$ rpki-client -vvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json) Hash identifier: 8wM8KMe3yOMcUTKPNlj6OQ0WeHtpreb+krZ9VNavOWI= Subject key identifier: 92:F9:A1:34:AD:F2:66:C3:BC:B7:D6:E0:3D:86:A4:15:F2:C4:F1:41 Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Certificate serial: 43F53799F4E24605B9DBDF5820C3CE212687CBDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:28:30 +0000 Manifest this update: Tue 12 May 2026 13:23:30 +0000 Manifest next update: Wed 13 May 2026 13:45:30 +0000 Files and hashes: 1: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: 1XUEirvgVYG9WiZ4BRPyg+ws2e/ntudgfH8aNRcsSUE=) 2: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f5:37:99:f4:e2:46:05:b9:db:df:58:20:c3:ce:21:26:87:cb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Validity Not Before: May 12 13:23:30 2026 GMT Not After : May 13 13:45:30 2026 GMT Subject: CN=92F9A134ADF266C3BCB7D6E03D86A415F2C4F141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:4a:20:b2:7b:b4:eb:81:8b:4a:40:9b:e3: c1:ee:e3:4d:50:ce:dd:ce:f6:a8:ef:87:e3:6b:7a: 73:53:7e:ae:78:df:cb:71:4c:33:49:ff:e8:65:52: 41:63:d9:7b:c9:e5:95:05:d1:17:35:e2:44:1d:60: c0:4d:0e:87:c1:b8:ad:d1:49:ea:ec:d6:a5:f1:b8: 8e:45:a3:5f:ed:18:d5:75:6b:26:b0:f8:d5:9d:89: 4f:3a:c9:8c:cd:64:9b:3b:6d:6b:fd:3b:bb:91:0b: 7b:ab:8a:60:f1:2f:11:a2:86:10:a5:dd:4e:1a:10: 70:79:72:a4:94:15:a2:ef:4d:01:a8:8e:c1:62:c1: 81:83:3e:e4:23:68:00:0e:c3:d9:f0:09:39:4b:14: 61:7d:06:71:a4:e6:68:56:0b:d5:ce:cb:79:72:07: d5:71:47:e2:59:7e:39:73:ba:93:66:13:5f:9f:99: 0f:e3:f1:9c:30:44:e1:17:20:4c:22:98:c3:89:f9: 4e:6c:b7:cf:df:1c:ee:6e:39:d8:68:62:b2:79:96: 37:5d:b8:6c:98:27:f1:b3:51:6b:f0:94:e2:3c:19: 06:1c:4f:ee:11:d4:e8:81:5d:7a:75:9e:ae:f3:07: a1:b9:ce:61:6e:64:bc:bd:32:ac:7a:ea:a3:db:22: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F9:A1:34:AD:F2:66:C3:BC:B7:D6:E0:3D:86:A4:15:F2:C4:F1:41 X509v3 Authority Key Identifier: keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d9:f6:47:d7:2b:be:82:de:f1:12:38:77:c0:b0:cc:95:60: a6:58:2a:66:81:a2:eb:8f:f4:10:32:bc:f7:b4:ee:da:38:68: de:cb:26:ae:42:1d:60:43:cb:33:44:50:7f:e4:32:40:0f:3a: 54:e9:cb:5f:9b:44:8d:e6:f5:b0:11:94:2c:97:98:0f:29:0e: 5a:d9:12:4e:69:c4:c5:89:91:57:1f:b8:f8:ff:ee:2a:61:b2: a2:3f:41:f2:10:39:94:f3:01:cc:68:fa:44:cb:c1:2a:7c:dc: 83:f7:62:a2:84:c7:12:1c:fd:9b:9c:06:52:e6:bf:88:5b:bf: af:5f:b7:fd:de:b2:b3:b2:27:9f:45:74:bf:a4:f6:42:49:82: 45:1d:72:e5:0e:18:fb:f6:0e:09:7a:4d:43:e9:dc:cf:13:e5: b8:8c:50:fb:4c:95:95:cb:dd:68:73:dc:67:a1:ef:f4:34:f5: 92:cb:12:19:9e:91:22:e4:8a:cf:cb:f2:87:17:a7:ba:f5:e8: 05:c6:8a:d1:08:b5:f7:1d:96:24:70:5b:21:23:8c:9d:bb:09: 5d:b6:d7:05:52:e1:b1:a2:9b:c1:09:a9:67:02:c0:86:10:33: d7:eb:45:65:f5:1b:64:5c:43:91:a1:4b:44:bc:8c:56:be:41: 19:02:32:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/U3mfTiRgW5299YIMPOISaHy9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFFRUND RDFCRjNCMzAeFw0yNjA1MTIxMzIzMzBaFw0yNjA1MTMxMzQ1MzBaMDMxMTAvBgNV BAMTKDkyRjlBMTM0QURGMjY2QzNCQ0I3RDZFMDNEODZBNDE1RjJDNEYxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lUogsnu064GLSkCb48Hu401Q zt3O9qjvh+NrenNTfq5438txTDNJ/+hlUkFj2XvJ5ZUF0Rc14kQdYMBNDofBuK3R Sers1qXxuI5Fo1/tGNV1ayaw+NWdiU86yYzNZJs7bWv9O7uRC3urimDxLxGihhCl 3U4aEHB5cqSUFaLvTQGojsFiwYGDPuQjaAAOw9nwCTlLFGF9BnGk5mhWC9XOy3ly B9VxR+JZfjlzupNmE1+fmQ/j8ZwwROEXIEwimMOJ+U5st8/fHO5uOdhoYrJ5ljdd uGyYJ/GzUWvwlOI8GQYcT+4R1OiBXXp1nq7zB6G5zmFuZLy9Mqx66qPbItndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvmhNK3yZsO8t9bgPYakFfLE8UEwHwYDVR0j BBgwFoAUvjgOFAZvjzFAKP0GFbKu7M0b87MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIxOTU1ZjAtNGI0MC00YzNiLTlmZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQw NjZGOEYzMTQwMjhGRDA2MTVCMkFFRUNDRDFCRjNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NEMUJG M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFF RUNDRDFCRjNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzZ9kfXK76C3vESOHfAsMyVYKZYKmaBouuP 9BAyvPe07to4aN7LJq5CHWBDyzNEUH/kMkAPOlTpy1+bRI3m9bARlCyXmA8pDlrZ Ek5pxMWJkVcfuPj/7iphsqI/QfIQOZTzAcxo+kTLwSp83IP3YqKExxIc/ZucBlLm v4hbv69ft/3esrOyJ59FdL+k9kJJgkUdcuUOGPv2Dgl6TUPp3M8T5biMUPtMlZXL 3Whz3Geh7/Q09ZLLEhmekSLkis/L8ocXp7r16AXGitEItfcdliRwWyEjjJ27CV22 1wVS4bGim8EJqWcCwIYQM9frRWX1G2RcQ5GhS0S8jFa+QRkCMr4= -----END CERTIFICATE-----Generated at Tue May 12 22:50:00 2026 by rpki-client