$ rpki-client -vvvf rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft File: BE674235014841C34B81D477A887E851CCB5DE20.mft (raw, json) Hash identifier: BFPBmRT1ZK5YN9LYpbD2+F66/AhjCZcyGp6st2snsTw= Subject key identifier: EB:B9:C9:5D:94:4E:CB:4A:56:A1:5F:42:0A:DC:42:BC:5F:72:D6:DA Authority key identifier: BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 Certificate issuer: /CN=BE674235014841C34B81D477A887E851CCB5DE20 Certificate serial: 340A9C1D19B605293E59C38C7B3EA615D291F36B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft Manifest number: D8 Signing time: Sat 10 Oct 2026 07:40:59 +0000 Manifest this update: Sat 10 Oct 2026 07:35:59 +0000 Manifest next update: Sun 11 Oct 2026 08:55:59 +0000 Files and hashes: 1: BE674235014841C34B81D477A887E851CCB5DE20.crl (hash: VZdh7tR51rlfFy2Q1KKS6l9m9wR0bjJRpzSsHzEJkww=) 2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: u3ZNobogmTT7oj8DktFleI1vr3pzVaKkxPNl1qOcKkg=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: s63GisiYkYpRSTD3slDNbXG2Qv97cpH0+c4eaoKLjgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0a:9c:1d:19:b6:05:29:3e:59:c3:8c:7b:3e:a6:15:d2:91:f3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE674235014841C34B81D477A887E851CCB5DE20 Validity Not Before: Oct 10 07:35:59 2026 GMT Not After : Oct 11 08:55:59 2026 GMT Subject: CN=EBB9C95D944ECB4A56A15F420ADC42BC5F72D6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:ba:f6:b2:07:9f:05:d4:be:53:b9:37:44: 38:66:eb:26:6a:0d:ca:40:3e:f0:ea:42:4d:84:84: d3:8b:bc:9d:d0:08:e7:f9:22:fb:ff:d8:90:ac:a2: 75:b4:3d:dd:62:42:87:1b:91:f6:cf:75:5f:76:05: e0:16:ad:fa:72:8f:70:63:90:8b:95:bd:fd:15:d6: a7:46:d7:5f:ee:78:fc:37:70:2e:82:3a:f8:2a:77: 51:06:e6:59:7a:27:f6:ef:4c:b0:3a:25:57:08:3a: 89:c5:1d:26:6b:1d:53:d5:51:ff:ac:3b:02:54:bc: 80:07:83:82:cb:37:7b:69:95:c4:05:54:8f:c3:7a: 43:a2:23:21:90:84:dd:2e:11:31:c8:0c:c0:d5:2d: 7c:0f:c3:4b:b7:45:54:c7:1a:cf:1f:f3:bf:92:2b: 7d:94:51:e2:a7:39:2c:c0:6a:58:f0:ad:6f:12:8f: fb:69:5c:39:e6:03:b3:4b:41:ea:e8:ee:3f:23:31: cf:df:62:1c:77:a3:84:bf:62:6f:9b:dc:0d:3a:22: ec:75:0f:3e:f0:4d:82:91:4b:81:db:0d:c9:bd:a6: f0:ca:43:16:f2:31:b9:48:da:e2:09:89:0b:43:99: b5:f5:ee:03:9b:98:c6:d1:de:07:b5:94:57:32:97: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:C9:5D:94:4E:CB:4A:56:A1:5F:42:0A:DC:42:BC:5F:72:D6:DA X509v3 Authority Key Identifier: keyid:BE:67:42:35:01:48:41:C3:4B:81:D4:77:A8:87:E8:51:CC:B5:DE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE674235014841C34B81D477A887E851CCB5DE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/BE674235014841C34B81D477A887E851CCB5DE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5a:f7:2a:af:26:39:3c:6e:ca:cb:cc:ef:3c:d0:cc:2a:37: f6:00:53:e5:ba:d5:81:75:4b:d6:2d:7e:24:35:bc:69:35:05: a2:57:84:02:8c:6e:78:ea:a3:b9:9d:f8:ac:81:60:63:9a:c8: 48:7c:cf:9c:f3:5c:3d:fb:cc:db:5f:59:c7:96:7a:35:0b:7d: ad:a4:b6:ce:d1:e6:54:0b:6f:79:75:ee:d9:49:5b:ee:b6:25: 4a:0b:b8:f9:8d:59:31:17:1e:65:85:f8:0a:2d:fe:d7:f8:cf: 8a:aa:38:31:66:53:6b:57:8e:65:66:8b:78:7a:70:76:98:0e: a9:e9:fc:af:ba:26:cf:3a:fc:1e:8c:aa:9c:a2:bf:e6:84:81: ac:6a:e5:f1:1b:81:6e:6b:f5:27:9d:3e:d5:45:24:bc:0d:e4: 3b:95:f1:5f:01:16:d8:84:95:e4:43:38:9e:2f:59:ab:60:f9: ab:26:c8:c9:d4:f5:a8:e3:54:7c:68:0e:b3:5a:af:20:e9:00: 77:52:8a:ef:83:3e:77:1f:fc:a8:02:f3:eb:01:ec:ac:df:ed: 3d:31:73:2a:58:c0:06:43:28:d7:8c:83:10:29:7d:0f:79:7e: 71:c6:3f:29:58:02:7d:a2:19:b4:30:29:45:4d:24:b1:fa:b6: 46:c4:7f:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAqcHRm2BSk+WcOMez6mFdKR82swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4NTFD Q0I1REUyMDAeFw0yNjEwMTAwNzM1NTlaFw0yNjEwMTEwODU1NTlaMDMxMTAvBgNV BAMTKEVCQjlDOTVEOTQ0RUNCNEE1NkExNUY0MjBBREM0MkJDNUY3MkQ2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEorr2sgefBdS+U7k3RDhm6yZq DcpAPvDqQk2EhNOLvJ3QCOf5Ivv/2JCsonW0Pd1iQocbkfbPdV92BeAWrfpyj3Bj kIuVvf0V1qdG11/uePw3cC6COvgqd1EG5ll6J/bvTLA6JVcIOonFHSZrHVPVUf+s OwJUvIAHg4LLN3tplcQFVI/DekOiIyGQhN0uETHIDMDVLXwPw0u3RVTHGs8f87+S K32UUeKnOSzAaljwrW8Sj/tpXDnmA7NLQero7j8jMc/fYhx3o4S/Ym+b3A06Iux1 Dz7wTYKRS4HbDcm9pvDKQxbyMblI2uIJiQtDmbX17gObmMbR3ge1lFcyl8ubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU67nJXZROy0pWoV9CCtxCvF9y1towHwYDVR0j BBgwFoAUvmdCNQFIQcNLgdR3qIfoUcy13iAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTcwYzFiYWItMTNmNC00Y2U2LTg1ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUw MTQ4NDFDMzRCODFENDc3QTg4N0U4NTFDQ0I1REUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTY3NDIzNTAxNDg0MUMzNEI4MUQ0NzdBODg3RTg1MUNDQjVE RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvQkU2NzQyMzUwMTQ4NDFDMzRCODFENDc3QTg4N0U4 NTFDQ0I1REUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBa9yqvJjk8bsrLzO880MwqN/YAU+W61YF1 S9YtfiQ1vGk1BaJXhAKMbnjqo7md+KyBYGOayEh8z5zzXD37zNtfWceWejULfa2k ts7R5lQLb3l17tlJW+62JUoLuPmNWTEXHmWF+Aot/tf4z4qqODFmU2tXjmVmi3h6 cHaYDqnp/K+6Js86/B6Mqpyiv+aEgaxq5fEbgW5r9SedPtVFJLwN5DuV8V8BFtiE leRDOJ4vWatg+asmyMnU9ajjVHxoDrNaryDpAHdSiu+DPncf/KgC8+sB7Kzf7T0x cypYwAZDKNeMgxApfQ95fnHGPylYAn2iGbQwKUVNJLH6tkbEf3o= -----END CERTIFICATE-----Generated at Sat Oct 10 16:19:45 2026 by rpki-client