$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: 72zLH3r0StxAGd/VlHble5ckoUTp9hOMACo8mAh43/k= Subject key identifier: 68:D2:00:7E:B1:1D:FA:D7:B6:16:82:C7:BB:F7:63:08:6D:39:02:31 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 3EFDB14D15CF059BF0EFC9FD0D0F77373561EE56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 021F Signing time: Sat 18 Apr 2026 10:51:55 +0000 Manifest this update: Sat 18 Apr 2026 10:46:55 +0000 Manifest next update: Tue 21 Apr 2026 13:52:55 +0000 Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: Ypdk+rbW2Smbcc4jBiDBrxubFYS8GnU2gAvDgEBJuzs=) 2: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 13:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:b1:4d:15:cf:05:9b:f0:ef:c9:fd:0d:0f:77:37:35:61:ee:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Apr 18 10:46:55 2026 GMT Not After : Apr 21 13:52:55 2026 GMT Subject: CN=68D2007EB11DFAD7B61682C7BBF763086D390231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:fa:0b:bf:b9:8a:a8:73:fb:6c:d5:89:24: 37:1a:c3:fd:85:6f:07:4a:89:13:49:d5:b3:91:f2: 43:87:52:63:fd:97:49:6f:40:31:70:bc:c8:bf:dc: f9:04:63:18:20:50:a7:a2:8e:c5:d1:40:35:7c:b0: 2a:86:d9:b9:fc:01:5e:74:85:ec:81:72:64:9d:6b: 4a:ee:34:22:c7:7a:14:b0:92:19:00:15:70:72:27: c6:60:d1:4e:c9:7e:8f:cd:66:fe:c4:59:75:5f:77: 13:f1:07:f5:36:d3:e0:37:80:fe:7d:c2:1b:45:f3: e3:88:4e:65:71:46:47:b5:8f:46:97:af:14:d0:f1: 0c:e3:e3:80:5c:dd:13:20:f5:1c:cb:12:31:46:3e: 0e:f2:22:fd:2a:ea:75:eb:13:31:c3:78:77:8f:f7: 90:13:76:e2:b7:34:3f:4f:14:68:e7:e7:f2:d7:b1: 41:6a:9a:ac:2d:64:b3:b0:13:b7:d5:cc:4b:0b:89: f1:e9:09:ca:92:d1:a1:cd:ff:22:b5:c7:a8:b1:e6: 3a:7d:5b:d9:f5:99:e5:8a:af:61:2d:2a:50:13:45: 4d:7c:9a:73:13:8b:9c:ad:6c:70:a3:c6:d9:6e:67: c3:cd:4e:b0:b4:7c:f9:47:fb:74:bf:c4:44:62:75: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:00:7E:B1:1D:FA:D7:B6:16:82:C7:BB:F7:63:08:6D:39:02:31 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:40:ce:eb:8c:b9:f5:ab:65:24:b3:6f:78:b9:5c:b9:50:06: bd:41:fb:8b:ed:20:cf:36:2c:a0:a5:c7:18:a8:7e:bc:59:66: 1d:35:9f:fd:7b:6e:93:4e:67:c2:88:18:b6:6c:bb:5b:09:ea: ce:3f:66:27:ba:49:87:e0:7d:da:92:75:68:f1:35:f8:c5:e7: 6a:a5:5c:69:c6:c0:55:21:c4:82:d0:10:e7:36:b0:41:7a:60: 89:93:7d:94:0d:a0:be:74:6c:8f:ab:e6:69:90:1a:b6:91:16: a7:fc:8d:98:13:44:03:e1:9c:fd:75:d5:37:11:88:cf:e7:e7: 78:e3:e6:8e:10:4f:76:35:c6:10:c0:6b:78:42:de:2c:d5:cb: 87:f7:ca:52:d6:b3:54:d0:ec:d1:bb:71:07:bb:18:f2:6a:49: 6a:c7:e8:50:65:e1:d9:b0:11:9d:4e:03:38:f4:6c:3b:1f:a0: 05:22:44:05:d1:d8:28:c6:27:60:5e:ad:25:f1:b3:1c:d9:b9: 3f:31:ed:db:25:c2:1e:da:d6:90:2a:f5:a5:7e:3d:c1:0b:0e: f8:6d:fe:e3:96:db:b5:d6:9d:0f:a1:af:8f:36:17:9e:d2:38: 3e:95:d4:f0:61:c9:eb:3a:fc:e6:b1:8d:09:0f:c5:71:fe:9e: c1:de:5d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv2xTRXPBZvw78n9DQ93NzVh7lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNjA0MTgxMDQ2NTVaFw0yNjA0MjExMzUyNTVaMDMxMTAvBgNV BAMTKDY4RDIwMDdFQjExREZBRDdCNjE2ODJDN0JCRjc2MzA4NkQzOTAyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cPoLv7mKqHP7bNWJJDcaw/2F bwdKiRNJ1bOR8kOHUmP9l0lvQDFwvMi/3PkEYxggUKeijsXRQDV8sCqG2bn8AV50 heyBcmSda0ruNCLHehSwkhkAFXByJ8Zg0U7Jfo/NZv7EWXVfdxPxB/U20+A3gP59 whtF8+OITmVxRke1j0aXrxTQ8Qzj44Bc3RMg9RzLEjFGPg7yIv0q6nXrEzHDeHeP 95ATduK3ND9PFGjn5/LXsUFqmqwtZLOwE7fVzEsLifHpCcqS0aHN/yK1x6ix5jp9 W9n1meWKr2EtKlATRU18mnMTi5ytbHCjxtluZ8PNTrC0fPlH+3S/xERidWuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNIAfrEd+te2FoLHu/djCG05AjEwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhAzuuMufWrZSSzb3i5XLlQBr1B+4vtIM82 LKClxxiofrxZZh01n/17bpNOZ8KIGLZsu1sJ6s4/Zie6SYfgfdqSdWjxNfjF52ql XGnGwFUhxILQEOc2sEF6YImTfZQNoL50bI+r5mmQGraRFqf8jZgTRAPhnP111TcR iM/n53jj5o4QT3Y1xhDAa3hC3izVy4f3ylLWs1TQ7NG7cQe7GPJqSWrH6FBl4dmw EZ1OAzj0bDsfoAUiRAXR2CjGJ2BerSXxsxzZuT8x7dslwh7a1pAq9aV+PcELDvht /uOW27XWnQ+hr482F57SOD6V1PBhyes6/OaxjQkPxXH+nsHeXeY= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:18 2026 by rpki-client