$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: yod5NV7d7c3OFlNuojYgf9OvGb2kr+S2XvIGNEP51Ps= Subject key identifier: BF:0D:7C:0B:65:9C:A1:26:D4:40:6F:6D:93:69:32:96:C0:66:44:8C Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 5EE1AC36368AC127F2C415B3AD267BFF6792243A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:04:24 +0000 Manifest this update: Fri 24 Jul 2026 03:59:24 +0000 Manifest next update: Sat 25 Jul 2026 06:24:24 +0000 Files and hashes: 1: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 2: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: 5CffejKRYx1EO55T6+PTt0AVvO7nXCUD0S5Zo6VPKAM=) 3: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 4: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e1:ac:36:36:8a:c1:27:f2:c4:15:b3:ad:26:7b:ff:67:92:24:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Jul 24 03:59:24 2026 GMT Not After : Jul 25 06:24:24 2026 GMT Subject: CN=BF0D7C0B659CA126D4406F6D93693296C066448C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:a6:ac:26:eb:31:4c:a4:10:49:2f:ae:17: d8:7f:17:46:64:47:dc:4a:09:1c:57:c0:40:0e:9f: c6:1e:ce:f0:26:6f:2c:6b:dc:48:7c:a7:96:c6:1a: c5:ed:16:39:5c:e8:a9:7b:e6:39:f1:57:a5:00:4a: ea:59:31:f0:0a:6a:cc:87:25:97:b7:e5:9a:ca:49: c9:b1:1a:67:fa:06:ad:0d:d2:88:d6:8b:b6:ff:2a: a7:99:da:ad:9e:50:15:44:8e:2f:59:bd:15:a3:e2: 6d:a5:2c:7b:66:26:56:24:24:b7:bf:6e:33:35:e0: 98:72:e8:7b:53:a9:25:fe:68:6a:88:68:04:51:52: 81:e0:e9:1d:a6:ab:80:d3:67:bc:c1:04:45:f6:79: 82:f5:c6:80:af:07:11:43:13:f9:63:20:b9:f9:bb: 37:73:90:bf:15:05:49:14:89:37:d3:63:39:60:d4: bb:1a:15:a2:7f:ea:0d:41:92:60:d2:7e:88:bf:9c: 89:bf:11:9c:98:97:65:1c:a5:d6:8e:b9:6f:c7:8a: bb:54:65:f6:a5:d3:5f:72:a0:85:ed:36:60:a4:6b: fb:a7:4c:64:b6:0f:c7:84:ab:88:5e:cb:91:13:a1: 32:90:a4:23:db:35:94:ec:bd:d5:31:49:15:dd:55: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:7C:0B:65:9C:A1:26:D4:40:6F:6D:93:69:32:96:C0:66:44:8C X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:bd:69:14:85:d6:8c:16:a6:49:65:2a:a1:97:14:49:3c: e1:3f:cf:81:7e:37:ce:d1:57:70:0e:23:5f:0a:5a:4c:8e:e2: 16:3c:6f:3e:dc:b1:b5:a1:89:61:91:96:ea:00:64:98:f8:8b: b1:a5:39:16:15:fd:9a:5d:3a:7e:c8:35:56:12:e9:3b:81:b8: 50:8c:d8:01:49:2b:ac:82:86:0c:4d:3c:e4:91:07:e0:8b:82: 52:f4:5d:68:fe:e9:ec:47:2d:44:0c:79:73:9c:ec:cf:be:fb: 2e:1e:01:31:82:2a:4e:4d:c0:56:a3:6d:74:8f:ce:da:bd:f1: 94:d7:57:70:e4:b5:e9:bb:32:13:69:76:77:b0:3a:1a:22:9b: 80:c1:eb:d7:4c:d3:32:1d:4d:fc:69:88:d4:4c:15:11:ae:b3: 8d:e2:2a:b4:48:57:5a:a8:dd:d0:7c:ee:2d:20:70:5b:2f:24: fa:42:b3:d8:ec:0d:53:77:04:a4:0d:cc:af:6d:ec:2a:a6:55: 91:54:11:34:24:0d:3a:8e:28:48:52:cc:ec:81:da:18:18:21: 1a:db:59:81:e6:11:e0:a7:ba:16:d4:51:7e:e2:87:9b:d2:b8: 32:6a:07:dd:73:95:38:07:33:df:ae:b7:76:a8:c5:e5:a2:fd: 26:85:24:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuGsNjaKwSfyxBWzrSZ7/2eSJDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjA3MjQwMzU5MjRaFw0yNjA3MjUwNjI0MjRaMDMxMTAvBgNV BAMTKEJGMEQ3QzBCNjU5Q0ExMjZENDQwNkY2RDkzNjkzMjk2QzA2NjQ0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/a6asJusxTKQQSS+uF9h/F0Zk R9xKCRxXwEAOn8YezvAmbyxr3Eh8p5bGGsXtFjlc6Kl75jnxV6UASupZMfAKasyH JZe35ZrKScmxGmf6Bq0N0ojWi7b/KqeZ2q2eUBVEji9ZvRWj4m2lLHtmJlYkJLe/ bjM14Jhy6HtTqSX+aGqIaARRUoHg6R2mq4DTZ7zBBEX2eYL1xoCvBxFDE/ljILn5 uzdzkL8VBUkUiTfTYzlg1LsaFaJ/6g1BkmDSfoi/nIm/EZyYl2UcpdaOuW/HirtU Zfal019yoIXtNmCka/unTGS2D8eEq4hey5EToTKQpCPbNZTsvdUxSRXdVQLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvw18C2WcoSbUQG9tk2kylsBmRIwwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERdvWkUhdaMFqZJZSqhlxRJPOE/z4F+N87R V3AOI18KWkyO4hY8bz7csbWhiWGRluoAZJj4i7GlORYV/ZpdOn7INVYS6TuBuFCM 2AFJK6yChgxNPOSRB+CLglL0XWj+6exHLUQMeXOc7M+++y4eATGCKk5NwFajbXSP ztq98ZTXV3Dktem7MhNpdnewOhoim4DB69dM0zIdTfxpiNRMFRGus43iKrRIV1qo 3dB87i0gcFsvJPpCs9jsDVN3BKQNzK9t7CqmVZFUETQkDTqOKEhSzOyB2hgYIRrb WYHmEeCnuhbUUX7ih5vSuDJqB91zlTgHM9+ut3aoxeWi/SaFJJI= -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:24 2026 by rpki-client