$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: /2bSiccNzg0IoS0sPAre25Mpagi36Vl3q79OntFpTGI= Subject key identifier: 5A:76:E5:47:18:01:67:26:8F:AA:29:BC:FA:5C:74:40:5C:52:2A:97 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 2DC5BC9D34E7B85E9AF2E1262C70FE8B478B12BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:31:55 +0000 Manifest this update: Mon 20 Jul 2026 12:26:55 +0000 Manifest next update: Tue 21 Jul 2026 15:00:55 +0000 Files and hashes: 1: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: Hc3zpCisruhF0lUBHr/rfyf3cBC0QHI6OZONmZt1/z0=) 2: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 3: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 4: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 5: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 6: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c5:bc:9d:34:e7:b8:5e:9a:f2:e1:26:2c:70:fe:8b:47:8b:12:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Jul 20 12:26:55 2026 GMT Not After : Jul 21 15:00:55 2026 GMT Subject: CN=5A76E547180167268FAA29BCFA5C74405C522A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:9e:6d:8f:02:cd:25:20:fb:74:f9:48:19: 17:9f:62:0b:64:f4:b0:3a:7c:d5:c8:29:29:e5:74: 02:7a:61:80:b2:69:51:7b:c0:16:63:8a:b1:34:00: 2f:d0:6b:80:13:94:5b:ab:e8:6e:55:31:1e:79:db: 17:a0:d4:83:42:ca:20:f1:43:2b:a6:a7:f6:8c:4b: b6:9f:cf:df:26:de:8f:09:e3:ef:69:6f:5e:ee:d4: 77:39:2c:50:79:63:85:2e:c8:13:21:85:04:31:b8: e0:3f:c2:8f:1b:06:23:b4:b4:ad:58:8c:16:b0:23: 91:1a:46:e8:a5:46:02:6e:e6:a7:1a:d8:00:f6:11: 7c:aa:41:b3:0f:23:bd:1f:1c:a3:dd:7e:41:a5:fd: 95:b5:e3:43:a3:ee:f5:c9:91:2f:20:9b:16:27:33: 95:6b:e4:39:ee:67:04:ca:62:89:17:65:70:1e:23: 68:81:40:30:1f:b4:b3:e7:a0:b5:5e:06:f1:cb:81: 2e:87:be:81:5a:02:ff:b7:b7:e6:3d:b4:3d:cd:86: 96:c5:3b:26:45:dc:3e:90:bc:7f:8b:04:dd:6d:32: 72:37:85:24:e5:1f:da:cd:6a:d9:a9:03:e7:25:bf: f2:70:3b:96:6e:26:27:f9:49:98:3f:5d:5c:03:6d: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:E5:47:18:01:67:26:8F:AA:29:BC:FA:5C:74:40:5C:52:2A:97 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:c9:b4:2a:09:b7:a2:00:50:fe:3f:3a:aa:0a:25:2d:83: 4e:4c:db:94:1f:0b:b4:7a:4a:9f:49:af:ba:bf:b8:93:b4:5e: d5:ef:57:7d:61:5e:c7:ac:0d:b0:b8:76:a7:3f:81:ed:06:6b: c0:f1:6f:64:ac:ba:07:47:5f:eb:af:0a:e4:b6:ed:49:ea:60: 3a:cd:58:24:85:b8:cc:89:97:c5:d0:af:e1:ef:6c:9f:ec:df: 28:00:29:cf:2f:6f:ab:eb:b6:29:f3:30:af:89:d8:c2:af:7f: 2c:dd:a0:d3:f6:b0:85:07:16:bc:bf:c8:86:a6:ee:fa:75:a5: 27:2f:38:37:47:25:a7:c4:c2:76:f7:19:5c:80:24:af:ae:d0: d8:d0:c5:a4:df:22:c3:f3:f9:6b:e2:1a:dd:ee:f5:a3:c2:1e: 21:c1:01:7b:eb:f9:70:14:d2:dd:d3:67:dd:ec:11:ff:8c:8f: 88:be:1a:1e:3f:f6:2b:ac:a8:ef:94:ea:3c:3a:85:88:e6:44: d8:54:d9:9f:33:6c:1c:34:e1:e2:8a:d3:8b:88:23:86:6e:05: 75:d1:92:b7:10:98:00:03:64:4a:c1:ed:73:94:30:6c:eb:21: 02:7f:41:b3:c5:3e:df:2f:29:d1:0d:7b:6b:eb:57:96:69:17: e4:66:e6:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcW8nTTnuF6a8uEmLHD+i0eLEr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA3MjAxMjI2NTVaFw0yNjA3MjExNTAwNTVaMDMxMTAvBgNV BAMTKDVBNzZFNTQ3MTgwMTY3MjY4RkFBMjlCQ0ZBNUM3NDQwNUM1MjJBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aJ5tjwLNJSD7dPlIGRefYgtk 9LA6fNXIKSnldAJ6YYCyaVF7wBZjirE0AC/Qa4ATlFur6G5VMR552xeg1INCyiDx Qyump/aMS7afz98m3o8J4+9pb17u1Hc5LFB5Y4UuyBMhhQQxuOA/wo8bBiO0tK1Y jBawI5EaRuilRgJu5qca2AD2EXyqQbMPI70fHKPdfkGl/ZW140Oj7vXJkS8gmxYn M5Vr5DnuZwTKYokXZXAeI2iBQDAftLPnoLVeBvHLgS6HvoFaAv+3t+Y9tD3NhpbF OyZF3D6QvH+LBN1tMnI3hSTlH9rNatmpA+clv/JwO5ZuJif5SZg/XVwDbRDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnblRxgBZyaPqim8+lx0QFxSKpcwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADckybQqCbeiAFD+PzqqCiUtg05M25QfC7R6 Sp9Jr7q/uJO0XtXvV31hXsesDbC4dqc/ge0Ga8Dxb2SsugdHX+uvCuS27UnqYDrN WCSFuMyJl8XQr+HvbJ/s3ygAKc8vb6vrtinzMK+J2MKvfyzdoNP2sIUHFry/yIam 7vp1pScvODdHJafEwnb3GVyAJK+u0NjQxaTfIsPz+WviGt3u9aPCHiHBAXvr+XAU 0t3TZ93sEf+Mj4i+Gh4/9iusqO+U6jw6hYjmRNhU2Z8zbBw04eKK04uII4ZuBXXR krcQmAADZErB7XOUMGzrIQJ/QbPFPt8vKdENe2vrV5ZpF+Rm5vY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:42:10 2026 by rpki-client