$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft File: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json) Hash identifier: lfOEONuGd839pF6rV39rL5yh9qkQQxeHhEXrpzrIswA= Subject key identifier: 28:C6:43:79:92:A2:62:40:D0:26:91:46:08:8A:3C:7E:7C:08:4A:97 Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B Certificate issuer: /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Certificate serial: 0FA551A30A8A7C8B6BB9951436C079D7F27AEB91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft Manifest number: 01FA Signing time: Sun 01 Mar 2026 15:11:26 +0000 Manifest this update: Sun 01 Mar 2026 15:06:26 +0000 Manifest next update: Wed 04 Mar 2026 18:33:26 +0000 Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: w5I/RiOjY8frWwGU7LEaZXsggiMBZTucFm8ZgJxFBJY=) 2: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: FTYnPWS24KutCEB77kSb6hW+KB2BZNWH+4XZLzuJC2Y=) 3: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: gUPec13MpOh/L6ApoTOoXMCL0lUU/LU7wF0FSGuDigk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a5:51:a3:0a:8a:7c:8b:6b:b9:95:14:36:c0:79:d7:f2:7a:eb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Validity Not Before: Mar 1 15:06:26 2026 GMT Not After : Mar 4 18:33:26 2026 GMT Subject: CN=28C6437992A26240D0269146088A3C7E7C084A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:d4:97:8f:10:4b:3a:b0:63:ed:2c:4f:63: a6:bc:e2:76:73:b5:84:61:33:11:9e:7d:75:33:e2: db:bd:80:b6:92:71:f1:8c:db:a1:b5:91:0e:8c:9c: 37:4c:97:9c:ec:b5:81:40:19:49:49:e9:65:0a:43: a7:91:01:cf:b0:3e:40:9a:15:4e:21:5c:0b:5b:06: 21:6b:e9:ce:6e:7e:0d:5a:e5:ca:2b:ee:14:11:96: 39:02:db:0f:95:02:78:3a:d7:8f:a4:91:e9:79:7b: 57:c0:96:c9:75:17:3a:c4:22:a7:d2:db:0b:7b:7c: c5:f7:1e:cd:e5:2e:52:d8:0c:e0:26:91:4b:bb:3b: 4b:de:58:27:cd:96:18:74:36:59:33:eb:3b:b1:d7: f9:e7:7b:16:e2:1e:82:13:64:a9:2a:2d:5b:ec:9f: a2:6b:9a:ae:42:73:fc:30:7e:76:e8:8a:4f:70:ac: 4b:2f:6a:e0:85:ee:e0:db:37:10:95:b2:51:6b:f6: dc:60:99:b4:6f:33:bd:99:d1:81:5a:af:73:b3:5d: e5:e1:13:4c:c0:17:94:42:1a:8d:63:a8:1d:b3:8a: 37:56:c7:19:19:79:da:6c:8d:12:9f:2a:d9:a1:4a: 13:5d:12:59:f5:e9:8b:db:15:e1:9b:2d:94:ab:e0: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C6:43:79:92:A2:62:40:D0:26:91:46:08:8A:3C:7E:7C:08:4A:97 X509v3 Authority Key Identifier: keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d0:66:62:79:5e:a2:44:11:0c:e1:a5:7c:8b:35:12:1e:3a: 7f:0c:82:d3:a5:da:9c:27:1b:34:f8:ed:20:90:de:33:5b:d3: 5f:6e:64:c0:89:e4:10:52:54:c4:1a:d5:3b:df:e6:1c:5e:e9: 5f:e5:8a:fd:c1:f6:f8:c7:8a:3d:da:db:76:28:ca:c3:72:1b: 9f:2a:74:af:57:55:bc:6c:31:84:5e:ba:1c:c4:bb:3e:0f:d1: 6f:b1:97:22:2f:c3:14:1f:f7:6c:b3:15:d2:79:96:05:68:0b: ca:0e:43:97:9e:11:9f:16:bb:82:cb:73:8a:8b:4d:65:ac:58: 25:4c:c8:2b:17:56:9c:79:ca:3d:e6:f9:cb:f4:c2:e1:e3:e3: 02:9d:53:50:37:e3:d3:87:a3:42:5e:ad:f5:69:87:49:48:0c: 97:73:be:7c:c7:b7:dd:69:16:5b:35:04:cf:47:98:e6:82:20: 0e:a0:a6:62:94:04:3e:f8:bf:0e:52:91:31:75:38:2e:4e:c5: 8e:fb:61:09:e8:4e:b5:56:1c:75:ca:de:03:7c:df:b8:45:c5: 98:d6:d2:8d:a5:33:1b:6b:c3:97:12:1d:37:db:7f:31:cf:30: de:d8:ce:56:71:3f:15:d6:34:5b:46:0e:31:f8:61:a4:4b:ad: 0c:c2:d8:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6VRowqKfItruZUUNsB51/J665EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5 MTlCNEIzQjAeFw0yNjAzMDExNTA2MjZaFw0yNjAzMDQxODMzMjZaMDMxMTAvBgNV BAMTKDI4QzY0Mzc5OTJBMjYyNDBEMDI2OTE0NjA4OEEzQzdFN0MwODRBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCtSXjxBLOrBj7SxPY6a84nZz tYRhMxGefXUz4tu9gLaScfGM26G1kQ6MnDdMl5zstYFAGUlJ6WUKQ6eRAc+wPkCa FU4hXAtbBiFr6c5ufg1a5cor7hQRljkC2w+VAng614+kkel5e1fAlsl1FzrEIqfS 2wt7fMX3Hs3lLlLYDOAmkUu7O0veWCfNlhh0Nlkz6zux1/nnexbiHoITZKkqLVvs n6Jrmq5Cc/wwfnboik9wrEsvauCF7uDbNxCVslFr9txgmbRvM72Z0YFar3OzXeXh E0zAF5RCGo1jqB2zijdWxxkZedpsjRKfKtmhShNdEln16YvbFeGbLZSr4OJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMZDeZKiYkDQJpFGCIo8fnwISpcwHwYDVR0j BBgwFoAUvndmP381kaDmTY1ayY8mNZGbSzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGI0ZmU5My03Mjk2LTQ4YjQtYWEwZC1jOGE1YTNkZmQ1OWEvMC9CRTc3NjYzRjdG MzU5MUEwRTY0RDhENUFDOThGMjYzNTkxOUI0QjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5MTlC NEIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2 MzU5MTlCNEIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjQZmJ5XqJEEQzhpXyLNRIeOn8MgtOl2pwn GzT47SCQ3jNb019uZMCJ5BBSVMQa1Tvf5hxe6V/liv3B9vjHij3a23YoysNyG58q dK9XVbxsMYReuhzEuz4P0W+xlyIvwxQf92yzFdJ5lgVoC8oOQ5eeEZ8Wu4LLc4qL TWWsWCVMyCsXVpx5yj3m+cv0wuHj4wKdU1A349OHo0JerfVph0lIDJdzvnzHt91p Fls1BM9HmOaCIA6gpmKUBD74vw5SkTF1OC5OxY77YQnoTrVWHHXK3gN837hFxZjW 0o2lMxtrw5cSHTfbfzHPMN7YzlZxPxXWNFtGDjH4YaRLrQzC2GU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:41 2026 by rpki-client