$ rpki-client -vvf rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft File: BE1C79609DB86AC0053956EDA26FA1D32853E996.mft (raw, json) Hash identifier: RtP3lsmhsAuNqzWD4z5LVdAuE2SmVR5QwHom12XQ8cA= Subject key identifier: 17:CF:D7:5E:FA:FD:E1:B0:A3:A1:EC:16:00:32:E1:6F:33:19:5F:43 Authority key identifier: BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 Certificate issuer: /CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Certificate serial: 23CBEB38CFC57BA0ECB6CDCF500131C779A789BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:00:02 +0000 Manifest this update: Tue 28 Jul 2026 14:55:02 +0000 Manifest next update: Wed 29 Jul 2026 16:29:02 +0000 Files and hashes: 1: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: Pt+HvuFvrpZ4UTPkF0GxmNWwDJkCjaqrQ/GtZU6GA/g=) 2: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: oLhUmC7wxuZMIEb49+FBVCF1Lb2tYf5WyshWPuFqQ64=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: nTMgtTuz9oL93+9A6jvTyDdDgbwGD1k2RqWaLS/j93U=) 4: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: EBg9PPFqElHOEwsrpdD6H1NGjPABOYmUx9oKSNOCgD8=) 5: BE1C79609DB86AC0053956EDA26FA1D32853E996.crl (hash: qWN7V01uzZSL59tN27JnNjM14X9ZcuYUbxCJE85AgQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cb:eb:38:cf:c5:7b:a0:ec:b6:cd:cf:50:01:31:c7:79:a7:89:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE1C79609DB86AC0053956EDA26FA1D32853E996 Validity Not Before: Jul 28 14:55:02 2026 GMT Not After : Jul 29 16:29:02 2026 GMT Subject: CN=17CFD75EFAFDE1B0A3A1EC160032E16F33195F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:5e:fe:86:89:a6:f5:d1:e1:38:4c:46:ca: 0c:56:00:31:ec:9e:5b:69:a2:85:8f:bc:d2:d7:bc: 2e:c9:34:a2:54:18:9d:45:8f:d4:ea:1f:57:d3:53: 2c:b9:e5:f3:dd:b5:02:fd:e8:1d:b2:95:ad:dd:ee: 8e:49:b0:c7:68:91:6d:bd:cb:11:35:38:92:ff:b4: 55:62:4b:07:86:ba:e8:8a:ba:19:5d:75:1f:1f:5a: 54:1b:29:22:fa:3a:43:9f:d2:4f:26:6a:5c:00:77: 44:ed:00:bc:35:d4:34:7d:69:70:02:8a:c8:85:d7: cc:8f:c7:c1:1f:ea:d9:16:ca:75:01:b9:06:5c:01: 54:27:ef:a9:77:48:0c:fe:d1:ad:91:0b:bb:65:45: 1f:88:b1:0a:cf:cd:20:3b:fd:c9:da:58:74:be:28: 31:39:79:fa:c5:48:6a:c4:4a:d4:78:1f:db:76:47: 1a:e9:30:62:50:bf:23:d0:fc:84:17:d3:17:52:d3: 16:ea:ee:27:b5:e7:31:bf:f9:f7:7a:7b:88:b3:35: 2f:f6:71:b8:76:d9:80:0a:be:8a:5a:2c:44:56:cc: da:03:60:2d:fa:72:95:03:2b:c1:30:e9:76:7b:8a: 17:c5:68:c8:10:83:d2:51:e5:72:79:3a:af:97:74: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CF:D7:5E:FA:FD:E1:B0:A3:A1:EC:16:00:32:E1:6F:33:19:5F:43 X509v3 Authority Key Identifier: keyid:BE:1C:79:60:9D:B8:6A:C0:05:39:56:ED:A2:6F:A1:D3:28:53:E9:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE1C79609DB86AC0053956EDA26FA1D32853E996.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/BE1C79609DB86AC0053956EDA26FA1D32853E996.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3c:94:9d:d6:84:48:f3:9e:44:47:39:8d:88:84:8f:13:f9: 20:03:5d:05:c6:81:77:ea:ab:a2:55:b6:f6:f9:8e:9d:91:a6: 39:23:c4:a1:4f:6e:d8:d6:96:60:1d:cd:23:41:25:b4:a7:0c: 9f:d6:76:0e:04:4b:4f:3b:d0:04:95:17:9d:4c:5e:02:a8:ac: d5:27:70:8e:63:c3:ac:4a:00:9c:9d:77:e2:09:a9:29:63:4c: 16:09:c4:19:d1:4b:b2:72:45:b4:95:cf:42:7a:80:72:9c:ec: 85:22:52:30:60:89:5c:49:ca:e6:f5:d8:12:29:3e:4b:69:c0: c8:64:40:1b:66:52:d7:88:e8:0e:65:22:16:8e:68:6c:f4:78: 6b:f7:4f:5a:e1:17:85:79:f4:16:17:b9:5d:7a:e7:bb:30:11: ed:9c:0f:bd:c8:b6:69:cf:95:6f:bd:51:9d:54:c4:00:ec:9a: d7:d4:37:29:5a:27:db:68:13:2e:b2:a5:c6:65:48:1d:d2:86: 47:78:ec:9d:d8:e6:25:0a:54:82:5c:97:b0:4c:31:fd:85:52: 66:98:c7:63:02:63:2c:51:df:1d:6c:08:ad:2c:e6:2e:ad:14: fe:5a:d4:ad:e8:d5:22:82:41:52:a9:a0:a5:47:56:d4:34:c4: 14:c5:2d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8vrOM/Fe6Dsts3PUAExx3mnibswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMy ODUzRTk5NjAeFw0yNjA3MjgxNDU1MDJaFw0yNjA3MjkxNjI5MDJaMDMxMTAvBgNV BAMTKDE3Q0ZENzVFRkFGREUxQjBBM0ExRUMxNjAwMzJFMTZGMzMxOTVGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlF7+homm9dHhOExGygxWADHs nltpooWPvNLXvC7JNKJUGJ1Fj9TqH1fTUyy55fPdtQL96B2yla3d7o5JsMdokW29 yxE1OJL/tFViSweGuuiKuhlddR8fWlQbKSL6OkOf0k8malwAd0TtALw11DR9aXAC isiF18yPx8Ef6tkWynUBuQZcAVQn76l3SAz+0a2RC7tlRR+IsQrPzSA7/cnaWHS+ KDE5efrFSGrEStR4H9t2RxrpMGJQvyPQ/IQX0xdS0xbq7ie15zG/+fd6e4izNS/2 cbh22YAKvopaLERWzNoDYC36cpUDK8Ew6XZ7ihfFaMgQg9JR5XJ5Oq+XdO1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8/XXvr94bCjoewWADLhbzMZX0MwHwYDVR0j BBgwFoAUvhx5YJ24asAFOVbtom+h0yhT6ZYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI5OWU2ZjAtZjIzYy00MWZmLWI2N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5 REI4NkFDMDA1Mzk1NkVEQTI2RkExRDMyODUzRTk5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTFDNzk2MDlEQjg2QUMwMDUzOTU2RURBMjZGQTFEMzI4NTNF OTk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvQkUxQzc5NjA5REI4NkFDMDA1Mzk1NkVEQTI2RkEx RDMyODUzRTk5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc8lJ3WhEjznkRHOY2IhI8T+SADXQXGgXfq q6JVtvb5jp2RpjkjxKFPbtjWlmAdzSNBJbSnDJ/Wdg4ES0870ASVF51MXgKorNUn cI5jw6xKAJydd+IJqSljTBYJxBnRS7JyRbSVz0J6gHKc7IUiUjBgiVxJyub12BIp PktpwMhkQBtmUteI6A5lIhaOaGz0eGv3T1rhF4V59BYXuV1657swEe2cD73ItmnP lW+9UZ1UxADsmtfUNylaJ9toEy6ypcZlSB3Shkd47J3Y5iUKVIJcl7BMMf2FUmaY x2MCYyxR3x1sCK0s5i6tFP5a1K3o1SKCQVKpoKVHVtQ0xBTFLXA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:28:11 2026 by rpki-client