$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: 4o4ONc0IPQ2u1Ykor0eRn+zKwvCa/MAVmb0yzhZ7ZII= Subject key identifier: 8B:B3:5E:9F:FC:B2:C5:52:A9:EC:DB:C5:12:2E:0A:5A:D8:D0:08:A6 Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 7D4B7290EA3680C156756AFAE1CC01B954E8BC4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 04:45:36 +0000 Manifest this update: Sat 20 Jun 2026 04:40:36 +0000 Manifest next update: Sun 21 Jun 2026 07:04:36 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) 2: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: vP6m67UTmJv+H8XDNEebP9I/s6gcNJyQzyRMIlq1Fn0=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4b:72:90:ea:36:80:c1:56:75:6a:fa:e1:cc:01:b9:54:e8:bc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Jun 20 04:40:36 2026 GMT Not After : Jun 21 07:04:36 2026 GMT Subject: CN=8BB35E9FFCB2C552A9ECDBC5122E0A5AD8D008A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:98:11:6a:52:5e:53:5a:f4:46:e0:b3:4d: 65:cd:9f:54:4f:af:a6:d8:86:50:50:3f:bb:d1:b1: 52:09:24:8c:30:68:40:f6:bf:aa:05:b1:4a:6a:8d: 60:eb:05:54:be:37:8b:d3:97:19:39:77:aa:34:4a: d1:3c:a2:24:d5:4f:0a:32:e4:96:43:e3:15:54:d0: e2:04:a0:bd:93:94:99:fb:04:0b:32:77:b3:3c:04: 82:4d:2e:13:46:ca:3e:82:39:40:7e:94:d7:c6:d1: 2f:72:32:2a:18:92:e4:29:f9:8f:71:06:f1:52:bf: 00:f3:da:5b:df:9f:96:d4:03:68:fc:3b:f9:9c:04: 1b:d2:e2:9d:a1:7a:a3:70:30:98:de:3a:64:a0:25: 4c:f8:66:af:c2:ee:1c:81:3b:ec:bd:2f:01:5a:ac: f2:18:ee:40:d6:64:01:78:4c:dc:6f:47:dd:1f:41: c1:88:aa:fe:87:b4:af:20:f1:6a:7c:b0:b3:07:e2: 1c:31:73:b2:6b:90:6f:39:dc:63:d7:6c:43:79:5e: 63:f8:b3:f3:e4:98:52:ff:1e:ba:3c:4d:6a:2e:0c: 97:8c:8c:80:f2:80:03:cb:cc:1c:6e:1a:a8:d9:ce: 5e:32:43:26:4a:2b:ff:27:50:f7:b6:8f:58:ff:f3: 70:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B3:5E:9F:FC:B2:C5:52:A9:EC:DB:C5:12:2E:0A:5A:D8:D0:08:A6 X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a3:ea:b7:f6:72:2b:b9:36:61:4f:63:a7:5e:e1:2a:4c:d9: a3:85:c8:77:d8:07:88:ad:60:ed:73:6b:ea:1b:62:ef:01:f7: 33:64:ba:01:14:b9:b2:6a:bf:b8:ad:98:3b:16:c7:9a:89:61: 2e:f7:16:8f:c5:6e:0c:b3:1b:73:e3:1b:57:94:ee:d8:91:ab: 76:af:2a:b7:29:b0:51:1d:1a:b6:e4:65:91:7c:bd:c9:f0:a4: 9d:82:ba:30:bf:d8:8e:d8:72:b5:21:f4:22:6c:8a:e6:28:a4: 9d:fd:37:3d:bf:84:c6:62:39:3b:bf:31:c9:ec:42:e8:ce:8f: 6f:dc:07:fe:b6:d8:5a:4f:a3:25:a7:c0:55:7d:04:1b:ca:f2: fa:af:f5:2b:9d:b8:72:8b:0a:d7:be:68:91:00:c3:0f:e2:51: 14:5a:d2:5f:d2:c5:8c:c9:ac:cb:12:43:df:ea:9f:80:39:ea: 4a:59:3f:93:73:88:d9:14:16:73:83:7e:1b:01:a0:f6:b0:f9: 6b:e0:af:60:8f:09:80:3c:92:d5:12:30:bc:45:4a:6e:d4:15: 8b:af:79:3d:85:87:54:78:18:9a:ce:20:d3:dd:20:a3:66:6a: b6:31:1f:4a:06:cc:fc:e4:3a:c2:77:d3:5f:73:c3:8e:d3:dc: cd:73:9a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUtykOo2gMFWdWr64cwBuVTovEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjA2MjAwNDQwMzZaFw0yNjA2MjEwNzA0MzZaMDMxMTAvBgNV BAMTKDhCQjM1RTlGRkNCMkM1NTJBOUVDREJDNTEyMkUwQTVBRDhEMDA4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6o5gRalJeU1r0RuCzTWXNn1RP r6bYhlBQP7vRsVIJJIwwaED2v6oFsUpqjWDrBVS+N4vTlxk5d6o0StE8oiTVTwoy 5JZD4xVU0OIEoL2TlJn7BAsyd7M8BIJNLhNGyj6COUB+lNfG0S9yMioYkuQp+Y9x BvFSvwDz2lvfn5bUA2j8O/mcBBvS4p2heqNwMJjeOmSgJUz4Zq/C7hyBO+y9LwFa rPIY7kDWZAF4TNxvR90fQcGIqv6HtK8g8Wp8sLMH4hwxc7JrkG853GPXbEN5XmP4 s/PkmFL/Hro8TWouDJeMjIDygAPLzBxuGqjZzl4yQyZKK/8nUPe2j1j/83B5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi7Nen/yyxVKp7NvFEi4KWtjQCKYwHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSj6rf2ciu5NmFPY6de4SpM2aOFyHfYB4it YO1za+obYu8B9zNkugEUubJqv7itmDsWx5qJYS73Fo/FbgyzG3PjG1eU7tiRq3av KrcpsFEdGrbkZZF8vcnwpJ2CujC/2I7YcrUh9CJsiuYopJ39Nz2/hMZiOTu/Mcns QujOj2/cB/622FpPoyWnwFV9BBvK8vqv9SuduHKLCte+aJEAww/iURRa0l/SxYzJ rMsSQ9/qn4A56kpZP5NziNkUFnODfhsBoPaw+Wvgr2CPCYA8ktUSMLxFSm7UFYuv eT2Fh1R4GJrOINPdIKNmarYxH0oGzPzkOsJ3019zw47T3M1zmqs= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:18 2026 by rpki-client