$ rpki-client -vvvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: m/sbHGYiRyM1PAIadeQkFDokyNSxSUSC4B35ZU+Xqdc= Subject key identifier: 3C:55:E9:B4:2A:04:C1:93:55:2E:D9:FB:4E:62:4E:25:7F:A3:13:31 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 032F9E70EA3A1A11FABF5255641E1102C1FD063E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:59:28 +0000 Manifest this update: Wed 23 Sep 2026 18:54:28 +0000 Manifest next update: Thu 24 Sep 2026 21:51:28 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 2: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 4: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 5: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: zoNGAdhFbPKRQYAVAstBGp3090oeFj8gAG0y3qio5Xg=) 6: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2f:9e:70:ea:3a:1a:11:fa:bf:52:55:64:1e:11:02:c1:fd:06:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Sep 23 18:54:28 2026 GMT Not After : Sep 24 21:51:28 2026 GMT Subject: CN=3C55E9B42A04C193552ED9FB4E624E257FA31331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:d1:1d:60:fe:c9:1e:75:c9:cc:38:c9:c7: 17:99:8b:cb:61:3d:28:10:91:8b:00:35:0c:7c:c0: d7:04:87:65:a1:2b:59:0e:2a:29:00:73:bf:52:79: 9e:fd:e2:3b:d1:56:a1:34:c1:d0:20:30:5c:4d:df: 70:6a:e7:f3:a1:ce:e8:34:02:e3:84:d9:d2:93:33: b1:8c:34:4e:16:36:5c:d0:d2:9d:b6:ba:ac:46:5f: da:ac:e5:9a:ae:8c:6b:6d:d4:13:08:ad:1c:eb:14: 77:0d:4d:cf:05:69:51:23:cb:a3:a5:ec:54:aa:5e: 1d:37:21:49:91:78:bc:7d:7a:1f:d4:ff:63:3d:9a: 74:96:a9:b5:11:9c:80:b7:3b:4f:cc:7c:b5:b9:75: a7:8d:9b:e4:bc:e8:a4:c8:a1:96:56:76:4c:42:96: 2b:ca:ee:97:85:12:34:63:a8:ff:b5:07:d6:88:a5: 95:69:72:43:d4:6f:1e:df:38:47:13:c5:b9:5a:08: 6a:af:79:1d:45:d5:64:7e:6f:a2:40:4f:65:ff:53: 47:92:db:fb:0b:56:9b:1a:3f:d2:5d:bf:e5:e4:a7: 47:e5:3c:a9:6b:6f:1b:9f:7a:39:9b:32:da:a2:05: 2e:97:8f:43:64:40:8f:c9:1e:71:65:cc:86:1b:87: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:55:E9:B4:2A:04:C1:93:55:2E:D9:FB:4E:62:4E:25:7F:A3:13:31 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9d:45:54:ab:e1:3a:3c:ba:ea:98:49:44:e7:dc:f0:ef:92: 9a:50:e9:c2:a5:13:33:f3:90:6a:8b:4f:a2:94:f4:af:47:79: 34:4f:23:1b:3f:9e:1c:1a:16:a1:53:ab:36:6b:49:4b:85:13: 1d:7e:e9:41:01:2f:3f:f6:c5:1d:b0:47:b6:9c:3b:3f:9c:5e: 51:36:b8:1d:16:e3:5b:4a:67:1f:72:ba:ce:84:25:ac:45:86: 05:64:ae:78:63:81:55:25:9b:d5:c6:70:f3:39:45:b0:51:f2: 15:a5:e3:ed:0b:af:d5:e5:45:25:16:5d:a7:cf:86:a9:4c:6a: 45:91:7a:40:13:45:63:fd:2c:08:8c:fe:2c:47:cb:03:dd:e0: 8f:f4:d7:26:be:60:7d:45:5b:68:0c:95:64:08:7f:7a:06:c6: 01:33:4f:18:d9:74:0c:b3:a4:f2:82:e8:c0:20:10:df:c9:6f: 74:a6:26:55:28:87:7c:8b:d8:1c:bc:27:5d:fa:2b:d9:2b:0d: 87:5a:ff:1e:74:02:44:6b:e7:3a:93:34:a2:40:73:ff:23:8f: e2:43:c6:1c:18:97:82:4f:f1:88:06:a4:a6:3c:85:dd:6e:d5: 18:84:30:30:89:f2:3a:1e:fd:d1:d5:4e:97:d8:d1:c2:f9:6b: 69:3a:5d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAy+ecOo6GhH6v1JVZB4RAsH9Bj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA5MjMxODU0MjhaFw0yNjA5MjQyMTUxMjhaMDMxMTAvBgNV BAMTKDNDNTVFOUI0MkEwNEMxOTM1NTJFRDlGQjRFNjI0RTI1N0ZBMzEzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC629EdYP7JHnXJzDjJxxeZi8th PSgQkYsANQx8wNcEh2WhK1kOKikAc79SeZ794jvRVqE0wdAgMFxN33Bq5/Ohzug0 AuOE2dKTM7GMNE4WNlzQ0p22uqxGX9qs5ZqujGtt1BMIrRzrFHcNTc8FaVEjy6Ol 7FSqXh03IUmReLx9eh/U/2M9mnSWqbURnIC3O0/MfLW5daeNm+S86KTIoZZWdkxC livK7peFEjRjqP+1B9aIpZVpckPUbx7fOEcTxblaCGqveR1F1WR+b6JAT2X/U0eS 2/sLVpsaP9Jdv+Xkp0flPKlrbxufejmbMtqiBS6Xj0NkQI/JHnFlzIYbh8DVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFXptCoEwZNVLtn7TmJOJX+jEzEwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCdRVSr4To8uuqYSUTn3PDvkppQ6cKlEzPz kGqLT6KU9K9HeTRPIxs/nhwaFqFTqzZrSUuFEx1+6UEBLz/2xR2wR7acOz+cXlE2 uB0W41tKZx9yus6EJaxFhgVkrnhjgVUlm9XGcPM5RbBR8hWl4+0Lr9XlRSUWXafP hqlMakWRekATRWP9LAiM/ixHywPd4I/01ya+YH1FW2gMlWQIf3oGxgEzTxjZdAyz pPKC6MAgEN/Jb3SmJlUoh3yL2By8J136K9krDYda/x50AkRr5zqTNKJAc/8jj+JD xhwYl4JP8YgGpKY8hd1u1RiEMDCJ8joe/dHVTpfY0cL5a2k6XQk= -----END CERTIFICATE-----Generated at Thu Sep 24 05:51:29 2026 by rpki-client