$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: aCpZBq/g+AFSX+jQyglut9yHiRbzTUz/BDQD9fhNlgM= Subject key identifier: A2:9B:8C:AE:FE:8A:80:A5:84:B0:8D:9C:6B:40:41:8D:A4:B4:17:AB Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 6A0D846E655AA285FEA464D53AACB7D3BD01EC0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:17:48 +0000 Manifest this update: Tue 02 Jun 2026 10:12:48 +0000 Manifest next update: Wed 03 Jun 2026 13:08:48 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) 5: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: gpdtgpU2LYk1FgmLdRoSdmbfwXsuBUj7+M4H8smfpuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:0d:84:6e:65:5a:a2:85:fe:a4:64:d5:3a:ac:b7:d3:bd:01:ec:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Jun 2 10:12:48 2026 GMT Not After : Jun 3 13:08:48 2026 GMT Subject: CN=A29B8CAEFE8A80A584B08D9C6B40418DA4B417AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:26:f4:00:cd:7e:18:cb:d4:0d:bb:ed:df:14: 1f:f7:f0:0e:6d:51:54:b1:e6:e2:4e:88:55:5d:d6: ca:ca:2c:7a:41:6f:c1:75:0c:e4:d3:4f:e6:d1:1c: fb:d1:e7:c9:b0:83:ea:62:f1:b5:37:12:d8:1d:be: 99:8f:93:25:30:ca:d0:b1:b7:4c:ac:64:42:14:67: 8f:fb:10:6c:5e:7e:35:55:8f:2d:a1:90:d1:b7:ce: 33:aa:50:2a:bd:3c:43:ca:90:9f:b1:cc:33:e3:8d: 04:34:fb:12:8f:85:c5:f7:68:3a:e2:43:90:17:4a: 69:5b:cf:2a:8e:f3:61:ed:d0:f4:f4:08:99:2c:44: b2:e0:ce:f5:53:4a:3a:89:8a:d1:08:4f:fd:38:bc: 42:1e:20:ea:7e:7d:67:ae:09:e0:fc:50:04:75:ff: 74:a5:a1:d8:fb:91:57:ad:ea:be:d8:95:da:fc:fc: e9:81:42:2d:f8:44:13:4b:42:32:40:03:e3:3e:a1: 60:ab:bb:4d:5e:c7:bc:a4:9e:34:37:0e:51:52:06: 98:66:f9:cd:cc:b4:9e:23:43:12:e8:26:d5:3e:9d: 16:ab:94:e5:f0:6c:c8:1f:83:60:8c:98:09:02:02: 74:43:56:71:f5:d3:0a:63:e0:f3:8c:dc:c3:36:5e: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9B:8C:AE:FE:8A:80:A5:84:B0:8D:9C:6B:40:41:8D:A4:B4:17:AB X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:27:a1:a9:5a:f1:26:d1:92:42:c1:51:43:2b:79:11:81:8d: 89:bd:37:f9:80:9b:f2:95:0a:80:07:b7:33:b4:3e:77:8b:2d: 88:88:19:ed:44:d5:9c:f7:eb:6b:99:e8:03:d1:4a:01:08:0f: e2:c7:05:06:f8:a1:8e:8e:7c:1e:b9:f7:a1:15:7b:d1:1b:cd: e4:d8:70:97:60:eb:93:26:c0:12:df:08:29:27:d6:49:ca:fe: 65:04:02:c9:53:be:12:e3:a0:0e:dd:18:3b:e0:d1:d8:9e:8f: 45:6c:50:98:ae:5f:1d:c0:0e:b7:cc:b3:97:4d:29:5b:8c:de: 94:70:e0:98:40:63:fa:1b:09:a7:ae:6b:27:3d:20:1b:ef:89: 7d:50:af:8d:26:69:ac:d7:92:bb:61:1f:3b:2d:81:ab:0f:f4: 02:97:74:1a:e9:3d:31:0c:ce:dc:e0:ad:b9:e3:ab:06:cc:c9: d5:07:40:88:ca:24:8b:c7:18:97:cc:06:2c:53:27:cc:2c:9b: 36:3e:8c:b9:b4:ba:aa:e5:7d:ff:d6:84:f2:9c:05:17:02:2f: b7:74:d9:41:d1:d1:9c:8c:37:43:12:21:16:96:ec:fd:2e:f5: 03:98:48:48:20:80:1a:33:a1:9b:ee:b7:ed:c0:ce:00:ef:7e: 1b:9f:1c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUag2EbmVaooX+pGTVOqy3070B7A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA2MDIxMDEyNDhaFw0yNjA2MDMxMzA4NDhaMDMxMTAvBgNV BAMTKEEyOUI4Q0FFRkU4QTgwQTU4NEIwOEQ5QzZCNDA0MThEQTRCNDE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsJvQAzX4Yy9QNu+3fFB/38A5t UVSx5uJOiFVd1srKLHpBb8F1DOTTT+bRHPvR58mwg+pi8bU3EtgdvpmPkyUwytCx t0ysZEIUZ4/7EGxefjVVjy2hkNG3zjOqUCq9PEPKkJ+xzDPjjQQ0+xKPhcX3aDri Q5AXSmlbzyqO82Ht0PT0CJksRLLgzvVTSjqJitEIT/04vEIeIOp+fWeuCeD8UAR1 /3Slodj7kVet6r7Yldr8/OmBQi34RBNLQjJAA+M+oWCru01ex7yknjQ3DlFSBphm +c3MtJ4jQxLoJtU+nRarlOXwbMgfg2CMmAkCAnRDVnH10wpj4POM3MM2Xh53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopuMrv6KgKWEsI2ca0BBjaS0F6swHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMonoala8SbRkkLBUUMreRGBjYm9N/mAm/KV CoAHtzO0PneLLYiIGe1E1Zz362uZ6APRSgEID+LHBQb4oY6OfB6596EVe9EbzeTY cJdg65MmwBLfCCkn1knK/mUEAslTvhLjoA7dGDvg0diej0VsUJiuXx3ADrfMs5dN KVuM3pRw4JhAY/obCaeuayc9IBvviX1Qr40maazXkrthHzstgasP9AKXdBrpPTEM ztzgrbnjqwbMydUHQIjKJIvHGJfMBixTJ8wsmzY+jLm0uqrlff/WhPKcBRcCL7d0 2UHR0ZyMN0MSIRaW7P0u9QOYSEgggBozoZvut+3AzgDvfhufHIA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:35 2026 by rpki-client