$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: 4mLzO26RqJVpjwRVTv0Tn36IQbH1p7C/MsGotyqvpj8= Subject key identifier: 0E:97:9A:1D:B8:5B:5C:88:5E:37:27:A3:10:F3:72:07:B8:15:85:C0 Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 1482DC99A8E3B7BEB23BE9D8DEFB9C74BEFD9BEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: EB Signing time: Sun 25 Oct 2026 05:38:13 +0000 Manifest this update: Sun 25 Oct 2026 05:33:13 +0000 Manifest next update: Mon 26 Oct 2026 07:13:13 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 2: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: 7RwinIzJHIXXsi1hTPM184kIm0pYDlTuKAhnVz8jApw=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 4: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:82:dc:99:a8:e3:b7:be:b2:3b:e9:d8:de:fb:9c:74:be:fd:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Oct 25 05:33:13 2026 GMT Not After : Oct 26 07:13:13 2026 GMT Subject: CN=0E979A1DB85B5C885E3727A310F37207B81585C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:7b:7d:0d:fc:06:66:82:8f:30:9c:8e:66: d7:39:e4:f6:80:3d:15:f7:34:4b:c9:23:2a:76:90: 09:96:35:64:29:28:d6:8c:0e:76:a3:07:1b:35:af: 02:94:f0:31:26:cd:ea:d1:49:64:61:d2:dd:57:e3: 3c:8e:14:ed:e9:ce:31:b0:0c:6b:47:b3:d1:ab:7c: 03:06:5d:b4:b7:03:47:e2:a7:37:3e:05:97:dd:d8: 05:01:48:48:fd:8f:83:2d:03:cf:dc:65:dc:83:97: a3:f3:49:ef:7d:2e:10:3c:92:8e:1d:a8:df:46:31: 14:37:a1:34:d1:fb:44:50:4b:f0:06:14:b4:a6:62: 48:ef:0e:e1:9d:bf:d1:5f:65:54:cf:30:5d:7f:a5: cb:b6:c6:76:63:a4:b9:0d:16:6d:b6:c3:05:0a:cc: 4a:22:70:1c:dc:cf:0e:f9:02:4b:d0:f3:05:cf:24: 16:5d:22:c2:18:82:b9:0c:ea:a2:47:cb:40:fd:3d: 58:3d:be:89:80:eb:d3:70:00:64:96:b1:bc:6a:8e: 52:b6:a3:e9:7d:51:79:26:39:32:ff:19:39:13:01: b8:86:f9:1e:61:5a:9b:8b:d6:af:0a:c2:d1:39:74: 62:ac:c3:cc:ff:3a:5d:10:01:c8:a0:c1:4a:44:fd: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:9A:1D:B8:5B:5C:88:5E:37:27:A3:10:F3:72:07:B8:15:85:C0 X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:7c:09:72:e9:a2:d2:29:2d:3c:98:76:e0:70:7e:0f:91: 17:fc:68:d1:ec:8a:e3:0a:ed:63:69:0b:66:65:30:d8:34:b7: dc:f6:df:d8:dd:a5:e6:c8:98:aa:a3:b6:6f:25:66:63:36:1f: b7:bf:7a:8b:ef:a4:cd:f1:22:20:1c:eb:b5:da:b8:0b:99:37: 80:aa:4f:04:ed:ad:01:04:24:a7:ad:3b:7b:51:e9:da:e4:d2: 44:68:b2:f3:e3:1d:ee:f9:45:47:2c:4d:cc:27:a8:2e:37:1b: e1:02:73:18:40:91:d0:64:a1:0a:4b:cf:de:c7:64:6d:1a:c4: 4e:5e:90:d4:ef:06:31:72:8b:68:71:e4:44:fc:28:1b:16:7a: 15:c3:11:3f:17:5c:b5:07:13:25:cb:3c:5c:a2:ea:37:79:b0: f3:c2:2b:e3:2f:dd:de:ef:02:ee:3f:51:4b:bc:df:94:df:3a: e5:0e:4a:da:f1:9b:a7:d7:e9:9f:b8:6b:a2:b4:e9:b9:02:78: 72:09:27:01:8f:0a:e8:a2:61:c5:32:b8:d0:ec:86:04:d5:cb: 4a:ec:2c:ab:7b:b1:11:4c:64:99:3c:74:5a:c9:ca:d1:c1:58: 1b:6d:39:30:4a:56:4f:57:34:84:8a:1c:37:1e:04:e0:e8:9f: a2:86:8e:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFILcmajjt76yO+nY3vucdL79m+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjEwMjUwNTMzMTNaFw0yNjEwMjYwNzEzMTNaMDMxMTAvBgNV BAMTKDBFOTc5QTFEQjg1QjVDODg1RTM3MjdBMzEwRjM3MjA3QjgxNTg1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJFnt9DfwGZoKPMJyOZtc55PaA PRX3NEvJIyp2kAmWNWQpKNaMDnajBxs1rwKU8DEmzerRSWRh0t1X4zyOFO3pzjGw DGtHs9GrfAMGXbS3A0fipzc+BZfd2AUBSEj9j4MtA8/cZdyDl6PzSe99LhA8ko4d qN9GMRQ3oTTR+0RQS/AGFLSmYkjvDuGdv9FfZVTPMF1/pcu2xnZjpLkNFm22wwUK zEoicBzczw75AkvQ8wXPJBZdIsIYgrkM6qJHy0D9PVg9vomA69NwAGSWsbxqjlK2 o+l9UXkmOTL/GTkTAbiG+R5hWpuL1q8KwtE5dGKsw8z/Ol0QAcigwUpE/ZMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpeaHbhbXIheNyejEPNyB7gVhcAwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcWfAly6aLSKS08mHbgcH4PkRf8aNHsiuMK 7WNpC2ZlMNg0t9z239jdpebImKqjtm8lZmM2H7e/eovvpM3xIiAc67XauAuZN4Cq TwTtrQEEJKetO3tR6drk0kRosvPjHe75RUcsTcwnqC43G+ECcxhAkdBkoQpLz97H ZG0axE5ekNTvBjFyi2hx5ET8KBsWehXDET8XXLUHEyXLPFyi6jd5sPPCK+Mv3d7v Au4/UUu835TfOuUOStrxm6fX6Z+4a6K06bkCeHIJJwGPCuiiYcUyuNDshgTVy0rs LKt7sRFMZJk8dFrJytHBWBttOTBKVk9XNISKHDceBODon6KGjmw= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:22 2026 by rpki-client