$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: vVY3i5dreAUyazFRAMlnD7BCMWFwG+xvl0o/lA8bgrw= Subject key identifier: 6B:2C:47:D4:86:0D:44:10:05:A5:3B:87:D1:C2:7A:24:05:21:38:83 Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 03CBE8A20DFE20E628B1DA47B1D5ACDB1FD46DC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:44:29 +0000 Manifest this update: Tue 16 Jun 2026 16:39:29 +0000 Manifest next update: Wed 17 Jun 2026 19:20:29 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: S1Qupk7vbAeOlNmd5+e7EolDx66T/BrIu7pPJYyZgxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:e8:a2:0d:fe:20:e6:28:b1:da:47:b1:d5:ac:db:1f:d4:6d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: Jun 16 16:39:29 2026 GMT Not After : Jun 17 19:20:29 2026 GMT Subject: CN=6B2C47D4860D441005A53B87D1C27A2405213883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:55:fd:c9:9b:2f:b7:57:30:7c:16:71:09: 50:cc:c6:38:71:f1:41:ae:b6:57:47:6f:99:94:21: 55:ae:71:71:de:c8:ba:47:45:e7:2b:bf:ca:1e:a0: ae:d7:97:65:3c:fb:8b:9c:8a:ac:f5:62:95:cd:9a: f5:b0:26:cb:af:85:fc:6e:96:bb:38:14:34:11:1d: 50:75:85:4a:43:88:55:9c:7b:d3:cb:21:c6:c0:ed: 3c:5a:f5:56:03:da:1b:c0:bd:ef:fe:e5:35:31:46: 66:d0:87:ac:df:91:fd:32:b7:e7:e2:51:da:bb:5b: 6e:fe:2d:69:52:13:a3:31:f3:0f:47:11:80:47:b0: d4:37:9e:65:41:08:33:91:fb:2b:2e:6a:53:6b:87: 18:73:59:fa:b1:48:ff:48:6f:93:ba:c6:b3:4b:77: 64:b8:48:e0:d1:32:be:10:3e:9d:0a:40:8b:cb:b5: aa:84:70:e2:8e:20:7c:5e:d6:9e:26:b0:3f:ce:4e: a9:a0:9d:dd:ee:48:b1:1e:26:a2:b7:c8:11:ce:49: d7:f8:8a:2a:a6:d7:3e:2d:18:d9:70:02:c7:ca:26: 34:2c:a0:e0:f6:e3:01:de:c9:d5:34:4f:8d:9e:57: 86:9e:52:0a:4c:29:4b:b5:44:d5:e7:d2:3e:ad:0f: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:47:D4:86:0D:44:10:05:A5:3B:87:D1:C2:7A:24:05:21:38:83 X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:04:56:73:07:76:50:17:f2:84:f3:be:7f:dc:1f:27:ff: af:22:8f:31:14:5e:c5:29:e9:a3:ff:9c:a0:d1:51:b8:f5:d3: f9:8f:9a:06:50:d4:5b:4a:22:ed:d3:d8:68:ab:c8:55:96:9e: 1a:34:d2:77:a9:11:76:8a:4a:ae:06:b3:b9:09:c5:d1:8f:e6: 58:dd:a2:15:00:5b:92:37:52:1a:57:9c:a2:30:6d:66:2d:cd: b7:a4:87:b2:02:69:15:54:7a:81:01:03:a4:6c:a4:99:0b:e0: 5f:89:df:cd:28:32:cf:a9:64:72:2d:65:ae:98:ec:8a:49:1e: 71:f7:72:1c:5d:3f:a3:7b:60:35:c2:c1:b3:db:22:a9:5f:d2: e6:03:f8:e1:aa:28:cb:72:67:99:c2:2d:82:fc:ef:05:49:7a: 2f:d9:cc:64:a2:cf:50:6a:50:3f:67:af:65:c8:c3:76:f3:2b: a5:7e:03:33:cf:ab:b4:2f:88:f0:26:5d:71:15:16:46:50:02: 5b:56:f1:aa:0e:43:95:da:c0:3d:e0:d0:d9:c4:82:81:d0:e6: 31:32:72:ff:5f:3f:c3:72:05:80:db:50:80:d6:c9:58:16:74: d5:c2:83:25:a6:35:ff:61:a6:1a:08:d3:54:56:f2:67:24:46: cf:5e:88:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8voog3+IOYosdpHsdWs2x/UbcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA2MTYxNjM5MjlaFw0yNjA2MTcxOTIwMjlaMDMxMTAvBgNV BAMTKDZCMkM0N0Q0ODYwRDQ0MTAwNUE1M0I4N0QxQzI3QTI0MDUyMTM4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZlX9yZsvt1cwfBZxCVDMxjhx 8UGutldHb5mUIVWucXHeyLpHRecrv8oeoK7Xl2U8+4uciqz1YpXNmvWwJsuvhfxu lrs4FDQRHVB1hUpDiFWce9PLIcbA7Txa9VYD2hvAve/+5TUxRmbQh6zfkf0yt+fi Udq7W27+LWlSE6Mx8w9HEYBHsNQ3nmVBCDOR+ysualNrhxhzWfqxSP9Ib5O6xrNL d2S4SODRMr4QPp0KQIvLtaqEcOKOIHxe1p4msD/OTqmgnd3uSLEeJqK3yBHOSdf4 iiqm1z4tGNlwAsfKJjQsoOD24wHeydU0T42eV4aeUgpMKUu1RNXn0j6tD/CLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayxH1IYNRBAFpTuH0cJ6JAUhOIMwHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh3BFZzB3ZQF/KE875/3B8n/68ijzEUXsUp 6aP/nKDRUbj10/mPmgZQ1FtKIu3T2GiryFWWnho00nepEXaKSq4Gs7kJxdGP5ljd ohUAW5I3UhpXnKIwbWYtzbekh7ICaRVUeoEBA6RspJkL4F+J380oMs+pZHItZa6Y 7IpJHnH3chxdP6N7YDXCwbPbIqlf0uYD+OGqKMtyZ5nCLYL87wVJei/ZzGSiz1Bq UD9nr2XIw3bzK6V+AzPPq7QviPAmXXEVFkZQAltW8aoOQ5XawD3g0NnEgoHQ5jEy cv9fP8NyBYDbUIDWyVgWdNXCgyWmNf9hphoI01RW8mckRs9eiMY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:49 2026 by rpki-client