$ rpki-client -vvvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: sqbqfB1lpcygIqr15DjxJ9R00khYidPm4vDdsmgJBWo= Subject key identifier: 05:56:27:39:E5:33:CA:51:E2:97:B3:AA:F9:BC:3D:FC:10:98:57:C0 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 6829060D67E18094AD02B13C0AD6120E0D8D8863 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 17:12:45 +0000 Manifest this update: Tue 22 Sep 2026 17:07:45 +0000 Manifest next update: Wed 23 Sep 2026 20:55:45 +0000 Files and hashes: 1: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 2: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 3: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: cFfa1wb+Z0Q/JdCzGpwc+uO9XbwoE0ToMcQZEyEjeBc=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:29:06:0d:67:e1:80:94:ad:02:b1:3c:0a:d6:12:0e:0d:8d:88:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Sep 22 17:07:45 2026 GMT Not After : Sep 23 20:55:45 2026 GMT Subject: CN=05562739E533CA51E297B3AAF9BC3DFC109857C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ff:28:23:d9:ba:57:68:84:e4:5c:47:63:6c: b8:b0:a5:35:98:f9:e4:a5:f8:ef:6d:26:a2:47:c6: b3:3a:47:6b:9c:1a:2a:d5:df:b4:73:8e:06:9b:e9: 45:76:b8:36:dc:27:43:72:1f:64:8b:40:fd:95:bb: 1b:4e:99:cf:20:fb:43:84:3e:8e:cd:0d:5e:2e:c6: 33:c3:c5:6b:27:ef:19:8d:99:59:5a:79:41:83:8b: be:04:45:84:08:16:af:95:fc:4f:1f:ff:9c:e1:1e: 5f:05:fe:e1:d6:46:0b:e7:ef:dd:8a:2f:ca:3b:f5: 39:2a:a7:a6:ad:2e:35:ae:b0:97:e4:46:c5:66:39: 81:64:59:d0:9b:32:de:62:fb:01:d8:66:49:d1:49: 4b:d5:fc:12:14:6d:7e:42:75:63:2c:2a:b1:68:c5: 2c:38:c0:a3:90:cc:53:13:7e:60:b5:35:83:01:cc: c9:96:6f:92:f3:ca:c3:8c:a9:60:1c:f3:13:89:ce: cd:1a:1a:e2:74:2c:44:0b:5b:5e:fc:63:ce:89:84: 97:fe:45:65:b1:b6:a5:39:c7:58:6f:ab:aa:e2:9f: 48:be:c9:ae:df:7d:b4:c3:95:55:b3:e0:f6:93:63: 0e:fb:30:91:84:2f:07:76:24:ed:04:e0:19:75:ac: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:27:39:E5:33:CA:51:E2:97:B3:AA:F9:BC:3D:FC:10:98:57:C0 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:65:e6:fc:83:7f:08:af:50:5f:74:c4:64:d0:f0:7d:d1:31: 79:bd:c9:b9:46:4c:16:45:c5:1f:d7:8c:37:1a:f5:c1:b5:a0: e5:7e:e5:96:97:c2:18:22:e2:5b:f1:41:d8:bd:2c:f5:c3:26: ec:10:01:9b:c7:f9:8c:f4:e3:6e:fd:a4:0d:4d:19:34:63:3f: 52:83:04:7c:1b:0a:44:73:f9:a8:2b:e3:36:df:50:7b:d7:01: 7d:62:6f:4c:ba:bf:68:c3:eb:0b:2e:4f:93:bc:20:3b:2a:00: 9e:1d:88:e4:19:f1:ec:7c:e9:3f:bd:f5:7b:ef:d7:53:f6:8b: 9b:ad:65:39:55:e8:f2:4f:aa:05:33:54:69:2f:98:78:d6:1b: 6d:3f:2a:f2:13:bf:a9:e0:df:5e:f8:28:26:d4:b7:a8:ae:bb: c9:87:45:01:01:ba:8b:12:33:59:55:44:cb:e4:fb:78:36:bb: 45:18:34:07:1a:f1:25:9c:6c:2d:d2:71:ec:96:84:29:cd:eb: 7b:3f:79:00:88:18:17:0a:4d:b1:f4:f0:8d:38:33:30:d2:76: 15:17:14:18:0d:38:fa:ae:99:4e:d2:8d:f2:10:60:d7:72:8e: 2a:c6:ff:16:4c:1c:80:e9:c6:a6:db:83:cf:2b:a6:e2:28:8a: 54:57:0d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCkGDWfhgJStArE8CtYSDg2NiGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA5MjIxNzA3NDVaFw0yNjA5MjMyMDU1NDVaMDMxMTAvBgNV BAMTKDA1NTYyNzM5RTUzM0NBNTFFMjk3QjNBQUY5QkMzREZDMTA5ODU3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/ygj2bpXaITkXEdjbLiwpTWY +eSl+O9tJqJHxrM6R2ucGirV37Rzjgab6UV2uDbcJ0NyH2SLQP2VuxtOmc8g+0OE Po7NDV4uxjPDxWsn7xmNmVlaeUGDi74ERYQIFq+V/E8f/5zhHl8F/uHWRgvn792K L8o79Tkqp6atLjWusJfkRsVmOYFkWdCbMt5i+wHYZknRSUvV/BIUbX5CdWMsKrFo xSw4wKOQzFMTfmC1NYMBzMmWb5LzysOMqWAc8xOJzs0aGuJ0LEQLW178Y86JhJf+ RWWxtqU5x1hvq6rin0i+ya7ffbTDlVWz4PaTYw77MJGELwd2JO0E4Bl1rEl3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVYnOeUzylHil7Oq+bw9/BCYV8AwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBl5vyDfwivUF90xGTQ8H3RMXm9yblGTBZF xR/XjDca9cG1oOV+5ZaXwhgi4lvxQdi9LPXDJuwQAZvH+Yz04279pA1NGTRjP1KD BHwbCkRz+agr4zbfUHvXAX1ib0y6v2jD6wsuT5O8IDsqAJ4diOQZ8ex86T+99Xvv 11P2i5utZTlV6PJPqgUzVGkvmHjWG20/KvITv6ng3174KCbUt6iuu8mHRQEBuosS M1lVRMvk+3g2u0UYNAca8SWcbC3SceyWhCnN63s/eQCIGBcKTbH08I04MzDSdhUX FBgNOPqumU7SjfIQYNdyjirG/xZMHIDpxqbbg88rpuIoilRXDWM= -----END CERTIFICATE-----Generated at Wed Sep 23 08:40:31 2026 by rpki-client