$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: KV6bhhQmOz4rZvj2oHsUgPskHRqMJKXXmR9wl1ddiGo= Subject key identifier: CA:C7:C9:EE:92:B7:2B:E2:1B:21:4F:95:BE:94:F1:6A:83:A4:0E:86 Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 2AA5EE4EDE8139332B674B83F6F75A751D682540 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:47:23 +0000 Manifest this update: Fri 19 Jun 2026 17:42:23 +0000 Manifest next update: Sat 20 Jun 2026 18:44:23 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: AGAfMzw7v2E49EeBW3w1FJHK87KTBW/w5svrt3zlSDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:ee:4e:de:81:39:33:2b:67:4b:83:f6:f7:5a:75:1d:68:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: Jun 19 17:42:23 2026 GMT Not After : Jun 20 18:44:23 2026 GMT Subject: CN=CAC7C9EE92B72BE21B214F95BE94F16A83A40E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:b8:6b:8d:c4:d7:66:2e:f6:a7:ec:8a:70: ab:55:1e:19:2f:a1:52:7f:a0:93:12:ef:96:dd:2d: 03:e7:20:d6:e5:92:da:75:b0:84:af:b7:c1:9f:2e: 3c:b3:0e:88:9d:69:95:0a:97:cd:b5:2b:8b:55:92: 9b:69:9e:c2:55:91:d3:f8:f0:5b:da:48:f1:15:4c: d9:71:fe:0f:da:38:b6:d4:52:7d:bb:04:b3:c8:5a: 86:45:32:1f:de:57:cf:b6:63:c2:6e:e9:d5:6f:fe: 76:0c:e3:e4:2b:98:ce:96:40:71:b4:6e:ed:0d:77: 4c:d0:51:12:68:ed:1b:e5:40:05:6f:4a:9e:e8:29: 0f:f1:70:1f:33:e4:e7:a6:64:65:a6:ba:df:ae:52: 33:24:5c:1f:d0:bc:21:b2:80:6c:9d:a3:75:bf:d8: 29:4f:05:87:1f:3e:12:24:d7:1e:81:f9:2a:1d:bc: 3b:a4:5e:22:aa:c5:c3:1d:f1:1b:65:12:7c:85:a5: f8:2b:8d:01:27:de:fa:9f:22:7d:5b:3a:77:f7:dc: 36:92:cd:11:80:fd:cf:a7:77:a3:59:22:24:e2:79: a3:12:de:e4:b3:fe:c7:0e:6e:36:1e:a9:43:ab:02: ad:cd:91:6b:11:07:cf:3f:e1:56:d1:17:17:49:35: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C7:C9:EE:92:B7:2B:E2:1B:21:4F:95:BE:94:F1:6A:83:A4:0E:86 X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:73:a0:5f:08:98:57:e6:78:de:55:57:79:31:e9:c9:e8:18: ca:9f:c2:f6:e0:33:ba:85:bc:c7:75:21:29:f2:9c:a8:41:3c: 13:a7:4c:92:e3:ca:49:af:61:fd:d5:94:75:de:7e:f7:19:52: 2f:65:5b:53:62:c5:d9:a7:f3:c0:e8:87:00:59:d4:f4:e2:a3: 91:6e:8a:73:60:38:ae:10:ee:0b:03:b1:56:96:2c:22:d1:e9: e7:b8:6b:5e:85:23:d4:1f:4f:ba:11:50:dc:fe:ea:ba:97:1e: 55:63:65:4b:5a:b2:6c:39:c3:5c:ba:6c:f0:ed:52:23:f2:86: 8b:19:28:d2:5b:c2:18:29:2a:dd:ce:bb:d6:99:8f:37:92:78: ed:c8:7c:f3:34:cc:40:6e:a7:8d:e4:04:3c:27:13:01:d2:10: 1b:fb:22:34:17:75:c7:a3:b6:fb:48:23:13:da:ec:74:c7:90: 0e:68:85:31:71:22:57:ed:10:48:ec:00:94:6d:0f:b1:e4:00: c3:5c:c7:0c:b9:6f:f0:3c:e9:ad:9d:35:20:57:e0:6a:b0:96: 8a:d4:e4:cd:47:d0:79:d6:8b:92:fc:95:8a:ac:72:bc:58:ea: a0:50:30:4b:8e:e8:8a:ea:d1:88:e0:b0:5f:8d:e1:d7:f5:4d: 25:6c:76:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqXuTt6BOTMrZ0uD9vdadR1oJUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA2MTkxNzQyMjNaFw0yNjA2MjAxODQ0MjNaMDMxMTAvBgNV BAMTKENBQzdDOUVFOTJCNzJCRTIxQjIxNEY5NUJFOTRGMTZBODNBNDBFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGK7hrjcTXZi72p+yKcKtVHhkv oVJ/oJMS75bdLQPnINblktp1sISvt8GfLjyzDoidaZUKl821K4tVkptpnsJVkdP4 8FvaSPEVTNlx/g/aOLbUUn27BLPIWoZFMh/eV8+2Y8Ju6dVv/nYM4+QrmM6WQHG0 bu0Nd0zQURJo7RvlQAVvSp7oKQ/xcB8z5OemZGWmut+uUjMkXB/QvCGygGydo3W/ 2ClPBYcfPhIk1x6B+SodvDukXiKqxcMd8RtlEnyFpfgrjQEn3vqfIn1bOnf33DaS zRGA/c+nd6NZIiTieaMS3uSz/scObjYeqUOrAq3NkWsRB88/4VbRFxdJNVtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysfJ7pK3K+IbIU+VvpTxaoOkDoYwHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNzoF8ImFfmeN5VV3kx6cnoGMqfwvbgM7qF vMd1ISnynKhBPBOnTJLjykmvYf3VlHXefvcZUi9lW1Nixdmn88DohwBZ1PTio5Fu inNgOK4Q7gsDsVaWLCLR6ee4a16FI9QfT7oRUNz+6rqXHlVjZUtasmw5w1y6bPDt UiPyhosZKNJbwhgpKt3Ou9aZjzeSeO3IfPM0zEBup43kBDwnEwHSEBv7IjQXdcej tvtIIxPa7HTHkA5ohTFxIlftEEjsAJRtD7HkAMNcxwy5b/A86a2dNSBX4GqwlorU 5M1H0HnWi5L8lYqscrxY6qBQMEuO6Irq0YjgsF+N4df1TSVsdh0= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:06 2026 by rpki-client