$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: NtDhpVUmoxVLsyvoH/xNezKKGI48taHJronunvi7fCE= Subject key identifier: D7:F2:E6:0B:AF:63:BB:0F:D8:8C:0F:ED:E1:02:A6:69:F5:45:9E:F7 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 6FF55B73276210065587BFC2B8F80D9F220D387E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: BF Signing time: Tue 22 Sep 2026 07:05:12 +0000 Manifest this update: Tue 22 Sep 2026 07:00:12 +0000 Manifest next update: Wed 23 Sep 2026 07:19:12 +0000 Files and hashes: 1: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) 2: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: VK+BCQqZ2Ynz3eSDn649AyLRTlbfHpf/tJmUhzO246o=) 3: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 4: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f5:5b:73:27:62:10:06:55:87:bf:c2:b8:f8:0d:9f:22:0d:38:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Sep 22 07:00:12 2026 GMT Not After : Sep 23 07:19:12 2026 GMT Subject: CN=D7F2E60BAF63BB0FD88C0FEDE102A669F5459EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:f2:e9:59:8e:65:ea:8e:3b:d1:57:bf:8a: bc:de:e6:6e:8e:e2:8c:f4:f6:6c:c4:5d:56:35:16: c2:c3:ff:f4:f0:ce:60:de:a5:7e:e7:5f:7c:51:57: 71:de:82:7a:59:59:fb:b0:fc:d7:f3:49:24:7e:5a: 87:49:23:b8:ec:a6:cd:5c:4c:19:a0:65:0e:40:88: 07:13:94:eb:94:59:a9:bf:a8:38:1f:40:0d:b1:06: 28:6c:c0:af:53:34:76:e4:74:c9:4c:98:e6:12:56: c6:60:41:8a:9a:aa:ed:b7:42:bd:9d:72:1d:3a:96: 34:3c:37:fa:c8:d3:05:20:e3:88:03:bc:d5:59:77: 5e:ad:ab:62:2a:1d:55:c9:9c:7c:0f:5b:90:1b:3b: 1a:ed:51:a8:e4:1c:69:2b:c7:9a:8a:dc:d6:da:b3: a2:27:ea:49:f6:fe:6c:95:84:66:d8:a3:89:05:bd: 94:ea:de:db:36:8c:38:cf:a7:23:54:f1:6d:f7:19: ff:5b:72:6a:f7:8a:45:1e:7f:b9:90:e5:e0:bc:ad: e7:1b:23:fc:6a:a0:9f:6f:01:e8:15:24:b5:78:99: 48:e7:c3:84:18:28:c5:57:0c:3b:fb:65:37:6d:0e: af:ca:ba:d8:30:4f:e8:b4:96:80:49:24:68:4f:9f: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F2:E6:0B:AF:63:BB:0F:D8:8C:0F:ED:E1:02:A6:69:F5:45:9E:F7 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ae:36:dc:13:f5:f6:56:05:77:b7:92:97:ad:95:cf:ed:4f: c3:51:ff:e9:04:f1:53:a8:f3:fb:00:27:08:0c:f4:4c:d8:3b: b9:21:82:56:c3:be:0e:35:1c:f8:8b:54:58:ae:e9:cd:3a:46: 7f:32:d7:6e:c9:5a:8f:d7:81:31:b3:e7:b5:08:a3:19:5d:27: 64:e9:61:b3:3f:65:79:c1:d7:7c:e1:73:1d:db:cf:24:5e:72: 4b:f5:2f:78:7e:e4:ab:22:2e:17:56:26:21:46:38:af:da:67: ea:96:71:69:9f:a7:cf:78:cc:31:7f:5b:12:c9:e8:47:a2:52: df:6d:a1:ad:bc:0f:a1:66:cb:ae:4d:8b:75:49:54:c9:1a:ab: f8:97:cb:80:96:9e:5b:e8:2c:4b:7b:34:27:91:7e:07:17:09: ab:2e:87:b0:ed:30:3d:59:a3:ad:f2:69:ca:0d:fa:c1:3c:bb: f4:35:e4:5c:82:f6:7d:db:9c:ad:bd:0d:f7:30:62:38:02:53: e6:95:65:db:b2:43:d9:c1:08:0f:a1:36:58:93:c7:ca:99:a1: 80:d5:d0:ae:3e:9d:4b:ea:85:a6:b1:8f:b0:46:f3:d0:15:02: 0a:f6:18:56:8a:23:07:4d:2d:d5:4b:d8:21:1a:d1:36:e2:7f: b5:28:3e:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/VbcydiEAZVh7/CuPgNnyINOH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA5MjIwNzAwMTJaFw0yNjA5MjMwNzE5MTJaMDMxMTAvBgNV BAMTKEQ3RjJFNjBCQUY2M0JCMEZEODhDMEZFREUxMDJBNjY5RjU0NTlFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06fLpWY5l6o470Ve/irze5m6O 4oz09mzEXVY1FsLD//TwzmDepX7nX3xRV3HegnpZWfuw/NfzSSR+WodJI7jsps1c TBmgZQ5AiAcTlOuUWam/qDgfQA2xBihswK9TNHbkdMlMmOYSVsZgQYqaqu23Qr2d ch06ljQ8N/rI0wUg44gDvNVZd16tq2IqHVXJnHwPW5AbOxrtUajkHGkrx5qK3Nba s6In6kn2/myVhGbYo4kFvZTq3ts2jDjPpyNU8W33Gf9bcmr3ikUef7mQ5eC8recb I/xqoJ9vAegVJLV4mUjnw4QYKMVXDDv7ZTdtDq/KutgwT+i0loBJJGhPn0rLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/LmC69juw/YjA/t4QKmafVFnvcwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeuNtwT9fZWBXe3kpetlc/tT8NR/+kE8VOo 8/sAJwgM9EzYO7khglbDvg41HPiLVFiu6c06Rn8y127JWo/XgTGz57UIoxldJ2Tp YbM/ZXnB13zhcx3bzyReckv1L3h+5KsiLhdWJiFGOK/aZ+qWcWmfp894zDF/WxLJ 6EeiUt9toa28D6Fmy65Ni3VJVMkaq/iXy4CWnlvoLEt7NCeRfgcXCasuh7DtMD1Z o63yacoN+sE8u/Q15FyC9n3bnK29DfcwYjgCU+aVZduyQ9nBCA+hNliTx8qZoYDV 0K4+nUvqhaaxj7BG89AVAgr2GFaKIwdNLdVL2CEa0Tbif7UoPmI= -----END CERTIFICATE-----Generated at Tue Sep 22 21:28:59 2026 by rpki-client