$ rpki-client -vvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: LxEtXPS17uazH/kua6gkkIVDppqfJ387mxjcin3ApG8= Subject key identifier: 94:D1:15:49:82:9A:5A:53:DD:28:57:90:28:6E:61:99:CE:DB:BA:F5 Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 6625AF68D53D1F6D57198432CA30B86424BD1B1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: 77 Signing time: Tue 28 Jul 2026 18:55:05 +0000 Manifest this update: Tue 28 Jul 2026 18:50:05 +0000 Manifest next update: Wed 29 Jul 2026 21:15:05 +0000 Files and hashes: 1: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: kwDZ1uxwSA7iwXVMC9pRtplppskyPkj4UD8lZ9X0NgA=) 2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:25:af:68:d5:3d:1f:6d:57:19:84:32:ca:30:b8:64:24:bd:1b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: Jul 28 18:50:05 2026 GMT Not After : Jul 29 21:15:05 2026 GMT Subject: CN=94D11549829A5A53DD285790286E6199CEDBBAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:3d:94:7d:19:30:8a:51:fe:c7:d5:95:2b: 77:66:d2:92:a2:5a:2d:9c:c2:91:90:11:09:97:08: 3b:d5:d7:a4:b1:6f:e7:79:79:62:59:1b:b9:45:e8: 8a:80:0d:08:8b:98:4b:75:8b:f1:d3:cb:95:75:32: 02:41:25:4e:ec:89:2c:7f:2d:af:ae:67:d4:92:fc: bf:34:8e:4d:ca:05:ee:4a:65:17:82:71:29:13:b1: 40:b4:08:34:7a:e9:c0:99:95:c4:f1:04:6d:33:9f: 01:50:d0:50:9b:ba:a0:ec:98:67:86:13:58:a5:00: a0:31:a6:6d:67:bb:1e:1d:c0:94:1c:2d:c6:d6:72: fa:79:3c:55:50:32:69:b9:26:a1:3e:eb:d6:f7:6f: 25:9c:50:f7:9d:41:d0:4d:01:03:2f:01:d3:a6:f1: ff:5e:35:aa:62:2d:ac:68:df:8f:02:ab:c7:bf:3d: b8:e4:13:21:0a:99:c7:94:e5:29:78:a1:9e:99:c6: b7:72:0e:59:3c:27:d0:b6:14:ae:79:ee:ed:49:c9: 25:ef:d9:1d:84:51:e4:5d:b3:f6:35:9c:97:20:b1: 6e:97:27:95:2c:5d:17:ec:dc:d0:ed:96:30:8b:30: 4e:1c:25:64:a9:2a:3c:88:ab:8a:19:3d:7b:be:2e: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D1:15:49:82:9A:5A:53:DD:28:57:90:28:6E:61:99:CE:DB:BA:F5 X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b7:6d:5a:8b:28:2b:17:27:df:8b:e2:71:ab:d6:a2:37:e9: 0e:96:c2:4c:66:66:0f:4c:28:7f:4a:bd:b5:ed:92:db:97:e2: 09:9b:01:b1:50:a1:66:77:23:29:a3:7b:53:b0:7b:9a:2d:0f: 91:55:32:96:7f:ef:da:dd:8e:83:16:d1:eb:f8:98:b6:a1:c5: 6e:39:32:98:e4:90:3b:5e:b8:07:8b:61:6c:e4:56:4f:68:34: 02:88:8d:8e:83:cd:01:96:5b:0f:c2:0d:1b:1c:e1:18:bd:95: 12:a9:35:92:ac:6c:e7:7b:96:86:70:2e:f1:64:db:0b:47:92: de:81:98:c9:20:0d:cf:d9:71:c7:aa:65:b5:cb:a0:eb:6e:7e: f5:f3:5a:13:81:cb:aa:1f:85:38:19:fe:ac:d9:d6:c8:0f:d9: 21:97:4d:f0:a5:dd:24:6e:d0:ab:a7:cf:cf:bb:4e:39:c8:47: fb:57:94:41:5e:00:27:1d:97:47:e0:1f:78:92:4e:19:cb:9c: 60:51:f5:3d:6d:0d:06:cb:3b:03:48:53:72:3a:a3:0e:72:c7: c3:63:b8:9c:4b:ac:79:f9:8f:98:78:fe:7c:5f:12:11:02:a3: 42:a2:ac:94:c7:7d:17:9e:46:9a:1f:55:ab:ee:f4:41:9a:58: c6:28:3b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiWvaNU9H21XGYQyyjC4ZCS9GxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjA3MjgxODUwMDVaFw0yNjA3MjkyMTE1MDVaMDMxMTAvBgNV BAMTKDk0RDExNTQ5ODI5QTVBNTNERDI4NTc5MDI4NkU2MTk5Q0VEQkJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkj2UfRkwilH+x9WVK3dm0pKi Wi2cwpGQEQmXCDvV16Sxb+d5eWJZG7lF6IqADQiLmEt1i/HTy5V1MgJBJU7siSx/ La+uZ9SS/L80jk3KBe5KZReCcSkTsUC0CDR66cCZlcTxBG0znwFQ0FCbuqDsmGeG E1ilAKAxpm1nux4dwJQcLcbWcvp5PFVQMmm5JqE+69b3byWcUPedQdBNAQMvAdOm 8f9eNapiLaxo348Cq8e/PbjkEyEKmceU5Sl4oZ6ZxrdyDlk8J9C2FK557u1JySXv 2R2EUeRds/Y1nJcgsW6XJ5UsXRfs3NDtljCLME4cJWSpKjyIq4oZPXu+LqnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNEVSYKaWlPdKFeQKG5hmc7buvUwHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq3bVqLKCsXJ9+L4nGr1qI36Q6WwkxmZg9M KH9KvbXtktuX4gmbAbFQoWZ3Iymje1Owe5otD5FVMpZ/79rdjoMW0ev4mLahxW45 MpjkkDteuAeLYWzkVk9oNAKIjY6DzQGWWw/CDRsc4Ri9lRKpNZKsbOd7loZwLvFk 2wtHkt6BmMkgDc/ZcceqZbXLoOtufvXzWhOBy6ofhTgZ/qzZ1sgP2SGXTfCl3SRu 0Kunz8+7TjnIR/tXlEFeACcdl0fgH3iSThnLnGBR9T1tDQbLOwNIU3I6ow5yx8Nj uJxLrHn5j5h4/nxfEhECo0KirJTHfReeRpofVavu9EGaWMYoO0c= -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:32 2026 by rpki-client