMlmZZlG4sbWBqegyrKDq8zMLo0hiwZ5JBU= Subject key identifier: 86:FF:1D:A8:BF:1B:14:D0:57:F7:47:44:79:31:F2:8E:32:F3:68:92 Authority key identifier: BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26 Certificate issuer: /CN=BE64AB23612B159BE54939807CB20423D340D326 Certificate serial: 40089E37F0D15D4B234EA087780BC2C529984F3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft Manifest number: 0E Signing time: Tue 12 May 2026 13:18:21 +0000 Manifest this update: Tue 12 May 2026 13:13:21 +0000 Manifest next update: Wed 13 May 2026 17:05:21 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: gqKKZqiveBSyuWNd8uxps6/yl/at9bVMTgVKSVDM6XY=) 2: BE64AB23612B159BE54939807CB20423D340D326.crl (hash: vRPstj5aBUA4KluYlofif3EEYxc6nGNz9aVAaaUEomk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:08:9e:37:f0:d1:5d:4b:23:4e:a0:87:78:0b:c2:c5:29:98:4f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE64AB23612B159BE54939807CB20423D340D326 Validity Not Before: May 12 13:13:21 2026 GMT Not After : May 13 17:05:21 2026 GMT Subject: CN=86FF1DA8BF1B14D057F747447931F28E32F36892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:a5:09:3d:ff:e3:6e:11:00:60:d9:b8:6f: 94:16:70:be:25:58:6b:73:2a:8d:ab:36:f5:0f:25: 8e:e0:f0:ee:f0:99:ea:f3:45:5a:1f:30:59:7a:1a: 1f:18:2f:fa:65:fe:a1:fc:87:7f:44:2c:3c:e8:b1: 46:cf:c3:ec:dd:3e:0e:f6:aa:f7:4e:2d:e6:1b:6e: 7b:23:63:86:e2:af:ec:32:c5:fa:cb:7f:09:6c:a5: ff:ba:1a:bb:5c:c1:e0:a8:4a:06:07:da:06:5a:c8: b0:b7:aa:a2:71:dc:c6:7f:98:ea:88:3b:56:5e:89: 48:5f:23:da:bc:f6:50:19:97:e5:3b:b8:5a:60:5a: 50:04:90:86:6a:d8:19:ce:38:90:b7:7b:85:5c:14: 56:f5:c1:f6:14:22:8e:ed:d3:dd:fc:2f:8d:3d:57: 74:06:38:36:40:d0:78:da:18:8d:8b:59:9a:fd:fa: fa:da:2c:9d:80:4d:64:9e:e1:df:3f:e0:8a:9f:26: 82:4e:58:7d:f2:a2:34:27:1e:fd:c1:02:71:62:2c: e3:0a:95:c2:29:7f:7d:7d:a4:48:27:31:a1:69:91: 15:0c:9f:99:94:ec:d8:b8:3e:28:46:05:40:ea:65: 17:72:2c:8b:f9:bc:79:7d:75:98:b2:9d:e7:37:e4: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:1D:A8:BF:1B:14:D0:57:F7:47:44:79:31:F2:8E:32:F3:68:92 X509v3 Authority Key Identifier: keyid:BE:64:AB:23:61:2B:15:9B:E5:49:39:80:7C:B2:04:23:D3:40:D3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE64AB23612B159BE54939807CB20423D340D326.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/BE64AB23612B159BE54939807CB20423D340D326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:b2:ab:8f:cb:a6:ae:5c:77:fd:6e:f7:ca:7d:fa:6c:93:0e: 2d:71:d4:62:91:39:4e:dc:a7:94:b7:25:ed:04:47:2a:10:0d: 4f:4e:20:75:43:21:ca:53:8f:1a:bd:33:bf:bd:0b:39:a6:dd: 00:50:b6:7a:72:33:09:7a:f3:18:13:df:84:b7:cf:7d:6f:06: 1c:9b:32:b6:53:50:c3:64:87:24:c7:d4:b3:6b:94:c8:3c:3c: 59:72:25:51:ba:07:09:8e:2a:92:90:13:fa:0e:12:75:4c:ad: b8:a0:8b:6e:81:67:c7:47:d3:d1:9d:5f:9f:08:23:37:be:96: 40:40:27:40:c5:1a:c6:c7:b8:e2:6d:b4:a1:0d:0a:c4:9d:a8: 38:42:e2:36:1c:2c:ec:19:b0:43:71:7c:b4:21:fa:e5:ac:c8: c1:67:2b:14:60:c3:c9:25:7e:95:82:00:d3:dd:f6:4e:56:d5: 0f:ea:8d:f6:32:62:fc:86:92:19:10:c0:8b:46:1d:d2:6b:aa: 0a:50:af:b1:01:e7:2d:c5:e6:75:e2:1b:38:9f:02:50:e7:fd: 7b:18:1c:e4:4f:66:ec:03:69:b9:a1:69:e0:ca:48:9d:2c:81: b1:6a:56:ab:45:f6:49:6e:f5:98:98:ba:68:82:7e:5f:b7:2d: 06:3f:c2:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAieN/DRXUsjTqCHeAvCxSmYTz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NEFCMjM2MTJCMTU5QkU1NDkzOTgwN0NCMjA0MjNE MzQwRDMyNjAeFw0yNjA1MTIxMzEzMjFaFw0yNjA1MTMxNzA1MjFaMDMxMTAvBgNV BAMTKDg2RkYxREE4QkYxQjE0RDA1N0Y3NDc0NDc5MzFGMjhFMzJGMzY4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2aUJPf/jbhEAYNm4b5QWcL4l WGtzKo2rNvUPJY7g8O7wmerzRVofMFl6Gh8YL/pl/qH8h39ELDzosUbPw+zdPg72 qvdOLeYbbnsjY4bir+wyxfrLfwlspf+6GrtcweCoSgYH2gZayLC3qqJx3MZ/mOqI O1ZeiUhfI9q89lAZl+U7uFpgWlAEkIZq2BnOOJC3e4VcFFb1wfYUIo7t0938L409 V3QGODZA0HjaGI2LWZr9+vraLJ2ATWSe4d8/4IqfJoJOWH3yojQnHv3BAnFiLOMK lcIpf319pEgnMaFpkRUMn5mU7Ni4PihGBUDqZRdyLIv5vHl9dZiynec35Kh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhv8dqL8bFNBX90dEeTHyjjLzaJIwHwYDVR0j BBgwFoAUvmSrI2ErFZvlSTmAfLIEI9NA0yYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzZkOGEwZmEtNWQ0YS00ODNiLWFmODktMGVmNDBkZWIwNWYzLzAvQkU2NEFCMjM2 MTJCMTU5QkU1NDkzOTgwN0NCMjA0MjNEMzQwRDMyNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY0QUIyMzYxMkIxNTlCRTU0OTM5ODA3Q0IyMDQyM0QzNDBE MzI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQkU2NEFCMjM2MTJCMTU5QkU1NDkzOTgwN0NCMjA0 MjNEMzQwRDMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOyq4/Lpq5cd/1u98p9+myTDi1x1GKROU7c p5S3Je0ERyoQDU9OIHVDIcpTjxq9M7+9Czmm3QBQtnpyMwl68xgT34S3z31vBhyb MrZTUMNkhyTH1LNrlMg8PFlyJVG6BwmOKpKQE/oOEnVMrbigi26BZ8dH09GdX58I Ize+lkBAJ0DFGsbHuOJttKENCsSdqDhC4jYcLOwZsENxfLQh+uWsyMFnKxRgw8kl fpWCANPd9k5W1Q/qjfYyYvyGkhkQwItGHdJrqgpQr7EB5y3F5nXiGzifAlDn/XsY HORPZuwDabmhaeDKSJ0sgbFqVqtF9klu9ZiYumiCfl+3LQY/wiE= -----END CERTIFICATE-----Generated at Wed May 13 01:35:31 2026 by rpki-client