$ rpki-client -vvvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: DwDiR72AqeOtklBmCGyA47sHpLcWlE9FiJrwZmXO9zY= Subject key identifier: 1E:99:C8:C0:A4:16:E7:9D:62:DE:46:17:39:77:E8:A7:C7:87:CF:75 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 33893CC557F5A3BDD7527BA850F9B965C80E6D64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:09:17 +0000 Manifest this update: Sun 20 Sep 2026 18:04:17 +0000 Manifest next update: Mon 21 Sep 2026 18:53:17 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 2: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 3: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 4: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: TIv/GyCo1rKkn+ksQmVvNokXBNDkJq+wsGBIEzmn400=) 5: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 6: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:89:3c:c5:57:f5:a3:bd:d7:52:7b:a8:50:f9:b9:65:c8:0e:6d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Sep 20 18:04:17 2026 GMT Not After : Sep 21 18:53:17 2026 GMT Subject: CN=1E99C8C0A416E79D62DE46173977E8A7C787CF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:e3:aa:95:68:fa:73:5e:32:35:4f:8b:47: 49:db:02:3a:5e:a1:19:53:bf:88:b1:81:0b:2b:4a: 86:52:5a:a4:c5:14:83:26:90:78:f5:4e:38:98:5a: 50:d7:62:5d:bf:37:29:94:99:72:75:1f:12:08:3b: 24:4c:8f:5f:78:ba:05:e2:f6:c3:4c:d3:79:ad:b7: 8e:c2:d5:e7:86:76:34:1c:01:ca:c0:88:5f:a3:02: 9d:30:9c:55:73:42:0c:46:0e:c3:e4:9b:99:3a:24: 95:90:c6:ad:50:c9:9c:e4:7c:ca:72:75:bf:06:87: 72:19:8e:9a:34:69:cd:b1:0f:85:00:89:ed:76:b0: fe:7a:5a:ae:5e:91:68:35:04:af:67:3c:0b:43:d3: 0c:74:2e:5d:cb:83:b7:2f:63:f7:15:ce:11:25:71: ab:24:ad:f0:bc:4a:66:82:8f:e6:0f:6c:16:29:f6: 94:b5:43:7c:12:22:af:60:e6:61:0c:64:52:78:c4: b5:1c:20:0e:bc:4c:45:cf:71:eb:24:ec:5b:2b:1c: c0:4b:bb:2d:8f:79:3f:b0:5a:9b:90:70:2e:4a:b4: 43:9c:84:31:bc:5c:13:6f:0d:6b:a2:2a:68:05:23: 8a:6a:40:55:7e:fc:4c:3e:36:b6:8a:cc:01:be:2f: 14:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:C8:C0:A4:16:E7:9D:62:DE:46:17:39:77:E8:A7:C7:87:CF:75 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1e:a3:2b:9e:23:89:c8:10:14:5f:32:2d:5e:f2:d2:2e:c8: 18:4f:5a:a5:e6:b1:bc:21:f2:df:00:f6:b8:49:87:87:28:00: c4:f7:df:7c:16:da:35:49:c0:10:49:a0:a3:54:fb:4d:31:a9: 5e:b0:02:a8:fb:49:50:40:3f:65:29:d6:3b:e2:11:93:93:51: ee:30:c1:01:23:bd:8a:88:84:4c:87:ad:c5:8f:9e:67:4b:1c: 84:c8:47:3d:87:db:e5:53:2d:78:38:46:18:36:85:94:ce:f7: 66:8d:6b:42:cb:8f:12:ce:af:f9:5c:83:c8:5d:9d:68:46:ca: ba:17:14:20:2f:6a:44:47:4b:6f:c7:89:77:0e:e7:ca:26:b9: 33:1e:74:b1:71:db:61:eb:0f:e4:4a:25:4a:38:35:30:b1:65: d1:af:bd:51:d3:4d:f2:0e:52:fe:74:32:33:13:d5:6f:f4:88: ab:3a:64:3a:4c:da:5c:77:c9:78:87:ae:f3:b6:5e:76:37:e5: 0f:7d:e9:03:65:95:73:b8:f3:60:bd:71:a5:8c:08:8e:71:04: 15:90:6d:4d:91:03:97:d3:a5:3e:b6:9b:1b:ee:c2:c5:51:33: d0:78:98:3c:34:d8:79:c5:1a:60:99:b5:1e:3a:f0:cf:1c:02: 63:55:01:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4k8xVf1o73XUnuoUPm5ZcgObWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjA5MjAxODA0MTdaFw0yNjA5MjExODUzMTdaMDMxMTAvBgNV BAMTKDFFOTlDOEMwQTQxNkU3OUQ2MkRFNDYxNzM5NzdFOEE3Qzc4N0NGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGeOqlWj6c14yNU+LR0nbAjpe oRlTv4ixgQsrSoZSWqTFFIMmkHj1TjiYWlDXYl2/NymUmXJ1HxIIOyRMj194ugXi 9sNM03mtt47C1eeGdjQcAcrAiF+jAp0wnFVzQgxGDsPkm5k6JJWQxq1QyZzkfMpy db8Gh3IZjpo0ac2xD4UAie12sP56Wq5ekWg1BK9nPAtD0wx0Ll3Lg7cvY/cVzhEl caskrfC8SmaCj+YPbBYp9pS1Q3wSIq9g5mEMZFJ4xLUcIA68TEXPcesk7FsrHMBL uy2PeT+wWpuQcC5KtEOchDG8XBNvDWuiKmgFI4pqQFV+/Ew+NraKzAG+LxQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpnIwKQW551i3kYXOXfop8eHz3UwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUeoyueI4nIEBRfMi1e8tIuyBhPWqXmsbwh 8t8A9rhJh4coAMT333wW2jVJwBBJoKNU+00xqV6wAqj7SVBAP2Up1jviEZOTUe4w wQEjvYqIhEyHrcWPnmdLHITIRz2H2+VTLXg4Rhg2hZTO92aNa0LLjxLOr/lcg8hd nWhGyroXFCAvakRHS2/HiXcO58omuTMedLFx22HrD+RKJUo4NTCxZdGvvVHTTfIO Uv50MjMT1W/0iKs6ZDpM2lx3yXiHrvO2XnY35Q996QNllXO482C9caWMCI5xBBWQ bU2RA5fTpT62mxvuwsVRM9B4mDw02HnFGmCZtR468M8cAmNVAQI= -----END CERTIFICATE-----Generated at Mon Sep 21 05:34:34 2026 by rpki-client