$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft File: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft (raw, json) Hash identifier: S6dGc3yWMa8R4sUsYPNgGr0MbBu++4Qp7LATSIf8A5g= Subject key identifier: 52:D6:74:49:BF:15:D8:56:EF:5D:88:3D:85:7F:98:92:A7:ED:1F:80 Authority key identifier: BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 Certificate issuer: /CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Certificate serial: 3178B8964C1C5B5308722B16A687EEF2866D93C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:16:49 +0000 Manifest this update: Mon 21 Sep 2026 08:11:49 +0000 Manifest next update: Tue 22 Sep 2026 12:03:49 +0000 Files and hashes: 1: BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl (hash: vyC5YeRlEpQTVrSocbpuBmOv5YU798IVA7O3wIafjfM=) 2: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: Od8V+mQHuU8EzMntRRnJoN07uXL+m/YOXljtK8BGjHw=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: u+9c9rKVTMexnUms/phLxZrmwAGKCx7eW2MRZawsvKg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:78:b8:96:4c:1c:5b:53:08:72:2b:16:a6:87:ee:f2:86:6d:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE380E14066F8F314028FD0615B2AEECCD1BF3B3 Validity Not Before: Sep 21 08:11:49 2026 GMT Not After : Sep 22 12:03:49 2026 GMT Subject: CN=52D67449BF15D856EF5D883D857F9892A7ED1F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:e8:cb:89:81:14:94:1c:ab:7d:06:26:18: 0a:d1:b4:89:6f:ca:75:fb:b5:52:ce:28:c0:42:5e: a2:8f:6d:cb:26:e3:92:32:64:6c:4f:2f:36:08:44: bf:9f:ee:f6:2d:ca:01:ae:cd:0b:c5:0a:02:ca:68: 37:ad:6c:01:5f:c2:0c:a1:7f:ff:36:ad:6a:11:b6: 22:40:5d:be:5f:a4:d3:bd:29:f8:86:04:bf:6d:9e: d9:85:2d:69:e6:3a:62:ad:1f:17:fd:6d:34:54:42: de:ba:06:13:22:a7:26:4b:9c:6a:65:f1:d8:ab:db: 04:b0:c9:ba:1f:29:2b:68:f4:b6:b0:d7:cd:f8:c3: 13:ef:07:9c:2b:8f:9e:94:d0:5d:b1:6e:9d:9f:5b: a8:f0:d2:d1:6d:e9:99:ff:8a:39:e9:a2:6f:5e:01: 65:ab:bf:2d:2a:65:62:fc:e4:c5:d4:80:38:28:89: c1:56:45:12:36:81:32:7b:16:00:32:7c:a0:ee:ac: 72:3d:b8:e5:4e:eb:7e:37:16:45:5f:01:5f:f0:16: ff:c5:66:3e:c3:2f:14:12:e2:5a:32:1a:f4:16:d1: 11:9e:e6:ab:2d:81:df:fa:ab:04:dd:96:7b:b2:a6: b9:bc:db:29:35:f8:66:d6:a5:c0:b2:e7:f8:fd:d6: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:74:49:BF:15:D8:56:EF:5D:88:3D:85:7F:98:92:A7:ED:1F:80 X509v3 Authority Key Identifier: keyid:BE:38:0E:14:06:6F:8F:31:40:28:FD:06:15:B2:AE:EC:CD:1B:F3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/BE380E14066F8F314028FD0615B2AEECCD1BF3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2e:c6:ac:5c:a8:d4:22:c7:c1:fd:2b:36:af:3b:8b:9b:a1: 18:9a:72:f4:4b:2b:0d:76:2a:04:b6:fb:65:d4:ae:80:c8:57: f5:d4:b6:06:72:00:15:dd:31:f3:37:9f:81:79:41:3a:2e:02: 7f:ca:46:29:d4:85:0e:8d:a0:38:6a:cc:af:a9:9d:e6:4b:3a: 58:d2:8b:e3:4f:18:0e:8c:b6:cd:f1:b5:b7:43:38:c3:12:0b: c0:8a:e5:45:4e:10:e2:69:2e:07:45:31:93:7c:6e:b8:60:02: 07:18:2c:50:fb:9a:b0:fa:e6:36:f8:f6:64:43:91:a3:e9:61: 3a:8d:fa:b3:58:b5:e6:03:0a:31:b6:bc:64:76:32:0d:f1:65: fa:45:18:0c:13:2c:e4:35:fb:11:4a:29:3d:fd:24:cf:5e:a9: 5d:9b:05:bb:bc:4e:0c:c2:ae:3d:84:f5:1f:ac:48:ba:a2:a0: 26:53:79:51:91:ad:a7:5a:1e:b5:ba:d7:77:ed:43:e7:63:13: d2:d2:a7:da:15:f3:1d:5a:b8:f5:35:66:37:ee:44:7a:3e:a2: 1c:d5:e5:1f:1e:0e:a8:40:6d:78:02:ff:18:5e:17:db:d0:20: 15:8d:05:e6:65:3f:3e:27:26:58:36:09:c8:9b:28:29:37:8b: a1:7d:47:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXi4lkwcW1MIcisWpofu8oZtk8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFFRUND RDFCRjNCMzAeFw0yNjA5MjEwODExNDlaFw0yNjA5MjIxMjAzNDlaMDMxMTAvBgNV BAMTKDUyRDY3NDQ5QkYxNUQ4NTZFRjVEODgzRDg1N0Y5ODkyQTdFRDFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsk+jLiYEUlByrfQYmGArRtIlv ynX7tVLOKMBCXqKPbcsm45IyZGxPLzYIRL+f7vYtygGuzQvFCgLKaDetbAFfwgyh f/82rWoRtiJAXb5fpNO9KfiGBL9tntmFLWnmOmKtHxf9bTRUQt66BhMipyZLnGpl 8dir2wSwybofKSto9Law1834wxPvB5wrj56U0F2xbp2fW6jw0tFt6Zn/ijnpom9e AWWrvy0qZWL85MXUgDgoicFWRRI2gTJ7FgAyfKDurHI9uOVO6343FkVfAV/wFv/F Zj7DLxQS4loyGvQW0RGe5qstgd/6qwTdlnuyprm82yk1+GbWpcCy5/j91vC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtZ0Sb8V2FbvXYg9hX+YkqftH4AwHwYDVR0j BBgwFoAUvjgOFAZvjzFAKP0GFbKu7M0b87MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjIxOTU1ZjAtNGI0MC00YzNiLTlmZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQw NjZGOEYzMTQwMjhGRDA2MTVCMkFFRUNDRDFCRjNCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTM4MEUxNDA2NkY4RjMxNDAyOEZEMDYxNUIyQUVFQ0NEMUJG M0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQkUzODBFMTQwNjZGOEYzMTQwMjhGRDA2MTVCMkFF RUNDRDFCRjNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUuxqxcqNQix8H9KzavO4uboRiacvRLKw12 KgS2+2XUroDIV/XUtgZyABXdMfM3n4F5QTouAn/KRinUhQ6NoDhqzK+pneZLOljS i+NPGA6Mts3xtbdDOMMSC8CK5UVOEOJpLgdFMZN8brhgAgcYLFD7mrD65jb49mRD kaPpYTqN+rNYteYDCjG2vGR2Mg3xZfpFGAwTLOQ1+xFKKT39JM9eqV2bBbu8TgzC rj2E9R+sSLqioCZTeVGRradaHrW613ftQ+djE9LSp9oV8x1auPU1ZjfuRHo+ohzV 5R8eDqhAbXgC/xheF9vQIBWNBeZlPz4nJlg2CcibKCk3i6F9R1g= -----END CERTIFICATE-----Generated at Mon Sep 21 23:28:16 2026 by rpki-client