$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: MdSEuI+ZLEmAumwfWGvfjfUmjkRDvfWLCIk1ANSzot8= Subject key identifier: 34:9D:F5:11:A5:E7:B4:C8:10:B5:CC:16:8E:2B:33:77:8C:9B:57:3D Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 05D5F5975535B5683A80255728F9A3D02D297EC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:15:05 +0000 Manifest this update: Thu 23 Jul 2026 12:10:05 +0000 Manifest next update: Fri 24 Jul 2026 14:54:05 +0000 Files and hashes: 1: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 2: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 4: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 6: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: dS9I7g9tJi+eL7a8zoMRyN7HI9ZGEtoLtX4DuMgcSe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d5:f5:97:55:35:b5:68:3a:80:25:57:28:f9:a3:d0:2d:29:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Jul 23 12:10:05 2026 GMT Not After : Jul 24 14:54:05 2026 GMT Subject: CN=349DF511A5E7B4C810B5CC168E2B33778C9B573D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:a9:50:3f:3a:b7:9d:11:8a:03:1c:7c:1e: b2:e8:31:3b:9a:99:e5:95:f9:c0:69:28:08:f6:48: 6b:84:5e:2a:f5:47:29:ee:6e:37:1e:26:e7:cb:9b: d4:00:14:d3:8e:85:22:9f:9d:1a:42:a6:40:0a:9d: a4:0d:39:fe:2e:d3:92:78:45:60:02:c8:7a:a5:20: e6:01:c0:0e:9a:ba:12:d4:39:6e:9c:e3:f2:92:93: e8:fe:8f:82:49:cf:ad:22:73:c3:d5:c1:1f:e9:cc: 04:6d:0a:28:7c:2a:b9:f3:62:dc:90:5e:c0:ae:2e: 52:e3:5a:03:e5:75:53:2c:11:e8:15:9f:f9:8c:6f: b1:c2:34:dc:ab:77:c1:6d:0e:f0:93:cc:69:96:ee: 6c:9c:06:68:7f:25:c8:bf:59:fe:fd:58:63:68:ec: 87:48:3b:65:01:85:5e:f9:8d:ea:22:fc:f1:db:6a: 92:ae:e4:50:2b:31:c5:5d:51:1a:04:8c:5b:02:8e: 98:bb:d1:5d:b9:bd:59:21:f6:8c:95:57:78:b1:84: 7a:98:43:44:54:40:48:cd:7e:6f:ad:bf:b1:0d:fe: 52:23:1d:65:5d:93:b4:95:3a:0f:d9:ad:1b:de:7a: 11:e6:82:7a:36:f2:2a:d7:f4:b9:78:7b:f4:72:83: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9D:F5:11:A5:E7:B4:C8:10:B5:CC:16:8E:2B:33:77:8C:9B:57:3D X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a4:92:3e:96:6d:57:d6:08:54:fa:11:a9:a8:f2:4e:0c:de: e0:25:19:cd:ec:33:ff:e8:2b:ee:1a:ed:1a:0f:b6:05:0e:7b: 72:cb:a6:d1:5d:f5:cc:01:1b:f2:b8:db:4c:38:4c:23:97:9c: a2:5f:d8:b2:b9:bb:fb:03:5a:9f:99:a2:77:6d:45:f0:fb:aa: 42:78:3e:cd:29:2d:67:64:05:09:69:51:ef:30:6f:9a:08:fb: 7f:c0:14:58:e2:74:6c:b9:a6:9e:89:87:40:53:fb:48:aa:57: ef:83:e4:18:26:7d:81:58:51:90:81:2b:68:7f:3e:9c:33:cd: dc:c7:20:9f:ed:4d:fe:d9:08:47:5c:9f:46:17:8c:dc:9e:88: 53:d9:be:ef:cf:4a:c3:cd:ef:2a:11:b2:42:c9:e1:f5:bd:24: f9:e7:3c:a8:4e:67:4e:01:01:2f:41:ae:2b:a2:a9:f7:63:4f: cd:00:08:04:04:42:50:df:a5:52:3f:4e:54:54:e0:c5:1f:64: 8d:3c:15:3d:cf:ff:32:1c:5b:80:37:29:6b:66:49:08:c2:b8: 46:05:b4:0f:e2:d5:fb:b4:07:ee:a5:f2:43:0f:f3:ab:43:4d: 0b:4b:23:70:26:c6:13:70:14:08:d6:56:58:c8:8a:89:05:cb: 22:e1:95:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdX1l1U1tWg6gCVXKPmj0C0pfsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA3MjMxMjEwMDVaFw0yNjA3MjQxNDU0MDVaMDMxMTAvBgNV BAMTKDM0OURGNTExQTVFN0I0QzgxMEI1Q0MxNjhFMkIzMzc3OEM5QjU3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7KlQPzq3nRGKAxx8HrLoMTua meWV+cBpKAj2SGuEXir1RynubjceJufLm9QAFNOOhSKfnRpCpkAKnaQNOf4u05J4 RWACyHqlIOYBwA6auhLUOW6c4/KSk+j+j4JJz60ic8PVwR/pzARtCih8KrnzYtyQ XsCuLlLjWgPldVMsEegVn/mMb7HCNNyrd8FtDvCTzGmW7mycBmh/Jci/Wf79WGNo 7IdIO2UBhV75jeoi/PHbapKu5FArMcVdURoEjFsCjpi70V25vVkh9oyVV3ixhHqY Q0RUQEjNfm+tv7EN/lIjHWVdk7SVOg/ZrRveehHmgno28irX9Ll4e/Ryg8MhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJ31EaXntMgQtcwWjiszd4ybVz0wHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEikkj6WbVfWCFT6Eamo8k4M3uAlGc3sM//o K+4a7RoPtgUOe3LLptFd9cwBG/K420w4TCOXnKJf2LK5u/sDWp+ZondtRfD7qkJ4 Ps0pLWdkBQlpUe8wb5oI+3/AFFjidGy5pp6Jh0BT+0iqV++D5BgmfYFYUZCBK2h/ PpwzzdzHIJ/tTf7ZCEdcn0YXjNyeiFPZvu/PSsPN7yoRskLJ4fW9JPnnPKhOZ04B AS9BriuiqfdjT80ACAQEQlDfpVI/TlRU4MUfZI08FT3P/zIcW4A3KWtmSQjCuEYF tA/i1fu0B+6l8kMP86tDTQtLI3AmxhNwFAjWVljIiokFyyLhlYU= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:42 2026 by rpki-client