$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: lrwrQdJLihpu1FSi3MwvZ9n6s8k8CCfN+72jXK6zC9k= Subject key identifier: DE:1C:EB:C2:04:85:1F:2D:A9:59:54:6A:74:BF:0D:EB:25:4A:A2:D6 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 2AFDED281CBD9A37C56AB70E5C46D88524975A93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 09:39:57 +0000 Manifest this update: Fri 17 Jul 2026 09:34:57 +0000 Manifest next update: Sat 18 Jul 2026 10:36:57 +0000 Files and hashes: 1: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: c9FwcRHKzpIVbuaidwAA38meEDr4nk0s6JQlMry+RM4=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 10:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fd:ed:28:1c:bd:9a:37:c5:6a:b7:0e:5c:46:d8:85:24:97:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Jul 17 09:34:57 2026 GMT Not After : Jul 18 10:36:57 2026 GMT Subject: CN=DE1CEBC204851F2DA959546A74BF0DEB254AA2D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:64:cc:d6:93:54:d3:cb:a4:78:76:5a:18: 8b:9e:ba:a1:e3:fa:33:22:b0:2e:f9:14:8e:e2:77: b3:24:19:84:ce:68:68:8c:49:1c:a2:51:fa:0d:f7: 48:89:4c:e4:ec:40:87:5b:27:6b:9f:4d:63:ce:d1: ae:d2:ba:cb:a0:c0:30:2c:f6:8d:e5:3a:41:cd:df: c4:8c:ab:52:5c:0d:a6:f4:44:f6:23:fc:b2:ea:e9: db:b6:db:18:c0:46:0a:57:49:2b:5f:6b:92:aa:1c: 0e:01:ba:a9:3b:ec:fd:05:70:b5:7a:93:a1:c6:bc: d3:9a:53:f9:0d:63:69:bc:82:3d:81:31:84:2c:0d: 29:c8:36:3b:8c:12:a4:f7:3b:e2:22:a5:d1:cf:34: d7:2c:95:d0:4e:80:c1:2f:8d:0c:b5:41:45:db:05: 94:08:8f:e2:8b:fa:bd:0a:3f:0e:41:17:86:ac:06: 0e:16:d7:f9:98:3a:bc:61:d7:52:a8:38:31:e8:c9: f4:1f:50:cd:a5:25:04:f2:d9:b4:f2:87:45:50:db: c0:ce:2e:a7:6f:00:0f:f1:38:f9:6c:6a:45:d9:3c: 39:6d:34:77:58:f6:04:05:1d:b5:68:7f:fd:9d:41: 13:f6:97:73:69:52:91:28:82:73:63:65:d9:e7:df: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1C:EB:C2:04:85:1F:2D:A9:59:54:6A:74:BF:0D:EB:25:4A:A2:D6 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:40:08:a8:62:81:d0:9a:e2:e1:d0:d0:2a:a2:19:89:24:a3: 44:8e:e7:0f:ab:68:e4:57:60:dc:ba:fb:e3:81:62:d1:cd:90: 75:8b:a0:09:e9:78:4f:50:6e:ca:85:86:8a:f3:c0:bc:62:46: 43:42:c8:d9:3a:35:04:c6:ce:f8:0e:d0:cf:3e:94:7d:4f:e7: 31:09:af:c6:bd:f9:ae:b9:29:15:f3:10:64:ad:f7:5d:b3:05: 63:97:20:f0:93:7e:6f:99:a6:45:52:5f:92:93:6b:1d:9b:9f: 6b:a8:94:7d:2e:65:93:cc:7a:5e:18:c9:a4:84:8f:0b:61:3f: 29:49:36:d7:4a:78:dc:26:8a:bb:0b:3b:4b:ed:53:84:95:34: fb:19:7e:ef:06:a2:30:d5:c6:82:56:c1:41:e6:04:12:93:f3: 5b:0c:8b:06:e3:9a:f2:d3:6f:05:36:fc:ba:93:4f:2b:b3:19: 31:a1:b5:ff:3d:0e:0e:bb:2e:e6:6e:e0:97:22:1b:f3:0b:ef: 3e:aa:80:be:33:84:9f:e0:a6:da:d5:c4:98:96:26:e2:b1:fc: a6:ab:16:1f:5f:06:6e:9e:6c:6e:97:ce:a5:1c:26:6d:71:c7: 57:54:83:71:ab:0a:47:76:1f:9e:11:2d:dd:4d:24:ce:25:2c: 58:81:94:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKv3tKBy9mjfFarcOXEbYhSSXWpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA3MTcwOTM0NTdaFw0yNjA3MTgxMDM2NTdaMDMxMTAvBgNV BAMTKERFMUNFQkMyMDQ4NTFGMkRBOTU5NTQ2QTc0QkYwREVCMjU0QUEyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXmTM1pNU08ukeHZaGIueuqHj +jMisC75FI7id7MkGYTOaGiMSRyiUfoN90iJTOTsQIdbJ2ufTWPO0a7SusugwDAs 9o3lOkHN38SMq1JcDab0RPYj/LLq6du22xjARgpXSStfa5KqHA4Buqk77P0FcLV6 k6HGvNOaU/kNY2m8gj2BMYQsDSnINjuMEqT3O+IipdHPNNcsldBOgMEvjQy1QUXb BZQIj+KL+r0KPw5BF4asBg4W1/mYOrxh11KoODHoyfQfUM2lJQTy2bTyh0VQ28DO LqdvAA/xOPlsakXZPDltNHdY9gQFHbVof/2dQRP2l3NpUpEognNjZdnn32JDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hzrwgSFHy2pWVRqdL8N6yVKotYwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdACKhigdCa4uHQ0CqiGYkko0SO5w+raORX YNy6++OBYtHNkHWLoAnpeE9QbsqFhorzwLxiRkNCyNk6NQTGzvgO0M8+lH1P5zEJ r8a9+a65KRXzEGSt912zBWOXIPCTfm+ZpkVSX5KTax2bn2uolH0uZZPMel4YyaSE jwthPylJNtdKeNwmirsLO0vtU4SVNPsZfu8GojDVxoJWwUHmBBKT81sMiwbjmvLT bwU2/LqTTyuzGTGhtf89Dg67LuZu4JciG/ML7z6qgL4zhJ/gptrVxJiWJuKx/Kar Fh9fBm6ebG6XzqUcJm1xx1dUg3GrCkd2H54RLd1NJM4lLFiBlJI= -----END CERTIFICATE-----Generated at Sat Jul 18 04:12:22 2026 by rpki-client