$ rpki-client -vvvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: jrK233WWNrYaFiCV8iTqUbk6sr5T2zpG42sIYTCtWz4= Subject key identifier: 7A:F9:72:F4:0E:66:93:FB:9D:F4:E4:43:A3:75:91:C3:09:1F:70:A0 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 2603DB9CA21B97FE684BB52AB2254735FB8D9C26 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: EC Signing time: Mon 26 Oct 2026 20:05:30 +0000 Manifest this update: Mon 26 Oct 2026 20:00:30 +0000 Manifest next update: Tue 27 Oct 2026 23:14:30 +0000 Files and hashes: 1: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: l53b1Qr9da93q35YSzZJVrWCqO7NrG8aUcYYFhpRij8=) 2: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 3: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 5: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 6: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:03:db:9c:a2:1b:97:fe:68:4b:b5:2a:b2:25:47:35:fb:8d:9c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Oct 26 20:00:30 2026 GMT Not After : Oct 27 23:14:30 2026 GMT Subject: CN=7AF972F40E6693FB9DF4E443A37591C3091F70A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:57:36:8f:65:75:b8:27:ed:f1:1b:d5:ad: 4f:db:1e:8a:4c:17:ad:3a:e1:7e:8f:37:ad:6c:2a: be:da:ab:c1:60:4b:b3:3e:3a:0d:04:9b:cb:bd:d9: 5f:f3:d1:8b:44:74:67:f7:71:35:39:63:fa:af:6b: b2:02:a9:ad:f0:38:68:c0:2e:22:6e:54:8c:0c:ed: bd:e8:f2:3f:ca:24:fd:ef:c1:87:48:6a:ab:0f:2a: b8:58:e9:bf:68:1f:f2:6c:0b:96:73:94:5c:09:f7: 9a:70:fb:1b:27:45:c4:50:06:03:6d:48:e9:a4:2b: 55:60:96:ee:95:7d:19:1c:4b:4c:f4:92:72:4f:75: fd:fc:ed:7b:ce:1d:aa:15:3b:f4:22:64:05:e0:4b: 56:df:d6:0a:c1:b8:ba:6b:71:5f:a7:96:ab:56:4b: a2:80:d4:9a:d0:e7:3a:0a:37:20:b0:a0:ca:19:82: 40:7c:95:88:33:3e:b8:81:4b:0a:ff:0f:b7:7c:ca: 3a:d2:98:39:76:03:46:02:ee:e1:89:33:32:31:3d: a1:d5:29:c0:5a:af:65:39:a6:a5:e9:25:df:7d:5b: ef:5d:2e:e7:ba:13:ea:af:e4:0d:3c:5d:cb:37:d9: b1:80:e1:a9:d3:a7:33:1f:87:e7:90:16:e1:c3:90: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:72:F4:0E:66:93:FB:9D:F4:E4:43:A3:75:91:C3:09:1F:70:A0 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:76:1c:3a:19:3d:8a:3d:0a:5e:f6:b6:ef:57:72:60:64:3f: 27:87:e4:15:c3:d0:5b:ef:78:a1:4f:c5:df:bc:46:6c:47:5c: 46:1d:58:10:03:4d:ed:3e:d0:37:1f:4c:c1:ec:90:d1:e5:20: 71:c3:e5:ca:7f:54:98:54:83:24:01:8b:23:39:df:74:d8:84: 38:40:85:7a:11:5e:39:4a:20:53:d1:d4:f0:72:2d:c9:f9:af: 0c:81:11:e3:1e:f5:ee:43:4e:84:ed:60:98:c5:0b:82:c1:a0: ad:b5:24:01:0c:70:f5:5b:90:b6:ab:00:46:ee:66:b4:4e:25: 5c:9a:db:a0:50:fb:0e:31:76:6c:55:e6:16:2c:ed:f0:94:ec: df:fd:26:23:82:75:83:41:45:06:fd:7a:18:6d:4a:8e:c1:dd: e9:09:6a:c0:6c:24:bf:05:e9:68:49:ff:f0:30:85:c6:11:9a: c5:71:8c:4e:ce:9b:31:1b:1d:60:16:a2:38:55:a4:09:51:49: 9d:b4:0b:ac:f5:2b:81:f0:16:63:ed:da:64:9c:e0:28:2c:98: 96:2f:41:93:ca:1a:cb:0a:17:1c:c5:52:33:91:c1:73:ba:7d: 45:c3:d2:a0:ac:58:01:60:ed:08:76:2f:f7:c0:83:34:3d:2e: 49:86:bb:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgPbnKIbl/5oS7UqsiVHNfuNnCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjEwMjYyMDAwMzBaFw0yNjEwMjcyMzE0MzBaMDMxMTAvBgNV BAMTKDdBRjk3MkY0MEU2NjkzRkI5REY0RTQ0M0EzNzU5MUMzMDkxRjcwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHllc2j2V1uCft8RvVrU/bHopM F6064X6PN61sKr7aq8FgS7M+Og0Em8u92V/z0YtEdGf3cTU5Y/qva7ICqa3wOGjA LiJuVIwM7b3o8j/KJP3vwYdIaqsPKrhY6b9oH/JsC5ZzlFwJ95pw+xsnRcRQBgNt SOmkK1Vglu6VfRkcS0z0knJPdf387XvOHaoVO/QiZAXgS1bf1grBuLprcV+nlqtW S6KA1JrQ5zoKNyCwoMoZgkB8lYgzPriBSwr/D7d8yjrSmDl2A0YC7uGJMzIxPaHV KcBar2U5pqXpJd99W+9dLue6E+qv5A08Xcs32bGA4anTpzMfh+eQFuHDkGOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevly9A5mk/ud9ORDo3WRwwkfcKAwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV2HDoZPYo9Cl72tu9XcmBkPyeH5BXD0Fvv eKFPxd+8RmxHXEYdWBADTe0+0DcfTMHskNHlIHHD5cp/VJhUgyQBiyM533TYhDhA hXoRXjlKIFPR1PByLcn5rwyBEeMe9e5DToTtYJjFC4LBoK21JAEMcPVbkLarAEbu ZrROJVya26BQ+w4xdmxV5hYs7fCU7N/9JiOCdYNBRQb9ehhtSo7B3ekJasBsJL8F 6WhJ//AwhcYRmsVxjE7OmzEbHWAWojhVpAlRSZ20C6z1K4HwFmPt2mSc4CgsmJYv QZPKGssKFxzFUjORwXO6fUXD0qCsWAFg7Qh2L/fAgzQ9LkmGu0k= -----END CERTIFICATE-----Generated at Tue Oct 27 06:21:44 2026 by rpki-client