$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: rKUDt/Zd76CBO7YQC1BjNfA38xU3X3oT+X+ylPW6iHE= Subject key identifier: 29:14:73:47:BD:32:16:2E:9A:E3:72:B4:57:11:9A:28:68:F8:AE:BD Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 0F62C16D6D5B13B293377413CA25A7F885681B09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 011D Signing time: Mon 02 Mar 2026 06:02:17 +0000 Manifest this update: Mon 02 Mar 2026 05:57:17 +0000 Manifest next update: Thu 05 Mar 2026 12:16:17 +0000 Files and hashes: 1: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 2: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: chr5QApv7TgA4do1TkRz0ZZMSDHPghgrAqm7C2C8DZk=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:62:c1:6d:6d:5b:13:b2:93:37:74:13:ca:25:a7:f8:85:68:1b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Mar 2 05:57:17 2026 GMT Not After : Mar 5 12:16:17 2026 GMT Subject: CN=29147347BD32162E9AE372B457119A2868F8AEBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:f8:40:c0:cf:20:e4:02:b0:31:f2:44:a9: a0:5b:9c:a7:2e:e5:57:22:33:37:ab:21:40:8f:47: 70:f9:be:e3:21:d3:b3:fa:e6:bd:40:c1:1a:13:0a: 30:cf:99:21:04:d1:5c:2b:fb:a2:dd:2b:07:94:0a: 4f:e5:a0:7c:22:09:08:61:3f:6c:88:a6:12:91:ad: 60:39:1d:e2:b8:ab:ef:6f:0f:53:be:d0:c6:e7:5c: 25:99:e3:da:eb:e0:8a:1c:87:6a:79:de:67:9a:0d: 99:9c:06:c6:ed:e4:38:b5:86:6d:ff:7b:df:57:c6: 4c:49:34:33:52:a1:c8:68:ba:11:e6:82:8b:8b:0e: 10:c0:8e:0d:07:dc:bb:ba:94:f8:e3:80:e8:eb:01: fa:4c:df:5c:16:04:3a:ed:65:99:bb:79:0f:6a:51: 10:bc:d3:74:f2:05:da:02:ef:2a:0c:94:cc:fa:c9: 5d:bf:bd:39:38:55:77:40:cb:0e:31:65:24:9a:88: 22:55:4f:d4:e6:72:25:bd:a4:c6:2d:34:fa:ba:65: 41:68:de:6d:04:e9:4a:d3:41:18:a3:b0:17:ed:3c: 55:c8:f5:61:b5:a0:be:9c:f9:f8:7b:38:ec:fa:fb: ba:07:9f:ab:44:b5:11:da:23:11:21:cf:f9:d4:20: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:73:47:BD:32:16:2E:9A:E3:72:B4:57:11:9A:28:68:F8:AE:BD X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:78:0f:f0:40:9f:ed:c8:9a:94:3b:b1:1b:be:c6:af:9c:e2: d9:f4:3e:9d:c1:5e:1f:a3:78:a6:bb:b6:ff:86:79:a6:f6:1a: 1b:4e:8d:3b:96:ac:f6:ef:51:c0:d2:8f:96:ce:1b:1b:07:9e: a5:be:92:ff:fb:c5:36:92:12:6e:93:5e:a2:f7:2d:32:9b:d9: 04:76:b8:db:ae:da:e4:fa:fd:27:96:c4:06:4c:b3:21:97:1a: 70:cf:90:9f:37:44:86:f5:c1:79:ec:0d:9e:50:2c:d4:2f:00: cc:ab:84:c0:69:9a:1c:0a:fd:22:70:ca:5c:a8:40:58:d5:4b: 69:93:24:8d:8d:e8:67:55:ce:e8:f4:9f:6f:e7:cc:da:ae:3f: a8:6c:d4:b1:e7:c5:ec:ef:79:f1:da:40:59:fb:2f:26:17:4a: 59:b1:a0:eb:ed:ac:f5:ab:a6:80:f8:b2:01:be:d3:4f:91:1e: 22:77:55:a5:30:1e:10:66:cf:39:f2:19:3b:c5:bc:ca:de:8f: 8a:0a:ca:3d:4b:bb:b5:94:a1:9a:f7:8c:26:ee:e4:b1:78:da: 9d:cd:87:b7:34:20:87:a5:05:00:b7:4c:93:8e:d5:b9:76:bc: 7d:fc:f7:d9:4e:90:2b:ae:4c:5b:ab:f8:3c:7c:07:9d:c6:ac: dc:7b:d3:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2LBbW1bE7KTN3QTyiWn+IVoGwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjAzMDIwNTU3MTdaFw0yNjAzMDUxMjE2MTdaMDMxMTAvBgNV BAMTKDI5MTQ3MzQ3QkQzMjE2MkU5QUUzNzJCNDU3MTE5QTI4NjhGOEFFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2PfhAwM8g5AKwMfJEqaBbnKcu 5VciMzerIUCPR3D5vuMh07P65r1AwRoTCjDPmSEE0Vwr+6LdKweUCk/loHwiCQhh P2yIphKRrWA5HeK4q+9vD1O+0MbnXCWZ49rr4Ioch2p53meaDZmcBsbt5Di1hm3/ e99XxkxJNDNSochouhHmgouLDhDAjg0H3Lu6lPjjgOjrAfpM31wWBDrtZZm7eQ9q URC803TyBdoC7yoMlMz6yV2/vTk4VXdAyw4xZSSaiCJVT9TmciW9pMYtNPq6ZUFo 3m0E6UrTQRijsBftPFXI9WG1oL6c+fh7OOz6+7oHn6tEtRHaIxEhz/nUIAoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRRzR70yFi6a43K0VxGaKGj4rr0wHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB54D/BAn+3ImpQ7sRu+xq+c4tn0Pp3BXh+j eKa7tv+Geab2GhtOjTuWrPbvUcDSj5bOGxsHnqW+kv/7xTaSEm6TXqL3LTKb2QR2 uNuu2uT6/SeWxAZMsyGXGnDPkJ83RIb1wXnsDZ5QLNQvAMyrhMBpmhwK/SJwylyo QFjVS2mTJI2N6GdVzuj0n2/nzNquP6hs1LHnxezvefHaQFn7LyYXSlmxoOvtrPWr poD4sgG+00+RHiJ3VaUwHhBmzznyGTvFvMrej4oKyj1Lu7WUoZr3jCbu5LF42p3N h7c0IIelBQC3TJOO1bl2vH3899lOkCuuTFur+Dx8B53GrNx703k= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:46 2026 by rpki-client