$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: oxBWEgSdkEhy6GM5jowS0bVe1kUjDnDAsjhMh0OfTEw= Subject key identifier: 69:85:B0:04:0F:7E:E0:8E:AB:D8:6D:B8:2F:C0:96:30:1F:B1:B8:DC Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 27E53A5A3AAC77DAF82D1821405B47B389451BF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 0132 Signing time: Wed 15 Apr 2026 22:02:20 +0000 Manifest this update: Wed 15 Apr 2026 21:57:20 +0000 Manifest next update: Sat 18 Apr 2026 23:00:20 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: KvwcBpBTuER0nRPxsetTVR1yDqpVIe6ao64M4VudoNo=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: V+6ICfxJlzIXx0tsJaXlK0qkvR8zksD4IbjFfV4kF/o=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: t+VcXkUWUHKF6UOibDMpWswUlzEPH8qZz8XYAlMIEgc=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: uVhjikc+01ILAABNfYp2OgN/UN5xvnNbRu+Hb3oFuYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e5:3a:5a:3a:ac:77:da:f8:2d:18:21:40:5b:47:b3:89:45:1b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Apr 15 21:57:20 2026 GMT Not After : Apr 18 23:00:20 2026 GMT Subject: CN=6985B0040F7EE08EABD86DB82FC096301FB1B8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:ca:5f:de:d9:82:a8:5c:ad:c0:a9:da:5c: c8:48:88:6e:93:db:69:40:b8:8d:b8:12:92:57:fc: dc:6b:88:f0:38:02:0c:24:29:a6:d6:55:a2:c1:f2: 85:65:c6:25:6d:43:c5:fd:ae:2f:be:5a:53:87:7a: ac:85:d5:4c:4c:1f:0b:9d:ea:82:2d:f5:0f:ff:ac: b5:e9:b8:ff:e7:3d:0c:b2:bc:24:87:c8:01:84:b4: 30:30:1b:9f:5d:e3:d9:e0:cb:65:70:ce:71:96:b7: 5a:10:3c:7e:01:89:be:bd:e8:50:54:78:7e:ec:45: d4:da:4a:d6:04:54:06:ab:e3:d9:49:8d:45:08:39: eb:01:b8:dd:88:e6:7b:ae:5a:8b:c7:03:24:25:fe: 5f:ba:e5:43:5e:87:d4:43:d1:ac:ed:06:a3:33:51: 4b:0f:f1:69:de:57:ab:f1:f1:8d:28:fb:b6:6d:48: a7:8e:bc:c5:ce:cd:ef:26:82:74:1b:dc:49:37:56: 87:7a:1b:45:a3:c7:23:50:c2:3b:7e:c4:47:c0:59: fb:7e:8e:03:7a:2a:0d:c2:b2:73:ef:ec:d8:07:99: fd:3b:3e:fc:f0:80:a2:97:bf:36:da:50:f7:75:fb: 19:4a:2d:d8:92:d2:12:0a:f1:b9:f1:cf:41:f5:e3: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:B0:04:0F:7E:E0:8E:AB:D8:6D:B8:2F:C0:96:30:1F:B1:B8:DC X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:10:67:99:3f:e2:ad:68:84:f9:5e:6d:dd:d8:14:bd:7d: 52:5d:dc:7b:4b:34:0d:13:f2:a8:d7:42:5c:78:fa:d2:f1:e1: ee:ac:64:00:ce:3f:0a:0c:b6:85:6c:47:59:2b:85:4b:e3:b0: e0:5f:82:a6:ab:e2:fd:72:6f:8a:9e:ea:d9:f6:4a:26:d5:22: 47:83:ea:9d:39:30:cf:32:e8:1f:5f:4f:2c:fd:a7:6e:ce:02: 3e:95:65:b3:09:92:c5:90:b5:33:aa:b8:1d:b3:dc:85:72:69: 1c:e6:98:6a:f5:a9:be:1d:ae:42:19:cb:2c:e1:0a:ba:03:6a: 62:55:77:47:7a:f8:8f:08:23:b9:9c:ba:11:2d:58:35:3a:51: 86:f2:c0:a5:c1:e7:d0:d9:c8:8d:5b:ac:13:9a:9a:60:58:ff: b9:f0:dd:98:9a:4a:57:bf:a7:1d:8a:5f:73:9d:d1:73:a5:aa: cd:b2:51:15:1a:f4:61:a6:d1:af:ee:55:0c:22:f2:20:ad:31: 16:b7:86:f1:a6:51:3c:5a:4f:34:dd:d6:36:3b:b6:73:41:88: fc:32:05:0c:14:31:ee:31:f1:40:82:a7:54:37:62:00:9f:f0: 92:39:ac:a7:12:20:8d:c5:32:aa:a4:fa:a3:8f:97:3c:11:ef: 3e:b8:2c:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+U6Wjqsd9r4LRghQFtHs4lFG/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjA0MTUyMTU3MjBaFw0yNjA0MTgyMzAwMjBaMDMxMTAvBgNV BAMTKDY5ODVCMDA0MEY3RUUwOEVBQkQ4NkRCODJGQzA5NjMwMUZCMUI4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYspf3tmCqFytwKnaXMhIiG6T 22lAuI24EpJX/NxriPA4AgwkKabWVaLB8oVlxiVtQ8X9ri++WlOHeqyF1UxMHwud 6oIt9Q//rLXpuP/nPQyyvCSHyAGEtDAwG59d49ngy2VwznGWt1oQPH4Bib696FBU eH7sRdTaStYEVAar49lJjUUIOesBuN2I5nuuWovHAyQl/l+65UNeh9RD0aztBqMz UUsP8WneV6vx8Y0o+7ZtSKeOvMXOze8mgnQb3Ek3Vod6G0WjxyNQwjt+xEfAWft+ jgN6Kg3CsnPv7NgHmf07PvzwgKKXvzbaUPd1+xlKLdiS0hIK8bnxz0H14yPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYWwBA9+4I6r2G24L8CWMB+xuNwwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMaEGeZP+KtaIT5Xm3d2BS9fVJd3HtLNA0T 8qjXQlx4+tLx4e6sZADOPwoMtoVsR1krhUvjsOBfgqar4v1yb4qe6tn2SibVIkeD 6p05MM8y6B9fTyz9p27OAj6VZbMJksWQtTOquB2z3IVyaRzmmGr1qb4drkIZyyzh CroDamJVd0d6+I8II7mcuhEtWDU6UYbywKXB59DZyI1brBOammBY/7nw3ZiaSle/ px2KX3Od0XOlqs2yURUa9GGm0a/uVQwi8iCtMRa3hvGmUTxaTzTd1jY7tnNBiPwy BQwUMe4x8UCCp1Q3YgCf8JI5rKcSII3FMqqk+qOPlzwR7z64LEo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:10:25 2026 by rpki-client