$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: nU0vpi1P5WvvVJwXErxtBkF/19MD4MaO5+lNlJMh7Tk= Subject key identifier: 41:F1:CC:8B:2E:6B:08:B9:B6:85:A8:DB:23:DE:DF:40:81:34:DE:FD Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 4EA8886CADD9C74A91F241D91262F6B681346DAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0375 Signing time: Sat 28 Feb 2026 04:41:47 +0000 Manifest this update: Sat 28 Feb 2026 04:36:47 +0000 Manifest next update: Tue 03 Mar 2026 08:43:47 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 2: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 3: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 5: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: uepJG2WluZjJdZ6XVZGGiTOYDjIsDrvgPxSNMUwyrGw=) 6: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a8:88:6c:ad:d9:c7:4a:91:f2:41:d9:12:62:f6:b6:81:34:6d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Feb 28 04:36:47 2026 GMT Not After : Mar 3 08:43:47 2026 GMT Subject: CN=41F1CC8B2E6B08B9B685A8DB23DEDF408134DEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:d2:03:33:d1:9d:83:33:8e:f5:49:15:8b: 84:68:b8:4e:59:fe:2d:31:50:c2:46:62:8e:bb:48: dc:36:73:4e:fd:de:62:f8:be:6a:00:c4:36:18:bf: 1e:0a:c8:5e:80:3f:1e:cb:81:d6:70:5b:2b:6f:e4: d4:d3:0b:26:ef:c8:2e:ba:29:6b:e7:d4:93:2f:b3: 02:40:54:6e:86:6e:c2:04:50:e8:5c:2f:74:2d:e5: 87:79:67:66:1e:6e:5f:82:08:69:8d:ea:d0:6d:95: b6:f5:d0:6e:73:a9:05:86:0b:a2:28:23:9e:99:67: f8:a8:4c:0c:49:0a:ca:7a:43:cf:9a:e8:38:5b:e8: 01:15:0a:48:42:f4:22:b4:a8:e1:ab:32:81:09:5a: 35:c6:dd:65:00:13:82:fd:84:8a:ca:c1:18:d9:8e: cb:c5:df:5a:96:6c:ff:69:29:d9:4b:a4:d3:32:bd: 81:be:dc:d1:ae:e4:ad:8c:75:46:a0:0a:7a:da:ce: f2:14:8c:f3:a8:de:79:3a:48:bc:74:08:d1:0f:ea: 68:4e:95:aa:f1:e2:aa:54:7c:a9:a4:55:4d:aa:f9: 97:a3:7c:c5:db:73:0d:68:af:7c:e5:b1:f9:02:1d: fa:ef:18:c1:7b:3a:45:8f:8d:b1:c9:32:0d:71:b6: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F1:CC:8B:2E:6B:08:B9:B6:85:A8:DB:23:DE:DF:40:81:34:DE:FD X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:34:3b:2e:c5:de:a9:1d:81:c6:33:d4:6a:dc:13:c7:6e: ec:c3:47:59:80:83:63:b4:d0:c4:1a:a6:a1:b9:76:c5:c4:ed: 1c:22:c8:3b:c8:3e:ab:d4:06:f2:9a:b0:ce:49:1f:39:c5:f9: 3b:59:e4:12:1d:cc:ee:2f:55:26:16:39:98:5b:45:b8:de:94: e5:01:ed:37:56:f8:e9:f4:9d:c9:20:19:b4:7f:67:fa:cc:12: 8d:21:6e:57:06:97:87:31:6d:5f:69:3e:48:f5:d6:9c:8e:48: 38:93:f9:9c:8f:b0:d2:d8:fa:a8:4c:3a:9d:ee:d9:cc:66:31: fd:f7:aa:b0:99:8a:2d:2e:43:ba:a9:f0:d1:00:53:56:3c:3f: 9e:73:a8:50:38:12:b7:51:f7:5c:8b:31:d0:a3:71:ba:d7:43: e7:32:11:67:1f:f0:c7:c0:45:d6:ca:ce:c3:b6:1c:87:34:38: 32:06:27:02:43:67:bf:4b:aa:fd:75:16:72:35:c7:a0:ce:b9: 25:14:69:21:fb:e9:ba:27:4b:af:97:10:74:2e:b4:ed:87:62: 1f:e3:5a:77:29:7f:4d:ed:60:7a:e5:9f:6c:a0:c1:c5:f5:fd: d3:41:88:67:5c:64:e0:53:38:fd:5f:38:71:70:a1:2e:e7:10: 78:2a:b8:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqiIbK3Zx0qR8kHZEmL2toE0ba8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNjAyMjgwNDM2NDdaFw0yNjAzMDMwODQzNDdaMDMxMTAvBgNV BAMTKDQxRjFDQzhCMkU2QjA4QjlCNjg1QThEQjIzREVERjQwODEzNERFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKNIDM9GdgzOO9UkVi4RouE5Z /i0xUMJGYo67SNw2c0793mL4vmoAxDYYvx4KyF6APx7LgdZwWytv5NTTCybvyC66 KWvn1JMvswJAVG6GbsIEUOhcL3Qt5Yd5Z2Yebl+CCGmN6tBtlbb10G5zqQWGC6Io I56ZZ/ioTAxJCsp6Q8+a6Dhb6AEVCkhC9CK0qOGrMoEJWjXG3WUAE4L9hIrKwRjZ jsvF31qWbP9pKdlLpNMyvYG+3NGu5K2MdUagCnrazvIUjPOo3nk6SLx0CNEP6mhO larx4qpUfKmkVU2q+ZejfMXbcw1or3zlsfkCHfrvGMF7OkWPjbHJMg1xtvNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfHMiy5rCLm2hajbI97fQIE03v0wHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATaNDsuxd6pHYHGM9Rq3BPHbuzDR1mAg2O0 0MQapqG5dsXE7RwiyDvIPqvUBvKasM5JHznF+TtZ5BIdzO4vVSYWOZhbRbjelOUB 7TdW+On0nckgGbR/Z/rMEo0hblcGl4cxbV9pPkj11pyOSDiT+ZyPsNLY+qhMOp3u 2cxmMf33qrCZii0uQ7qp8NEAU1Y8P55zqFA4ErdR91yLMdCjcbrXQ+cyEWcf8MfA RdbKzsO2HIc0ODIGJwJDZ79Lqv11FnI1x6DOuSUUaSH76bonS6+XEHQutO2HYh/j Wncpf03tYHrln2ygwcX1/dNBiGdcZOBTOP1fOHFwoS7nEHgquPo= -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:57 2026 by rpki-client