$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json) Hash identifier: fpz+hNWuGrrCZv+90FN3gDaVn8huPHvqbFddTPTJZ/M= Subject key identifier: 58:C5:FD:31:A4:1F:61:FB:B0:93:64:27:F3:E2:F5:1A:D3:B4:43:B1 Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Certificate serial: 78651F4DB5BCEE066A8B37FEB5E2FB1D5C6C9873 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 15:01:32 +0000 Manifest this update: Wed 02 Sep 2026 14:56:32 +0000 Manifest next update: Thu 03 Sep 2026 18:03:32 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=) 2: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: pFNGyaB3T/fkqU0La6M8d+57LAoZ69lVp+sSElLyHj0=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:65:1f:4d:b5:bc:ee:06:6a:8b:37:fe:b5:e2:fb:1d:5c:6c:98:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Validity Not Before: Sep 2 14:56:32 2026 GMT Not After : Sep 3 18:03:32 2026 GMT Subject: CN=58C5FD31A41F61FBB0936427F3E2F51AD3B443B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:4a:29:c6:4a:82:25:d0:eb:a4:59:4b:44: cb:8d:77:8f:72:70:81:f3:02:05:9f:e0:d1:d4:5f: 6e:33:cf:ba:03:e1:c2:1a:ec:27:6f:16:c4:23:b5: 70:fd:0b:31:9e:f6:f8:0c:61:08:83:ef:d6:35:8e: 4c:f9:d3:4a:02:6e:2c:cb:be:78:a0:31:25:ba:77: 9d:47:b5:33:50:38:e1:95:3d:31:7f:dc:94:cc:8e: f7:ce:d7:5b:5a:a4:2f:6a:d3:af:4a:a3:7e:eb:09: 6a:4d:a5:c8:d5:9c:17:b2:31:4d:b6:70:ce:de:e3: 2a:a7:29:1b:13:21:06:4b:3d:60:56:15:fd:16:44: 34:0c:92:af:15:83:6f:4b:22:d0:c4:1f:12:8c:3d: 01:c7:e8:3c:68:b2:63:91:7c:70:a9:58:f1:c6:05: dc:df:e7:69:e4:85:c2:c3:11:9c:17:d0:39:61:12: d7:20:7f:1c:59:5e:d7:e5:f7:1d:75:ea:46:b5:61: 6a:b0:fd:67:0f:15:c5:5e:9f:83:b4:12:92:f1:fc: f6:57:8b:83:84:96:b9:5c:11:4c:34:b8:d8:2e:30: 19:33:42:8e:67:e8:28:0a:fa:54:e3:53:96:b5:85: bf:d5:12:95:d7:55:2b:c5:bb:06:a8:0a:63:d1:80: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C5:FD:31:A4:1F:61:FB:B0:93:64:27:F3:E2:F5:1A:D3:B4:43:B1 X509v3 Authority Key Identifier: keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0b:ec:e3:04:e4:cc:3a:65:00:3c:10:19:b6:dd:f7:4f:29: 6d:4f:d3:02:bf:59:92:47:3f:a6:15:b3:af:46:e7:96:01:47: ca:e2:01:57:e1:33:3e:c6:64:be:fd:35:f6:2f:9c:f0:22:91: 39:d6:ca:59:41:84:4f:77:68:42:82:5d:23:fb:e2:de:37:4f: 01:b6:58:5f:57:6f:86:1f:53:8d:21:5c:c6:bc:bf:4b:28:16: 30:7d:0c:fa:be:79:50:b8:9c:8c:21:91:8c:78:00:c7:b5:d0: df:a1:76:c5:1e:31:97:0e:4d:59:59:af:17:0e:33:4c:d3:e6: e7:79:a5:9d:1e:cf:de:ff:f9:f7:1d:31:c7:af:b3:c0:0d:e1: a0:b4:26:5a:df:38:d3:c8:b3:4b:f3:82:6f:48:e2:f9:e0:ed: e4:55:93:12:6f:0a:b3:45:2b:da:42:a8:59:28:94:45:14:1a: 72:91:d7:0c:f3:89:ee:e2:ec:7d:0a:4a:19:d9:16:84:b7:9d: 2f:44:9d:a5:b2:4d:33:c3:7e:8a:d2:2e:42:25:8d:89:ec:fd: 8d:38:38:b0:4d:ca:19:23:c8:d2:7f:94:e5:10:45:b6:0a:a0: 58:c1:04:80:04:05:6d:c3:d7:74:b9:1d:0a:7e:77:45:d8:91: b1:0f:31:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGUfTbW87gZqizf+teL7HVxsmHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFFRUND RDFCRjNCMzAeFw0yNjA5MDIxNDU2MzJaFw0yNjA5MDMxODAzMzJaMDMxMTAvBgNV BAMTKDU4QzVGRDMxQTQxRjYxRkJCMDkzNjQyN0YzRTJGNTFBRDNCNDQzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMzEopxkqCJdDrpFlLRMuNd49y cIHzAgWf4NHUX24zz7oD4cIa7CdvFsQjtXD9CzGe9vgMYQiD79Y1jkz500oCbizL vnigMSW6d51HtTNQOOGVPTF/3JTMjvfO11tapC9q069Ko37rCWpNpcjVnBeyMU22 cM7e4yqnKRsTIQZLPWBWFf0WRDQMkq8Vg29LItDEHxKMPQHH6DxosmORfHCpWPHG Bdzf52nkhcLDEZwX0DlhEtcgfxxZXtfl9x116ka1YWqw/WcPFcVen4O0EpLx/PZX i4OElrlcEUw0uNguMBkzQo5n6CgK+lTjU5a1hb/VEpXXVSvFuwaoCmPRgGgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMX9MaQfYfuwk2Qn8+L1GtO0Q7EwHwYDVR0j BBgwFoAUvjgOFAZvjzFAKP0GFbKu7M0b87MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIxOTU1ZjAtNGI0MC00YzNiLTlmZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQw NjZGOEYzMTQwMjhGRDA2MTVCMkFFRUNDRDFCRjNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NEMUJG M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFF RUNDRDFCRjNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0L7OME5Mw6ZQA8EBm23fdPKW1P0wK/WZJH P6YVs69G55YBR8riAVfhMz7GZL79NfYvnPAikTnWyllBhE93aEKCXSP74t43TwG2 WF9Xb4YfU40hXMa8v0soFjB9DPq+eVC4nIwhkYx4AMe10N+hdsUeMZcOTVlZrxcO M0zT5ud5pZ0ez97/+fcdMcevs8AN4aC0JlrfONPIs0vzgm9I4vng7eRVkxJvCrNF K9pCqFkolEUUGnKR1wzzie7i7H0KShnZFoS3nS9EnaWyTTPDforSLkIljYns/Y04 OLBNyhkjyNJ/lOUQRbYKoFjBBIAEBW3D13S5HQp+d0XYkbEPMT4= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:44 2026 by rpki-client