$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json) Hash identifier: hzLFXUTBg8lpNtIHEFJvpw1aDm2qe+2VfEpsxi2zHjI= Subject key identifier: 02:8E:27:FD:3B:B9:B5:0D:A9:5C:B7:8C:33:0D:6D:8F:E1:4F:23:5D Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Certificate serial: 765D8B11824F4EE98B0433412A7D51833C507B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft Manifest number: EC Signing time: Sat 24 Oct 2026 19:18:22 +0000 Manifest this update: Sat 24 Oct 2026 19:13:22 +0000 Manifest next update: Sun 25 Oct 2026 22:49:22 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=) 2: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: EN7x4CiV64wqkbQTGSBRca211ebydcd5igX8QBadLMY=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=) 4: 3130332e3132322e322e302f32332d3233203d3e20313430333839.roa (hash: GS50FPcLnVk0nf1P1jqutfCnqi0rHC7uoCtFDL1ZZaM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5d:8b:11:82:4f:4e:e9:8b:04:33:41:2a:7d:51:83:3c:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Validity Not Before: Oct 24 19:13:22 2026 GMT Not After : Oct 25 22:49:22 2026 GMT Subject: CN=028E27FD3BB9B50DA95CB78C330D6D8FE14F235D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:c4:44:4c:6e:26:3f:e7:a5:66:27:79:15: e9:3e:91:30:4b:b1:7c:07:60:a7:2c:4e:d2:b1:62: 50:1a:bf:ba:26:86:ec:4f:f7:f5:79:fa:20:b0:f6: 13:af:ae:eb:dd:47:79:cf:60:a7:c4:62:13:c9:90: 94:1f:a6:c4:cf:18:1b:29:81:72:eb:98:52:96:59: 95:cc:38:36:1c:63:5a:a3:1c:c9:4e:54:ae:fc:a6: 7a:7a:6f:da:c6:4d:7e:36:6d:f0:04:ef:52:d1:6e: 31:6e:2e:f9:29:64:77:a7:53:20:c4:84:2e:1a:f6: 2c:a0:4c:88:ca:12:1a:83:b8:84:fd:10:80:b0:9e: 98:1c:f1:b0:1b:c8:22:0f:ec:9c:27:85:5a:bb:66: 4e:72:d0:42:19:b8:d1:85:b0:67:fa:a7:6f:77:4f: 76:d7:83:71:57:09:bc:02:2c:0e:a9:b5:0a:24:8b: cb:1d:87:18:f0:1b:ac:28:71:7e:62:e3:66:61:ac: 61:03:a6:e4:3d:be:5f:9b:88:60:ba:60:75:45:9e: 62:f1:e4:e6:07:7c:59:02:10:a3:ef:e5:cf:3b:6b: b1:44:cc:cc:22:c2:77:ff:54:64:e4:bb:f9:ce:54: 25:f6:15:d7:16:f6:24:da:57:21:79:e5:a5:2a:a5: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8E:27:FD:3B:B9:B5:0D:A9:5C:B7:8C:33:0D:6D:8F:E1:4F:23:5D X509v3 Authority Key Identifier: keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d6:b3:cb:93:ab:5f:6f:8e:f0:05:5a:78:24:ef:3e:67:a3: 4e:dd:d4:04:42:bc:76:37:7a:37:42:6a:db:31:02:5e:71:81: 7e:6b:de:6b:0f:a1:33:91:e1:ba:6c:7f:e4:a5:a6:6d:58:2e: 98:91:5c:63:c7:48:f6:7e:03:f8:ec:42:2a:01:28:23:dc:78: 67:ad:78:21:a9:fd:32:e6:5c:8e:d8:04:96:5a:cd:5b:36:57: f0:ad:06:fa:56:ba:c0:d1:00:cc:c0:6e:c3:6b:0c:a5:55:91: 12:92:ec:34:b6:2c:4b:a6:ca:63:bf:67:42:a5:f8:20:a3:f6: db:38:d3:48:67:c9:2a:52:14:35:32:96:7e:e6:37:30:40:db: c0:35:f2:d2:dc:ae:f9:3f:b4:e0:f1:8b:69:c1:49:e9:14:f8: ce:9c:0b:0a:6e:c4:a2:ef:32:35:28:c4:fe:c9:a6:c1:1b:65: 96:e6:0b:38:69:30:e6:0d:01:70:e8:67:4e:c8:d5:40:f8:75: 29:3a:00:b0:f5:bc:ff:96:45:b3:cf:d5:b8:7a:18:c4:c7:a0: 2a:1c:02:1a:6c:a1:d1:90:e8:52:00:80:cc:fb:a5:76:e3:93: 61:90:74:cc:8a:0f:f1:3c:dc:e0:54:22:08:6f:80:b8:fc:61: 7c:c7:24:2e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITdl2LEYJPTumLBDNBKn1RgzxQezANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NE MUJGM0IzMB4XDTI2MTAyNDE5MTMyMloXDTI2MTAyNTIyNDkyMlowMzExMC8GA1UE AxMoMDI4RTI3RkQzQkI5QjUwREE5NUNCNzhDMzMwRDZEOEZFMTRGMjM1RDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM/xxERMbiY/56VmJ3kV6T6RMEux fAdgpyxO0rFiUBq/uiaG7E/39Xn6ILD2E6+u691Hec9gp8RiE8mQlB+mxM8YGymB cuuYUpZZlcw4NhxjWqMcyU5Urvymenpv2sZNfjZt8ATvUtFuMW4u+Slkd6dTIMSE Lhr2LKBMiMoSGoO4hP0QgLCemBzxsBvIIg/snCeFWrtmTnLQQhm40YWwZ/qnb3dP dteDcVcJvAIsDqm1CiSLyx2HGPAbrChxfmLjZmGsYQOm5D2+X5uIYLpgdUWeYvHk 5gd8WQIQo+/lzztrsUTMzCLCd/9UZOS7+c5UJfYV1xb2JNpXIXnlpSqlJtsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQCjif9O7m1Dalct4wzDW2P4U8jXTAfBgNVHSME GDAWgBS+OA4UBm+PMUAo/QYVsq7szRvzszAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9CRTM4MEUxNDA2 NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NEMUJGM0IzLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0JFMzgwRTE0MDY2RjhGMzE0MDI4RkQwNjE1QjJBRUVDQ0QxQkYz QjMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMjE5NTVmMC00YjQwLTRjM2ItOWZm Zi05ZjkyNThjMzk3NWEvMC9CRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVF Q0NEMUJGM0IzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEABdazy5OrX2+O8AVaeCTvPmejTt3UBEK8djd6 N0Jq2zECXnGBfmveaw+hM5Hhumx/5KWmbVgumJFcY8dI9n4D+OxCKgEoI9x4Z614 Ian9MuZcjtgEllrNWzZX8K0G+la6wNEAzMBuw2sMpVWREpLsNLYsS6bKY79nQqX4 IKP22zjTSGfJKlIUNTKWfuY3MEDbwDXy0tyu+T+04PGLacFJ6RT4zpwLCm7Eou8y NSjE/smmwRtlluYLOGkw5g0BcOhnTsjVQPh1KToAsPW8/5ZFs8/VuHoYxMegKhwC Gmyh0ZDoUgCAzPulduOTYZB0zIoP8Tzc4FQiCG+AuPxhfMckLg== -----END CERTIFICATE-----Generated at Sun Oct 25 06:07:34 2026 by rpki-client