$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json) Hash identifier: 0orM7+kSi/xU/gixlGvd2SPMQdBaNDjFgHAkXBDDcZM= Subject key identifier: FA:7F:35:5C:4F:1E:D0:A6:0B:39:92:F9:16:BC:C9:92:F1:20:44:61 Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Certificate serial: 6BA81652FE74C20A610546B881B30C84E953EC51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:36:28 +0000 Manifest this update: Thu 24 Sep 2026 12:31:28 +0000 Manifest next update: Fri 25 Sep 2026 12:41:28 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=) 2: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: 4X8/b2PJcAv0vDSqcOQg4aNTfZMb7FVeKgnAnO/YIOI=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a8:16:52:fe:74:c2:0a:61:05:46:b8:81:b3:0c:84:e9:53:ec:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Validity Not Before: Sep 24 12:31:28 2026 GMT Not After : Sep 25 12:41:28 2026 GMT Subject: CN=FA7F355C4F1ED0A60B3992F916BCC992F1204461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:4d:7a:9c:07:ed:27:1a:5d:56:31:e0:6a: 40:9d:4c:3e:02:29:82:e4:30:f4:92:1b:8a:b7:dc: f5:92:b5:52:d1:0d:20:73:75:ad:35:2d:6a:47:8c: f8:70:d9:cc:8b:9d:8a:67:66:11:b3:d7:51:d3:68: ca:98:1b:b0:0a:25:2b:72:fe:65:92:56:6a:e2:9c: db:e3:ac:d3:52:cf:64:70:85:53:be:d3:b5:d8:ac: bb:2d:4a:0c:bf:2d:6e:24:99:cb:cb:a0:23:cf:52: f6:7e:20:45:ba:b3:a4:f3:06:b3:98:82:fe:d4:db: ef:40:09:78:fe:8b:c8:77:59:2e:ce:f0:b0:20:45: 21:c8:f2:04:2e:fd:32:a1:06:55:52:74:6e:a9:00: f4:98:d2:79:9d:e0:24:3f:5e:8c:2d:fd:c3:0d:4f: 3d:95:ee:d4:f4:19:0f:42:f5:f5:91:71:89:46:5c: 5a:68:33:be:4b:0e:e3:a5:6d:fd:f3:fd:db:ff:ed: 03:3d:1a:34:2f:fc:e4:3d:9b:cf:f6:b9:9a:25:86: 33:61:b3:c5:ba:f7:c8:f0:3c:d5:1d:c4:fb:f5:ea: 52:f8:2d:14:8a:ca:bb:cf:49:b9:10:5d:6a:69:58: 0b:44:10:0f:d7:26:4c:f0:8c:85:e0:67:7e:c5:03: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:35:5C:4F:1E:D0:A6:0B:39:92:F9:16:BC:C9:92:F1:20:44:61 X509v3 Authority Key Identifier: keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c6:fe:6d:bc:08:87:f6:f0:43:64:2f:05:a4:1e:81:3d:af: a4:02:2f:99:7e:be:58:ce:6b:1a:d4:e2:a7:ed:24:af:39:b4: 5a:fb:d2:c8:e3:de:ac:31:61:af:75:04:32:d4:76:d0:8b:d2: 97:6e:80:45:58:ca:3a:9a:4c:11:4e:35:f9:a6:df:bb:af:67: 89:ed:47:91:17:a5:7a:83:77:bf:12:f9:f2:09:53:44:1e:2a: 9d:75:6f:9b:23:a8:59:9c:a4:e2:6a:ac:9c:55:f9:67:d4:c0: da:61:e0:b9:2d:d7:d2:ce:51:10:6c:ff:96:21:25:bf:e4:c7: 2d:0f:04:eb:31:b0:91:b3:c0:77:9f:38:c4:eb:fa:46:eb:2b: b9:09:9f:0c:7f:ff:ee:25:9c:2f:62:cc:62:f6:eb:3f:4a:1a: 18:2b:7a:96:aa:0e:c6:ad:04:b9:dd:8f:95:16:92:be:69:78: f2:24:8e:00:9f:4f:80:a2:ca:72:a8:66:5a:d8:0b:f5:70:9a: 9f:07:fd:a2:be:dc:98:6e:3e:db:2a:77:80:d5:3c:9e:4c:1b: 38:5e:2b:8e:70:c0:2b:8f:86:ad:89:63:b8:1d:32:72:ad:aa: 92:db:6a:14:4d:95:cc:50:4b:a2:f9:b7:f9:ec:c4:22:cd:6e: 2b:ff:fe:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6gWUv50wgphBUa4gbMMhOlT7FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFFRUND RDFCRjNCMzAeFw0yNjA5MjQxMjMxMjhaFw0yNjA5MjUxMjQxMjhaMDMxMTAvBgNV BAMTKEZBN0YzNTVDNEYxRUQwQTYwQjM5OTJGOTE2QkNDOTkyRjEyMDQ0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYE16nAftJxpdVjHgakCdTD4C KYLkMPSSG4q33PWStVLRDSBzda01LWpHjPhw2cyLnYpnZhGz11HTaMqYG7AKJSty /mWSVmrinNvjrNNSz2RwhVO+07XYrLstSgy/LW4kmcvLoCPPUvZ+IEW6s6TzBrOY gv7U2+9ACXj+i8h3WS7O8LAgRSHI8gQu/TKhBlVSdG6pAPSY0nmd4CQ/Xowt/cMN Tz2V7tT0GQ9C9fWRcYlGXFpoM75LDuOlbf3z/dv/7QM9GjQv/OQ9m8/2uZolhjNh s8W698jwPNUdxPv16lL4LRSKyrvPSbkQXWppWAtEEA/XJkzwjIXgZ37FA1/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+n81XE8e0KYLOZL5FrzJkvEgRGEwHwYDVR0j BBgwFoAUvjgOFAZvjzFAKP0GFbKu7M0b87MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIxOTU1ZjAtNGI0MC00YzNiLTlmZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQw NjZGOEYzMTQwMjhGRDA2MTVCMkFFRUNDRDFCRjNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NEMUJG M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFF RUNDRDFCRjNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfG/m28CIf28ENkLwWkHoE9r6QCL5l+vljO axrU4qftJK85tFr70sjj3qwxYa91BDLUdtCL0pdugEVYyjqaTBFONfmm37uvZ4nt R5EXpXqDd78S+fIJU0QeKp11b5sjqFmcpOJqrJxV+WfUwNph4Lkt19LOURBs/5Yh Jb/kxy0PBOsxsJGzwHefOMTr+kbrK7kJnwx//+4lnC9izGL26z9KGhgrepaqDsat BLndj5UWkr5pePIkjgCfT4CiynKoZlrYC/Vwmp8H/aK+3JhuPtsqd4DVPJ5MGzhe K45wwCuPhq2JY7gdMnKtqpLbahRNlcxQS6L5t/nsxCLNbiv//qU= -----END CERTIFICATE-----Generated at Thu Sep 24 20:35:15 2026 by rpki-client