$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft File: BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft (raw, json) Hash identifier: xld6+Q/vxzd5QOq8mMqcJ4RBVzZ/TBDZ6eaBpsXpHQU= Subject key identifier: 62:F3:87:9E:99:88:BB:07:C0:7E:94:BA:19:06:5F:67:70:D4:F2:CE Authority key identifier: BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C Certificate issuer: /CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Certificate serial: 4F78875DB33CA5CD2DF154D6607839917AC7D546 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 08:53:15 +0000 Manifest this update: Sun 20 Sep 2026 08:48:15 +0000 Manifest next update: Mon 21 Sep 2026 09:44:15 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: EyJbeIvxIAF+586MVaVd6iwTkK8V8O4rMrZ8bRoUTK8=) 2: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: EQ3sc2FXSB6lRkmjMiF3EpLUz9ZKHCjzYQ/45cbetJs=) 3: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: 4wuKptmllX2qoJ6OZ25xViRxXJ51FwJpwKiDHUyz+2g=) 4: BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl (hash: nAhkffVSlOdOeZpY0U42TzlCezEKBOvXYPa6WRcIfYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 09:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:78:87:5d:b3:3c:a5:cd:2d:f1:54:d6:60:78:39:91:7a:c7:d5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE29CA796F7B6546C91502BCD19FB5689926EB9C Validity Not Before: Sep 20 08:48:15 2026 GMT Not After : Sep 21 09:44:15 2026 GMT Subject: CN=62F3879E9988BB07C07E94BA19065F6770D4F2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:ce:21:32:c7:cd:f6:40:a7:f3:f1:f4:7c: 22:db:a2:93:07:16:25:59:cd:4f:8b:44:97:a2:4b: 65:a0:4a:65:7e:c8:dc:0d:59:64:cd:6a:cd:72:02: 2a:c7:a5:87:98:62:ef:c9:1d:f4:8f:6b:6c:16:45: 27:25:1d:fe:bf:a4:0d:af:c9:21:1c:ca:02:c1:f5: 23:ce:5d:ae:84:1e:c3:1e:78:cb:da:38:05:33:a9: ef:5a:d2:09:7e:1a:40:20:a9:e3:f8:bd:f3:51:24: 87:54:1b:51:07:b9:9d:a5:1d:7b:02:97:99:5b:5b: cc:6d:54:14:ff:81:42:05:59:25:22:f9:ca:00:8c: e9:7f:35:c9:0a:6f:85:a4:9e:34:d2:6f:4f:8e:96: 2b:b3:6a:d6:8d:7e:a0:74:6a:31:7f:91:ce:71:e7: 16:8e:f7:e5:42:04:88:4c:ae:7c:0a:42:70:cd:63: 34:cd:b0:32:b5:9a:e0:f8:f6:c0:4c:be:d1:1d:c8: 59:fc:8e:2e:db:e7:49:d3:a2:7d:64:49:51:aa:c4: d1:6a:a4:08:ba:60:f0:73:fa:09:3c:5c:0e:bd:0f: c3:ce:90:88:3f:7a:43:d0:8b:a9:d1:a0:65:b6:13: fd:86:d4:43:bd:dd:63:3d:48:f8:4f:95:3b:87:6f: ff:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F3:87:9E:99:88:BB:07:C0:7E:94:BA:19:06:5F:67:70:D4:F2:CE X509v3 Authority Key Identifier: keyid:BE:29:CA:79:6F:7B:65:46:C9:15:02:BC:D1:9F:B5:68:99:26:EB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE29CA796F7B6546C91502BCD19FB5689926EB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/BE29CA796F7B6546C91502BCD19FB5689926EB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4e:ee:ee:29:92:43:32:de:8e:51:4f:5c:f8:7f:68:b2:0f: c5:e6:7e:6f:5d:59:ce:0d:7e:9e:3a:e1:14:7e:44:49:45:2f: 33:39:b8:90:31:95:72:fc:c5:07:ee:13:d7:43:95:fc:c2:16: 2c:59:72:72:83:a3:c7:52:1c:24:1e:b4:f8:30:45:87:e9:0d: e4:69:25:50:4b:a3:44:ec:e5:fb:fd:90:86:48:7f:42:f8:e7: 3a:64:d5:92:82:15:10:37:ac:cb:8c:3c:e0:81:ee:4e:68:9e: 20:98:7c:2c:01:31:85:42:ed:bc:1d:4c:cf:9c:66:52:56:38: 69:e6:c9:e4:66:a9:fb:00:f1:56:75:eb:ef:ec:eb:57:19:a3: eb:d5:31:26:4c:54:07:03:fb:31:2f:ad:a6:67:c5:e8:ba:a9: 88:cc:8a:68:00:52:7b:60:47:66:8a:88:af:90:76:9e:76:bd: fb:f4:69:e2:2b:29:44:3f:c8:1d:27:4e:0c:38:9d:17:c6:20: c1:b9:16:64:31:e5:22:90:b6:a3:bb:b9:2a:a1:6e:56:e2:0d: 32:56:61:f3:f2:53:0c:64:e9:fc:44:53:2c:2e:31:3b:b7:9e: 8d:af:6e:19:c7:3e:18:c0:38:1c:01:d0:04:af:9d:1a:63:b0: 90:b2:db:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3iHXbM8pc0t8VTWYHg5kXrH1UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5 OTI2RUI5QzAeFw0yNjA5MjAwODQ4MTVaFw0yNjA5MjEwOTQ0MTVaMDMxMTAvBgNV BAMTKDYyRjM4NzlFOTk4OEJCMDdDMDdFOTRCQTE5MDY1RjY3NzBENEYyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTs4hMsfN9kCn8/H0fCLbopMH FiVZzU+LRJeiS2WgSmV+yNwNWWTNas1yAirHpYeYYu/JHfSPa2wWRSclHf6/pA2v ySEcygLB9SPOXa6EHsMeeMvaOAUzqe9a0gl+GkAgqeP4vfNRJIdUG1EHuZ2lHXsC l5lbW8xtVBT/gUIFWSUi+coAjOl/NckKb4WknjTSb0+OliuzataNfqB0ajF/kc5x 5xaO9+VCBIhMrnwKQnDNYzTNsDK1muD49sBMvtEdyFn8ji7b50nTon1kSVGqxNFq pAi6YPBz+gk8XA69D8POkIg/ekPQi6nRoGW2E/2G1EO93WM9SPhPlTuHb/8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvOHnpmIuwfAfpS6GQZfZ3DU8s4wHwYDVR0j BBgwFoAUvinKeW97ZUbJFQK80Z+1aJkm65wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWU2MWU1YWUtZTQ1Zi00ZWUzLThmNmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2 RjdCNjU0NkM5MTUwMkJDRDE5RkI1Njg5OTI2RUI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTI5Q0E3OTZGN0I2NTQ2QzkxNTAyQkNEMTlGQjU2ODk5MjZF QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvQkUyOUNBNzk2RjdCNjU0NkM5MTUwMkJDRDE5RkI1 Njg5OTI2RUI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlO7u4pkkMy3o5RT1z4f2iyD8Xmfm9dWc4N fp464RR+RElFLzM5uJAxlXL8xQfuE9dDlfzCFixZcnKDo8dSHCQetPgwRYfpDeRp JVBLo0Ts5fv9kIZIf0L45zpk1ZKCFRA3rMuMPOCB7k5oniCYfCwBMYVC7bwdTM+c ZlJWOGnmyeRmqfsA8VZ16+/s61cZo+vVMSZMVAcD+zEvraZnxei6qYjMimgAUntg R2aKiK+Qdp52vfv0aeIrKUQ/yB0nTgw4nRfGIMG5FmQx5SKQtqO7uSqhblbiDTJW YfPyUwxk6fxEUywuMTu3no2vbhnHPhjAOBwB0ASvnRpjsJCy2xU= -----END CERTIFICATE-----Generated at Sun Sep 20 22:35:46 2026 by rpki-client