$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: vpYgXs6biOqWHpQyHHy78CcNQOoGuKQdli2VvCZ8pAo= Subject key identifier: 52:B8:95:4C:CA:24:69:A2:A7:44:A4:86:42:9D:05:F0:0C:02:98:56 Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 154EAFD9C44750D3ACCC2E5761F59CB6B23B4146 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 17:28:03 +0000 Manifest this update: Mon 20 Jul 2026 17:23:03 +0000 Manifest next update: Tue 21 Jul 2026 18:08:03 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) 2: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: uROQdjDRgZ1RPdKg9VeK7I3bYd44HnCmfa8DbhZhpCw=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4e:af:d9:c4:47:50:d3:ac:cc:2e:57:61:f5:9c:b6:b2:3b:41:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: Jul 20 17:23:03 2026 GMT Not After : Jul 21 18:08:03 2026 GMT Subject: CN=52B8954CCA2469A2A744A486429D05F00C029856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:b1:38:af:23:53:ff:ec:f4:54:10:ef:c7: 9f:12:b9:dc:65:ff:39:e1:21:59:f5:cc:8b:f9:69: 28:2c:f6:db:eb:aa:92:45:a6:dd:da:14:2b:5e:2f: 80:bd:58:b4:60:3a:ef:5b:02:90:7f:dd:84:c8:a2: 14:83:3c:db:ed:38:ca:05:57:20:7b:85:3e:48:5e: 70:df:65:86:d9:d6:4b:bc:71:ab:13:17:a4:ec:80: bf:f7:3d:13:7e:12:af:c9:cf:00:4a:39:b8:f3:15: c6:f8:27:b7:d5:73:3f:aa:fc:a1:9b:a8:28:dc:b7: 02:8b:04:23:74:1f:ea:f7:80:58:be:5d:3b:66:3f: 7e:de:9a:65:7c:7b:4f:72:38:ff:5a:91:9c:35:a3: ef:d5:af:8b:d9:5a:c5:5c:2d:f3:06:1f:21:28:e7: c9:05:3a:c9:be:bb:72:b7:dd:b8:33:d1:de:fe:10: cd:a0:00:69:5b:95:7f:87:f6:4c:2a:1b:cd:7e:cb: 15:d4:f5:9b:0e:fa:b5:11:ca:a9:39:6d:d1:f2:3a: 71:a9:56:b1:03:55:97:79:7e:e0:9b:d6:b8:ac:7b: e0:5e:a3:98:54:cc:90:00:a2:bc:e0:7b:61:f6:79: 84:b2:1a:98:2c:b3:a7:14:13:8c:5b:1f:97:f1:7d: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B8:95:4C:CA:24:69:A2:A7:44:A4:86:42:9D:05:F0:0C:02:98:56 X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:06:95:4d:1b:38:9d:4e:65:a2:ef:9a:b3:ad:28:d7:60:8e: 1f:b7:51:64:2a:d1:fe:e6:44:33:49:5b:34:d2:f6:b5:14:39: fe:66:dd:5a:9d:fc:45:35:5a:8f:ee:b3:3e:be:18:d0:6b:11: ed:0e:99:c1:5f:cd:90:e1:01:03:17:45:9e:7c:18:62:2e:5d: ec:f1:e9:49:9b:47:46:6e:7c:a5:62:b3:a0:ab:4a:d2:6c:28: f5:eb:ce:42:9e:a5:72:bb:c9:4d:c6:62:7b:ef:1a:5b:5d:e6: 00:3a:54:5d:3c:a2:c6:81:87:6f:43:7d:33:8d:a2:ce:ac:d9: 1a:d9:ca:1f:c3:bc:e1:2c:8c:9d:01:65:53:ee:36:07:c4:4f: dd:e2:14:22:77:c8:b3:f3:cc:fd:5f:a8:07:0f:93:b1:e5:f8: 35:5d:bf:27:de:1a:b7:84:98:74:a5:09:1e:2a:2a:74:0e:9b: 13:11:8c:b9:20:aa:90:4a:a3:f1:61:4e:3b:df:71:42:ca:5e: 16:ca:cb:62:32:b6:53:f6:cd:16:73:c9:02:17:7a:4c:11:50: d1:0e:fc:06:85:89:c2:9a:b1:49:26:79:1f:a0:ec:dd:2c:c2: ae:aa:cc:25:26:15:4a:d9:f1:47:56:a7:1c:0e:e7:99:d6:f2: 69:da:95:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFU6v2cRHUNOszC5XYfWctrI7QUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjA3MjAxNzIzMDNaFw0yNjA3MjExODA4MDNaMDMxMTAvBgNV BAMTKDUyQjg5NTRDQ0EyNDY5QTJBNzQ0QTQ4NjQyOUQwNUYwMEMwMjk4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKY7E4ryNT/+z0VBDvx58Sudxl /znhIVn1zIv5aSgs9tvrqpJFpt3aFCteL4C9WLRgOu9bApB/3YTIohSDPNvtOMoF VyB7hT5IXnDfZYbZ1ku8casTF6TsgL/3PRN+Eq/JzwBKObjzFcb4J7fVcz+q/KGb qCjctwKLBCN0H+r3gFi+XTtmP37emmV8e09yOP9akZw1o+/Vr4vZWsVcLfMGHyEo 58kFOsm+u3K33bgz0d7+EM2gAGlblX+H9kwqG81+yxXU9ZsO+rURyqk5bdHyOnGp VrEDVZd5fuCb1rise+Beo5hUzJAAorzge2H2eYSyGpgss6cUE4xbH5fxfbG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUriVTMokaaKnRKSGQp0F8AwCmFYwHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsGlU0bOJ1OZaLvmrOtKNdgjh+3UWQq0f7m RDNJWzTS9rUUOf5m3Vqd/EU1Wo/usz6+GNBrEe0OmcFfzZDhAQMXRZ58GGIuXezx 6UmbR0ZufKVis6CrStJsKPXrzkKepXK7yU3GYnvvGltd5gA6VF08osaBh29DfTON os6s2RrZyh/DvOEsjJ0BZVPuNgfET93iFCJ3yLPzzP1fqAcPk7Hl+DVdvyfeGreE mHSlCR4qKnQOmxMRjLkgqpBKo/FhTjvfcULKXhbKy2IytlP2zRZzyQIXekwRUNEO /AaFicKasUkmeR+g7N0swq6qzCUmFUrZ8UdWpxwO55nW8mnalUQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:41:39 2026 by rpki-client