$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: +DIHJY70cmHz8vdLyoCeUbzmX4ik4hnKnnMp/9yqikc= Subject key identifier: 9F:56:C3:60:7D:B1:E7:FE:97:0D:15:83:16:04:5A:AF:47:3C:47:D1 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 65D77950101D40B82E4EC2959FCD587FAA5C7DFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: 0F Signing time: Wed 13 May 2026 02:06:06 +0000 Manifest this update: Wed 13 May 2026 02:01:06 +0000 Manifest next update: Thu 14 May 2026 03:27:06 +0000 Files and hashes: 1: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: bu/ys8Zq3dL3rZp80GzqO6yuITbzL6+oyJAcnh4DQfg=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d7:79:50:10:1d:40:b8:2e:4e:c2:95:9f:cd:58:7f:aa:5c:7d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: May 13 02:01:06 2026 GMT Not After : May 14 03:27:06 2026 GMT Subject: CN=9F56C3607DB1E7FE970D158316045AAF473C47D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:d8:1c:75:4d:73:1f:b5:3c:e7:40:13:1b: b4:dc:6d:11:c3:aa:21:8e:de:23:73:f0:a6:69:b7: 08:37:0e:c3:97:65:93:37:bb:65:e0:08:1a:35:cd: bf:c9:57:18:78:65:6d:a2:f3:61:91:68:68:99:3a: 41:0b:54:50:e1:e7:1e:59:83:9d:6e:97:c2:54:60: b7:c7:1b:27:53:9b:17:64:aa:1e:e8:b2:e9:d0:bc: e2:36:b5:7e:14:6e:36:7d:83:b2:f1:9e:35:c5:15: c6:b1:96:09:07:35:f3:e0:19:f2:97:5f:38:20:1d: d0:f2:2f:23:9e:5c:97:bf:40:33:b9:89:31:39:83: 84:b1:a4:26:79:34:af:03:1f:fd:68:bc:32:e3:3e: 69:ad:99:df:06:31:18:3f:a3:73:97:6a:cd:e7:fc: 4d:94:6b:ad:a5:ca:df:83:fb:2c:16:5d:e6:62:9d: 18:dc:37:c7:8f:7f:7a:92:f5:38:7b:87:95:47:6e: 83:87:8a:f8:42:de:80:0e:7a:8d:24:07:d1:3a:cc: 54:c0:18:0b:0f:c4:48:52:9c:c9:b8:57:52:ed:e8: b7:a9:62:1d:18:7b:14:93:62:3f:80:82:0b:4e:86: 8f:aa:ea:27:56:34:93:fd:47:48:1a:5a:a6:2b:d6: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:56:C3:60:7D:B1:E7:FE:97:0D:15:83:16:04:5A:AF:47:3C:47:D1 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:95:12:98:2e:6b:1a:6b:bb:5b:88:e6:1c:0c:83:f6:0e:26: ff:71:3d:3b:19:7f:4e:c0:98:3a:d7:23:a1:51:80:00:d6:34: 50:d7:c9:6c:b7:11:0e:86:ea:76:f7:f9:1c:2f:54:fe:a6:dd: dc:ce:e0:4e:67:9d:dc:f3:5a:cd:7d:d7:73:ea:61:d0:a3:ed: f6:ec:88:05:68:d6:05:dc:4d:fe:83:b6:2c:4e:a8:22:36:ef: 12:9a:3e:e8:bf:55:c8:fe:d3:e1:4f:15:cf:21:35:3c:e3:e7: c5:a6:d3:00:c1:02:5e:51:67:a0:dd:31:ff:c9:46:2b:1c:f3: 04:f7:45:d6:5a:88:8c:92:3b:d6:27:f9:1b:02:c2:2e:97:a5: 79:cb:80:c4:67:63:38:d8:24:1b:c5:a8:4f:59:aa:69:24:91: 7a:0f:e5:d2:4c:19:28:8a:86:a5:87:ca:a6:ac:e2:f0:f5:80: 08:96:3c:4c:ba:ea:b1:6c:73:e1:39:44:31:10:53:6b:e7:7d: ed:4e:fe:4e:11:80:70:26:b9:e4:6e:7e:b3:8e:2b:7d:2c:92: 6b:53:dc:99:e8:66:6c:0b:2a:1f:10:ff:df:cb:4c:55:b8:24: 41:be:56:b7:36:3e:c5:5a:80:af:ce:d8:fc:73:0f:5b:a9:35: 7a:a9:83:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdd5UBAdQLguTsKVn81Yf6pcffswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA1MTMwMjAxMDZaFw0yNjA1MTQwMzI3MDZaMDMxMTAvBgNV BAMTKDlGNTZDMzYwN0RCMUU3RkU5NzBEMTU4MzE2MDQ1QUFGNDczQzQ3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG89gcdU1zH7U850ATG7TcbRHD qiGO3iNz8KZptwg3DsOXZZM3u2XgCBo1zb/JVxh4ZW2i82GRaGiZOkELVFDh5x5Z g51ul8JUYLfHGydTmxdkqh7osunQvOI2tX4UbjZ9g7LxnjXFFcaxlgkHNfPgGfKX XzggHdDyLyOeXJe/QDO5iTE5g4SxpCZ5NK8DH/1ovDLjPmmtmd8GMRg/o3OXas3n /E2Ua62lyt+D+ywWXeZinRjcN8ePf3qS9Th7h5VHboOHivhC3oAOeo0kB9E6zFTA GAsPxEhSnMm4V1Lt6LepYh0YexSTYj+AggtOho+q6idWNJP9R0gaWqYr1glBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn1bDYH2x5/6XDRWDFgRar0c8R9EwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOVEpguaxpru1uI5hwMg/YOJv9xPTsZf07A mDrXI6FRgADWNFDXyWy3EQ6G6nb3+RwvVP6m3dzO4E5nndzzWs1913PqYdCj7fbs iAVo1gXcTf6DtixOqCI27xKaPui/Vcj+0+FPFc8hNTzj58Wm0wDBAl5RZ6DdMf/J Risc8wT3RdZaiIySO9Yn+RsCwi6XpXnLgMRnYzjYJBvFqE9ZqmkkkXoP5dJMGSiK hqWHyqas4vD1gAiWPEy66rFsc+E5RDEQU2vnfe1O/k4RgHAmueRufrOOK30skmtT 3JnoZmwLKh8Q/9/LTFW4JEG+Vrc2PsVagK/O2PxzD1upNXqpg3I= -----END CERTIFICATE-----Generated at Wed May 13 09:17:39 2026 by rpki-client