$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: Wp3Ygpsj8zU7bNr/GdlNbDc4/VUcHxsmTQpTT0H13Ko= Subject key identifier: BF:8F:9C:48:FE:03:05:D0:B2:CA:6B:0E:EF:A5:81:B9:5F:FB:94:B8 Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 1F741A9BCEEB7A4E1FBB153FBE78D52E9BEA845D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:00:46 +0000 Manifest this update: Wed 23 Sep 2026 23:55:46 +0000 Manifest next update: Fri 25 Sep 2026 02:53:46 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) 2: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: TzhCCWY0q7/PBUFgUofYDXbPfinMy51axpoGYchSOuA=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 4: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:74:1a:9b:ce:eb:7a:4e:1f:bb:15:3f:be:78:d5:2e:9b:ea:84:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Sep 23 23:55:46 2026 GMT Not After : Sep 25 02:53:46 2026 GMT Subject: CN=BF8F9C48FE0305D0B2CA6B0EEFA581B95FFB94B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:94:39:87:cf:be:ba:e2:15:34:1d:00:7e: 3e:6e:bf:60:91:51:19:c7:f3:6c:80:c4:fe:b6:a8: 98:5c:27:1f:a0:61:a5:6b:01:1c:8b:eb:70:9f:76: b1:46:ca:2b:9d:1c:39:f1:2d:ba:44:8f:00:04:a5: c3:fc:81:e2:28:7e:e2:51:37:d0:44:1c:5c:06:87: 14:ba:4a:7d:c8:e2:bf:70:d2:51:55:a6:b4:ea:f3: 23:69:5e:c2:f7:41:14:3d:91:51:50:cb:b9:51:9c: 3a:b6:7d:7d:88:95:a7:1c:d1:82:62:e6:df:22:82: 0a:43:57:fe:58:ec:95:b7:61:14:13:9b:29:da:33: 61:4d:75:e5:a3:43:6a:ac:d2:68:a3:45:71:85:b7: 51:40:f0:16:d4:48:ed:d8:2b:d2:fc:15:70:9a:c3: 6e:93:43:0b:02:24:13:c0:10:84:40:64:ba:f4:e3: d6:5f:70:8c:88:a8:72:bb:43:e4:53:5f:b0:11:a3: 9f:9c:28:16:d5:24:56:bf:a2:9f:62:52:c9:6d:dd: 08:85:5d:60:b4:cf:5d:ee:e5:22:60:ed:a3:e4:cc: 53:b4:3b:52:ed:1f:fc:ec:55:2c:db:4a:c2:44:6c: 0a:62:f4:03:bb:59:3c:6c:5e:3c:94:bc:17:c3:15: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:9C:48:FE:03:05:D0:B2:CA:6B:0E:EF:A5:81:B9:5F:FB:94:B8 X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2e:21:9f:14:09:9d:c3:0e:c6:58:98:80:02:de:73:5f:2f: e7:e8:65:77:83:c4:a7:a7:23:f3:1c:3c:df:22:a2:cd:a8:53: 5a:3e:e5:39:2d:46:c8:0b:95:9f:b3:99:85:d7:1f:29:40:36: a6:cf:55:bb:ac:47:35:d5:be:87:b5:64:a3:c0:7c:74:4c:63: a3:b2:3f:36:6c:9f:4c:06:c0:a3:3b:39:61:54:68:5a:8f:bd: 3e:50:1a:fb:2e:e0:16:2c:20:96:e2:ed:8c:b4:b6:43:45:cc: 4c:37:2e:7f:ce:b9:63:80:32:c0:d2:8e:5b:f0:7a:c0:51:d9: bd:e3:2b:7b:8a:04:c7:46:10:1c:f2:b5:02:7a:bc:41:02:25: 56:2a:37:26:f1:a6:65:70:5c:19:bd:f0:5a:7c:4a:d0:d1:7e: 0f:b1:56:89:de:80:f4:f6:bf:e9:6d:f9:73:1c:6e:4e:ac:36: 04:7c:1d:8c:d5:43:d2:79:3a:e7:37:c3:fb:71:75:7f:56:1b: 40:f8:9c:bb:31:9f:b9:cd:f6:bc:56:7e:01:de:f7:96:eb:92: 0f:ce:9b:b6:ac:15:f5:57:48:4f:1f:58:fd:2b:02:30:17:33: 6f:f9:0a:b7:ce:9a:97:45:e7:2b:a1:e0:f7:b3:e1:fb:21:ff: b5:0c:8c:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3Qam87rek4fuxU/vnjVLpvqhF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjA5MjMyMzU1NDZaFw0yNjA5MjUwMjUzNDZaMDMxMTAvBgNV BAMTKEJGOEY5QzQ4RkUwMzA1RDBCMkNBNkIwRUVGQTU4MUI5NUZGQjk0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCupQ5h8++uuIVNB0Afj5uv2CR URnH82yAxP62qJhcJx+gYaVrARyL63CfdrFGyiudHDnxLbpEjwAEpcP8geIofuJR N9BEHFwGhxS6Sn3I4r9w0lFVprTq8yNpXsL3QRQ9kVFQy7lRnDq2fX2Ilacc0YJi 5t8iggpDV/5Y7JW3YRQTmynaM2FNdeWjQ2qs0mijRXGFt1FA8BbUSO3YK9L8FXCa w26TQwsCJBPAEIRAZLr049ZfcIyIqHK7Q+RTX7ARo5+cKBbVJFa/op9iUslt3QiF XWC0z13u5SJg7aPkzFO0O1LtH/zsVSzbSsJEbApi9AO7WTxsXjyUvBfDFRExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4+cSP4DBdCyymsO76WBuV/7lLgwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwuIZ8UCZ3DDsZYmIAC3nNfL+foZXeDxKen I/McPN8ios2oU1o+5TktRsgLlZ+zmYXXHylANqbPVbusRzXVvoe1ZKPAfHRMY6Oy PzZsn0wGwKM7OWFUaFqPvT5QGvsu4BYsIJbi7Yy0tkNFzEw3Ln/OuWOAMsDSjlvw esBR2b3jK3uKBMdGEBzytQJ6vEECJVYqNybxpmVwXBm98Fp8StDRfg+xVonegPT2 v+lt+XMcbk6sNgR8HYzVQ9J5Ouc3w/txdX9WG0D4nLsxn7nN9rxWfgHe95brkg/O m7asFfVXSE8fWP0rAjAXM2/5CrfOmpdF5yuh4Pez4fsh/7UMjJI= -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:42 2026 by rpki-client