$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: WHbB47wezH8OMeDEPTBO9WjzS9PTL3XAyhajU0Pyn1g= Subject key identifier: 39:95:6D:79:C4:1D:06:CC:26:F4:CF:87:80:A0:B9:4C:DE:1D:06:1B Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 16531221FD805E5D919A5C7589A577BE2F9A6C01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: BE Signing time: Mon 21 Sep 2026 11:10:18 +0000 Manifest this update: Mon 21 Sep 2026 11:05:18 +0000 Manifest next update: Tue 22 Sep 2026 12:48:18 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: ojTWQAn37f2X+JSKfaNODdjhQxVPlhb3uK8pvNlEkF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:53:12:21:fd:80:5e:5d:91:9a:5c:75:89:a5:77:be:2f:9a:6c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: Sep 21 11:05:18 2026 GMT Not After : Sep 22 12:48:18 2026 GMT Subject: CN=39956D79C41D06CC26F4CF8780A0B94CDE1D061B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:1d:08:a4:0e:f0:2c:ce:3e:5e:e5:c1:c0: af:ef:69:6f:26:c3:a2:18:7e:55:26:f8:f0:57:7a: 16:3c:bd:7b:b3:eb:46:dc:83:f6:64:1d:fa:c5:fd: eb:10:63:64:1c:93:b6:9f:9d:77:ef:39:1a:5c:ca: 8b:12:b7:9b:7a:dc:aa:1e:b3:f3:73:0e:87:bc:b9: 16:3f:3f:40:0b:07:43:3a:c7:30:4f:c1:b9:5a:4c: d0:17:59:8a:f3:3c:73:18:95:89:04:61:10:24:2b: 31:29:7a:87:6c:85:04:84:2b:6c:89:d8:e0:07:25: 1b:95:8c:63:f1:bd:63:f0:9e:5e:0c:3a:e4:67:7d: 81:ac:70:c8:14:e5:e8:f4:76:c5:6b:45:0a:72:b5: f4:a6:d8:7d:d2:9c:a6:00:82:be:2e:25:7e:11:0b: 56:0e:6d:cf:51:06:8c:ae:a7:26:05:96:b7:1c:6d: ab:f1:9d:aa:e3:b8:fb:92:ae:b9:83:da:40:10:3e: 1a:c1:db:51:1a:3f:f7:7c:be:90:b5:09:34:8a:16: ca:60:0a:3c:8d:33:a4:c9:59:25:6d:e0:3d:ad:26: 93:09:fa:e3:90:c1:45:5d:77:b7:91:af:37:35:a5: 7d:53:c4:b4:79:30:9d:d6:bb:f1:3f:98:63:cf:d4: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:95:6D:79:C4:1D:06:CC:26:F4:CF:87:80:A0:B9:4C:DE:1D:06:1B X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f7:f7:f6:7b:1c:b3:b4:73:68:e8:b1:e3:d9:15:25:8a:81: bb:b9:61:eb:59:1f:77:a4:9c:be:88:66:12:3f:09:c2:86:c7: c3:de:9a:42:0f:ee:6b:ca:02:7b:69:2b:b8:e0:76:0d:6e:7c: cc:88:d6:d7:c7:81:55:fc:91:23:ce:6d:07:06:1d:ad:49:8a: 57:30:a5:46:8b:85:49:4f:c2:a0:30:2d:31:3e:e3:87:f4:70: 58:35:b4:8d:55:b5:03:b8:a2:0f:1d:e8:4d:32:6a:85:c5:18: 88:f5:73:fe:2b:58:3d:0e:d1:9e:00:09:ea:25:f1:bd:a2:4d: 9b:fa:67:84:c6:c7:fc:d2:42:b7:9c:72:5c:7d:df:1b:87:07: 32:6a:3f:f2:4d:44:dc:05:52:45:67:ec:fb:30:ae:95:d2:ad: 7e:fa:9c:c7:71:20:71:62:f6:8e:d9:80:03:aa:26:a0:8c:2e: 1f:3e:cb:fe:94:f3:0a:40:46:7f:1a:92:5e:0b:01:72:01:83: 6f:94:fd:b4:2b:c1:0a:e9:03:44:7e:f2:a7:2b:4c:55:05:e0: e4:05:f4:b9:f9:ea:3a:8f:8c:de:93:44:45:8a:bc:ce:4f:18: 6b:d7:be:37:16:79:82:1c:5b:80:a2:e9:1e:22:19:2e:3f:5c: fc:87:1f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlMSIf2AXl2Rmlx1iaV3vi+abAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA5MjExMTA1MThaFw0yNjA5MjIxMjQ4MThaMDMxMTAvBgNV BAMTKDM5OTU2RDc5QzQxRDA2Q0MyNkY0Q0Y4NzgwQTBCOTRDREUxRDA2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcB0IpA7wLM4+XuXBwK/vaW8m w6IYflUm+PBXehY8vXuz60bcg/ZkHfrF/esQY2Qck7afnXfvORpcyosSt5t63Koe s/NzDoe8uRY/P0ALB0M6xzBPwblaTNAXWYrzPHMYlYkEYRAkKzEpeodshQSEK2yJ 2OAHJRuVjGPxvWPwnl4MOuRnfYGscMgU5ej0dsVrRQpytfSm2H3SnKYAgr4uJX4R C1YObc9RBoyupyYFlrccbavxnarjuPuSrrmD2kAQPhrB21EaP/d8vpC1CTSKFspg CjyNM6TJWSVt4D2tJpMJ+uOQwUVdd7eRrzc1pX1TxLR5MJ3Wu/E/mGPP1AmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZVtecQdBswm9M+HgKC5TN4dBhswHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT39/Z7HLO0c2josePZFSWKgbu5YetZH3ek nL6IZhI/CcKGx8PemkIP7mvKAntpK7jgdg1ufMyI1tfHgVX8kSPObQcGHa1Jilcw pUaLhUlPwqAwLTE+44f0cFg1tI1VtQO4og8d6E0yaoXFGIj1c/4rWD0O0Z4ACeol 8b2iTZv6Z4TGx/zSQrecclx93xuHBzJqP/JNRNwFUkVn7PswrpXSrX76nMdxIHFi 9o7ZgAOqJqCMLh8+y/6U8wpARn8akl4LAXIBg2+U/bQrwQrpA0R+8qcrTFUF4OQF 9Ln56jqPjN6TREWKvM5PGGvXvjcWeYIcW4Ci6R4iGS4/XPyHH2M= -----END CERTIFICATE-----Generated at Mon Sep 21 16:07:34 2026 by rpki-client