$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: 0nhgc99X++BDYXvnZS9WZ6R/oGwwe6ILRpsrfGAoAxM= Subject key identifier: AB:B6:A0:99:E2:C4:EC:80:43:89:02:6D:BF:BA:E7:14:38:03:A6:A3 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 422416928CFAC2E8221F7FE65D66AC7E48867A09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 0224 Signing time: Fri 17 Apr 2026 02:11:57 +0000 Manifest this update: Fri 17 Apr 2026 02:06:57 +0000 Manifest next update: Mon 20 Apr 2026 05:12:57 +0000 Files and hashes: 1: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: gm33V+FpkTZp4vhfMn0R1HmBUVRHmRHaTZRlyRWh1Lc=) 2: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: wOv/dVzvON2YTGrtIqOrmBy8hTvnTWZWOUiWDrldHbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:24:16:92:8c:fa:c2:e8:22:1f:7f:e6:5d:66:ac:7e:48:86:7a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Apr 17 02:06:57 2026 GMT Not After : Apr 20 05:12:57 2026 GMT Subject: CN=ABB6A099E2C4EC804389026DBFBAE7143803A6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:21:3d:e9:1b:a5:44:82:65:17:27:16:73: 87:e9:18:7c:fa:c7:71:98:4a:9b:90:8a:7c:63:b2: f5:32:5c:b5:f7:61:0d:9d:3f:a0:a9:b5:fa:fb:f4: 8c:38:7c:86:e5:c0:47:c9:f9:fa:32:46:7a:cc:77: d9:2e:36:b3:5a:bf:d2:0b:7a:8a:45:5b:7d:7e:ee: 19:76:47:c6:f0:dc:f9:84:c0:2a:5d:86:5c:70:44: eb:e2:ba:96:15:74:b7:60:c0:33:49:d3:a0:cb:15: b4:bf:f9:87:0a:3e:18:79:60:6b:d6:02:84:27:47: 51:55:c8:ea:6d:73:a7:c9:84:0a:00:5c:2c:df:28: 24:d6:80:1d:90:d3:40:28:1f:57:51:8c:8d:4c:69: 7a:2c:4f:81:a7:27:7b:d8:bf:07:c5:3d:18:7d:5a: f6:e3:0d:16:ed:e9:66:1f:cd:00:d4:91:bd:21:88: 4e:96:69:83:a7:c2:96:73:27:7a:a4:0f:05:90:d9: 1a:f7:92:e5:bd:09:d6:a1:a9:71:47:c8:6f:64:1c: 0e:24:aa:5b:41:bb:ec:43:14:a8:d4:39:e4:ec:30: 41:74:65:d9:43:ad:e6:39:e2:c1:6d:bc:1d:92:1d: 09:63:0d:a6:8c:77:a3:b7:c2:fd:59:c8:34:70:f5: fd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B6:A0:99:E2:C4:EC:80:43:89:02:6D:BF:BA:E7:14:38:03:A6:A3 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:9d:4c:e0:03:e4:54:8e:5c:57:c0:2a:29:28:fb:12:d3: 57:d3:7f:6a:62:5c:a3:79:d3:72:fd:52:68:7c:ce:42:3f:44: 8f:fc:8d:13:1b:fb:50:c0:89:c7:ff:7c:5e:ec:b7:bd:da:6c: d9:0a:01:88:03:57:61:ba:41:73:ed:ac:5d:33:04:26:0a:71: a2:64:c0:68:ce:9a:0b:52:2b:05:a9:97:8d:3f:08:f9:0b:7b: 50:e7:ff:4e:4d:bd:32:42:11:42:74:8a:e3:3a:28:c2:37:52: 11:2f:59:27:49:e8:99:98:f9:41:1f:12:b5:d8:54:63:b7:02: 96:aa:c9:b7:7e:6a:7a:74:b3:5c:cc:c6:95:14:9b:c8:94:1a: 68:19:5e:cf:82:b7:ae:2a:2e:05:96:7c:34:07:1f:4f:83:6b: 56:4b:4a:eb:c7:bb:f6:02:4b:b0:c2:50:b8:b7:58:01:75:e3: 5a:4c:94:d6:91:bf:93:ca:82:47:04:ea:e1:b4:90:a3:2d:ad: 06:e1:d9:59:7d:a3:5f:be:42:2b:c1:0e:21:6c:62:1f:0f:07: 1b:a0:8c:7e:ee:14:7e:04:3b:fb:ef:78:bb:de:56:50:64:dc: 83:db:4d:14:40:fa:25:56:f3:b1:3e:93:a1:10:8f:53:e1:50: f1:1e:e5:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiQWkoz6wugiH3/mXWasfkiGegkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNjA0MTcwMjA2NTdaFw0yNjA0MjAwNTEyNTdaMDMxMTAvBgNV BAMTKEFCQjZBMDk5RTJDNEVDODA0Mzg5MDI2REJGQkFFNzE0MzgwM0E2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucCE96RulRIJlFycWc4fpGHz6 x3GYSpuQinxjsvUyXLX3YQ2dP6Cptfr79Iw4fIblwEfJ+foyRnrMd9kuNrNav9IL eopFW31+7hl2R8bw3PmEwCpdhlxwROviupYVdLdgwDNJ06DLFbS/+YcKPhh5YGvW AoQnR1FVyOptc6fJhAoAXCzfKCTWgB2Q00AoH1dRjI1MaXosT4GnJ3vYvwfFPRh9 WvbjDRbt6WYfzQDUkb0hiE6WaYOnwpZzJ3qkDwWQ2Rr3kuW9CdahqXFHyG9kHA4k qltBu+xDFKjUOeTsMEF0ZdlDreY54sFtvB2SHQljDaaMd6O3wv1ZyDRw9f0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7agmeLE7IBDiQJtv7rnFDgDpqMwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8RnUzgA+RUjlxXwCopKPsS01fTf2piXKN5 03L9Umh8zkI/RI/8jRMb+1DAicf/fF7st73abNkKAYgDV2G6QXPtrF0zBCYKcaJk wGjOmgtSKwWpl40/CPkLe1Dn/05NvTJCEUJ0iuM6KMI3UhEvWSdJ6JmY+UEfErXY VGO3Apaqybd+anp0s1zMxpUUm8iUGmgZXs+Ct64qLgWWfDQHH0+Da1ZLSuvHu/YC S7DCULi3WAF141pMlNaRv5PKgkcE6uG0kKMtrQbh2Vl9o1++QivBDiFsYh8PBxug jH7uFH4EO/vveLveVlBk3IPbTRRA+iVW87E+k6EQj1PhUPEe5WM= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:24 2026 by rpki-client