$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft File: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json) Hash identifier: n+8p8tUBNGuQc1xiwROA7cdurUJfrvpOg3z7B1stEDQ= Subject key identifier: BB:97:94:6D:68:3E:39:AC:7B:CC:1A:7F:1A:0F:37:13:77:51:8D:36 Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B Certificate issuer: /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Certificate serial: 04F318E1E9E0470D1A0E82AA8401DC0F50D39964 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft Manifest number: 020F Signing time: Thu 16 Apr 2026 22:01:31 +0000 Manifest this update: Thu 16 Apr 2026 21:56:31 +0000 Manifest next update: Mon 20 Apr 2026 05:53:31 +0000 Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: w5I/RiOjY8frWwGU7LEaZXsggiMBZTucFm8ZgJxFBJY=) 2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: FTYnPWS24KutCEB77kSb6hW+KB2BZNWH+4XZLzuJC2Y=) 3: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: SoZH4wYcTr8duzZB0s7gmNRD7WvvOEqytLhxN7dmdlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f3:18:e1:e9:e0:47:0d:1a:0e:82:aa:84:01:dc:0f:50:d3:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Validity Not Before: Apr 16 21:56:31 2026 GMT Not After : Apr 20 05:53:31 2026 GMT Subject: CN=BB97946D683E39AC7BCC1A7F1A0F371377518D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:78:f6:c9:65:a9:2c:32:b5:86:ae:32:84: 71:2f:38:53:eb:1b:55:db:5b:19:16:01:6e:e2:34: e6:9c:80:a1:ca:1f:b6:f8:d1:a4:f6:b0:bc:30:da: ff:40:5b:53:c0:d4:34:6d:51:9b:b3:27:d1:37:62: 7d:da:b9:09:4e:61:b3:ae:d5:86:7a:cb:fd:a1:3e: 78:d1:d8:79:7a:e2:7e:8f:f5:e4:46:ce:99:43:93: e2:68:09:89:c6:90:4c:72:4d:eb:11:a6:b6:79:0b: 87:4a:fd:79:bb:1d:a7:a2:21:a9:9c:a5:f5:ce:b1: 9e:47:25:29:cc:50:02:f1:de:45:de:e6:4c:7d:e0: 79:88:d5:16:50:54:42:61:a5:de:40:64:81:b7:1c: c5:a1:e2:a2:00:1d:73:8f:1c:f4:16:d2:a9:bd:65: b4:6b:05:ea:b3:2b:44:a9:9c:8e:77:a1:ea:a4:33: 85:8d:79:4a:4e:86:73:66:6e:8e:4d:92:28:f0:30: 77:76:a7:b0:fd:dc:37:17:3f:1a:46:86:4c:05:38: 01:01:10:be:af:a0:64:c4:d8:66:f7:c6:eb:5d:36: be:bf:e1:e7:b4:c1:f8:35:ba:31:a4:23:d1:ee:e9: f7:ac:e1:54:ac:88:64:46:0d:38:c2:2e:d0:87:60: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:97:94:6D:68:3E:39:AC:7B:CC:1A:7F:1A:0F:37:13:77:51:8D:36 X509v3 Authority Key Identifier: keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:be:f5:60:a7:ae:8a:72:14:5f:97:b5:a2:e5:dc:c5:7e:45: e7:c5:01:81:e7:0d:6f:82:cb:8f:1b:43:0d:46:7a:56:49:e7: 37:35:2a:ac:0d:6d:3a:e3:91:c7:82:ac:41:82:cd:bd:df:86: fc:5f:ce:b3:df:7c:35:3d:e4:da:f5:07:b1:db:90:37:a4:50: d8:a3:d8:ef:75:8f:78:23:9f:ab:a2:d8:81:cd:0e:5c:8d:37: 30:f9:a0:a4:a4:16:e7:06:a2:fa:d0:72:63:14:2b:06:af:9b: d7:5d:00:e3:80:c8:5c:4b:e8:e0:f0:39:65:2a:86:ba:c4:81: 91:6c:e9:b2:6f:3f:b8:22:0e:12:d8:62:a8:91:ad:ec:2c:20: 2e:0a:b0:fe:69:3e:4a:07:2a:e9:c2:04:ec:08:e6:76:23:a2: 6a:ef:78:77:03:0f:09:c1:92:34:81:bf:27:bf:b7:39:70:a7: e9:15:cb:c4:f0:6e:9b:84:2b:87:92:bd:53:76:d5:1b:4b:cd: fc:0b:25:b1:7e:af:48:77:36:ba:1f:24:21:04:bb:66:f1:fe: 3a:03:b4:74:e6:8b:35:0f:17:11:33:fc:8d:fd:bd:62:0b:cd: ed:db:07:11:be:76:e6:34:33:1e:14:7d:8b:fa:48:de:4f:4e: af:18:e1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPMY4engRw0aDoKqhAHcD1DTmWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5 MTlCNEIzQjAeFw0yNjA0MTYyMTU2MzFaFw0yNjA0MjAwNTUzMzFaMDMxMTAvBgNV BAMTKEJCOTc5NDZENjgzRTM5QUM3QkNDMUE3RjFBMEYzNzEzNzc1MThEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xXj2yWWpLDK1hq4yhHEvOFPr G1XbWxkWAW7iNOacgKHKH7b40aT2sLww2v9AW1PA1DRtUZuzJ9E3Yn3auQlOYbOu 1YZ6y/2hPnjR2Hl64n6P9eRGzplDk+JoCYnGkExyTesRprZ5C4dK/Xm7HaeiIamc pfXOsZ5HJSnMUALx3kXe5kx94HmI1RZQVEJhpd5AZIG3HMWh4qIAHXOPHPQW0qm9 ZbRrBeqzK0SpnI53oeqkM4WNeUpOhnNmbo5NkijwMHd2p7D93DcXPxpGhkwFOAEB EL6voGTE2Gb3xutdNr6/4ee0wfg1ujGkI9Hu6fes4VSsiGRGDTjCLtCHYCv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu5eUbWg+Oax7zBp/Gg83E3dRjTYwHwYDVR0j BBgwFoAUvndmP381kaDmTY1ayY8mNZGbSzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGI0ZmU5My03Mjk2LTQ4YjQtYWEwZC1jOGE1YTNkZmQ1OWEvMC9CRTc3NjYzRjdG MzU5MUEwRTY0RDhENUFDOThGMjYzNTkxOUI0QjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5MTlC NEIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2 MzU5MTlCNEIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD++9WCnropyFF+XtaLl3MV+RefFAYHnDW+C y48bQw1GelZJ5zc1KqwNbTrjkceCrEGCzb3fhvxfzrPffDU95Nr1B7HbkDekUNij 2O91j3gjn6ui2IHNDlyNNzD5oKSkFucGovrQcmMUKwavm9ddAOOAyFxL6ODwOWUq hrrEgZFs6bJvP7giDhLYYqiRrewsIC4KsP5pPkoHKunCBOwI5nYjomrveHcDDwnB kjSBvye/tzlwp+kVy8TwbpuEK4eSvVN21RtLzfwLJbF+r0h3NrofJCEEu2bx/joD tHTmizUPFxEz/I39vWILze3bBxG+duY0Mx4UfYv6SN5PTq8Y4Zc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:07 2026 by rpki-client