$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: ImbhwNLsP8innFEBXXcKncHI+Uc3WN9DchHb4ZE+fsg= Subject key identifier: 27:5B:F8:ED:62:85:C7:2A:8C:6E:D6:A5:70:1A:E5:89:71:13:BE:B1 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 0AABC1009B8BD809446D0FBF75491BD042F237C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 038A Signing time: Thu 16 Apr 2026 06:11:48 +0000 Manifest this update: Thu 16 Apr 2026 06:06:48 +0000 Manifest next update: Sun 19 Apr 2026 06:25:48 +0000 Files and hashes: 1: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: mMlTIcqxKcxttFOPnaDtZAV6Onx9NrY6YXXXzaYT6uY=) 2: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 3: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 4: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 5: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ab:c1:00:9b:8b:d8:09:44:6d:0f:bf:75:49:1b:d0:42:f2:37:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Apr 16 06:06:48 2026 GMT Not After : Apr 19 06:25:48 2026 GMT Subject: CN=275BF8ED6285C72A8C6ED6A5701AE5897113BEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:89:9f:b7:e9:d5:7c:9a:e3:09:64:ea:30: fe:d0:13:a0:9d:c6:61:e1:4b:17:7b:53:39:5a:3c: 7c:cf:d8:47:aa:9b:93:6e:94:f6:80:c9:1e:8d:33: b7:77:ff:21:87:2f:64:8e:0c:3f:5c:f7:70:e1:cd: df:35:dc:1d:96:72:5f:1b:98:a1:b2:74:3a:8c:91: ab:05:37:f1:e3:9e:a8:2e:9c:d0:ca:ae:44:2e:07: 3f:d9:ac:97:6b:19:ac:9a:ba:c2:13:0d:b7:21:77: c1:c4:77:7e:70:0b:00:65:29:3f:1d:ed:89:64:3e: c4:3f:02:aa:2c:f6:7a:31:c6:10:1f:c4:54:1d:31: 4c:c4:b6:f4:6a:b3:3d:9a:84:63:ec:ce:d3:80:6d: 33:89:c7:a7:1d:b5:c0:53:fb:4a:56:6d:10:14:1c: bc:fc:45:39:5b:88:e7:cf:15:96:fd:d1:b5:c6:fb: 51:27:59:8f:31:4f:19:ba:20:2b:4c:ad:3e:d8:ab: 15:42:cc:81:3a:2a:f3:0e:91:ef:ae:79:95:ae:8b: 6f:fe:fb:bf:ae:6b:cb:e2:29:d4:84:78:9d:e0:f7: 12:a5:e6:51:44:f3:0e:b7:19:ec:b5:13:f3:48:b0: 57:6f:f1:a7:e5:a6:b3:ec:0b:d5:71:ad:88:05:86: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5B:F8:ED:62:85:C7:2A:8C:6E:D6:A5:70:1A:E5:89:71:13:BE:B1 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:fc:41:b2:dc:b3:2e:73:de:86:2c:4a:20:08:2c:69:ae: e3:1b:c9:74:ae:ad:89:e3:89:a5:8c:82:23:3e:66:6e:1c:b1: e8:0c:8d:b9:47:57:6e:d3:e4:36:ef:ff:ba:a0:2b:5b:d9:11: 8b:b4:a4:70:54:0d:4d:d6:39:78:b9:1a:11:c0:1f:c2:67:56: 73:fc:d1:71:4a:cc:1c:d6:7a:da:42:75:30:57:af:c7:f3:0e: 3c:78:3a:28:a7:08:3a:5b:6b:b8:45:15:d1:b3:9b:d2:8e:a2: ef:3e:94:a7:b4:0e:10:d7:d1:b9:ff:72:c2:ac:c2:58:a4:c0: 34:97:6d:c4:0f:0c:94:4f:a3:c0:8f:c6:14:ae:99:12:d0:9a: e0:59:02:9d:c0:28:28:47:15:95:88:4e:7c:ee:69:c1:9f:7e: e0:80:b3:6f:94:70:59:4a:1c:9d:c4:b6:5b:9f:9e:df:1f:25: a3:bc:60:e9:d0:93:35:9b:33:cf:c3:50:9e:5b:7e:42:c6:64: 82:39:95:1b:93:bc:3e:7e:e3:df:f0:9d:ff:26:5a:f7:c1:89: 9f:fc:e5:43:80:f7:88:95:eb:3f:48:58:b4:2a:0b:aa:08:ba: b5:e3:07:4c:51:84:87:ab:a9:d8:8a:1b:2d:10:72:db:bd:67: f2:e7:fa:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqvBAJuL2AlEbQ+/dUkb0ELyN8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNjA0MTYwNjA2NDhaFw0yNjA0MTkwNjI1NDhaMDMxMTAvBgNV BAMTKDI3NUJGOEVENjI4NUM3MkE4QzZFRDZBNTcwMUFFNTg5NzExM0JFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrImft+nVfJrjCWTqMP7QE6Cd xmHhSxd7UzlaPHzP2Eeqm5NulPaAyR6NM7d3/yGHL2SODD9c93Dhzd813B2Wcl8b mKGydDqMkasFN/HjnqgunNDKrkQuBz/ZrJdrGayausITDbchd8HEd35wCwBlKT8d 7YlkPsQ/Aqos9noxxhAfxFQdMUzEtvRqsz2ahGPsztOAbTOJx6cdtcBT+0pWbRAU HLz8RTlbiOfPFZb90bXG+1EnWY8xTxm6ICtMrT7YqxVCzIE6KvMOke+ueZWui2/+ +7+ua8viKdSEeJ3g9xKl5lFE8w63Gey1E/NIsFdv8aflprPsC9VxrYgFhlMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ1v47WKFxyqMbtalcBrliXETvrEwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADl/EGy3LMuc96GLEogCCxpruMbyXSurYnj iaWMgiM+Zm4csegMjblHV27T5Dbv/7qgK1vZEYu0pHBUDU3WOXi5GhHAH8JnVnP8 0XFKzBzWetpCdTBXr8fzDjx4OiinCDpba7hFFdGzm9KOou8+lKe0DhDX0bn/csKs wlikwDSXbcQPDJRPo8CPxhSumRLQmuBZAp3AKChHFZWITnzuacGffuCAs2+UcFlK HJ3Etlufnt8fJaO8YOnQkzWbM8/DUJ5bfkLGZII5lRuTvD5+49/wnf8mWvfBiZ/8 5UOA94iV6z9IWLQqC6oIurXjB0xRhIerqdiKGy0Qctu9Z/Ln+h4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:35:36 2026 by rpki-client