$ rpki-client -vvvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: sORW/yY4T1TOP0wchsBRKBao83//QcpMKxNu/IoiUtY= Subject key identifier: 8F:15:9A:B4:A7:B7:E5:DB:C7:EE:79:63:7E:23:AA:31:03:D8:A7:32 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 15E82D8CDA6472483F0E505D37BBFEF1DE57BA2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: EA Signing time: Sat 24 Oct 2026 23:28:30 +0000 Manifest this update: Sat 24 Oct 2026 23:23:30 +0000 Manifest next update: Mon 26 Oct 2026 00:31:30 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 3: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: h71i82dYuEmXhp77cY/xXYmHeMzcRqb8ZVBz5UNEclw=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e8:2d:8c:da:64:72:48:3f:0e:50:5d:37:bb:fe:f1:de:57:ba:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Oct 24 23:23:30 2026 GMT Not After : Oct 26 00:31:30 2026 GMT Subject: CN=8F159AB4A7B7E5DBC7EE79637E23AA3103D8A732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:ea:32:a5:6c:ac:40:03:76:29:ec:c5:8e: 39:fc:19:05:60:49:90:00:39:02:b2:ed:7b:92:05: a8:47:6b:66:e4:e4:dd:6d:b7:3a:2f:fe:64:0f:81: f1:8b:5e:f1:1b:ab:41:3b:32:ca:a6:6b:ed:6e:93: b1:a1:f3:93:3c:54:d1:2e:dc:dc:e3:01:80:40:c9: 11:bd:ea:b4:fd:6a:b7:ef:96:30:b5:41:2b:a6:b0: 0a:4a:f6:7d:8f:28:60:57:60:9a:52:15:e7:99:fa: 24:85:a7:6c:b8:e4:6f:a3:ca:d7:0c:83:75:f0:a5: cd:0d:70:ff:a5:f4:2f:26:00:1a:0e:3e:6f:ab:64: 2c:cb:74:16:d3:c0:bc:a7:a4:45:4e:a0:74:c2:d7: b8:df:2e:52:06:12:27:52:d3:5c:bb:de:d7:a6:31: cd:23:ac:71:15:38:b4:ae:2e:85:60:ee:3f:76:a6: 6c:1a:84:66:85:4b:cc:0b:bb:91:36:33:b8:09:1c: 1e:f3:1c:05:c1:8c:c4:08:77:8c:9d:26:38:0f:ee: 2a:f6:de:09:ae:8d:fa:42:8e:89:74:a9:e8:36:37: dd:75:ac:00:d3:49:e6:50:09:8c:4b:95:c6:e9:f4: f4:3d:d7:de:53:66:0b:99:6e:31:62:8a:4f:3d:06: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:15:9A:B4:A7:B7:E5:DB:C7:EE:79:63:7E:23:AA:31:03:D8:A7:32 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e1:fb:0f:22:1d:61:c4:13:3e:60:f5:44:f2:f0:a7:2a:84: ab:d4:94:66:cb:ff:2f:9a:ee:ac:a2:1c:b0:82:0a:a8:c5:15: 35:8c:b2:8b:d5:d3:e2:74:38:f0:fc:16:32:be:a7:d3:67:c5: 4a:5c:a2:ad:a7:5e:2a:5d:6c:6c:85:ac:e7:96:28:ef:f5:6a: 94:d4:5f:f7:ec:c7:69:03:da:ac:c2:99:c4:69:2a:91:ab:25: 9f:b6:28:aa:30:90:9b:0a:80:c6:87:92:fc:56:4a:9d:df:39: 03:a7:f9:17:bc:99:07:6e:00:76:0a:c1:eb:24:4b:1d:99:ff: 1a:36:7a:50:0d:b7:44:13:d4:77:96:24:35:17:61:54:f1:b0: ff:fa:c7:a7:cb:ad:e5:a2:21:ef:9c:56:ec:a6:51:78:a3:a6: 33:82:2b:d0:c1:83:d4:ef:c4:7d:94:34:23:15:76:dd:8f:09: 59:44:42:af:34:c5:90:29:ab:fa:d6:a4:81:bb:d0:02:ad:ec: 11:26:ca:88:c9:a7:c0:69:8d:f8:fd:5f:81:6a:74:9f:f3:b2: 76:29:b2:79:6a:11:47:98:c5:20:42:31:6f:8f:63:34:5f:c6: 7f:8d:22:cf:ef:6f:a1:4b:b4:ae:7f:68:cb:3b:06:68:51:48: 5c:d3:ec:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFegtjNpkckg/DlBdN7v+8d5Xui0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjEwMjQyMzIzMzBaFw0yNjEwMjYwMDMxMzBaMDMxMTAvBgNV BAMTKDhGMTU5QUI0QTdCN0U1REJDN0VFNzk2MzdFMjNBQTMxMDNEOEE3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGeoypWysQAN2KezFjjn8GQVg SZAAOQKy7XuSBahHa2bk5N1ttzov/mQPgfGLXvEbq0E7Msqma+1uk7Gh85M8VNEu 3NzjAYBAyRG96rT9arfvljC1QSumsApK9n2PKGBXYJpSFeeZ+iSFp2y45G+jytcM g3Xwpc0NcP+l9C8mABoOPm+rZCzLdBbTwLynpEVOoHTC17jfLlIGEidS01y73tem Mc0jrHEVOLSuLoVg7j92pmwahGaFS8wLu5E2M7gJHB7zHAXBjMQId4ydJjgP7ir2 3gmujfpCjol0qeg2N911rADTSeZQCYxLlcbp9PQ9195TZguZbjFiik89BtqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjxWatKe35dvH7nljfiOqMQPYpzIwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETh+w8iHWHEEz5g9UTy8KcqhKvUlGbL/y+a 7qyiHLCCCqjFFTWMsovV0+J0OPD8FjK+p9NnxUpcoq2nXipdbGyFrOeWKO/1apTU X/fsx2kD2qzCmcRpKpGrJZ+2KKowkJsKgMaHkvxWSp3fOQOn+Re8mQduAHYKwesk Sx2Z/xo2elANt0QT1HeWJDUXYVTxsP/6x6fLreWiIe+cVuymUXijpjOCK9DBg9Tv xH2UNCMVdt2PCVlEQq80xZApq/rWpIG70AKt7BEmyojJp8Bpjfj9X4FqdJ/zsnYp snlqEUeYxSBCMW+PYzRfxn+NIs/vb6FLtK5/aMs7BmhRSFzT7Gw= -----END CERTIFICATE-----Generated at Sun Oct 25 06:08:10 2026 by rpki-client