$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: 21dRCj2QVOueoKG9QHtX8DM53+FBn/VApnxHfZiCOgE= Subject key identifier: 91:AB:88:E6:ED:2F:E1:33:A3:B0:AA:A8:AD:CE:50:54:8D:86:42:2C Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 21C1EBA121B7B2919AC3932BA1878A27832368C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: EC Signing time: Sun 25 Oct 2026 23:15:43 +0000 Manifest this update: Sun 25 Oct 2026 23:10:43 +0000 Manifest next update: Tue 27 Oct 2026 00:44:43 +0000 Files and hashes: 1: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 2: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 3: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: b/RTXRGA19WryvarEJsyt5hlz9AZMo9FjT0MrBMnf+I=) 4: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c1:eb:a1:21:b7:b2:91:9a:c3:93:2b:a1:87:8a:27:83:23:68:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Oct 25 23:10:43 2026 GMT Not After : Oct 27 00:44:43 2026 GMT Subject: CN=91AB88E6ED2FE133A3B0AAA8ADCE50548D86422C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:e2:9e:09:5f:cd:50:10:6d:0e:55:50:a9: 38:93:d3:36:d1:05:5d:64:d1:a0:c5:59:31:83:f7: ff:af:4b:6e:31:ce:ba:d1:0e:8b:01:88:6b:36:d7: 86:16:94:44:7f:2c:33:71:cf:e7:47:c7:8e:f1:c8: 4c:a9:bf:0f:2e:d7:2b:60:83:4a:90:14:c3:82:08: 3e:64:04:e0:12:a3:80:73:53:01:f2:b5:86:1a:e0: c0:5e:f9:90:8a:f9:e0:33:b8:16:63:5c:f5:7c:c9: d5:5d:e3:05:af:08:b8:03:7a:7b:46:95:01:0f:3f: ed:9b:4c:8f:57:bd:87:29:04:a3:f5:8a:a7:71:f6: 90:e6:cc:43:6d:24:a6:11:d6:16:39:2c:22:c6:c0: 5d:80:16:f2:4d:97:b2:54:64:52:32:9b:9a:fb:ed: 67:41:3f:48:31:ad:fb:2f:04:0c:7e:e3:ec:03:9c: 7f:d6:73:0e:65:b3:d8:55:9c:6e:93:43:78:f0:05: 25:49:fa:38:7c:67:f1:0e:97:46:81:2e:0a:c1:c6: 9d:25:1b:35:df:42:d6:ae:ce:44:fc:92:23:d7:60: 93:b2:c9:0e:da:72:75:b3:8d:bf:18:f8:5d:0d:a4: f5:87:c6:c5:fc:5a:36:ab:8e:4d:13:e6:d6:e6:d3: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:88:E6:ED:2F:E1:33:A3:B0:AA:A8:AD:CE:50:54:8D:86:42:2C X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f9:98:50:46:dc:c9:61:97:ec:7e:a7:1b:5d:c5:39:61:b8: 29:c5:49:1d:8b:69:93:e8:e2:d7:0f:24:f2:65:1d:ba:6d:69: b5:11:6c:48:08:9d:b7:7e:b8:89:93:25:96:39:b6:2e:77:0d: 5e:0d:22:3d:87:2a:0b:bb:02:3f:e7:75:01:07:f3:dc:c8:22: ac:fe:1b:38:80:77:06:07:48:59:e6:2d:bf:6d:40:07:07:1d: 2e:36:52:72:c3:36:d6:1a:a5:01:8b:de:7a:40:30:6f:2f:c6: 06:a4:99:0b:e4:49:3f:73:a5:13:1d:12:7e:97:92:4a:28:17: 52:50:b2:d3:84:3f:74:26:63:d0:d7:52:c0:bf:c5:31:99:7e: 41:bf:bf:e3:8a:f3:94:d1:52:a0:40:9a:3e:af:a3:91:c0:22: c9:84:5c:dc:42:67:ac:fc:d9:c7:bf:d0:aa:99:31:67:fd:9d: 73:28:7c:04:76:ad:38:41:f1:8e:9b:f6:c6:8f:f1:05:4f:04: 37:a6:e2:91:50:2a:16:bf:52:41:96:c6:2f:6a:04:68:cb:eb: a0:60:93:99:67:d6:38:b7:0e:5a:d6:12:1c:13:a3:67:52:eb: 21:85:34:32:7b:f1:66:6f:57:5d:fd:82:a8:b2:fb:c5:f0:c0: fa:25:cd:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcHroSG3spGaw5MroYeKJ4MjaMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjEwMjUyMzEwNDNaFw0yNjEwMjcwMDQ0NDNaMDMxMTAvBgNV BAMTKDkxQUI4OEU2RUQyRkUxMzNBM0IwQUFBOEFEQ0U1MDU0OEQ4NjQyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4OKeCV/NUBBtDlVQqTiT0zbR BV1k0aDFWTGD9/+vS24xzrrRDosBiGs214YWlER/LDNxz+dHx47xyEypvw8u1ytg g0qQFMOCCD5kBOASo4BzUwHytYYa4MBe+ZCK+eAzuBZjXPV8ydVd4wWvCLgDentG lQEPP+2bTI9XvYcpBKP1iqdx9pDmzENtJKYR1hY5LCLGwF2AFvJNl7JUZFIym5r7 7WdBP0gxrfsvBAx+4+wDnH/Wcw5ls9hVnG6TQ3jwBSVJ+jh8Z/EOl0aBLgrBxp0l GzXfQtauzkT8kiPXYJOyyQ7acnWzjb8Y+F0NpPWHxsX8Wjarjk0T5tbm03sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkauI5u0v4TOjsKqorc5QVI2GQiwwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/5mFBG3Mlhl+x+pxtdxTlhuCnFSR2LaZPo 4tcPJPJlHbptabURbEgInbd+uImTJZY5ti53DV4NIj2HKgu7Aj/ndQEH89zIIqz+ GziAdwYHSFnmLb9tQAcHHS42UnLDNtYapQGL3npAMG8vxgakmQvkST9zpRMdEn6X kkooF1JQstOEP3QmY9DXUsC/xTGZfkG/v+OK85TRUqBAmj6vo5HAIsmEXNxCZ6z8 2ce/0KqZMWf9nXMofAR2rThB8Y6b9saP8QVPBDem4pFQKha/UkGWxi9qBGjL66Bg k5ln1ji3DlrWEhwTo2dS6yGFNDJ78WZvV139gqiy+8XwwPolzU4= -----END CERTIFICATE-----Generated at Mon Oct 26 05:46:59 2026 by rpki-client