$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: Gd8yuZT93NHMUxjrRwbiGAEM6G0hfNMqwBbUs0eiJrU= Subject key identifier: 41:A6:09:3D:F8:70:15:FE:36:88:3D:0F:C7:34:5A:A2:DE:FF:9D:D1 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 72C55C7C0B44D45F60C7FF61CB7519FA4AA7FA96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: EC Signing time: Sun 25 Oct 2026 12:16:57 +0000 Manifest this update: Sun 25 Oct 2026 12:11:57 +0000 Manifest next update: Mon 26 Oct 2026 14:35:57 +0000 Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) 4: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: 55wkVMF/rEg/OWuyZSQ08liDsnR8bUKTVU9GSjiECHM=) 5: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c5:5c:7c:0b:44:d4:5f:60:c7:ff:61:cb:75:19:fa:4a:a7:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Oct 25 12:11:57 2026 GMT Not After : Oct 26 14:35:57 2026 GMT Subject: CN=41A6093DF87015FE36883D0FC7345AA2DEFF9DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:6c:ce:16:33:63:35:3e:af:60:1c:9f:b5: 21:c1:18:57:d1:14:50:3b:5b:ce:1e:8d:f9:73:ab: 0e:66:2a:1f:43:59:98:18:a3:c8:ab:f8:f1:33:41: ce:7e:0b:f3:bd:02:42:09:f2:26:d6:14:b5:c8:7a: 9a:89:30:10:0f:06:55:43:3f:41:03:58:b5:5a:02: 06:bc:5e:3c:58:30:4f:fd:68:eb:2b:67:ee:bf:9f: ae:48:80:67:cc:bf:8f:0d:5f:00:3e:41:3d:0f:42: f3:55:9e:be:34:6f:6c:a5:90:86:a5:83:96:d0:47: a9:4b:83:b0:e0:b0:e1:23:d2:64:d9:3d:f8:27:4c: 71:fb:8d:d0:1b:95:36:e0:a6:49:54:0a:6c:6f:dc: 75:5c:90:6c:33:34:70:32:a9:f7:b3:0d:fb:32:60: d6:c1:89:ac:25:c3:5a:c0:af:07:9f:0b:5b:6c:32: 47:cd:15:2f:55:78:12:57:b2:ab:0f:11:12:49:e6: 00:20:af:50:45:df:f8:12:ab:70:a1:bf:6a:f4:18: 8b:99:48:40:75:07:c1:90:f4:f4:50:74:3f:fb:db: 3b:11:f4:83:b2:c1:ed:58:d3:ea:99:c9:b2:30:b3: 61:84:cc:9a:42:00:6e:28:f3:56:54:62:a3:df:2e: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:09:3D:F8:70:15:FE:36:88:3D:0F:C7:34:5A:A2:DE:FF:9D:D1 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:63:b7:94:33:bf:7b:53:71:87:b9:f6:3f:8f:08:59:68:a2: 51:1e:00:38:1a:28:05:dd:34:27:85:7d:b7:2b:10:ad:58:cf: 3c:c5:71:f3:2e:cc:57:7b:bb:25:92:a6:ad:12:de:9e:83:e1: 30:70:80:1e:10:8a:52:cc:af:fe:de:61:64:2d:9d:5b:74:27: e9:56:d9:f9:bb:d4:0f:12:4b:45:5c:60:73:0f:70:5b:1a:24: 0a:6f:3a:78:9d:28:64:d1:48:25:77:13:4b:8e:3b:2b:ac:73: 6e:80:e5:99:0d:ab:e2:c0:70:ee:1b:15:3e:c5:e3:49:88:7b: bb:7e:f0:d1:dc:92:32:88:88:12:dc:d0:7a:2d:d3:df:7f:28: e7:46:9a:b1:70:cd:9f:86:2a:a1:90:3d:c7:70:0c:d1:03:a6: fd:bd:bd:28:a6:a2:2d:22:9b:b9:db:6e:79:19:ad:a5:6c:c5: c0:28:d2:f2:7b:ab:0a:bd:7a:c0:f7:ce:99:ad:ae:e9:42:0c: 05:6d:04:d5:af:1e:e7:be:5e:ef:8f:9e:85:d9:0c:4a:00:4b: d0:ec:5b:a7:c3:d7:d7:a8:f0:9f:5c:23:f0:b5:17:61:11:9d: 7a:a3:7e:87:54:92:84:e8:2f:be:d8:c4:4f:e4:c0:cc:6d:1e: 6c:b4:5a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsVcfAtE1F9gx/9hy3UZ+kqn+pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjEwMjUxMjExNTdaFw0yNjEwMjYxNDM1NTdaMDMxMTAvBgNV BAMTKDQxQTYwOTNERjg3MDE1RkUzNjg4M0QwRkM3MzQ1QUEyREVGRjlERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCot2zOFjNjNT6vYByftSHBGFfR FFA7W84ejflzqw5mKh9DWZgYo8ir+PEzQc5+C/O9AkIJ8ibWFLXIepqJMBAPBlVD P0EDWLVaAga8XjxYME/9aOsrZ+6/n65IgGfMv48NXwA+QT0PQvNVnr40b2ylkIal g5bQR6lLg7DgsOEj0mTZPfgnTHH7jdAblTbgpklUCmxv3HVckGwzNHAyqfezDfsy YNbBiawlw1rArwefC1tsMkfNFS9VeBJXsqsPERJJ5gAgr1BF3/gSq3Chv2r0GIuZ SEB1B8GQ9PRQdD/72zsR9IOywe1Y0+qZybIws2GEzJpCAG4o81ZUYqPfLrFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaYJPfhwFf42iD0PxzRaot7/ndEwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVjt5Qzv3tTcYe59j+PCFloolEeADgaKAXd NCeFfbcrEK1YzzzFcfMuzFd7uyWSpq0S3p6D4TBwgB4QilLMr/7eYWQtnVt0J+lW 2fm71A8SS0VcYHMPcFsaJApvOnidKGTRSCV3E0uOOyusc26A5ZkNq+LAcO4bFT7F 40mIe7t+8NHckjKIiBLc0Hot099/KOdGmrFwzZ+GKqGQPcdwDNEDpv29vSimoi0i m7nbbnkZraVsxcAo0vJ7qwq9esD3zpmtrulCDAVtBNWvHue+Xu+PnoXZDEoAS9Ds W6fD19eo8J9cI/C1F2ERnXqjfodUkoToL77YxE/kwMxtHmy0WlU= -----END CERTIFICATE-----Generated at Mon Oct 26 00:51:56 2026 by rpki-client