$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: 0S5/e7rn0Le3yfV06ooVsA/EW8Cyjrg9HmPlZ9oEyc0= Subject key identifier: BA:72:38:69:AD:83:04:BA:69:2B:55:14:49:22:38:66:07:AE:2A:B3 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 71B7C14FD832075EE035F290A98E82B17F27EA47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: 0135 Signing time: Sat 18 Apr 2026 05:42:09 +0000 Manifest this update: Sat 18 Apr 2026 05:37:09 +0000 Manifest next update: Tue 21 Apr 2026 08:05:09 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: 3bDrh/IvfptxL/qV6/N3HPmQvkUVCcqGv4fLMe3ZeVc=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) 3: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: IjYqVZddC2t9pX2UczvN1HDuqY5rb4KgguuyEOviQBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b7:c1:4f:d8:32:07:5e:e0:35:f2:90:a9:8e:82:b1:7f:27:ea:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Apr 18 05:37:09 2026 GMT Not After : Apr 21 08:05:09 2026 GMT Subject: CN=BA723869AD8304BA692B55144922386607AE2AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:91:55:fb:fc:3c:6b:ad:61:ce:30:49:69: 07:c5:59:a2:4d:a6:40:3f:0a:16:b8:56:82:4f:8b: 83:05:61:57:f3:da:85:23:66:eb:a8:b3:fe:b3:66: f6:96:2d:73:d5:89:84:d3:2a:a1:9b:89:15:f1:48: 78:83:e0:cd:08:b9:55:f0:15:a7:15:05:fe:61:43: ae:3e:8a:2a:a8:4d:8d:24:28:02:b1:6c:18:8f:27: ea:d3:f1:df:38:ee:89:3d:f5:45:65:d5:0e:db:00: b9:07:2c:41:a8:5a:e3:d6:42:b2:a2:d0:55:81:a0: 77:f9:05:1b:c3:30:20:49:f7:62:46:b9:f1:0e:5a: 12:7c:ac:6e:b3:66:6a:43:92:65:7c:d5:e7:d2:72: a8:0f:b4:92:05:d0:e4:e9:fd:f4:de:27:17:03:a7: c3:36:8c:2a:88:86:2e:11:b3:2a:52:50:53:92:bf: d5:fd:d5:be:54:bb:39:62:44:4a:ba:1a:71:ef:50: a4:80:b4:91:51:2e:62:e7:4c:14:7a:1b:36:b3:53: ef:3d:84:85:21:22:ea:49:21:08:41:35:dd:ce:8e: 44:ea:d5:68:ee:5b:3f:ad:50:c9:cd:a0:d3:f4:0d: 4f:f5:90:08:3b:56:af:65:92:58:b0:02:a8:f4:81: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:72:38:69:AD:83:04:BA:69:2B:55:14:49:22:38:66:07:AE:2A:B3 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:ed:36:1a:26:51:d0:b9:fc:a4:99:df:ee:80:66:18:37: 0c:a0:65:9a:97:98:c3:b5:75:e7:7c:ce:34:39:35:c6:a5:58: f6:67:60:64:7c:1c:bd:0f:c4:a0:8d:a1:8f:93:85:74:98:d4: f4:cb:53:d7:c8:6e:21:8f:ef:86:40:c0:26:ce:0f:1c:aa:d4: 15:65:e4:f2:7b:68:3e:34:89:9c:58:85:83:a0:8f:45:ff:aa: ad:fd:63:63:bc:00:e0:31:a3:7b:32:94:4c:ae:0f:cb:11:12: 61:0f:bb:22:75:c9:1d:21:79:b9:b5:ea:0b:27:94:cf:33:db: 34:0b:34:0a:94:00:47:15:d2:9b:05:19:c2:9f:93:3c:a2:11: 90:8c:3f:84:66:b7:c9:fb:ec:11:c8:0a:8a:72:d6:49:5f:6f: 6e:4f:c7:04:87:6c:80:8b:80:8c:4d:b3:e8:94:bc:51:22:de: a1:cd:c1:bf:90:2e:3e:a9:f5:15:00:4c:71:21:fa:39:76:98: c9:44:cf:d9:66:1b:25:c1:56:0b:ba:cb:e2:98:40:32:98:6a: 52:b0:6b:34:52:d1:db:ec:e7:54:5b:ce:e0:30:b0:32:ba:ac: 6c:54:f8:7b:aa:97:e4:9c:8d:21:10:56:ea:6f:d3:66:a0:e7: 7f:93:4f:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbfBT9gyB17gNfKQqY6CsX8n6kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNjA0MTgwNTM3MDlaFw0yNjA0MjEwODA1MDlaMDMxMTAvBgNV BAMTKEJBNzIzODY5QUQ4MzA0QkE2OTJCNTUxNDQ5MjIzODY2MDdBRTJBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjJFV+/w8a61hzjBJaQfFWaJN pkA/Cha4VoJPi4MFYVfz2oUjZuuos/6zZvaWLXPViYTTKqGbiRXxSHiD4M0IuVXw FacVBf5hQ64+iiqoTY0kKAKxbBiPJ+rT8d847ok99UVl1Q7bALkHLEGoWuPWQrKi 0FWBoHf5BRvDMCBJ92JGufEOWhJ8rG6zZmpDkmV81efScqgPtJIF0OTp/fTeJxcD p8M2jCqIhi4RsypSUFOSv9X91b5UuzliREq6GnHvUKSAtJFRLmLnTBR6GzazU+89 hIUhIupJIQhBNd3OjkTq1WjuWz+tUMnNoNP0DU/1kAg7Vq9lkliwAqj0gbkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUunI4aa2DBLppK1UUSSI4ZgeuKrMwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyg7TYaJlHQufykmd/ugGYYNwygZZqXmMO1 ded8zjQ5NcalWPZnYGR8HL0PxKCNoY+ThXSY1PTLU9fIbiGP74ZAwCbODxyq1BVl 5PJ7aD40iZxYhYOgj0X/qq39Y2O8AOAxo3sylEyuD8sREmEPuyJ1yR0hebm16gsn lM8z2zQLNAqUAEcV0psFGcKfkzyiEZCMP4Rmt8n77BHICopy1klfb25PxwSHbICL gIxNs+iUvFEi3qHNwb+QLj6p9RUATHEh+jl2mMlEz9lmGyXBVgu6y+KYQDKYalKw azRS0dvs51RbzuAwsDK6rGxU+Huql+ScjSEQVupv02ag53+TT/k= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:36 2026 by rpki-client