$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: wyqRxEr2rBk6c8nkfTm4n8bxr74RN4KFRS6tNn8ryfk= Subject key identifier: DF:1D:58:8E:8D:FD:EE:78:AD:F9:43:5A:13:6C:EA:60:7E:16:E1:BB Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 2B8F0C85C899CBC40D2909C961EAD14894B1AB7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 08:40:44 +0000 Manifest this update: Tue 02 Jun 2026 08:35:44 +0000 Manifest next update: Wed 03 Jun 2026 11:00:44 +0000 Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) 2: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: vYHER1LUvxG88fyjbSbOYCmckj1/Bwc1yUlmf80bw48=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8f:0c:85:c8:99:cb:c4:0d:29:09:c9:61:ea:d1:48:94:b1:ab:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: Jun 2 08:35:44 2026 GMT Not After : Jun 3 11:00:44 2026 GMT Subject: CN=DF1D588E8DFDEE78ADF9435A136CEA607E16E1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:39:cf:ef:bf:dc:88:d3:84:e9:dc:10:17: 61:db:3b:27:13:c1:ec:d6:8a:e6:cc:1b:90:db:d4: 22:db:ea:49:02:6b:03:49:7c:fd:d7:2b:fc:1c:4c: 92:eb:b1:62:20:21:1e:fd:2a:c5:3c:f5:2d:38:82: 80:bf:4b:ab:4c:62:ab:36:20:a5:ed:97:e9:42:84: 8e:01:bb:d0:a3:1c:f7:6c:e7:d9:1a:57:dc:93:6c: f2:8a:28:16:b8:dc:22:1b:f4:26:87:ab:63:fa:1a: 10:b9:f0:1e:63:f2:9b:63:d6:fa:cb:1d:27:11:43: 51:25:23:48:3d:48:a8:da:00:26:c8:8d:f7:24:02: 74:6a:45:88:0e:11:a4:60:bf:07:0a:aa:0c:37:80: b4:b4:a0:29:46:b0:8c:15:03:b2:eb:b6:48:5f:d5: ec:89:65:95:ab:a8:08:86:3a:c5:33:f4:e7:02:aa: 13:38:e9:ab:61:c3:70:50:79:0b:88:12:94:18:62: 26:aa:1a:4c:a1:6f:5e:bc:20:a0:50:1d:ce:d9:50: 9f:c0:49:d7:3b:69:95:83:2e:7e:89:62:06:a3:05: 4a:87:93:6b:0d:b8:34:ab:a3:dd:aa:e7:55:46:3f: 6a:95:fd:e8:1e:af:a3:74:5b:40:16:00:c1:bc:df: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1D:58:8E:8D:FD:EE:78:AD:F9:43:5A:13:6C:EA:60:7E:16:E1:BB X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:cf:17:08:25:46:d6:2c:36:aa:ba:3a:1c:29:77:b6:ed: 92:d4:d9:3d:16:bb:a7:38:42:b9:04:b5:09:94:01:8c:10:bb: 1f:42:4a:f0:60:98:42:fc:82:27:dc:2e:da:fc:2c:ac:7b:cd: 97:77:a4:5c:7d:26:f9:32:74:cb:e3:90:3e:81:82:c8:87:26: 2a:6f:5b:80:c0:89:2f:29:64:0c:75:81:99:0e:be:72:72:20: 71:3e:ee:09:4e:f5:c4:fa:61:55:83:ee:a5:44:5d:0e:bf:8a: 9d:f9:a0:5d:49:a6:b3:2a:87:28:ce:cc:ae:de:cc:4a:61:c6: 1d:59:5a:f4:f3:f1:58:d4:da:52:d8:be:c8:de:1c:69:92:ae: e5:a3:b6:ed:0b:20:8a:d7:bb:25:52:63:1c:a5:c9:61:4e:e2: 41:6f:6f:17:f3:d2:51:78:8c:0a:e9:3c:14:57:8a:e2:e1:7d: 92:80:f4:a6:5e:96:9b:07:3c:86:c4:e8:ff:09:08:e2:ec:b8: 76:48:c8:d0:d2:b5:e7:18:77:7a:62:fc:6e:04:99:e3:a4:69: 7a:7a:b4:82:eb:21:01:38:ab:f2:20:f2:4a:c5:22:7e:cf:cc: 32:67:e3:a2:87:b1:a2:4c:c2:c4:45:ae:90:ce:82:9d:d2:86: 59:43:b9:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK48MhciZy8QNKQnJYerRSJSxq38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjA2MDIwODM1NDRaFw0yNjA2MDMxMTAwNDRaMDMxMTAvBgNV BAMTKERGMUQ1ODhFOERGREVFNzhBREY5NDM1QTEzNkNFQTYwN0UxNkUxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfIjnP77/ciNOE6dwQF2HbOycT wezWiubMG5Db1CLb6kkCawNJfP3XK/wcTJLrsWIgIR79KsU89S04goC/S6tMYqs2 IKXtl+lChI4Bu9CjHPds59kaV9yTbPKKKBa43CIb9CaHq2P6GhC58B5j8ptj1vrL HScRQ1ElI0g9SKjaACbIjfckAnRqRYgOEaRgvwcKqgw3gLS0oClGsIwVA7Lrtkhf 1eyJZZWrqAiGOsUz9OcCqhM46athw3BQeQuIEpQYYiaqGkyhb168IKBQHc7ZUJ/A Sdc7aZWDLn6JYgajBUqHk2sNuDSro92q51VGP2qV/eger6N0W0AWAMG83wZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3x1Yjo397nit+UNaE2zqYH4W4bswHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABi5zxcIJUbWLDaqujocKXe27ZLU2T0Wu6c4 QrkEtQmUAYwQux9CSvBgmEL8gifcLtr8LKx7zZd3pFx9JvkydMvjkD6BgsiHJipv W4DAiS8pZAx1gZkOvnJyIHE+7glO9cT6YVWD7qVEXQ6/ip35oF1JprMqhyjOzK7e zEphxh1ZWvTz8VjU2lLYvsjeHGmSruWjtu0LIIrXuyVSYxylyWFO4kFvbxfz0lF4 jArpPBRXiuLhfZKA9KZelpsHPIbE6P8JCOLsuHZIyNDStecYd3pi/G4EmeOkaXp6 tILrIQE4q/Ig8krFIn7PzDJn46KHsaJMwsRFrpDOgp3ShllDudQ= -----END CERTIFICATE-----Generated at Wed Jun 3 04:10:42 2026 by rpki-client