$ rpki-client -vvvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: WuZ+B9YPfJeUbEkkUVDnqjfygvdsTONuSl5PLozs4k0= Subject key identifier: F2:44:72:24:E6:1B:1A:44:1A:B0:01:16:F4:A5:41:00:28:E5:AD:F8 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 10B3600449A1BEF73E54F6ED20F9F9E76D840F9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 17:29:07 +0000 Manifest this update: Wed 02 Sep 2026 17:24:07 +0000 Manifest next update: Thu 03 Sep 2026 20:05:07 +0000 Files and hashes: 1: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 2: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: 6c5n+YwREiCtF960g14onKww7H1v3jjEcNQWhhRfJm8=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 20:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b3:60:04:49:a1:be:f7:3e:54:f6:ed:20:f9:f9:e7:6d:84:0f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Sep 2 17:24:07 2026 GMT Not After : Sep 3 20:05:07 2026 GMT Subject: CN=F2447224E61B1A441AB00116F4A5410028E5ADF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:82:31:92:99:fc:03:be:df:fa:f3:8b:b6: 39:d9:9e:08:0a:07:af:4c:c1:94:ee:cd:07:c6:79: c8:23:03:57:4a:44:4e:e8:4a:59:34:fc:e7:28:b4: 1a:7f:bb:da:cd:42:27:05:5d:f8:3e:ea:fe:b5:4c: 72:9b:a3:77:21:d3:ff:34:3f:33:3f:28:30:f3:cc: 52:74:5a:90:a7:30:a7:92:2b:10:2e:47:c6:15:fd: 3f:87:65:fc:44:0c:ad:7d:6a:9d:94:87:93:3c:d8: f4:a7:9c:5e:06:38:f4:bc:bf:f3:f4:bb:a9:5a:86: 2d:52:80:7f:c2:e8:e9:a5:d8:f2:a4:af:74:60:4b: 4e:71:9e:02:46:d4:d4:94:47:2c:8f:83:26:f3:1e: 6b:fc:7d:75:2f:6b:79:a1:31:14:bd:34:08:e3:1b: f6:7e:ee:35:6f:ae:bc:9c:82:07:f8:41:29:df:ca: 48:5c:de:62:69:1e:5e:09:38:92:7d:dc:98:f3:f8: 46:49:94:47:38:51:64:b6:e8:26:81:ff:90:93:30: 70:55:af:dc:48:c4:5e:5f:f2:a7:8a:96:19:de:7e: e1:ea:78:19:e6:cf:02:6a:ac:1e:a6:85:4a:4d:ec: ea:7d:67:16:b4:10:db:18:f4:c0:70:28:f3:7e:48: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:44:72:24:E6:1B:1A:44:1A:B0:01:16:F4:A5:41:00:28:E5:AD:F8 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d5:50:24:cb:17:0e:53:38:28:20:c2:8c:46:79:17:06:a3: 2e:6f:ff:80:3a:97:81:f8:cd:9c:1c:42:17:77:2e:b7:ea:c3: 18:e6:67:d4:82:42:f7:58:e3:b3:7d:a6:e9:1f:85:39:72:59: ea:66:f5:6a:1f:17:de:4c:85:92:7a:ad:1d:f9:af:22:2a:66: 7d:4d:cc:11:25:66:01:49:e2:44:95:a0:4e:18:55:33:37:af: e6:29:d9:ba:9e:32:1e:c6:04:f6:54:d9:29:f2:1b:42:0d:e0: 30:21:23:aa:88:72:b9:5c:2d:6a:21:cc:35:25:67:ef:c9:75: 06:aa:58:c6:84:87:b1:8f:ec:6b:a2:e6:60:33:69:8e:05:a6: 61:17:bb:61:d7:5e:8c:53:d5:5e:b5:0e:cf:26:28:7e:a8:24: d8:e3:a5:4a:f7:96:2f:1f:94:ab:d2:9e:2c:d4:55:a5:e3:99: c8:dc:78:c6:9a:d8:72:ee:12:d3:0e:81:1b:71:55:f9:7e:58: 36:d1:f3:a9:f8:7a:35:79:7d:c7:51:3a:82:fe:59:03:4c:c0: 68:88:4b:0c:cb:d8:09:f8:f7:2a:3a:ab:79:5e:b5:be:ec:97: 51:03:c0:6e:13:e8:32:5e:c8:5d:bb:87:0c:2c:9a:8b:c2:c5: ab:5d:98:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELNgBEmhvvc+VPbtIPn5522ED5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA5MDIxNzI0MDdaFw0yNjA5MDMyMDA1MDdaMDMxMTAvBgNV BAMTKEYyNDQ3MjI0RTYxQjFBNDQxQUIwMDExNkY0QTU0MTAwMjhFNUFERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtIIxkpn8A77f+vOLtjnZnggK B69MwZTuzQfGecgjA1dKRE7oSlk0/OcotBp/u9rNQicFXfg+6v61THKbo3ch0/80 PzM/KDDzzFJ0WpCnMKeSKxAuR8YV/T+HZfxEDK19ap2Uh5M82PSnnF4GOPS8v/P0 u6lahi1SgH/C6Oml2PKkr3RgS05xngJG1NSURyyPgybzHmv8fXUva3mhMRS9NAjj G/Z+7jVvrrycggf4QSnfykhc3mJpHl4JOJJ93Jjz+EZJlEc4UWS26CaB/5CTMHBV r9xIxF5f8qeKlhnefuHqeBnmzwJqrB6mhUpN7Op9Zxa0ENsY9MBwKPN+SMM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kRyJOYbGkQasAEW9KVBACjlrfgwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfVUCTLFw5TOCggwoxGeRcGoy5v/4A6l4H4 zZwcQhd3LrfqwxjmZ9SCQvdY47N9pukfhTlyWepm9WofF95MhZJ6rR35ryIqZn1N zBElZgFJ4kSVoE4YVTM3r+Yp2bqeMh7GBPZU2SnyG0IN4DAhI6qIcrlcLWohzDUl Z+/JdQaqWMaEh7GP7Gui5mAzaY4FpmEXu2HXXoxT1V61Ds8mKH6oJNjjpUr3li8f lKvSnizUVaXjmcjceMaa2HLuEtMOgRtxVfl+WDbR86n4ejV5fcdROoL+WQNMwGiI SwzL2An49yo6q3letb7sl1EDwG4T6DJeyF27hwwsmovCxatdmFw= -----END CERTIFICATE-----Generated at Thu Sep 3 05:10:09 2026 by rpki-client