$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: oTAwW6E601pKEYvnDopOxcZULO0A4d/V5RKYaurqhuY= Subject key identifier: D1:B6:46:31:60:0F:40:D9:85:6B:73:F8:2F:BD:68:F0:BD:F4:3E:1E Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 5179B2E6FB40B92C53534CBDAFA7270641F6244A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04E7 Signing time: Sun 01 Mar 2026 12:41:16 +0000 Manifest this update: Sun 01 Mar 2026 12:36:16 +0000 Manifest next update: Wed 04 Mar 2026 18:30:16 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) 2: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: zcwVxPnpur6DqOpeVeoZdv0/ve0OCrF0Ck8AyUwTzL4=) 3: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 4: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) 5: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:79:b2:e6:fb:40:b9:2c:53:53:4c:bd:af:a7:27:06:41:f6:24:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Mar 1 12:36:16 2026 GMT Not After : Mar 4 18:30:16 2026 GMT Subject: CN=D1B64631600F40D9856B73F82FBD68F0BDF43E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:69:78:5e:40:8c:36:b0:e5:da:73:5e:77: cd:2b:34:dd:20:99:ab:f6:16:76:05:8f:a7:25:cc: 24:03:ac:64:5b:fd:ef:76:5f:df:3e:cc:30:54:e2: 5b:f2:0b:4e:d5:f5:05:3c:ac:0f:de:97:ba:20:2b: b6:26:cb:0e:b7:a4:35:4a:98:38:63:ea:2e:88:4c: 79:a0:bd:8f:33:c3:2e:19:03:c0:18:07:c7:83:2c: ce:3b:b1:2c:9d:8a:b9:99:1f:3f:c6:ff:dc:ff:a9: a7:c0:13:16:93:af:7f:b5:11:a9:4b:4e:0b:74:ec: da:56:e5:05:a6:39:b9:1d:56:42:26:c0:da:ce:de: ea:e9:83:2f:43:bc:b2:68:8d:bf:75:dc:39:83:98: 18:8d:8d:45:2b:f4:e1:d9:1c:e9:d7:b3:88:67:f8: d3:48:7d:6f:37:80:bf:e5:cb:65:e8:50:07:39:2a: 3e:fe:77:89:a0:4f:33:f3:c6:19:2a:10:1b:b4:a0: 1e:f1:3a:90:0d:4e:07:d3:5b:f0:7c:7b:f2:a5:2c: 8c:ee:84:aa:15:9e:e7:7b:86:29:fb:2a:fd:a7:10: 83:94:e0:56:e9:5c:a7:97:dc:3b:15:a2:92:4a:ff: db:12:ee:b2:b7:c0:ad:a2:7e:0d:61:8e:64:26:a1: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B6:46:31:60:0F:40:D9:85:6B:73:F8:2F:BD:68:F0:BD:F4:3E:1E X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:b2:12:e5:63:4a:1b:aa:29:55:36:92:96:be:19:b8:ff: 73:e0:c9:ca:09:c5:1a:e3:c1:f2:fc:b2:9f:90:a2:5a:84:55: 46:b9:cc:45:ed:24:50:1b:55:df:4b:1b:3c:70:ad:7d:02:ce: 68:1f:ae:a7:46:18:be:f3:2a:e9:c4:1f:f4:e0:47:1d:5b:f2: 0b:9c:26:ab:9d:23:34:a2:fa:24:73:a4:f2:67:62:d7:21:4f: 7c:52:57:c4:e2:6f:88:74:e6:c8:fe:7a:0c:63:77:f8:17:5b: 79:8c:ef:b3:94:6e:40:cc:0d:61:82:7d:0b:b6:20:cb:3c:c9: dc:22:fd:ad:d9:e7:b8:be:73:26:bf:d8:19:c4:01:16:2a:05: b5:1e:45:2a:86:93:24:6a:1d:fa:27:61:fa:6b:08:70:ed:d9: f1:35:85:73:29:a0:a1:4f:b0:9f:db:52:66:8d:2c:b3:97:13: 73:89:89:6a:8d:3f:a1:e6:ee:00:96:e0:5b:cd:bd:e6:c1:47: 22:33:dd:3e:a5:33:89:c8:be:fa:81:7c:8f:f1:f3:68:b0:be: 6e:ad:ea:fb:10:0d:ef:3e:de:a0:2d:eb:8e:19:6c:46:97:2c: b2:7a:48:fd:01:11:d1:82:5f:20:65:94:29:a2:fd:c6:19:7c: 02:d2:a2:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXmy5vtAuSxTU0y9r6cnBkH2JEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNjAzMDExMjM2MTZaFw0yNjAzMDQxODMwMTZaMDMxMTAvBgNV BAMTKEQxQjY0NjMxNjAwRjQwRDk4NTZCNzNGODJGQkQ2OEYwQkRGNDNFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElWl4XkCMNrDl2nNed80rNN0g mav2FnYFj6clzCQDrGRb/e92X98+zDBU4lvyC07V9QU8rA/el7ogK7Ymyw63pDVK mDhj6i6ITHmgvY8zwy4ZA8AYB8eDLM47sSydirmZHz/G/9z/qafAExaTr3+1EalL Tgt07NpW5QWmObkdVkImwNrO3urpgy9DvLJojb913DmDmBiNjUUr9OHZHOnXs4hn +NNIfW83gL/ly2XoUAc5Kj7+d4mgTzPzxhkqEBu0oB7xOpANTgfTW/B8e/KlLIzu hKoVnud7hin7Kv2nEIOU4FbpXKeX3DsVopJK/9sS7rK3wK2ifg1hjmQmoV8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bZGMWAPQNmFa3P4L71o8L30Ph4wHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM2shLlY0obqilVNpKWvhm4/3PgycoJxRrj wfL8sp+QolqEVUa5zEXtJFAbVd9LGzxwrX0CzmgfrqdGGL7zKunEH/TgRx1b8guc JqudIzSi+iRzpPJnYtchT3xSV8Tib4h05sj+egxjd/gXW3mM77OUbkDMDWGCfQu2 IMs8ydwi/a3Z57i+cya/2BnEARYqBbUeRSqGkyRqHfonYfprCHDt2fE1hXMpoKFP sJ/bUmaNLLOXE3OJiWqNP6Hm7gCW4FvNvebBRyIz3T6lM4nIvvqBfI/x82iwvm6t 6vsQDe8+3qAt644ZbEaXLLJ6SP0BEdGCXyBllCmi/cYZfALSols= -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:15 2026 by rpki-client