$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: aYFPdLRoupV3SzBXA7BCQt5StkWsBMujkNs/3AraWiQ= Subject key identifier: 1C:E2:F5:DA:47:AB:10:F5:5C:F5:AA:28:50:F3:29:CA:35:79:45:D8 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 581F2E0C29B729578F22E0CF7CB5E42B3E4290AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 12:09:39 +0000 Manifest this update: Sat 26 Sep 2026 12:04:39 +0000 Manifest next update: Sun 27 Sep 2026 13:44:39 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 2: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) 3: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 5: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: MsotEmveyMo6dfrFCn9akZiS7BUSubNsS5cT3icQ+Og=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1f:2e:0c:29:b7:29:57:8f:22:e0:cf:7c:b5:e4:2b:3e:42:90:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Sep 26 12:04:39 2026 GMT Not After : Sep 27 13:44:39 2026 GMT Subject: CN=1CE2F5DA47AB10F55CF5AA2850F329CA357945D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:6b:ac:42:73:fa:0f:25:f7:91:d4:70:08: cb:dd:61:aa:13:4f:e5:c5:ce:2c:5e:f8:c6:f1:60: 09:2b:b8:d5:6c:6e:50:7b:b0:a7:93:1e:90:f5:43: e0:b4:66:25:91:eb:1c:e0:e5:b3:5a:62:61:e4:39: f4:6c:ed:25:f9:89:7b:f4:6c:c7:eb:48:55:d0:5d: 2e:f9:fb:2f:fa:48:ca:4a:7b:55:e4:86:ab:1e:66: 74:ee:a4:ad:f7:fd:88:9c:4d:f4:c3:c6:b0:45:ac: a2:28:45:a8:3a:0b:58:bb:f5:76:2c:25:bc:d8:7e: 7f:49:18:f1:5d:4f:95:6b:62:ce:59:47:27:8e:8a: 88:9c:24:09:b2:c9:ba:8d:d3:e0:50:ba:b2:7c:d6: 46:58:ae:4f:bf:af:5f:bc:3d:0c:fa:5d:24:8b:75: 75:9a:af:f4:1c:a0:a8:e7:b9:1e:3f:f4:0f:39:3b: 6d:de:cc:a3:46:04:b5:99:27:b4:23:ab:58:11:b4: 6b:d3:15:9d:17:72:0a:f6:09:d7:a1:c2:1d:e0:0c: 0a:7b:8c:4d:e7:8e:c9:0d:d7:d3:29:80:91:ff:44: 61:cb:f3:3c:93:e2:7f:53:8d:81:d8:63:b1:7e:4d: 9f:77:17:da:ea:a0:a4:87:29:94:8e:78:ab:60:b8: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E2:F5:DA:47:AB:10:F5:5C:F5:AA:28:50:F3:29:CA:35:79:45:D8 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:c6:6f:12:b9:37:6f:2f:69:8a:56:dd:7e:97:34:0b:ae: 47:f3:a2:d2:80:ef:0b:eb:89:9a:3e:27:09:44:e8:b2:9b:05: e5:d0:5b:dc:30:c2:bd:bd:e6:47:ea:e3:76:7e:cc:f9:58:4f: 63:fd:3f:0e:5e:36:15:40:1c:75:7b:d5:b6:27:e3:29:4b:54: da:4f:b3:df:ed:b9:82:a0:02:6d:68:11:97:24:79:f4:2d:09: 4b:25:93:0c:a1:33:a7:cc:f5:47:62:73:da:de:ac:ee:2b:32: 35:e8:9d:74:92:dc:20:11:ee:be:e7:a1:4e:43:d8:4a:39:c3: 4e:6e:23:88:cc:f9:ed:c8:47:e6:60:75:03:e4:8e:c2:ff:10: 05:45:ed:66:06:85:e4:05:56:51:84:19:11:d5:3d:88:35:98: 03:c3:a9:68:dd:95:ae:20:81:07:c0:d8:01:47:3e:ce:11:9d: 02:11:e0:ae:35:40:3f:48:4a:9c:07:43:b2:2e:c2:c0:bb:dd: 62:5b:61:1b:e1:c0:54:ea:df:38:cd:e0:c2:d2:c5:d4:31:6f: 3f:8f:e0:ff:b0:fd:a8:ed:6c:f4:4c:24:4d:bb:26:06:e3:8a: b7:f7:94:71:b7:81:cb:1c:5c:c5:81:5b:ac:b7:6a:02:b8:20: dc:ba:c6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB8uDCm3KVePIuDPfLXkKz5CkKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA5MjYxMjA0MzlaFw0yNjA5MjcxMzQ0MzlaMDMxMTAvBgNV BAMTKDFDRTJGNURBNDdBQjEwRjU1Q0Y1QUEyODUwRjMyOUNBMzU3OTQ1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCge2usQnP6DyX3kdRwCMvdYaoT T+XFzixe+MbxYAkruNVsblB7sKeTHpD1Q+C0ZiWR6xzg5bNaYmHkOfRs7SX5iXv0 bMfrSFXQXS75+y/6SMpKe1XkhqseZnTupK33/YicTfTDxrBFrKIoRag6C1i79XYs JbzYfn9JGPFdT5VrYs5ZRyeOioicJAmyybqN0+BQurJ81kZYrk+/r1+8PQz6XSSL dXWar/QcoKjnuR4/9A85O23ezKNGBLWZJ7Qjq1gRtGvTFZ0Xcgr2Cdehwh3gDAp7 jE3njskN19MpgJH/RGHL8zyT4n9TjYHYY7F+TZ93F9rqoKSHKZSOeKtguFeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOL12kerEPVc9aooUPMpyjV5RdgwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ2xm8SuTdvL2mKVt1+lzQLrkfzotKA7wvr iZo+JwlE6LKbBeXQW9wwwr295kfq43Z+zPlYT2P9Pw5eNhVAHHV71bYn4ylLVNpP s9/tuYKgAm1oEZckefQtCUslkwyhM6fM9Udic9rerO4rMjXonXSS3CAR7r7noU5D 2Eo5w05uI4jM+e3IR+ZgdQPkjsL/EAVF7WYGheQFVlGEGRHVPYg1mAPDqWjdla4g gQfA2AFHPs4RnQIR4K41QD9ISpwHQ7IuwsC73WJbYRvhwFTq3zjN4MLSxdQxbz+P 4P+w/ajtbPRMJE27Jgbjirf3lHG3gcscXMWBW6y3agK4INy6xt4= -----END CERTIFICATE-----Generated at Sun Sep 27 04:50:18 2026 by rpki-client