$ rpki-client -vvvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft File: BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft (raw, json) Hash identifier: 2HQckArWFgpLpivNgBa5J5dNrxLCJi8PufG2MUzzcCQ= Subject key identifier: CD:0F:A8:33:C1:16:32:90:C3:EA:E3:74:B5:F1:AB:33:19:2F:B4:D5 Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D Certificate issuer: /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Certificate serial: 5C1B2A9B2BAD1398906CDDF46F521476D6929BF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft Manifest number: FF Signing time: Tue 10 Nov 2026 06:54:41 +0000 Manifest this update: Tue 10 Nov 2026 06:49:41 +0000 Manifest next update: Wed 11 Nov 2026 07:18:41 +0000 Files and hashes: 1: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: zHNrO5RKj0sgGocJxoWLTbbaLmZspg5jCQ8Anfrg+7s=) 2: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: ib28zzKGUUlCdA4/RD8reePZW2WPxobXdUY/vXz21sg=) 3: BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl (hash: REM/Yb4s3uwhla+svnYHdQHeaBBdtusyU1LK2TeGxcU=) 4: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kOfmMOa3d9ztLi3/WppSbckEJjgOvw+Ns4KcAmcXO9Q=) 5: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: dkQ6n8xtONNya3OEXAtWgpuFXMYvMGs96bfRPgq5EKE=) 6: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1b:2a:9b:2b:ad:13:98:90:6c:dd:f4:6f:52:14:76:d6:92:9b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D Validity Not Before: Nov 10 06:49:41 2026 GMT Not After : Nov 11 07:18:41 2026 GMT Subject: CN=CD0FA833C1163290C3EAE374B5F1AB33192FB4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:89:19:e9:34:c3:ae:df:ed:ab:93:7a:21: 48:89:b4:e4:3a:76:08:89:f1:6d:ee:f3:53:55:8c: 71:81:54:3b:b0:17:3a:c6:3a:6a:89:48:1c:e8:ff: 7a:51:f3:b2:a9:56:9e:ed:e6:5d:04:ba:54:61:3e: ca:9d:60:92:30:2b:09:06:31:2d:9d:94:45:bb:80: f8:c0:4a:c9:94:d8:40:40:f2:45:44:0b:c7:51:e0: c2:03:aa:37:d3:6c:78:a3:f8:26:d5:2b:a7:60:15: 30:29:29:58:5f:bf:0d:3c:77:c9:4b:36:b2:f7:9f: e0:4f:19:30:4f:2d:f2:c0:c6:68:25:2f:8c:ae:85: 47:70:32:d4:b0:44:7f:93:0d:60:95:19:7f:00:96: 4b:4d:a4:2f:38:27:aa:06:25:4b:bb:c0:40:9d:f0: 1d:ff:f7:f7:a2:c3:f3:03:44:4f:57:a6:ba:ac:6f: c6:61:ec:cf:d4:8d:65:dc:65:c7:66:3d:b7:c1:c9: 5c:4a:fa:09:95:64:d9:fb:5a:07:8d:e9:da:c8:7c: 93:82:71:e6:68:71:a4:42:3d:8d:9c:7c:4d:64:18: bb:4c:f1:3c:26:d0:64:a7:0c:23:fd:7c:47:db:7e: d6:af:29:e6:c0:3b:dd:92:90:ea:8e:1c:0a:42:dc: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0F:A8:33:C1:16:32:90:C3:EA:E3:74:B5:F1:AB:33:19:2F:B4:D5 X509v3 Authority Key Identifier: keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f9:eb:e7:01:8e:30:da:c7:7b:32:26:a5:06:d0:0a:a0:a6: f4:a9:27:73:20:c1:4b:4f:3e:14:5b:ec:30:d7:4e:73:10:d6: a2:d4:86:7b:7d:e8:83:0f:47:80:21:8d:23:24:b6:ec:19:ce: d9:47:50:35:91:73:f9:67:b4:7a:b9:a2:fc:33:e7:84:0e:66: ab:86:cf:96:08:a8:59:4d:71:13:1e:d1:64:b9:bc:56:d3:52: 48:cb:01:48:73:a3:be:68:76:a6:11:e1:0e:b2:98:95:b7:9c: 63:47:60:ec:88:62:3d:41:7e:23:37:31:27:3c:2d:eb:e4:b7: 82:ab:18:c7:64:c6:74:c3:6f:48:f6:79:a1:65:29:59:94:e7: 68:31:0b:4b:14:8c:f4:99:3b:6c:31:51:03:2e:14:2a:11:71: 98:af:0b:3d:cf:a5:c6:90:d6:35:d4:97:4b:42:2a:e1:ef:9b: 6e:7f:c3:dc:d0:41:1b:73:25:96:56:c4:2e:bf:92:11:0c:03: f6:4f:22:30:07:1a:bf:80:45:5c:45:ef:bc:37:84:f5:43:2d: ad:31:41:32:31:5c:a0:08:cc:92:3d:d5:10:9f:94:0c:62:7e: ff:20:ca:e6:71:39:2e:50:37:53:0e:54:2b:85:c3:fe:5a:e3: 76:5a:97:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBsqmyutE5iQbN30b1IUdtaSm/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZD QUMwRjkwRDAeFw0yNjExMTAwNjQ5NDFaFw0yNjExMTEwNzE4NDFaMDMxMTAvBgNV BAMTKENEMEZBODMzQzExNjMyOTBDM0VBRTM3NEI1RjFBQjMzMTkyRkI0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuf4kZ6TTDrt/tq5N6IUiJtOQ6 dgiJ8W3u81NVjHGBVDuwFzrGOmqJSBzo/3pR87KpVp7t5l0EulRhPsqdYJIwKwkG MS2dlEW7gPjASsmU2EBA8kVEC8dR4MIDqjfTbHij+CbVK6dgFTApKVhfvw08d8lL NrL3n+BPGTBPLfLAxmglL4yuhUdwMtSwRH+TDWCVGX8AlktNpC84J6oGJUu7wECd 8B3/9/eiw/MDRE9Xprqsb8Zh7M/UjWXcZcdmPbfByVxK+gmVZNn7WgeN6drIfJOC ceZocaRCPY2cfE1kGLtM8Twm0GSnDCP9fEfbftavKebAO92SkOqOHApC3OHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQ+oM8EWMpDD6uN0tfGrMxkvtNUwHwYDVR0j BBgwFoAUvjpjfvU07CklEirM5IdAdsrA+Q0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWRkZjE4MWYtMWU4OS00MDIyLTgyZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VG NTM0RUMyOTI1MTIyQUNDRTQ4NzQwNzZDQUMwRjkwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNBNjM3RUY1MzRFQzI5MjUxMjJBQ0NFNDg3NDA3NkNBQzBG OTBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvQkUzQTYzN0VGNTM0RUMyOTI1MTIyQUNDRTQ4NzQw NzZDQUMwRjkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD56+cBjjDax3syJqUG0AqgpvSpJ3MgwUtP PhRb7DDXTnMQ1qLUhnt96IMPR4AhjSMktuwZztlHUDWRc/lntHq5ovwz54QOZquG z5YIqFlNcRMe0WS5vFbTUkjLAUhzo75odqYR4Q6ymJW3nGNHYOyIYj1BfiM3MSc8 Levkt4KrGMdkxnTDb0j2eaFlKVmU52gxC0sUjPSZO2wxUQMuFCoRcZivCz3PpcaQ 1jXUl0tCKuHvm25/w9zQQRtzJZZWxC6/khEMA/ZPIjAHGr+ARVxF77w3hPVDLa0x QTIxXKAIzJI91RCflAxifv8gyuZxOS5QN1MOVCuFw/5a43Zal/4= -----END CERTIFICATE-----Generated at Tue Nov 10 10:13:56 2026 by rpki-client