$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: Y8xOAolsJj1XCtUVj5Xa2dUdL2721hsRozc37RNm5KY= Subject key identifier: F6:08:A6:96:96:08:99:3D:42:90:33:05:3E:E3:9E:29:96:5D:9E:F3 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 2890138281FB1D0160A4519ACB4720326BA94B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 0209 Signing time: Sat 28 Feb 2026 00:51:49 +0000 Manifest this update: Sat 28 Feb 2026 00:46:49 +0000 Manifest next update: Tue 03 Mar 2026 06:46:49 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: lAY4AFx6j4ENTtX/5Sic1TWQTEW1WElYGoOsg0fzrX4=) 2: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: eZ+2Y9zHQkv9+4M71EMcUiE/qzdqJgETgWsMlnjuXVU=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: C/jOD70S/lq/f2o4lqBzdMrlb5+QMVzSY4OdcjUHnHk=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:90:13:82:81:fb:1d:01:60:a4:51:9a:cb:47:20:32:6b:a9:4b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Feb 28 00:46:49 2026 GMT Not After : Mar 3 06:46:49 2026 GMT Subject: CN=F608A6969608993D429033053EE39E29965D9EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:97:87:23:70:47:38:82:30:24:c4:fe:9b: a4:60:b2:ab:cd:fa:7d:2c:3a:41:95:90:f6:75:6b: f8:fa:b5:39:bf:7f:24:2e:55:fa:f5:13:c3:a7:f1: d5:81:16:98:d3:d9:f0:3a:82:29:c0:b3:0c:71:34: bf:f0:75:d9:f0:55:41:21:4d:d5:f7:52:60:48:6e: 72:31:52:1c:53:f1:30:14:f0:aa:f6:0d:d3:3f:ab: a3:6d:70:ff:b7:d1:a4:fe:4b:36:7f:5c:c7:2e:3d: 8f:d2:a6:fb:4d:f5:b8:d9:86:1e:e5:05:36:97:f8: 7c:3b:f4:1f:20:5d:45:6c:6a:17:c9:b6:47:3a:4e: 14:50:d2:9e:bc:17:7a:78:ea:ec:9d:a3:55:10:84: cc:2c:07:16:bf:29:73:e9:05:fc:ee:bc:f3:3d:d8: f1:23:f7:53:32:db:81:4a:91:73:55:76:7d:97:6a: f1:88:3d:0f:ae:42:1d:1d:78:ac:c8:2f:6f:a7:a9: 8f:df:c5:5e:3d:5a:a1:12:73:ba:97:f1:ab:4a:16: 98:1c:d1:05:4e:3c:5a:fb:5c:a2:64:8a:7c:5a:91: 21:32:7c:af:da:b0:9a:8c:1d:11:25:5b:79:c8:de: 7d:d6:0f:c8:25:a1:9c:13:37:1c:76:db:4d:bc:6c: 11:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:08:A6:96:96:08:99:3D:42:90:33:05:3E:E3:9E:29:96:5D:9E:F3 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:8d:68:6e:9d:ea:d1:77:a0:37:8c:ab:6a:20:de:7b:55:37: 61:19:c7:24:66:94:46:30:71:2a:27:ac:d4:d4:2d:68:93:1a: 6c:bc:28:94:07:05:3b:4c:fe:68:28:5d:40:69:f5:8d:e3:33: 4d:fd:4e:f9:94:3c:63:0b:52:cc:77:84:e4:5a:b6:8f:f9:7b: 0f:14:7a:83:b6:0d:4e:4f:c1:92:f2:99:f5:01:8d:0b:8a:71: 2d:26:ad:38:1a:42:5e:54:6d:f7:a1:ad:f6:06:22:17:6d:0c: 7d:6b:c0:18:1c:3c:51:86:c5:36:6c:34:c3:71:3f:b3:da:6e: c9:05:62:2b:d0:04:b9:11:2b:89:34:7d:79:7a:ef:10:22:f3: 31:1a:42:88:8c:95:9a:a2:3b:9f:f7:38:de:82:ff:dc:a7:10: 0f:48:ff:6b:f0:2b:74:62:01:76:6e:36:27:2e:37:b0:42:39: d7:ec:ca:5c:71:6e:dd:74:44:67:fe:a5:77:ce:f0:73:ab:36: 1a:02:d6:fc:c7:92:ae:ca:59:d6:f7:2e:76:ab:6a:45:b3:55: 76:bd:6b:e2:a6:4b:90:58:3d:c5:23:45:f2:3c:a5:66:fc:43: 00:4c:b5:87:74:d9:d6:9d:cc:9a:a7:f6:90:81:49:d0:c1:6f: 42:4b:82:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJATgoH7HQFgpFGay0cgMmupSzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNjAyMjgwMDQ2NDlaFw0yNjAzMDMwNjQ2NDlaMDMxMTAvBgNV BAMTKEY2MDhBNjk2OTYwODk5M0Q0MjkwMzMwNTNFRTM5RTI5OTY1RDlFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgM5eHI3BHOIIwJMT+m6RgsqvN +n0sOkGVkPZ1a/j6tTm/fyQuVfr1E8On8dWBFpjT2fA6ginAswxxNL/wddnwVUEh TdX3UmBIbnIxUhxT8TAU8Kr2DdM/q6NtcP+30aT+SzZ/XMcuPY/SpvtN9bjZhh7l BTaX+Hw79B8gXUVsahfJtkc6ThRQ0p68F3p46uydo1UQhMwsBxa/KXPpBfzuvPM9 2PEj91My24FKkXNVdn2XavGIPQ+uQh0deKzIL2+nqY/fxV49WqESc7qX8atKFpgc 0QVOPFr7XKJkinxakSEyfK/asJqMHRElW3nI3n3WD8gloZwTNxx22028bBG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gimlpYImT1CkDMFPuOeKZZdnvMwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWNaG6d6tF3oDeMq2og3ntVN2EZxyRmlEYw cSonrNTULWiTGmy8KJQHBTtM/mgoXUBp9Y3jM039TvmUPGMLUsx3hORato/5ew8U eoO2DU5PwZLymfUBjQuKcS0mrTgaQl5UbfehrfYGIhdtDH1rwBgcPFGGxTZsNMNx P7PabskFYivQBLkRK4k0fXl67xAi8zEaQoiMlZqiO5/3ON6C/9ynEA9I/2vwK3Ri AXZuNicuN7BCOdfsylxxbt10RGf+pXfO8HOrNhoC1vzHkq7KWdb3LnarakWzVXa9 a+KmS5BYPcUjRfI8pWb8QwBMtYd02dadzJqn9pCBSdDBb0JLgsc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:12:21 2026 by rpki-client