$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: iiKhyOpYTK7PDxlxYAG+MAzyg7AYo/Y1X9wKS4/jUXs= Subject key identifier: C4:61:C2:87:8E:05:83:A6:A1:71:28:BF:74:D6:FD:EE:7B:C1:C3:AA Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 6078EA6CE5DC7EB130B5790F3175529C42A672F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 0134 Signing time: Mon 20 Apr 2026 04:32:22 +0000 Manifest this update: Mon 20 Apr 2026 04:27:22 +0000 Manifest next update: Thu 23 Apr 2026 11:09:22 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: HLWh4qM6oxH40ui/B+OgoHXCQ7AimB5df4jmznV1StQ=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: V+6ICfxJlzIXx0tsJaXlK0qkvR8zksD4IbjFfV4kF/o=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: t+VcXkUWUHKF6UOibDMpWswUlzEPH8qZz8XYAlMIEgc=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: uVhjikc+01ILAABNfYp2OgN/UN5xvnNbRu+Hb3oFuYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 11:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:78:ea:6c:e5:dc:7e:b1:30:b5:79:0f:31:75:52:9c:42:a6:72:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Apr 20 04:27:22 2026 GMT Not After : Apr 23 11:09:22 2026 GMT Subject: CN=C461C2878E0583A6A17128BF74D6FDEE7BC1C3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:7a:9f:34:b8:c5:0b:36:1a:06:e8:dc:41: 38:5b:b3:6d:95:ec:e6:fd:2f:a0:ae:e0:43:6b:55: d4:2d:03:8e:a3:85:4f:bf:17:a5:65:d8:8d:79:23: 68:70:cf:0b:65:70:66:42:79:6b:11:de:d4:3e:1b: a7:94:7a:30:61:64:9d:80:e3:2e:f0:e3:30:38:86: fb:01:ae:ca:cb:47:00:45:55:b9:da:0b:b2:7d:f8: 25:79:76:b8:05:e8:3b:cb:6e:8c:3a:51:12:5b:64: f8:2c:aa:67:a0:ad:f4:3f:0a:9a:a4:2b:d8:d3:82: 0e:21:ac:2b:87:e3:96:73:c6:26:d0:80:16:8f:ef: 65:cd:6e:ff:28:fe:be:00:08:ff:02:21:c6:77:63: dd:86:c6:50:20:64:50:c9:c1:6a:04:98:a0:82:e9: ac:74:34:ae:ce:9a:a8:d8:42:8c:16:fe:03:9e:27: 80:09:21:43:18:c9:54:be:80:93:b2:4b:38:cc:d8: 33:33:5a:f4:72:7d:36:d8:a3:eb:4a:d9:5b:ff:d4: 08:f7:63:5d:35:77:5d:ed:8b:cd:24:d5:7d:4d:3f: b8:e7:42:b9:b2:bc:9e:d9:00:8c:28:88:7c:84:fd: 5a:38:46:9a:de:c1:40:ad:64:d2:d8:d3:a6:68:4d: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:C2:87:8E:05:83:A6:A1:71:28:BF:74:D6:FD:EE:7B:C1:C3:AA X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3e:89:09:35:b0:90:d1:f7:3a:b8:7f:a3:91:7d:23:60:24: 64:9d:92:28:c6:4d:4f:b2:0b:65:e7:d2:38:a0:3e:ef:89:fd: a3:f7:91:7d:1b:99:77:35:36:18:ac:81:d1:b7:09:95:8b:58: 24:0e:e7:2f:c1:8c:ad:2c:9e:9a:98:41:d1:11:ea:86:30:2c: 32:ba:62:70:54:34:60:26:5c:df:a9:52:ee:d6:1a:e2:98:17: ff:cb:48:97:b6:64:73:cb:b5:4e:4a:d5:59:b3:01:35:ea:ab: f9:e3:8d:05:b7:6d:c0:28:fb:b5:e3:2e:95:12:8f:0d:93:2c: 88:32:22:81:14:20:8a:50:71:6b:b6:92:02:49:62:4e:14:e4: 09:a1:24:46:7a:25:0b:38:fd:2a:66:fd:64:ae:7e:1f:07:67: 7f:0a:86:db:e9:cb:59:e2:21:66:36:ae:4d:3d:fa:44:4a:c5: 3d:79:80:a9:62:54:d2:5b:d0:9f:2e:0d:15:b6:22:9f:8b:26: 30:c9:1f:5f:bf:22:db:bb:35:57:bd:bc:22:29:d0:6e:a6:e6: 4b:0b:9a:65:f1:69:6a:74:2d:c5:91:62:62:25:12:00:d2:ee: a6:f9:af:63:6b:46:f5:3f:a4:c3:08:37:6d:a7:7e:56:13:d7: bd:f9:5d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHjqbOXcfrEwtXkPMXVSnEKmcvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjA0MjAwNDI3MjJaFw0yNjA0MjMxMTA5MjJaMDMxMTAvBgNV BAMTKEM0NjFDMjg3OEUwNTgzQTZBMTcxMjhCRjc0RDZGREVFN0JDMUMzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NXqfNLjFCzYaBujcQThbs22V 7Ob9L6Cu4ENrVdQtA46jhU+/F6Vl2I15I2hwzwtlcGZCeWsR3tQ+G6eUejBhZJ2A 4y7w4zA4hvsBrsrLRwBFVbnaC7J9+CV5drgF6DvLbow6URJbZPgsqmegrfQ/Cpqk K9jTgg4hrCuH45ZzxibQgBaP72XNbv8o/r4ACP8CIcZ3Y92GxlAgZFDJwWoEmKCC 6ax0NK7OmqjYQowW/gOeJ4AJIUMYyVS+gJOySzjM2DMzWvRyfTbYo+tK2Vv/1Aj3 Y101d13ti80k1X1NP7jnQrmyvJ7ZAIwoiHyE/Vo4RprewUCtZNLY06ZoTYqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGHCh44Fg6ahcSi/dNb97nvBw6owHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0+iQk1sJDR9zq4f6ORfSNgJGSdkijGTU+y C2Xn0jigPu+J/aP3kX0bmXc1NhisgdG3CZWLWCQO5y/BjK0snpqYQdER6oYwLDK6 YnBUNGAmXN+pUu7WGuKYF//LSJe2ZHPLtU5K1VmzATXqq/njjQW3bcAo+7XjLpUS jw2TLIgyIoEUIIpQcWu2kgJJYk4U5AmhJEZ6JQs4/Spm/WSufh8HZ38Khtvpy1ni IWY2rk09+kRKxT15gKliVNJb0J8uDRW2Ip+LJjDJH1+/Itu7NVe9vCIp0G6m5ksL mmXxaWp0LcWRYmIlEgDS7qb5r2NrRvU/pMMIN22nflYT1735XRg= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:46 2026 by rpki-client