$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: cwxU9YfMsKf0BTktn7G15PK3uV+g7yC8XMOB6aJQrzs= Subject key identifier: B9:40:B8:CB:EA:69:79:A2:65:6A:0A:E0:7F:1E:0C:05:47:AF:D1:B1 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 1DA6DF63AE18227959E2AF3766EBA35EBD9BD0D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 22:17:48 +0000 Manifest this update: Tue 02 Jun 2026 22:12:48 +0000 Manifest next update: Wed 03 Jun 2026 22:54:48 +0000 Files and hashes: 1: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 2: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 3: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: Mqz8FaAlNQhyokcgfT3rc7wUyAwJVx6uXMA35X2NzSA=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 6: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a6:df:63:ae:18:22:79:59:e2:af:37:66:eb:a3:5e:bd:9b:d0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Jun 2 22:12:48 2026 GMT Not After : Jun 3 22:54:48 2026 GMT Subject: CN=B940B8CBEA6979A2656A0AE07F1E0C0547AFD1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:aa:59:1b:79:55:18:59:83:eb:e0:fb:81: 38:96:e2:6e:73:a6:23:10:b5:e0:9d:0c:a0:02:ca: 6a:47:c4:49:51:d8:38:be:9f:78:6b:48:b4:de:81: ad:49:98:9f:61:6d:49:b5:aa:9c:68:5e:8a:90:84: eb:98:8f:39:2e:53:e7:1e:2c:1f:22:18:f7:6c:d4: 0f:7b:6c:cf:c4:9b:8f:ed:ed:fb:d7:9e:2a:78:83: eb:13:5f:3c:09:e8:b2:1b:2e:87:4c:60:1d:41:66: f1:ee:97:d4:d3:41:08:0a:ec:33:7f:c1:1e:33:b5: ef:68:b6:68:d2:14:8c:72:b5:63:bc:4a:f7:c5:5b: e1:92:ed:28:bb:15:98:f1:b7:d0:3f:cc:5b:4e:e2: 2e:c9:70:d6:57:a0:5a:ab:d0:87:01:2f:13:70:6c: dc:ca:65:dd:a2:99:09:de:73:66:75:bc:8f:d8:70: ff:3b:b0:d7:2c:45:ef:bf:43:aa:38:36:6b:71:3c: 0e:23:69:db:11:97:2f:e7:da:ac:ce:62:1e:7f:99: e3:ba:79:f5:ad:58:9b:9f:08:21:84:52:ce:12:8d: 71:b0:fe:57:9d:7a:e7:4c:f5:6b:de:44:2b:e0:f7: 80:e3:b7:4c:97:09:bd:38:26:df:7c:ee:e7:eb:ff: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:B8:CB:EA:69:79:A2:65:6A:0A:E0:7F:1E:0C:05:47:AF:D1:B1 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:22:2f:4b:c8:c1:d3:c0:41:f9:b9:fb:db:0a:28:77:6b:05: c0:bb:61:ef:8d:5a:3e:1d:d4:f7:04:60:a3:73:40:e0:fc:45: e1:0d:17:4f:f8:ab:21:c4:c6:60:4f:3b:d4:5f:ad:99:98:ec: 6e:66:6a:ca:ba:d2:ef:d3:ff:ea:07:9c:37:33:b8:8c:40:50: 64:e7:e3:f7:b4:c6:e5:31:5b:80:75:23:58:8c:4c:35:5c:30: d5:f7:c7:58:d6:9d:a2:b7:b1:b4:d1:2d:cd:9e:8d:63:74:e1: 3f:b1:ac:dc:66:2c:b6:a3:bb:27:8b:83:80:77:96:41:62:56: 7b:fd:40:86:ad:73:98:74:d5:ef:61:7f:c6:5e:07:c8:09:ea: da:fd:61:88:32:9b:ed:b2:f2:bb:c0:bb:a5:4a:7b:66:a4:9d: fc:4f:3c:fb:22:ca:36:d3:82:a6:3e:ca:a7:1b:b6:f8:94:d1: 08:a7:59:89:a1:9c:69:dc:ed:3e:1b:c6:e0:e4:b7:02:a3:c3: 22:63:93:42:4f:b1:3d:05:ca:70:bb:ac:b9:22:b8:5e:c4:59: 2b:ae:9e:b4:f1:b6:09:39:12:09:3b:37:0b:3d:93:40:6c:fc: d9:e0:93:f3:49:27:d5:f6:6a:87:13:a0:e2:c7:ab:ce:87:12: 60:34:02:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHabfY64YInlZ4q83ZuujXr2b0NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA2MDIyMjEyNDhaFw0yNjA2MDMyMjU0NDhaMDMxMTAvBgNV BAMTKEI5NDBCOENCRUE2OTc5QTI2NTZBMEFFMDdGMUUwQzA1NDdBRkQxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiqpZG3lVGFmD6+D7gTiW4m5z piMQteCdDKACympHxElR2Di+n3hrSLTega1JmJ9hbUm1qpxoXoqQhOuYjzkuU+ce LB8iGPds1A97bM/Em4/t7fvXnip4g+sTXzwJ6LIbLodMYB1BZvHul9TTQQgK7DN/ wR4zte9otmjSFIxytWO8SvfFW+GS7Si7FZjxt9A/zFtO4i7JcNZXoFqr0IcBLxNw bNzKZd2imQnec2Z1vI/YcP87sNcsRe+/Q6o4NmtxPA4jadsRly/n2qzOYh5/meO6 efWtWJufCCGEUs4SjXGw/ledeudM9WveRCvg94Djt0yXCb04Jt987ufr/z8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuUC4y+ppeaJlagrgfx4MBUev0bEwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8iL0vIwdPAQfm5+9sKKHdrBcC7Ye+NWj4d 1PcEYKNzQOD8ReENF0/4qyHExmBPO9RfrZmY7G5masq60u/T/+oHnDczuIxAUGTn 4/e0xuUxW4B1I1iMTDVcMNX3x1jWnaK3sbTRLc2ejWN04T+xrNxmLLajuyeLg4B3 lkFiVnv9QIatc5h01e9hf8ZeB8gJ6tr9YYgym+2y8rvAu6VKe2aknfxPPPsiyjbT gqY+yqcbtviU0QinWYmhnGnc7T4bxuDktwKjwyJjk0JPsT0FynC7rLkiuF7EWSuu nrTxtgk5Egk7Nws9k0Bs/Nngk/NJJ9X2aocToOLHq86HEmA0AqE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:54 2026 by rpki-client