$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: L3ggM4MnolXIMA5/5irrGKME2qPu07FzRL9JMfAqDvI= Subject key identifier: D2:82:41:3E:70:BB:EE:DC:08:C7:A5:D9:94:32:44:0B:37:CA:B1:C0 Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 21A3A7EA8BDC25F8C4B1BA0F72B05A241770EDF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:54:59 +0000 Manifest this update: Tue 12 May 2026 04:49:59 +0000 Manifest next update: Wed 13 May 2026 08:21:59 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) 2: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 4: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: wkg42kodh4gRoKR33NuyblF4rX7xYS6leds2gmB6/FU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a3:a7:ea:8b:dc:25:f8:c4:b1:ba:0f:72:b0:5a:24:17:70:ed:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: May 12 04:49:59 2026 GMT Not After : May 13 08:21:59 2026 GMT Subject: CN=D282413E70BBEEDC08C7A5D99432440B37CAB1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:68:03:63:4b:25:c0:be:b4:7c:b6:1e:58: 77:91:71:75:ea:53:6f:92:5f:1f:2d:3b:5c:3f:97: cc:3f:e3:97:df:dc:ef:76:c6:2b:1a:e0:f0:4d:05: 10:cb:ec:72:9c:ff:aa:e5:dd:53:55:7b:d4:ff:44: 9d:70:ef:2a:33:ca:7d:1b:6e:35:50:cd:cf:c0:2f: 99:7e:04:c2:06:9a:58:25:4a:36:e6:22:00:35:c2: e6:c1:b3:56:06:ee:06:12:17:6f:5e:fc:da:64:5b: 80:cc:bc:f2:dd:3e:52:ed:21:f5:e6:33:06:01:80: bf:6f:73:b1:06:9e:a6:e0:b4:b0:50:35:c7:97:24: be:a2:1a:65:33:43:4f:57:f1:dd:79:14:1d:c9:21: 12:00:6f:10:b9:ef:34:ab:94:ad:2a:08:09:64:4a: e7:dd:12:70:14:c9:be:1c:e3:b8:aa:b9:15:b5:6b: 05:59:2a:32:ce:ac:fd:f4:eb:f3:59:60:ea:48:ab: 88:12:d7:f0:fb:ab:ad:2a:3b:df:b4:d3:91:77:18: c3:b0:9c:fc:2a:37:0e:b0:5b:a1:4a:48:d6:fb:e2: af:fc:46:8a:f7:78:8a:77:95:a5:a8:f2:6e:f6:16: 96:5a:41:79:43:20:dd:77:f5:7f:d1:dc:28:e2:a1: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:82:41:3E:70:BB:EE:DC:08:C7:A5:D9:94:32:44:0B:37:CA:B1:C0 X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:8c:66:c6:ee:bc:6a:b3:3f:5e:22:9a:74:41:ab:d7:64:a2: ef:24:92:bc:45:de:95:99:9b:ac:8a:d3:91:f2:83:1b:da:f4: 93:f7:19:36:ec:e1:83:83:63:4e:bb:6e:68:26:dc:6e:60:63: 62:24:f7:4a:77:5e:cb:a8:aa:0d:d3:16:dd:80:47:c5:a6:30: 66:c5:21:6f:48:4d:3e:9b:b9:05:74:47:c8:11:3b:30:a8:c2: 23:43:bf:f5:48:ed:4b:44:2a:b6:4c:a7:a2:8b:7d:28:9c:6f: 0c:71:3d:13:d0:8e:80:0b:80:98:35:09:6d:18:02:30:a4:b0: 6d:41:23:6e:ac:3e:f8:cf:2a:9b:a6:6b:b6:b6:da:01:39:e4: b2:15:b8:20:8a:83:cf:c4:6b:27:67:0f:74:0c:d9:64:db:9c: b3:9d:9e:ec:b0:c9:03:f3:0e:b7:09:aa:13:e1:53:d3:03:8f: 11:89:49:e9:64:6d:c3:eb:24:19:49:a2:94:6b:ce:48:56:a9: 40:77:7d:32:6a:32:99:7d:71:3d:09:0a:39:f9:51:fe:b2:d3: 97:c7:99:a4:0c:02:01:98:61:4b:4a:80:5a:e6:54:88:34:f6: db:08:84:5c:14:2a:03:f2:85:2c:92:a2:82:ac:78:d2:3e:76: 58:0e:ad:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaOn6ovcJfjEsboPcrBaJBdw7fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjA1MTIwNDQ5NTlaFw0yNjA1MTMwODIxNTlaMDMxMTAvBgNV BAMTKEQyODI0MTNFNzBCQkVFREMwOEM3QTVEOTk0MzI0NDBCMzdDQUIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsWgDY0slwL60fLYeWHeRcXXq U2+SXx8tO1w/l8w/45ff3O92xisa4PBNBRDL7HKc/6rl3VNVe9T/RJ1w7yozyn0b bjVQzc/AL5l+BMIGmlglSjbmIgA1wubBs1YG7gYSF29e/NpkW4DMvPLdPlLtIfXm MwYBgL9vc7EGnqbgtLBQNceXJL6iGmUzQ09X8d15FB3JIRIAbxC57zSrlK0qCAlk SufdEnAUyb4c47iquRW1awVZKjLOrP306/NZYOpIq4gS1/D7q60qO9+005F3GMOw nPwqNw6wW6FKSNb74q/8Ror3eIp3laWo8m72FpZaQXlDIN139X/R3Cjiobv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oJBPnC77twIx6XZlDJECzfKscAwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+MZsbuvGqzP14imnRBq9dkou8kkrxF3pWZ m6yK05Hygxva9JP3GTbs4YODY067bmgm3G5gY2Ik90p3Xsuoqg3TFt2AR8WmMGbF IW9ITT6buQV0R8gROzCowiNDv/VI7UtEKrZMp6KLfSicbwxxPRPQjoALgJg1CW0Y AjCksG1BI26sPvjPKpuma7a22gE55LIVuCCKg8/EaydnD3QM2WTbnLOdnuywyQPz DrcJqhPhU9MDjxGJSelkbcPrJBlJopRrzkhWqUB3fTJqMpl9cT0JCjn5Uf6y05fH maQMAgGYYUtKgFrmVIg09tsIhFwUKgPyhSySooKseNI+dlgOrd4= -----END CERTIFICATE-----Generated at Wed May 13 00:31:07 2026 by rpki-client