$ rpki-client -vvvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: 1Rj2LkIyr1uRiWHFpjXKXhGIFRnOdNcDO5A3jA1FCWQ= Subject key identifier: 43:1D:06:9C:59:99:C7:BF:00:DF:A0:D4:5E:FE:E9:D6:F1:5D:95:0D Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 2448618C760982F506B2A4CBF79E2CE709FC43EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: B0 Signing time: Fri 11 Sep 2026 12:21:22 +0000 Manifest this update: Fri 11 Sep 2026 12:16:22 +0000 Manifest next update: Sat 12 Sep 2026 13:41:22 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 2: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 3: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: 7tF/stJsZdHz6fpVZbIN5y++G417epgWWTREreHMWQ8=) 4: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 5: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 6: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:48:61:8c:76:09:82:f5:06:b2:a4:cb:f7:9e:2c:e7:09:fc:43:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Sep 11 12:16:22 2026 GMT Not After : Sep 12 13:41:22 2026 GMT Subject: CN=431D069C5999C7BF00DFA0D45EFEE9D6F15D950D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3c:ef:7f:90:77:b7:97:72:65:65:83:36:2f: fc:ca:f4:20:b6:44:4e:e2:40:1a:cb:98:88:87:cb: dc:30:98:cc:50:b1:d8:d1:a4:59:bf:53:a9:e5:72: ac:1e:2f:65:00:bf:13:83:e0:36:8b:59:c4:15:9a: 03:d0:86:00:a3:a3:15:90:b2:ac:62:22:51:15:30: 42:bf:22:eb:70:a5:c3:1e:ea:72:d1:5a:d0:36:66: b6:f1:aa:b6:bb:93:7d:a4:09:5a:ed:ec:cd:dd:15: 71:1d:6a:5c:40:6f:8d:dd:2c:ed:04:fd:45:f3:07: dd:6f:0d:2a:9a:5e:c1:88:ee:b7:51:74:15:28:c1: 60:d8:62:b2:2c:c4:5b:3b:5d:ac:5c:c9:eb:29:e0: d5:16:44:4d:e4:cf:fd:65:33:02:c9:70:4b:04:24: fa:7c:1e:43:fb:a9:4f:24:97:db:67:43:55:6e:5b: 26:93:ac:c2:0b:d9:e9:13:e3:82:c8:25:8f:9d:6d: 78:6e:2b:9a:7d:ac:b5:5e:95:75:5b:e8:99:ac:a9: e6:8a:7c:98:92:3e:4c:50:b9:e5:db:2d:2e:7c:ee: cf:e7:f5:e6:1d:36:f2:20:35:3c:bb:3a:ca:fa:5e: ee:ac:4f:cb:3f:3a:d1:a9:b2:3e:aa:ae:0a:b9:04: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1D:06:9C:59:99:C7:BF:00:DF:A0:D4:5E:FE:E9:D6:F1:5D:95:0D X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:28:9f:e6:b0:e5:cc:53:5b:e0:cd:18:f8:d9:2d:2a:c6:4b: 2c:41:33:ad:1e:bc:bd:87:8f:39:46:d8:0c:45:00:7c:be:f5: ee:69:bc:38:b1:8d:3d:9c:81:cd:14:1a:b1:d1:73:49:d2:49: 41:f9:7a:6a:86:e6:18:d7:a0:9b:98:7e:18:33:99:55:3f:2d: 78:31:63:c4:d7:14:12:c1:35:a8:f8:7d:fd:48:e1:4a:95:1e: 05:0f:83:1f:e3:e7:f2:a5:15:90:f9:76:03:57:4d:29:21:4f: 61:b2:52:b7:45:bd:60:70:b6:a2:bf:e1:5e:1f:0b:70:7e:4a: d4:c4:f4:b6:73:48:d6:3b:59:b0:b0:84:6d:45:a5:d0:15:73: 80:f4:a3:73:cc:6e:be:83:95:f6:14:9f:e6:56:5a:b1:26:46: 46:01:19:81:30:a9:a2:7d:93:39:9f:82:cd:0a:b2:94:d2:13: 57:f6:67:fd:07:d7:2e:54:76:a4:a7:83:45:71:59:17:4c:f4: c4:5e:af:d0:32:45:a1:2e:15:c5:4c:66:d9:dc:c0:51:50:6d: b0:85:df:47:d2:12:a5:8e:e4:78:10:6c:91:5d:2d:d5:94:17: e4:04:f7:e7:f7:d7:f8:a8:dd:59:4e:ce:f9:38:da:69:a3:a3: 35:7a:72:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEhhjHYJgvUGsqTL954s5wn8Q+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA5MTExMjE2MjJaFw0yNjA5MTIxMzQxMjJaMDMxMTAvBgNV BAMTKDQzMUQwNjlDNTk5OUM3QkYwMERGQTBENDVFRkVFOUQ2RjE1RDk1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQPO9/kHe3l3JlZYM2L/zK9CC2 RE7iQBrLmIiHy9wwmMxQsdjRpFm/U6nlcqweL2UAvxOD4DaLWcQVmgPQhgCjoxWQ sqxiIlEVMEK/IutwpcMe6nLRWtA2Zrbxqra7k32kCVrt7M3dFXEdalxAb43dLO0E /UXzB91vDSqaXsGI7rdRdBUowWDYYrIsxFs7Xaxcyesp4NUWRE3kz/1lMwLJcEsE JPp8HkP7qU8kl9tnQ1VuWyaTrMIL2ekT44LIJY+dbXhuK5p9rLVelXVb6JmsqeaK fJiSPkxQueXbLS587s/n9eYdNvIgNTy7Osr6Xu6sT8s/OtGpsj6qrgq5BLCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQx0GnFmZx78A36DUXv7p1vFdlQ0wHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAson+aw5cxTW+DNGPjZLSrGSyxBM60evL2H jzlG2AxFAHy+9e5pvDixjT2cgc0UGrHRc0nSSUH5emqG5hjXoJuYfhgzmVU/LXgx Y8TXFBLBNaj4ff1I4UqVHgUPgx/j5/KlFZD5dgNXTSkhT2GyUrdFvWBwtqK/4V4f C3B+StTE9LZzSNY7WbCwhG1FpdAVc4D0o3PMbr6DlfYUn+ZWWrEmRkYBGYEwqaJ9 kzmfgs0KspTSE1f2Z/0H1y5UdqSng0VxWRdM9MRer9AyRaEuFcVMZtncwFFQbbCF 30fSEqWO5HgQbJFdLdWUF+QE9+f31/io3VlOzvk42mmjozV6ctg= -----END CERTIFICATE-----Generated at Fri Sep 11 17:01:33 2026 by rpki-client