$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: jmmcjgwuVmRW0UbDZLllDXmBClLo6X23OxGUp9tCs80= Subject key identifier: F7:8F:EF:C1:D2:09:70:83:18:88:AE:59:08:61:5C:2D:BD:51:0F:BF Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 6CD40D173CB5328A31DAA70681845B3E8A0E11AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:45:02 +0000 Manifest this update: Sun 15 Nov 2026 04:40:02 +0000 Manifest next update: Mon 16 Nov 2026 06:33:02 +0000 Files and hashes: 1: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: /J+px5rmGOVB8GxIDFaeDP89SLKdAekr3Sa8Q2jZu24=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d4:0d:17:3c:b5:32:8a:31:da:a7:06:81:84:5b:3e:8a:0e:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Nov 15 04:40:02 2026 GMT Not After : Nov 16 06:33:02 2026 GMT Subject: CN=F78FEFC1D20970831888AE5908615C2DBD510FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:24:3b:af:56:9c:c4:fd:b3:cc:7b:07:8a: 74:d9:f2:6c:78:29:67:77:90:76:b6:ee:33:42:1c: e7:bb:89:de:aa:12:63:e8:2a:50:41:9c:ac:e3:08: ea:6f:72:f8:d4:83:d0:e8:ab:b8:01:b2:8a:2f:c5: 94:79:0c:67:7f:b9:c9:11:35:df:ce:98:0d:93:8f: a8:13:d3:3a:ed:a4:1a:b4:65:6d:bb:41:e8:30:f3: 84:3a:0e:27:5b:88:22:ee:8b:05:ed:77:a4:d9:53: 93:48:16:66:7e:67:43:1f:77:6e:a9:3f:3a:94:21: ef:82:57:e8:e7:b9:fa:94:18:c9:71:9f:23:5d:0a: 59:70:63:9a:d1:5b:98:bc:3f:e3:60:89:78:e7:57: 88:ae:98:5b:40:b5:b2:d6:cc:e8:e0:3c:17:59:3f: 2a:9c:df:fd:e0:a1:7c:a1:55:8e:61:ac:bf:af:e6: 85:bf:ec:01:ed:91:74:82:e8:7e:c8:39:df:86:d8: cf:a7:26:c4:be:f0:2b:fd:a7:76:ab:53:5f:ea:3f: d8:8d:6c:26:17:d4:5c:d7:e1:27:c5:2a:26:66:34: 2d:d9:56:a6:fd:5a:0a:3d:0e:06:70:49:21:84:0b: 53:7c:74:a0:02:2f:1b:ef:44:f5:c7:a2:74:6f:85: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8F:EF:C1:D2:09:70:83:18:88:AE:59:08:61:5C:2D:BD:51:0F:BF X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:48:1e:ce:8e:a8:b5:1e:86:47:9f:bc:a0:84:1d:c4:89:e2: e2:13:06:c8:2f:58:d8:84:b4:bc:46:69:cb:36:58:b8:47:b5: 62:5d:2d:b8:9c:d7:fa:6c:19:b3:05:d4:84:d0:b4:4a:9f:72: eb:03:db:a8:65:b6:2a:e9:d1:5a:d9:a1:cd:b3:54:00:31:fa: 74:3b:f3:73:a1:5f:e9:96:9e:64:11:af:ca:e5:66:83:27:95: e1:61:a4:a1:95:ee:ea:2c:af:f1:eb:b0:a1:02:de:ce:1a:a8: 4f:f5:f7:4a:3a:7f:01:73:ec:33:cb:a8:41:b0:22:6b:91:6f: c3:ea:35:49:33:26:9a:aa:35:4d:f5:32:4d:b5:0a:c4:af:d6: bb:e4:36:12:1d:83:19:5f:0c:af:39:b9:8c:37:9a:94:00:73: c0:f0:5b:bc:67:da:5b:9c:96:6b:da:24:46:01:65:94:c6:06: 51:8c:bb:fa:0e:ec:95:50:0b:7b:dd:e8:8e:3b:a2:af:28:5d: 6b:ea:9f:58:a5:f4:14:48:6f:46:c9:1c:52:9e:12:a3:e8:5c: 77:59:a6:cf:cc:05:cc:1d:85:cd:52:f1:2a:e8:b5:ab:4b:71: f8:77:3d:17:48:e1:da:ed:19:7e:b3:d7:bd:1d:fb:87:1e:90: ef:f9:59:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNQNFzy1Moox2qcGgYRbPooOEawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjExMTUwNDQwMDJaFw0yNjExMTYwNjMzMDJaMDMxMTAvBgNV BAMTKEY3OEZFRkMxRDIwOTcwODMxODg4QUU1OTA4NjE1QzJEQkQ1MTBGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilCQ7r1acxP2zzHsHinTZ8mx4 KWd3kHa27jNCHOe7id6qEmPoKlBBnKzjCOpvcvjUg9Doq7gBsoovxZR5DGd/uckR Nd/OmA2Tj6gT0zrtpBq0ZW27Qegw84Q6DidbiCLuiwXtd6TZU5NIFmZ+Z0Mfd26p PzqUIe+CV+jnufqUGMlxnyNdCllwY5rRW5i8P+NgiXjnV4iumFtAtbLWzOjgPBdZ Pyqc3/3goXyhVY5hrL+v5oW/7AHtkXSC6H7IOd+G2M+nJsS+8Cv9p3arU1/qP9iN bCYX1FzX4SfFKiZmNC3ZVqb9Wgo9DgZwSSGEC1N8dKACLxvvRPXHonRvhVmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94/vwdIJcIMYiK5ZCGFcLb1RD78wHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNIHs6OqLUehkefvKCEHcSJ4uITBsgvWNiE tLxGacs2WLhHtWJdLbic1/psGbMF1ITQtEqfcusD26hltirp0VrZoc2zVAAx+nQ7 83OhX+mWnmQRr8rlZoMnleFhpKGV7uosr/HrsKEC3s4aqE/190o6fwFz7DPLqEGw ImuRb8PqNUkzJpqqNU31Mk21CsSv1rvkNhIdgxlfDK85uYw3mpQAc8DwW7xn2luc lmvaJEYBZZTGBlGMu/oO7JVQC3vd6I47oq8oXWvqn1il9BRIb0bJHFKeEqPoXHdZ ps/MBcwdhc1S8SrotatLcfh3PRdI4drtGX6z170d+4cekO/5WZ0= -----END CERTIFICATE-----Generated at Sun Nov 15 12:40:27 2026 by rpki-client