$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: yQjoepVBIOqcUdSXyaesQik7ajmo3GYNUXEEI8LcT6g= Subject key identifier: 61:56:C8:7D:53:50:F0:D2:93:67:99:1E:6B:A7:C0:33:44:C4:A7:6D Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 0F7A67AE66C118982A5EC925A717013AE261F4ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:45:46 +0000 Manifest this update: Thu 17 Sep 2026 01:40:46 +0000 Manifest next update: Fri 18 Sep 2026 05:05:46 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: FEe9z7pTNtgpNAwel/ELx4CrFhwxCf7JCR6lSnKARTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7a:67:ae:66:c1:18:98:2a:5e:c9:25:a7:17:01:3a:e2:61:f4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: Sep 17 01:40:46 2026 GMT Not After : Sep 18 05:05:46 2026 GMT Subject: CN=6156C87D5350F0D29367991E6BA7C03344C4A76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:16:6e:f1:87:6a:e3:21:42:fb:be:3c:0f: ef:f7:03:5d:ad:31:81:e2:bf:e9:01:d5:c9:48:86: 8d:09:e7:44:08:a5:95:cd:81:2c:23:e4:36:28:e6: 99:91:37:d2:aa:57:f4:51:21:f8:af:92:e5:3b:6e: a7:76:65:c7:46:2d:61:57:0e:5c:e3:cf:f2:ab:86: e9:6b:64:9e:17:93:e3:4a:01:ce:54:f3:b5:e3:fc: a1:41:98:a2:ca:65:ce:bf:1c:17:3e:82:8c:6a:7e: e7:60:bf:13:51:95:82:cf:a9:21:06:c5:aa:ac:99: 49:23:ad:8c:a5:bc:d5:45:00:68:ad:33:4d:f1:b1: fc:c9:90:75:03:0d:f7:1f:d4:b4:8f:46:e8:91:77: b7:2c:8e:63:d2:26:12:21:23:68:c8:c4:48:fd:50: fc:c5:71:ef:20:51:d9:53:76:f1:64:85:eb:66:c7: 1d:4e:c6:31:30:1f:8a:75:e8:f1:f3:36:1f:e0:0b: ee:62:03:e4:3d:4b:ba:0d:b3:98:36:6d:8f:77:8d: 3a:3e:c9:d6:3c:ba:c6:b8:06:28:cc:e3:c1:20:7d: d2:5f:70:7f:6a:45:67:cb:32:cf:3d:eb:9b:0c:37: f6:b7:a7:0a:e2:76:ad:ea:ab:5e:62:a6:3c:a9:96: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:56:C8:7D:53:50:F0:D2:93:67:99:1E:6B:A7:C0:33:44:C4:A7:6D X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:6b:ff:59:85:2b:5f:27:a3:fc:37:ba:c4:d7:35:36:5a: 84:11:c5:b2:31:ab:bb:6c:c9:cf:34:44:44:3a:ca:cf:6d:3d: 04:5e:6f:0d:c5:7c:ef:57:c9:b0:9a:2e:09:d8:4c:54:2f:69: 60:d7:06:54:2a:f7:29:f7:32:0a:f1:f2:6f:a0:00:84:be:43: 33:55:e2:61:8d:77:5a:28:33:65:03:a3:6d:60:df:74:30:a6: 46:6b:2c:cd:fd:00:b7:0e:37:c5:d6:24:2b:35:fc:04:d7:de: 83:fe:13:c7:e9:d5:1f:6f:de:2f:e9:ef:f6:f8:ea:b9:b5:b4: 32:68:c4:f2:98:c3:b0:27:da:23:bd:b1:47:74:9f:7a:92:c5: ac:81:67:24:95:9a:44:1f:be:04:6a:58:c3:cf:60:73:80:5b: f1:8e:ea:c1:c3:2c:5b:15:68:98:fb:ff:fd:b0:7d:f5:f8:0a: e6:19:6e:92:c7:97:4e:bc:61:79:d1:17:38:60:a3:3f:13:4d: 51:64:1f:2b:03:3c:e6:99:e9:0d:f5:39:f0:2b:e5:a5:34:ef: 7d:3a:b3:d8:48:9a:27:27:35:20:99:08:b3:ac:01:20:b7:2e: fd:9d:b2:44:36:a9:25:81:64:9c:8d:70:3d:94:ea:c7:be:db: c7:cd:fe:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3pnrmbBGJgqXsklpxcBOuJh9O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA5MTcwMTQwNDZaFw0yNjA5MTgwNTA1NDZaMDMxMTAvBgNV BAMTKDYxNTZDODdENTM1MEYwRDI5MzY3OTkxRTZCQTdDMDMzNDRDNEE3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ghZu8Ydq4yFC+748D+/3A12t MYHiv+kB1clIho0J50QIpZXNgSwj5DYo5pmRN9KqV/RRIfivkuU7bqd2ZcdGLWFX Dlzjz/KrhulrZJ4Xk+NKAc5U87Xj/KFBmKLKZc6/HBc+goxqfudgvxNRlYLPqSEG xaqsmUkjrYylvNVFAGitM03xsfzJkHUDDfcf1LSPRuiRd7csjmPSJhIhI2jIxEj9 UPzFce8gUdlTdvFkhetmxx1OxjEwH4p16PHzNh/gC+5iA+Q9S7oNs5g2bY93jTo+ ydY8usa4BijM48EgfdJfcH9qRWfLMs8965sMN/a3pwridq3qq15ipjyplpAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYVbIfVNQ8NKTZ5kea6fAM0TEp20wHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWBa/9ZhStfJ6P8N7rE1zU2WoQRxbIxq7ts yc80REQ6ys9tPQRebw3FfO9XybCaLgnYTFQvaWDXBlQq9yn3Mgrx8m+gAIS+QzNV 4mGNd1ooM2UDo21g33QwpkZrLM39ALcON8XWJCs1/ATX3oP+E8fp1R9v3i/p7/b4 6rm1tDJoxPKYw7An2iO9sUd0n3qSxayBZySVmkQfvgRqWMPPYHOAW/GO6sHDLFsV aJj7//2wffX4CuYZbpLHl068YXnRFzhgoz8TTVFkHysDPOaZ6Q31OfAr5aU07306 s9hImicnNSCZCLOsASC3Lv2dskQ2qSWBZJyNcD2U6se+28fN/j8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:02 2026 by rpki-client