$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft File: BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft (raw, json) Hash identifier: oZDL66Qqo1DIhGcNskKP0iWSkp0JPT4nAjsFR+9ipjk= Subject key identifier: 6B:7E:38:35:AE:CA:14:8C:A6:42:F0:5A:FC:A3:64:D8:7B:D0:F4:30 Authority key identifier: BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6 Certificate issuer: /CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6 Certificate serial: 051225E6414B810EA063E5216B9CCDD61BB4CF69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft Manifest number: 20 Signing time: Mon 02 Nov 2026 23:26:47 +0000 Manifest this update: Mon 02 Nov 2026 23:21:47 +0000 Manifest next update: Wed 04 Nov 2026 02:19:47 +0000 Files and hashes: 1: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: 0DB+GheGzSbZoQNfmll3AD/LkPvq/k6iDbV9YGvJ2pw=) 2: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: ZrQ8Isr8JoXQLo3blPKcf87aQRasBbosSmNqO/r9MRQ=) 3: BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl (hash: Y5nwHiVJMwzmd+mkerZqj/yG4Gtdob1zudFWJ/9IZfw=) 4: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: Jyqx3xCiMFSg8q0SZhug0rC+4VH9BsVLux500tzyrkM=) 5: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: yqSsHq+1yr2gyNDtmFxnxjG+r86CKgnnefoC+iQ0+TA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:12:25:e6:41:4b:81:0e:a0:63:e5:21:6b:9c:cd:d6:1b:b4:cf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6 Validity Not Before: Nov 2 23:21:47 2026 GMT Not After : Nov 4 02:19:47 2026 GMT Subject: CN=6B7E3835AECA148CA642F05AFCA364D87BD0F430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:0c:5a:ff:d1:ed:5e:29:bf:e0:ad:0d:e5: d3:a7:47:ee:1c:71:a5:d7:4b:d4:ff:1d:9b:95:74: 99:8b:1a:6d:a2:a2:75:99:48:da:24:af:bc:d1:c2: 9b:71:b9:4a:5b:11:d6:f3:ca:db:b4:65:a8:a9:61: 7f:59:98:e5:61:e0:c1:b9:42:b8:33:1f:6f:14:71: ba:aa:c0:7f:a3:4c:c6:e3:d7:0f:9f:e9:87:79:3c: 4a:74:43:75:93:66:ee:88:2e:8f:71:16:b2:7a:69: 83:10:4d:b8:29:de:1b:85:c0:19:35:68:24:71:fb: 85:a8:45:45:ba:da:10:d3:0e:00:a9:59:03:7d:df: dc:84:8a:80:3f:2f:26:a6:a9:1c:95:cd:e8:6e:c8: e6:ae:85:db:a4:64:83:fa:ca:06:0f:5b:7a:8d:bc: 4c:5e:a9:e0:7f:6c:ea:f8:35:b6:8f:f2:3b:9f:d5: 9e:23:de:34:60:e8:9e:c0:68:ae:f7:a0:62:df:17: 42:74:12:54:52:cb:51:7a:b1:bf:3e:ca:eb:7e:24: 5e:04:6a:8a:b6:52:fa:f6:19:6d:ac:b3:31:0a:c3: 79:a4:f5:9a:34:22:b9:57:8b:65:a9:21:34:b0:b7: 02:20:bf:f6:e4:24:aa:b3:14:68:ff:91:e4:c8:0d: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7E:38:35:AE:CA:14:8C:A6:42:F0:5A:FC:A3:64:D8:7B:D0:F4:30 X509v3 Authority Key Identifier: keyid:BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:55:e4:1b:72:d3:97:c3:5e:d8:f5:8f:00:6b:7d:df:da:62: 7e:d4:ff:24:00:22:2d:0f:d2:1e:ce:9c:a7:b6:ac:ea:ec:c0: 61:c2:f4:d4:bf:e7:c6:fd:92:15:48:57:f0:e3:f6:f2:1e:8c: 9d:ff:67:bb:17:70:9e:30:1c:09:67:62:4b:ab:b1:ae:7e:db: 7d:22:97:2d:75:2f:29:97:bf:1b:f9:6a:6d:dc:7b:e1:a6:3a: fc:3d:e9:74:d3:b9:5d:29:42:33:fd:82:53:50:9b:d7:01:72: 6c:dd:13:fe:3d:c5:da:06:27:98:26:bf:92:2d:5e:be:73:0d: 81:aa:a9:54:11:b8:14:92:ba:a3:02:23:0c:26:63:d2:01:0c: 00:08:ce:29:61:54:2c:1b:a2:ea:40:45:3e:da:d6:6d:d3:af: d7:02:ee:84:07:d0:d2:9d:8b:d4:59:39:ff:43:0d:3c:e0:e2: ed:ba:a8:4f:48:8a:e5:08:70:6b:02:11:19:82:4b:aa:df:98: 2d:d2:95:ee:95:26:72:1f:b9:43:9e:95:ab:ee:68:d9:8b:85: fa:65:47:bf:70:b5:6e:d8:f7:2c:cb:7b:20:8f:a4:49:88:02: 96:b1:3c:36:25:aa:75:0b:6c:d5:9a:23:a3:cc:4b:9b:6c:c2: 1c:ce:cc:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRIl5kFLgQ6gY+Uha5zN1hu0z2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzREVFMTlBODIwMzE2RUI3NERFQTVBMjE3Nzk3NDRD RjFCRTRENjAeFw0yNjExMDIyMzIxNDdaFw0yNjExMDQwMjE5NDdaMDMxMTAvBgNV BAMTKDZCN0UzODM1QUVDQTE0OENBNjQyRjA1QUZDQTM2NEQ4N0JEMEY0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33wxa/9HtXim/4K0N5dOnR+4c caXXS9T/HZuVdJmLGm2ionWZSNokr7zRwptxuUpbEdbzytu0ZaipYX9ZmOVh4MG5 QrgzH28UcbqqwH+jTMbj1w+f6Yd5PEp0Q3WTZu6ILo9xFrJ6aYMQTbgp3huFwBk1 aCRx+4WoRUW62hDTDgCpWQN939yEioA/LyamqRyVzehuyOauhdukZIP6ygYPW3qN vExeqeB/bOr4NbaP8juf1Z4j3jRg6J7AaK73oGLfF0J0ElRSy1F6sb8+yut+JF4E aoq2Uvr2GW2sszEKw3mk9Zo0IrlXi2WpITSwtwIgv/bkJKqzFGj/keTIDRRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa344Na7KFIymQvBa/KNk2HvQ9DAwHwYDVR0j BBgwFoAUvj3uGaggMW63TepaIXeXRM8b5NYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ1Njg1NTEtNzQ3MC00MjVhLTg0MjctOWM4MmEyYjQ2MTk2LzAvQkUzREVFMTlB ODIwMzE2RUI3NERFQTVBMjE3Nzk3NDRDRjFCRTRENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTNERUUxOUE4MjAzMTZFQjc0REVBNUEyMTc3OTc0NENGMUJF NEQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ1Njg1NTEtNzQ3MC00MjVhLTg0 MjctOWM4MmEyYjQ2MTk2LzAvQkUzREVFMTlBODIwMzE2RUI3NERFQTVBMjE3Nzk3 NDRDRjFCRTRENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJV5Bty05fDXtj1jwBrfd/aYn7U/yQAIi0P 0h7OnKe2rOrswGHC9NS/58b9khVIV/Dj9vIejJ3/Z7sXcJ4wHAlnYkursa5+230i ly11LymXvxv5am3ce+GmOvw96XTTuV0pQjP9glNQm9cBcmzdE/49xdoGJ5gmv5It Xr5zDYGqqVQRuBSSuqMCIwwmY9IBDAAIzilhVCwboupART7a1m3Tr9cC7oQH0NKd i9RZOf9DDTzg4u26qE9IiuUIcGsCERmCS6rfmC3Sle6VJnIfuUOelavuaNmLhfpl R79wtW7Y9yzLeyCPpEmIApaxPDYlqnULbNWaI6PMS5tswhzOzLw= -----END CERTIFICATE-----Generated at Tue Nov 3 04:40:19 2026 by rpki-client