$ rpki-client -vvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: W+yXSl+34hU/jfGHBG9L9szrKhzQ/Ha8P+vFdpTwte0= Subject key identifier: CD:C4:5C:F0:7D:09:69:42:E5:9D:AA:D5:F0:AA:70:6C:0C:E2:3C:FE Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 3381001C86CE63EB84C8B4778586664717908B28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:53:15 +0000 Manifest this update: Tue 16 Jun 2026 19:48:15 +0000 Manifest next update: Wed 17 Jun 2026 20:52:15 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) 4: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: xFQlL7RRTLdnQOl6OMcZZe1922dVh/LePwQWT5gRDB4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:81:00:1c:86:ce:63:eb:84:c8:b4:77:85:86:66:47:17:90:8b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Jun 16 19:48:15 2026 GMT Not After : Jun 17 20:52:15 2026 GMT Subject: CN=CDC45CF07D096942E59DAAD5F0AA706C0CE23CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:56:de:e1:d1:a7:42:e2:20:68:e2:6e:3c: ed:82:2c:18:fe:f9:d9:a2:3e:fe:72:75:54:a9:fb: 9b:d1:9a:93:9e:69:03:eb:01:2d:3b:6d:e8:ce:fb: 5a:02:8b:59:c3:4d:e6:b6:19:ac:4d:a9:68:e1:9e: 23:7a:c1:19:15:35:94:d2:b3:2f:c4:16:0c:59:45: d4:f9:26:e9:a4:a7:c4:98:b8:4c:ec:f8:23:aa:e1: d7:9c:e4:ad:dc:82:7d:5c:ff:a7:ec:0a:89:57:e0: bd:38:d5:e6:3b:d3:ea:ed:5c:cd:a6:56:51:51:c0: b1:8c:2c:c2:13:3e:aa:63:fb:d4:28:1a:0f:ca:24: 58:9c:4e:f5:71:ea:bc:03:8e:d4:b0:ee:db:41:bf: 30:0b:85:ec:73:d3:52:ae:f2:2c:c1:cc:e2:68:cb: dd:87:91:76:bb:4f:37:32:aa:80:40:0c:f6:f4:cf: 82:23:58:9e:06:d9:8f:4d:f5:3e:86:96:a8:1c:2f: 05:0b:78:a1:7b:88:b2:60:dd:38:f3:dd:03:c0:b8: e4:a2:c0:8e:70:88:0c:a2:ed:ef:1f:52:d1:06:1d: 33:f7:5c:51:7e:64:b2:9a:00:f6:17:ed:64:f7:70: 0a:99:0b:85:0d:94:59:7b:71:e3:5c:ca:23:54:55: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:5C:F0:7D:09:69:42:E5:9D:AA:D5:F0:AA:70:6C:0C:E2:3C:FE X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2b:f0:44:fe:ac:b1:55:18:51:55:c7:18:37:39:8e:bb:d5: ea:be:e8:3c:d8:e9:8d:0e:fd:2a:c1:a4:e2:8a:92:39:c9:89: 94:5e:5d:e9:bf:4a:cf:75:98:70:f1:1f:16:61:b9:63:f3:1c: 01:71:5d:25:0c:ea:49:1e:a1:28:2f:cf:06:f9:53:dd:b6:74: 9e:3a:f5:26:87:41:b5:95:7b:a7:6c:ff:aa:2a:7f:24:bb:bf: c9:d7:63:13:46:dc:de:92:e9:a8:44:fa:e3:6b:f1:8b:b7:99: ca:a4:fe:7a:05:39:27:de:e5:31:2a:9c:79:00:72:ec:af:86: 15:18:4e:f8:d4:33:7d:c5:29:1b:3c:a5:46:90:5d:03:60:01: d8:15:70:e1:c4:04:5e:2a:10:30:11:ea:13:37:9d:64:89:16: ad:a5:c6:a8:ac:87:3a:1b:10:e2:23:60:c9:f1:7a:a1:2f:d9: 3f:96:3f:03:44:26:ac:05:9d:12:d4:93:db:6c:42:0e:f1:17: ed:be:6f:9d:37:91:d5:68:99:a0:20:aa:6e:20:9f:ad:b4:0f: d7:05:65:69:42:3b:3a:43:22:a8:11:9b:a3:ec:d2:7a:87:5f: 76:b4:60:75:46:a3:7a:bc:13:73:8a:42:5f:a7:cd:d5:c2:ac: 2a:77:47:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4EAHIbOY+uEyLR3hYZmRxeQiygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjA2MTYxOTQ4MTVaFw0yNjA2MTcyMDUyMTVaMDMxMTAvBgNV BAMTKENEQzQ1Q0YwN0QwOTY5NDJFNTlEQUFENUYwQUE3MDZDMENFMjNDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Qlbe4dGnQuIgaOJuPO2CLBj+ +dmiPv5ydVSp+5vRmpOeaQPrAS07bejO+1oCi1nDTea2GaxNqWjhniN6wRkVNZTS sy/EFgxZRdT5Jumkp8SYuEzs+COq4dec5K3cgn1c/6fsColX4L041eY70+rtXM2m VlFRwLGMLMITPqpj+9QoGg/KJFicTvVx6rwDjtSw7ttBvzALhexz01Ku8izBzOJo y92HkXa7TzcyqoBADPb0z4IjWJ4G2Y9N9T6GlqgcLwULeKF7iLJg3Tjz3QPAuOSi wI5wiAyi7e8fUtEGHTP3XFF+ZLKaAPYX7WT3cAqZC4UNlFl7ceNcyiNUVV4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcRc8H0JaULlnarV8KpwbAziPP4wHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcr8ET+rLFVGFFVxxg3OY671eq+6DzY6Y0O /SrBpOKKkjnJiZReXem/Ss91mHDxHxZhuWPzHAFxXSUM6kkeoSgvzwb5U922dJ46 9SaHQbWVe6ds/6oqfyS7v8nXYxNG3N6S6ahE+uNr8Yu3mcqk/noFOSfe5TEqnHkA cuyvhhUYTvjUM33FKRs8pUaQXQNgAdgVcOHEBF4qEDAR6hM3nWSJFq2lxqishzob EOIjYMnxeqEv2T+WPwNEJqwFnRLUk9tsQg7xF+2+b503kdVomaAgqm4gn620D9cF ZWlCOzpDIqgRm6Ps0nqHX3a0YHVGo3q8E3OKQl+nzdXCrCp3Rzo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:00:58 2026 by rpki-client