$ rpki-client -vvf rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft File: BE717704648D71B9BD1EA88B56DC788F45F7861A.mft (raw, json) Hash identifier: eUX7hly+2zE8DT5mPsLeleFiIs1tU43iUcudfwQfdB4= Subject key identifier: 53:B0:97:88:8C:9B:BB:F0:4E:64:4F:87:AC:F2:1D:F6:E5:30:43:D7 Authority key identifier: BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A Certificate issuer: /CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Certificate serial: 767290775EFAFE8B0802DEB0AE015D43B71781F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 08:31:43 +0000 Manifest this update: Mon 15 Jun 2026 08:26:43 +0000 Manifest next update: Tue 16 Jun 2026 10:07:43 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: lOIyt2us5yxiOtWA3x6Jh7ycwwvzUDeIL3dmZdtqk0M=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: GOyX50Et8Qvmvw3OrW1kybZj8h3GWxGKHm0I6XFUZNA=) 3: BE717704648D71B9BD1EA88B56DC788F45F7861A.crl (hash: IhuzVhBe8GJ3Mo/Ri4b+dJHEWqOl75ylc8zBArc8G0I=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: VGpXcnOrawhL5wvpMkIuZux+7CXlQbXJwmOIfZPLitg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:72:90:77:5e:fa:fe:8b:08:02:de:b0:ae:01:5d:43:b7:17:81:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE717704648D71B9BD1EA88B56DC788F45F7861A Validity Not Before: Jun 15 08:26:43 2026 GMT Not After : Jun 16 10:07:43 2026 GMT Subject: CN=53B097888C9BBBF04E644F87ACF21DF6E53043D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:b8:c3:9b:20:76:8b:5a:6e:fb:dd:ea:ca: 10:ee:d2:5b:bc:4e:74:3f:10:7e:53:5c:38:be:30: 9d:0b:05:61:60:7a:fe:1e:e7:87:4d:28:d3:94:7b: 40:0a:81:d1:59:34:cc:e1:44:cc:7d:c9:88:33:3f: 60:10:01:cd:d6:77:e4:0b:05:22:07:da:b1:bb:e3: b8:22:55:da:2a:a9:39:d9:a6:56:ba:2e:9b:db:6a: b6:27:6b:05:e0:a4:63:ea:1c:08:22:27:c5:20:02: 20:38:30:5e:13:90:79:07:53:40:07:f8:b2:15:27: b8:58:b0:0a:54:f7:17:e5:b9:ca:7a:71:12:26:87: 9b:8f:94:00:c4:47:5e:e8:7b:98:88:3e:9e:77:cf: 94:9c:34:14:9c:ed:32:31:71:10:6b:89:f0:45:36: 7b:01:ac:c5:12:84:30:54:de:14:32:31:57:2f:5b: ff:81:78:49:9b:7a:82:86:56:e4:e6:9f:70:4d:78: 62:ca:b4:97:c5:10:58:97:bb:a5:ff:44:4d:37:a6: e3:3c:1b:06:b9:93:f3:fb:30:2e:91:de:c0:14:74: 8a:00:db:b9:02:1c:ce:4d:4d:56:1a:63:9e:0d:8f: c9:b3:92:d9:6f:25:ac:23:40:84:e9:38:27:3d:dc: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:97:88:8C:9B:BB:F0:4E:64:4F:87:AC:F2:1D:F6:E5:30:43:D7 X509v3 Authority Key Identifier: keyid:BE:71:77:04:64:8D:71:B9:BD:1E:A8:8B:56:DC:78:8F:45:F7:86:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE717704648D71B9BD1EA88B56DC788F45F7861A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/BE717704648D71B9BD1EA88B56DC788F45F7861A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:6f:b3:16:9d:97:95:e1:3c:9a:d3:96:6f:4e:e2:9f:bd: ed:26:10:cd:44:02:1b:5e:c4:9f:b3:4e:a4:56:1c:d3:8c:82: 13:59:6d:3e:e8:f8:db:0f:88:0b:41:be:d6:d2:eb:76:7a:f4: df:74:99:55:88:f9:55:3f:91:5b:cc:c0:74:48:74:aa:74:ad: f5:d2:80:d1:15:cd:42:2f:39:c3:aa:27:c8:84:1e:ec:fa:1a: 0a:68:e2:ee:80:50:de:93:6e:a1:0c:cd:7b:6f:a1:c1:4a:22: da:00:74:2a:76:31:24:ba:d3:fc:34:85:8f:2c:51:f3:1a:e8: f7:d7:62:18:79:87:fd:94:1e:64:06:05:60:e1:99:e0:f8:a5: 70:ad:e0:18:cf:21:b3:95:cd:47:44:1c:9c:6a:dd:42:70:64: 07:f5:a8:6e:be:cf:ca:67:bb:df:37:22:27:65:32:cb:08:ae: ac:c4:46:15:15:0a:d3:09:66:f5:d1:57:bb:8d:c4:54:27:41: a4:d8:ec:ca:ff:09:24:33:2e:bc:c6:e9:e0:07:07:25:2c:7e: 8e:01:e6:79:5b:5c:44:d1:85:39:f3:f2:48:5d:1b:ac:4a:8a: 53:58:16:60:71:d0:5f:85:db:76:48:53:50:81:db:15:12:78: cd:dc:f8:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnKQd176/osIAt6wrgFdQ7cXgfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0 NUY3ODYxQTAeFw0yNjA2MTUwODI2NDNaFw0yNjA2MTYxMDA3NDNaMDMxMTAvBgNV BAMTKDUzQjA5Nzg4OEM5QkJCRjA0RTY0NEY4N0FDRjIxREY2RTUzMDQzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8LjDmyB2i1pu+93qyhDu0lu8 TnQ/EH5TXDi+MJ0LBWFgev4e54dNKNOUe0AKgdFZNMzhRMx9yYgzP2AQAc3Wd+QL BSIH2rG747giVdoqqTnZpla6LpvbarYnawXgpGPqHAgiJ8UgAiA4MF4TkHkHU0AH +LIVJ7hYsApU9xflucp6cRImh5uPlADER17oe5iIPp53z5ScNBSc7TIxcRBrifBF NnsBrMUShDBU3hQyMVcvW/+BeEmbeoKGVuTmn3BNeGLKtJfFEFiXu6X/RE03puM8 Gwa5k/P7MC6R3sAUdIoA27kCHM5NTVYaY54Nj8mzktlvJawjQITpOCc93NabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7CXiIybu/BOZE+HrPId9uUwQ9cwHwYDVR0j BBgwFoAUvnF3BGSNcbm9HqiLVtx4j0X3hhowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQxZmYzZTItNzZiNi00ODMzLTg2YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2 NDhENzFCOUJEMUVBODhCNTZEQzc4OEY0NUY3ODYxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTcxNzcwNDY0OEQ3MUI5QkQxRUE4OEI1NkRDNzg4RjQ1Rjc4 NjFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvQkU3MTc3MDQ2NDhENzFCOUJEMUVBODhCNTZEQzc4 OEY0NUY3ODYxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2ab7MWnZeV4Tya05ZvTuKfve0mEM1EAhte xJ+zTqRWHNOMghNZbT7o+NsPiAtBvtbS63Z69N90mVWI+VU/kVvMwHRIdKp0rfXS gNEVzUIvOcOqJ8iEHuz6Ggpo4u6AUN6TbqEMzXtvocFKItoAdCp2MSS60/w0hY8s UfMa6PfXYhh5h/2UHmQGBWDhmeD4pXCt4BjPIbOVzUdEHJxq3UJwZAf1qG6+z8pn u983IidlMssIrqzERhUVCtMJZvXRV7uNxFQnQaTY7Mr/CSQzLrzG6eAHByUsfo4B 5nlbXETRhTnz8khdG6xKilNYFmBx0F+F23ZIU1CB2xUSeM3c+Fc= -----END CERTIFICATE-----Generated at Mon Jun 15 17:04:23 2026 by rpki-client