$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: ngGYGU3mr8+LBeUHg39xcCmIkfuf4dFLDShBUJwNvqs= Subject key identifier: DE:58:34:09:CA:2A:EE:C6:0E:27:7F:0F:C6:D1:91:22:E9:68:3D:BD Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 55229F999CD5DF927EBC4D611A82CE75B7574D46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 020F Signing time: Sat 28 Feb 2026 21:41:53 +0000 Manifest this update: Sat 28 Feb 2026 21:36:53 +0000 Manifest next update: Wed 04 Mar 2026 08:53:53 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: gRwhlWArItWOhgECIYrnr35OX4oWz0rPo/uhLdr88Uo=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: gm33V+FpkTZp4vhfMn0R1HmBUVRHmRHaTZRlyRWh1Lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:9f:99:9c:d5:df:92:7e:bc:4d:61:1a:82:ce:75:b7:57:4d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Feb 28 21:36:53 2026 GMT Not After : Mar 4 08:53:53 2026 GMT Subject: CN=DE583409CA2AEEC60E277F0FC6D19122E9683DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:a9:b7:48:0f:50:19:82:b1:bf:56:c2:65: b9:eb:a2:fc:39:0f:e9:eb:e3:55:56:81:86:d9:bd: c4:01:8a:5d:54:b1:b5:a8:89:06:34:fe:3d:05:3c: f7:55:63:e8:26:55:18:71:bb:1b:14:1a:b1:42:9d: d4:17:14:9e:7e:c3:55:a9:6c:fb:d4:05:ff:ed:5a: f9:a1:d2:59:c3:22:b6:50:57:84:59:58:64:4c:b3: bc:15:0f:20:ae:9a:a2:77:70:63:ee:b6:47:ce:de: ac:08:04:2f:9a:0c:1a:46:71:be:17:27:4c:ac:58: 5e:31:ab:5a:9d:b8:4b:a7:97:92:fa:9f:98:e6:63: 4a:30:ea:55:c3:52:71:1c:ce:64:f6:e9:b4:93:45: 69:b7:fb:f6:49:f2:f9:dc:f1:c9:6d:6c:b3:d4:20: 46:94:9f:8e:67:0d:f7:76:ca:d3:9d:8a:0d:de:26: 14:c9:47:b1:c4:11:3a:36:66:0d:11:04:0b:62:7b: 8a:27:19:17:2e:5b:92:04:9d:8a:4e:bf:a6:da:17: a5:ae:9e:26:70:1d:85:67:4d:3e:e9:78:90:56:67: 90:00:ca:c9:93:ab:36:9d:67:a9:98:e9:85:e8:25: 9b:3b:3c:49:ab:b9:d1:67:97:0c:46:16:fb:7a:f4: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:34:09:CA:2A:EE:C6:0E:27:7F:0F:C6:D1:91:22:E9:68:3D:BD X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:75:db:ae:09:ab:c9:4a:75:57:49:e7:b4:5a:45:48:43: 48:b0:66:f5:ad:ef:31:8a:3a:ca:09:f9:d4:d3:3c:d1:34:e0: 59:a2:8c:df:65:0c:39:13:1c:11:94:41:bf:75:50:a1:17:8e: 6e:3c:a4:a4:ca:15:0b:b3:30:14:b2:c2:19:2c:ee:3e:6d:7b: 7b:d0:01:e1:8b:c3:ee:f2:68:16:fe:81:67:38:87:04:10:9b: 96:56:81:78:da:c1:c5:97:35:fb:18:b2:d8:a9:1c:0f:70:d7: 58:cd:0a:b6:e1:f1:f6:6c:81:e9:78:e6:5c:a5:be:70:48:93: 3a:6f:93:ab:25:eb:d8:ff:34:9d:9c:46:88:f1:3e:b2:ef:dd: 51:d2:25:7c:1a:6d:6b:b9:8b:51:46:99:31:8d:af:59:15:ac: 65:d4:27:12:f1:02:00:b1:f1:8a:96:03:02:c5:cf:44:8c:00: 26:fe:67:98:2f:24:31:d1:c5:2b:4a:36:95:cb:be:94:fc:f3: e2:b3:a0:73:09:8f:4f:7f:38:4f:e7:46:6c:d9:fb:ec:95:1c: c6:4c:0d:ed:c3:52:a7:71:f5:aa:3d:cb:d3:9a:0b:b2:6f:5a: e0:36:51:d2:48:95:6b:9b:39:46:ac:ea:a7:46:10:14:24:0f: c1:7c:47:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSKfmZzV35J+vE1hGoLOdbdXTUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNjAyMjgyMTM2NTNaFw0yNjAzMDQwODUzNTNaMDMxMTAvBgNV BAMTKERFNTgzNDA5Q0EyQUVFQzYwRTI3N0YwRkM2RDE5MTIyRTk2ODNEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ram3SA9QGYKxv1bCZbnrovw5 D+nr41VWgYbZvcQBil1UsbWoiQY0/j0FPPdVY+gmVRhxuxsUGrFCndQXFJ5+w1Wp bPvUBf/tWvmh0lnDIrZQV4RZWGRMs7wVDyCumqJ3cGPutkfO3qwIBC+aDBpGcb4X J0ysWF4xq1qduEunl5L6n5jmY0ow6lXDUnEczmT26bSTRWm3+/ZJ8vnc8cltbLPU IEaUn45nDfd2ytOdig3eJhTJR7HEETo2Zg0RBAtie4onGRcuW5IEnYpOv6baF6Wu niZwHYVnTT7peJBWZ5AAysmTqzadZ6mY6YXoJZs7PEmrudFnlwxGFvt69Ow/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3lg0Ccoq7sYOJ38PxtGRIuloPb0wHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAc7dduuCavJSnVXSee0WkVIQ0iwZvWt7zGK OsoJ+dTTPNE04FmijN9lDDkTHBGUQb91UKEXjm48pKTKFQuzMBSywhks7j5te3vQ AeGLw+7yaBb+gWc4hwQQm5ZWgXjawcWXNfsYstipHA9w11jNCrbh8fZsgel45lyl vnBIkzpvk6sl69j/NJ2cRojxPrLv3VHSJXwabWu5i1FGmTGNr1kVrGXUJxLxAgCx 8YqWAwLFz0SMACb+Z5gvJDHRxStKNpXLvpT88+KzoHMJj09/OE/nRmzZ++yVHMZM De3DUqdx9ao9y9OaC7JvWuA2UdJIlWubOUas6qdGEBQkD8F8R+s= -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:07 2026 by rpki-client