$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: w+J4mqNMIF8JtlRCXrHWbx1fEY0xWAs2U8qrZfoaJUY= Subject key identifier: 20:1D:49:3D:C6:E2:5E:4C:48:95:0F:A4:FF:55:C6:EE:F3:D4:21:4B Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 2CD3653F41A17582514818354B7DB3F7BA84B824 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:44 +0000 Manifest this update: Tue 12 May 2026 19:30:44 +0000 Manifest next update: Wed 13 May 2026 22:24:44 +0000 Files and hashes: 1: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 2: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 3: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: cufrtPU3pIk4HoNjaODAb+mUVENQcPJyn8O8uk8v5QI=) 4: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 5: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 6: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d3:65:3f:41:a1:75:82:51:48:18:35:4b:7d:b3:f7:ba:84:b8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: May 12 19:30:44 2026 GMT Not After : May 13 22:24:44 2026 GMT Subject: CN=201D493DC6E25E4C48950FA4FF55C6EEF3D4214B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:0a:6a:58:e0:cd:ce:0f:f0:84:ae:d2:ec: 22:d2:4d:f6:ce:f2:21:af:55:f2:df:b0:59:a7:c2: 2c:a3:7b:3b:0b:c9:6b:52:d0:58:24:4d:a4:90:61: c1:28:93:5a:6c:b7:d1:ff:ff:a8:4c:b2:51:27:a1: 5e:b0:ec:cd:f1:8a:2d:c4:10:e1:6d:42:80:ed:3e: bb:e6:2b:a2:a2:88:0b:4e:28:7a:ae:c0:3b:7e:3b: 1a:0c:dc:a7:5c:f8:7b:c3:82:23:3b:e0:ab:66:2c: af:9b:8c:54:85:44:fc:e4:02:5f:c6:bb:58:35:ac: ad:8a:87:de:18:0f:69:47:4c:9b:dc:03:d3:21:f9: d3:90:9e:c3:b2:2c:7d:ac:5f:fe:3d:68:ee:16:7f: f7:71:cd:73:a4:fe:b7:63:2a:e6:f9:56:2b:8d:b8: da:55:24:e6:e8:08:df:4d:f6:a3:21:7e:27:48:5b: 18:b3:f4:21:b1:fb:96:9d:3a:28:cc:05:de:dd:42: d0:5d:0e:cf:87:e4:10:46:52:21:49:3e:ae:69:8e: 8c:66:c7:60:4e:82:f5:d5:fa:0d:7d:ce:ec:e7:61: e0:a7:f0:d6:35:6c:99:f1:c7:77:6d:65:f9:b8:6f: a5:41:98:9f:37:58:ee:4a:a8:d4:55:61:37:75:7e: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:49:3D:C6:E2:5E:4C:48:95:0F:A4:FF:55:C6:EE:F3:D4:21:4B X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:92:bb:6f:ed:03:b7:f1:4f:ea:30:3e:8f:d2:b5:20:12:a2: 6a:c5:05:61:35:b3:86:cc:5e:fc:fe:73:9d:2a:fa:79:66:d2: 0f:5d:75:6d:e8:0b:09:2a:5d:75:cd:98:86:35:07:50:48:d6: d1:c0:9b:b0:d0:60:a2:c3:de:5a:25:5f:a7:d9:20:54:f3:c5: 8f:83:07:be:c4:ba:dc:57:d7:cc:83:28:7c:92:12:5b:db:fe: ad:a2:c2:23:67:37:48:b3:46:4c:49:45:55:79:6c:47:fc:59: 2c:f0:95:6e:b7:ef:da:a6:c0:5a:7e:ca:3d:7a:c1:4b:84:b8: 49:ea:49:87:b3:42:23:ef:26:fc:39:99:20:57:65:4a:27:e0: 15:76:b6:f8:b6:5d:24:18:af:a0:29:e7:29:7a:99:80:ff:b6: 53:8c:29:37:fb:36:9b:66:d3:ec:19:c4:8a:52:8e:23:3a:83: 65:84:91:93:a5:a1:6c:49:15:07:7d:96:4a:ec:f3:33:cd:b5: d5:ab:8f:0d:a8:83:56:7b:bf:68:0a:89:6c:c3:14:31:ae:6a: 2d:31:5a:51:56:45:e6:24:14:19:29:ad:56:58:da:0e:d2:c3: e2:51:3c:34:bb:b0:12:5c:1b:b4:de:76:f2:c4:2a:4b:c3:97: 3c:2c:44:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNNlP0GhdYJRSBg1S32z97qEuCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA1MTIxOTMwNDRaFw0yNjA1MTMyMjI0NDRaMDMxMTAvBgNV BAMTKDIwMUQ0OTNEQzZFMjVFNEM0ODk1MEZBNEZGNTVDNkVFRjNENDIxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYgpqWODNzg/whK7S7CLSTfbO 8iGvVfLfsFmnwiyjezsLyWtS0FgkTaSQYcEok1pst9H//6hMslEnoV6w7M3xii3E EOFtQoDtPrvmK6KiiAtOKHquwDt+OxoM3Kdc+HvDgiM74KtmLK+bjFSFRPzkAl/G u1g1rK2Kh94YD2lHTJvcA9Mh+dOQnsOyLH2sX/49aO4Wf/dxzXOk/rdjKub5ViuN uNpVJOboCN9N9qMhfidIWxiz9CGx+5adOijMBd7dQtBdDs+H5BBGUiFJPq5pjoxm x2BOgvXV+g19zuznYeCn8NY1bJnxx3dtZfm4b6VBmJ83WO5KqNRVYTd1fsftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIB1JPcbiXkxIlQ+k/1XG7vPUIUswHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGSu2/tA7fxT+owPo/StSASomrFBWE1s4bM Xvz+c50q+nlm0g9ddW3oCwkqXXXNmIY1B1BI1tHAm7DQYKLD3lolX6fZIFTzxY+D B77EutxX18yDKHySElvb/q2iwiNnN0izRkxJRVV5bEf8WSzwlW6379qmwFp+yj16 wUuEuEnqSYezQiPvJvw5mSBXZUon4BV2tvi2XSQYr6Ap5yl6mYD/tlOMKTf7Nptm 0+wZxIpSjiM6g2WEkZOloWxJFQd9lkrs8zPNtdWrjw2og1Z7v2gKiWzDFDGuai0x WlFWReYkFBkprVZY2g7Sw+JRPDS7sBJcG7TedvLEKkvDlzwsRCc= -----END CERTIFICATE-----Generated at Tue May 12 22:52:26 2026 by rpki-client