$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: s+bH2BunxdEc/Wm26Vcm0Q7kZ4vLIB3qFtoMdkgRj4o= Subject key identifier: 9A:C8:14:A9:9A:40:84:15:2C:42:AD:30:3B:C6:AA:51:30:06:56:7F Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 69D679E5B968E735E3DD1DFC79C088BBE83B2193 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: 14 Signing time: Sat 16 May 2026 13:05:02 +0000 Manifest this update: Sat 16 May 2026 13:00:02 +0000 Manifest next update: Sun 17 May 2026 15:23:02 +0000 Files and hashes: 1: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: Rm2xodIAcNVYojUSZ3sw1uTI25RvrfzhqfIY20vBacU=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) 3: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d6:79:e5:b9:68:e7:35:e3:dd:1d:fc:79:c0:88:bb:e8:3b:21:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: May 16 13:00:02 2026 GMT Not After : May 17 15:23:02 2026 GMT Subject: CN=9AC814A99A4084152C42AD303BC6AA513006567F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:9e:77:a3:54:c2:7b:d5:58:37:21:da:80: b4:d7:8a:20:6c:8c:9a:35:1d:1f:6a:56:8b:82:25: 3b:b2:3b:61:fc:0b:3c:d6:c8:16:d2:20:e4:a4:d4: e1:75:0d:49:ea:22:bd:31:16:f7:8f:57:9d:1d:64: fd:c7:bd:f4:66:6f:5d:f6:62:4e:a3:43:a1:38:c2: b6:8f:be:e0:dc:28:f6:a8:e9:e5:ce:86:07:39:52: df:d9:4a:ac:b4:40:dd:4c:b6:4b:ba:7f:2e:28:67: 20:66:2f:7a:ba:c4:61:e1:2a:6a:94:f4:4d:70:3a: b6:fa:57:9b:29:4b:57:2f:5b:43:ef:a5:7b:10:ee: 29:a9:90:b6:1a:95:2c:b7:a5:c0:01:38:5c:68:93: 66:10:bc:27:fc:17:1e:af:b6:0e:bf:cc:07:88:7e: 05:ff:3d:0c:0e:46:82:a9:27:d4:e2:88:68:b3:82: 40:83:09:b5:a4:b4:62:c6:07:f2:c0:6c:61:73:0f: cf:a0:3c:fe:d5:41:6e:9d:bf:1f:71:be:e9:94:98: bf:25:6b:64:a7:fe:c4:af:bf:34:8b:6d:43:7b:62: b2:85:31:72:90:89:b4:93:e5:09:fd:16:f9:84:36: bf:ba:54:75:16:6f:5b:10:6e:fb:1f:02:bf:8c:01: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:14:A9:9A:40:84:15:2C:42:AD:30:3B:C6:AA:51:30:06:56:7F X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2b:b8:2a:ee:da:1d:13:b8:95:9d:02:c5:54:88:44:81:9d: 1f:8c:a1:21:41:e1:2d:70:bd:0d:99:92:65:f9:bd:98:88:f8: 96:66:c4:1b:2d:78:e6:77:40:32:91:c2:e2:25:e5:5b:57:3e: 4f:e4:77:ef:c0:02:cf:d8:d8:b9:fd:ed:ea:2e:ec:7d:d5:e8: 92:9c:2b:0a:3b:8e:14:e3:4c:cc:d9:8a:fc:c8:d7:10:25:8f: 55:ec:15:ce:e8:d5:0b:29:70:95:f3:ec:40:d4:65:5f:5a:91: 02:14:8a:66:12:60:05:d2:21:d0:fd:4b:41:88:fb:c7:83:87: 2f:01:c6:d4:73:bd:0f:1b:c1:cb:a1:cc:b9:73:9d:05:93:2e: 14:24:8d:1a:a7:7c:bd:49:3e:38:ce:9d:77:c6:b3:f8:e0:b4: 24:69:2e:4e:c3:ed:cd:96:bb:d5:98:9a:08:1b:ed:11:f1:cd: 4d:09:f4:4b:d4:85:6d:47:a1:d2:79:e3:b1:ad:d2:f1:3f:e2: 47:f3:d5:39:bc:59:e8:d1:45:40:94:b0:9a:43:0d:1e:3a:e3: 31:81:84:1d:99:71:1f:5f:72:5c:b3:b9:8a:74:8e:ee:f5:94: ac:1b:d7:7b:7f:74:1b:d4:b8:08:49:c6:b6:f7:f0:42:f6:05: 6e:23:82:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadZ55blo5zXj3R38ecCIu+g7IZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA1MTYxMzAwMDJaFw0yNjA1MTcxNTIzMDJaMDMxMTAvBgNV BAMTKDlBQzgxNEE5OUE0MDg0MTUyQzQyQUQzMDNCQzZBQTUxMzAwNjU2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2553o1TCe9VYNyHagLTXiiBs jJo1HR9qVouCJTuyO2H8CzzWyBbSIOSk1OF1DUnqIr0xFvePV50dZP3HvfRmb132 Yk6jQ6E4wraPvuDcKPao6eXOhgc5Ut/ZSqy0QN1Mtku6fy4oZyBmL3q6xGHhKmqU 9E1wOrb6V5spS1cvW0PvpXsQ7impkLYalSy3pcABOFxok2YQvCf8Fx6vtg6/zAeI fgX/PQwORoKpJ9TiiGizgkCDCbWktGLGB/LAbGFzD8+gPP7VQW6dvx9xvumUmL8l a2Sn/sSvvzSLbUN7YrKFMXKQibST5Qn9FvmENr+6VHUWb1sQbvsfAr+MAbJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsgUqZpAhBUsQq0wO8aqUTAGVn8wHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwruCru2h0TuJWdAsVUiESBnR+MoSFB4S1w vQ2ZkmX5vZiI+JZmxBsteOZ3QDKRwuIl5VtXPk/kd+/AAs/Y2Ln97eou7H3V6JKc Kwo7jhTjTMzZivzI1xAlj1XsFc7o1QspcJXz7EDUZV9akQIUimYSYAXSIdD9S0GI +8eDhy8BxtRzvQ8bwcuhzLlznQWTLhQkjRqnfL1JPjjOnXfGs/jgtCRpLk7D7c2W u9WYmggb7RHxzU0J9EvUhW1HodJ547Gt0vE/4kfz1Tm8WejRRUCUsJpDDR464zGB hB2ZcR9fclyzuYp0ju71lKwb13t/dBvUuAhJxrb38EL2BW4jgqY= -----END CERTIFICATE-----Generated at Sat May 16 16:39:09 2026 by rpki-client