$ rpki-client -vvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: rLb9MpjG27g5mqPQ1fXjDtP4pjv2+wGLyk391mU5ge8= Subject key identifier: 55:BD:85:12:7F:4E:47:F5:CC:17:7A:A4:29:D1:E2:92:CF:AD:A4:D6 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 6DCF0D0A887E5BAECC6D9125A0BEE2B7987265E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 05:44:06 +0000 Manifest this update: Thu 18 Jun 2026 05:39:06 +0000 Manifest next update: Fri 19 Jun 2026 05:48:06 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) 3: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: 0L47Yc6fcksqwAxT/tQHWNCQejNK78RDEi4Oyu42MKU=) 4: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cf:0d:0a:88:7e:5b:ae:cc:6d:91:25:a0:be:e2:b7:98:72:65:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Jun 18 05:39:06 2026 GMT Not After : Jun 19 05:48:06 2026 GMT Subject: CN=55BD85127F4E47F5CC177AA429D1E292CFADA4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:83:24:15:ac:fc:31:90:d2:99:f3:7b:16: f5:fb:3d:c8:95:5f:42:ef:1b:99:90:d9:e6:2c:68: 31:d9:ea:a9:73:f5:70:84:80:6f:17:06:c9:81:7f: 0c:d4:01:c4:cb:1e:62:60:c6:3f:9a:56:91:8b:0a: 7d:9f:86:d4:05:20:8a:76:26:54:01:0c:36:ae:27: 45:75:cf:f9:c7:e7:fd:96:e3:23:cd:a0:c4:b2:b4: c1:9a:79:c2:63:15:50:cf:8e:83:2f:d4:f2:f4:39: 2c:21:cb:0b:d3:76:14:1a:e7:79:26:98:36:78:51: d7:df:a4:53:00:fa:bc:18:92:3a:a1:c5:af:48:d9: 42:d3:a6:0e:a8:68:03:76:19:58:fa:32:78:e6:ff: 66:49:b8:ec:42:52:bc:49:9d:7b:87:b8:d6:bc:4e: f8:a7:44:10:f9:9f:16:db:e1:a8:43:ed:67:4e:12: 60:e2:7a:52:41:7f:d5:12:94:6f:5e:85:2a:15:36: bd:f8:81:12:fc:1e:1d:93:59:0f:8e:44:33:f1:fd: 1f:c2:c7:7b:89:8e:2f:f9:f9:d0:14:f1:75:51:93: f4:a5:6b:35:81:77:a2:63:19:bd:b4:f0:3d:5f:1d: c8:8c:45:c4:0a:f1:d7:ec:7c:47:3f:17:43:87:a9: bf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BD:85:12:7F:4E:47:F5:CC:17:7A:A4:29:D1:E2:92:CF:AD:A4:D6 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d4:82:4b:5e:a5:da:4a:07:7f:49:c9:3f:fd:c3:24:0e:85: ba:cf:d3:30:62:ef:d0:8b:a2:ba:40:dc:7a:fb:d7:a9:89:8c: dd:83:3b:cd:ca:e6:8f:05:58:ae:a6:27:46:2e:27:0a:9f:c1: 1d:9e:61:35:71:10:73:6b:88:cd:e0:ae:29:23:62:98:1f:ec: 9e:3c:f8:47:40:32:88:59:34:b8:06:59:bf:b3:57:5d:b8:a5: 6a:c1:bc:ff:f6:4b:c7:65:c1:82:5f:49:9f:bd:ac:da:71:01: a0:e4:0f:a3:e0:3d:30:2c:cb:63:ab:07:22:01:b0:73:09:43: 33:e4:2d:88:cc:fa:7e:60:1d:66:f6:c8:4e:ca:14:be:30:73: 48:98:2e:6f:49:e9:10:da:04:aa:3a:b6:18:05:ec:34:e2:33: 20:b9:c7:d6:f0:f1:ec:ae:9b:ee:36:3e:87:66:8e:f1:19:6b: f5:30:3f:aa:73:9f:3b:28:74:fd:1d:72:4b:2f:0e:df:85:b4: 54:2e:cf:cf:66:30:91:22:cd:36:80:ce:6f:4a:83:e9:8e:67: 7a:b1:83:94:e2:6e:9b:01:91:c5:ba:72:da:9f:1a:5f:d1:88: e3:97:f5:ed:59:80:b1:98:f1:f4:3b:f2:1d:2e:d3:ed:96:96: c1:cb:fe:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbc8NCoh+W67MbZEloL7it5hyZeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjA2MTgwNTM5MDZaFw0yNjA2MTkwNTQ4MDZaMDMxMTAvBgNV BAMTKDU1QkQ4NTEyN0Y0RTQ3RjVDQzE3N0FBNDI5RDFFMjkyQ0ZBREE0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgloMkFaz8MZDSmfN7FvX7PciV X0LvG5mQ2eYsaDHZ6qlz9XCEgG8XBsmBfwzUAcTLHmJgxj+aVpGLCn2fhtQFIIp2 JlQBDDauJ0V1z/nH5/2W4yPNoMSytMGaecJjFVDPjoMv1PL0OSwhywvTdhQa53km mDZ4UdffpFMA+rwYkjqhxa9I2ULTpg6oaAN2GVj6Mnjm/2ZJuOxCUrxJnXuHuNa8 TvinRBD5nxbb4ahD7WdOEmDielJBf9USlG9ehSoVNr34gRL8Hh2TWQ+ORDPx/R/C x3uJji/5+dAU8XVRk/SlazWBd6JjGb208D1fHciMRcQK8dfsfEc/F0OHqb/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVb2FEn9OR/XMF3qkKdHiks+tpNYwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/UgktepdpKB39JyT/9wyQOhbrP0zBi79CL orpA3Hr716mJjN2DO83K5o8FWK6mJ0YuJwqfwR2eYTVxEHNriM3grikjYpgf7J48 +EdAMohZNLgGWb+zV124pWrBvP/2S8dlwYJfSZ+9rNpxAaDkD6PgPTAsy2OrByIB sHMJQzPkLYjM+n5gHWb2yE7KFL4wc0iYLm9J6RDaBKo6thgF7DTiMyC5x9bw8eyu m+42PodmjvEZa/UwP6pznzsodP0dcksvDt+FtFQuz89mMJEizTaAzm9Kg+mOZ3qx g5TibpsBkcW6ctqfGl/RiOOX9e1ZgLGY8fQ78h0u0+2WlsHL/l4= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:26 2026 by rpki-client