$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: eYs/ELeLijjrEGFKap3EvEvVvUNEBiLbm38kCDCS4Jo= Subject key identifier: ED:1A:88:73:11:98:A8:1B:AF:AE:9A:2E:1B:2E:9E:77:6D:14:EB:76 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 322B88E3E6457CA2C8F52F51501E321ABDBA5ABA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 23:35:16 +0000 Manifest this update: Fri 04 Sep 2026 23:30:16 +0000 Manifest next update: Sun 06 Sep 2026 00:14:16 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 2: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: 8E5BpIg7sRZP2xxm6FPKvYISmMMdEcliN07GR5vQRFU=) 3: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 5: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 23:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:88:e3:e6:45:7c:a2:c8:f5:2f:51:50:1e:32:1a:bd:ba:5a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Sep 4 23:30:16 2026 GMT Not After : Sep 6 00:14:16 2026 GMT Subject: CN=ED1A88731198A81BAFAE9A2E1B2E9E776D14EB76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:2a:2a:5e:33:7e:c2:12:59:a3:ba:78:e0: 42:1f:7b:d1:90:ee:7e:52:cd:9a:1f:56:2c:50:63: 26:6a:86:e8:41:6f:0b:23:1e:d1:73:58:71:3c:5f: cd:79:30:ca:42:fc:69:95:38:92:b7:37:90:65:2b: 42:ce:50:2c:fc:96:a4:39:67:26:c8:9a:71:9d:0f: d2:d6:2c:bf:10:4b:5b:fa:81:3d:41:8e:c7:0a:9b: 0d:03:12:9d:cf:f3:c1:34:05:8f:9b:60:3a:82:64: e1:6d:01:6f:c4:8d:ab:90:3b:4b:1c:fd:9f:5a:38: f3:75:16:37:1c:55:bc:be:e0:ff:5b:48:8a:35:f8: 58:94:e0:6b:fc:8e:aa:45:dd:20:d3:87:a1:ae:f5: 20:78:29:c0:cc:75:26:cf:52:05:f0:a6:3a:1f:8d: d3:28:3e:18:74:06:b2:b5:45:a5:d9:09:5a:f1:2f: 7e:a1:c2:fd:51:8b:43:a4:3e:68:14:90:0c:a9:01: 75:70:7a:df:28:06:68:40:da:81:d3:5d:a1:e4:0f: 43:70:94:a8:48:55:5e:77:ca:29:2b:1c:68:a5:a0: 57:12:71:3c:0d:ef:9d:53:fd:65:79:56:d1:a4:8e: 32:78:1d:07:d4:4e:c5:d1:e4:f2:6d:02:00:89:b2: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1A:88:73:11:98:A8:1B:AF:AE:9A:2E:1B:2E:9E:77:6D:14:EB:76 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3a:a2:ed:70:7c:28:8e:f6:8b:49:9e:69:ef:4e:ef:2e:73: c5:72:b2:e5:84:a3:9d:a2:fd:cc:39:44:58:0e:61:54:a2:2e: 5f:19:91:38:02:fd:d2:80:cf:28:d4:c0:1f:03:18:9b:83:4c: 55:de:73:33:d3:ba:77:dc:13:c7:41:e3:3b:05:70:7f:37:4b: 4c:42:2b:11:d5:08:d6:ed:33:09:bf:0c:f7:ee:37:08:f1:de: 81:b8:c2:b8:32:3c:ca:b4:4c:69:63:0a:90:f4:11:34:22:34: 65:cb:e0:a5:3a:27:d7:03:f6:d8:ac:4f:18:72:f5:d4:b8:66: d7:c9:eb:14:41:77:70:d9:d8:85:5e:96:dd:dc:ed:68:73:dc: 16:31:6e:11:61:29:67:74:b5:4d:db:7b:60:3e:02:16:d1:b2: 82:5c:d5:39:f9:21:8d:d9:c3:d2:6a:2a:d5:f7:b9:99:08:52: 17:7d:71:a7:db:86:df:73:5c:45:22:8c:9b:e9:98:be:1f:75: 4f:50:f0:a5:24:99:c5:b6:10:8e:8e:4b:d3:6e:eb:3a:93:f1: 28:ac:1d:7d:32:24:34:7e:7d:b5:a8:a0:ac:e0:2f:19:78:05: 7b:24:c5:0b:87:95:bb:31:c4:c4:de:1c:68:b9:78:c0:9c:5c: cb:5b:bb:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiuI4+ZFfKLI9S9RUB4yGr26WrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA5MDQyMzMwMTZaFw0yNjA5MDYwMDE0MTZaMDMxMTAvBgNV BAMTKEVEMUE4ODczMTE5OEE4MUJBRkFFOUEyRTFCMkU5RTc3NkQxNEVCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnCoqXjN+whJZo7p44EIfe9GQ 7n5SzZofVixQYyZqhuhBbwsjHtFzWHE8X815MMpC/GmVOJK3N5BlK0LOUCz8lqQ5 ZybImnGdD9LWLL8QS1v6gT1BjscKmw0DEp3P88E0BY+bYDqCZOFtAW/EjauQO0sc /Z9aOPN1FjccVby+4P9bSIo1+FiU4Gv8jqpF3SDTh6Gu9SB4KcDMdSbPUgXwpjof jdMoPhh0BrK1RaXZCVrxL36hwv1Ri0OkPmgUkAypAXVwet8oBmhA2oHTXaHkD0Nw lKhIVV53yikrHGiloFcScTwN751T/WV5VtGkjjJ4HQfUTsXR5PJtAgCJssQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7RqIcxGYqBuvrpouGy6ed20U63YwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk6ou1wfCiO9otJnmnvTu8uc8VysuWEo52i /cw5RFgOYVSiLl8ZkTgC/dKAzyjUwB8DGJuDTFXeczPTunfcE8dB4zsFcH83S0xC KxHVCNbtMwm/DPfuNwjx3oG4wrgyPMq0TGljCpD0ETQiNGXL4KU6J9cD9tisTxhy 9dS4ZtfJ6xRBd3DZ2IVelt3c7Whz3BYxbhFhKWd0tU3be2A+AhbRsoJc1Tn5IY3Z w9JqKtX3uZkIUhd9cafbht9zXEUijJvpmL4fdU9Q8KUkmcW2EI6OS9Nu6zqT8Sis HX0yJDR+fbWooKzgLxl4BXskxQuHlbsxxMTeHGi5eMCcXMtbuwA= -----END CERTIFICATE-----Generated at Sat Sep 5 04:41:49 2026 by rpki-client