$ rpki-client -vvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: EDCIkbYExNMHlUDum9bK37OI/BLP7CyIjwZFyAN/T+o= Subject key identifier: 90:DE:44:6B:13:98:6B:B7:7F:81:0E:20:1B:23:9B:3A:37:5B:7D:68 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 3A2E47B26621301929ABD5FC29BCF97ACAE4FE23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:05:54 +0000 Manifest this update: Thu 23 Jul 2026 17:00:54 +0000 Manifest next update: Fri 24 Jul 2026 17:37:54 +0000 Files and hashes: 1: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: XvKKkYWAxjyMaOUtCQfXi1AVYKEmfNmZTpGIBdObraQ=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) 3: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 4: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2e:47:b2:66:21:30:19:29:ab:d5:fc:29:bc:f9:7a:ca:e4:fe:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Jul 23 17:00:54 2026 GMT Not After : Jul 24 17:37:54 2026 GMT Subject: CN=90DE446B13986BB77F810E201B239B3A375B7D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:d5:4a:37:e6:25:fd:ae:6f:dd:2a:8e:bc: 5a:e8:fb:87:fd:ad:36:35:a8:02:c2:b5:51:5d:a8: d0:36:c0:39:fc:fb:5e:07:25:90:34:4a:c0:f7:1f: b2:13:5f:f5:1f:11:94:ba:66:8f:fb:3d:89:ac:f4: 26:bc:20:9b:d5:d2:89:7c:e5:58:3b:f6:ba:91:5f: 6d:15:c0:fe:ed:96:a2:32:37:eb:04:35:2e:01:59: 5d:68:3c:0f:4f:6d:56:fd:da:6c:16:5d:5c:3e:41: 4b:0b:6b:55:2b:ea:5a:b2:6b:6c:78:1f:72:fa:5a: ed:20:9e:ca:3c:19:62:b8:59:5a:ba:22:3d:ff:41: 97:ce:b9:b0:74:1b:2b:97:0e:cc:db:b3:f5:26:62: 47:6e:d7:67:f3:95:af:01:a0:92:45:84:2f:05:d6: 6b:9f:42:f0:da:e5:30:3a:53:b1:57:bb:ab:34:fd: 1e:86:73:8c:a9:33:8c:be:e8:a5:06:06:7b:31:21: d1:f2:34:7d:26:f7:90:4f:fe:c0:6b:42:04:5e:76: 79:23:20:f9:0c:23:6f:e5:fe:0c:7c:08:67:a8:0d: 2a:31:ab:0d:c2:51:13:89:b2:02:65:8e:c1:c9:77: dd:41:1d:2a:28:27:b8:42:60:79:61:6b:81:72:83: 9b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:44:6B:13:98:6B:B7:7F:81:0E:20:1B:23:9B:3A:37:5B:7D:68 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a9:52:2c:7d:be:6f:37:34:62:6a:1d:4b:61:e0:5e:6d:8a: 48:58:e1:9b:8c:84:df:0f:31:42:b3:84:56:58:01:ad:d0:59: 81:c6:ed:37:b4:81:3e:46:b4:7e:c0:15:be:8b:e1:b6:74:64: 90:25:8e:6f:ca:ea:11:c6:e4:7c:98:52:92:e8:e0:23:cc:d9: 2c:1f:18:91:28:c6:6a:75:aa:32:93:d0:a8:f8:6d:9c:ad:10: fa:9b:ac:12:3a:71:4e:4a:e0:93:84:56:03:c9:ff:c2:db:4c: 68:89:4d:40:8e:64:60:a9:68:eb:36:96:d3:44:2c:fa:d1:69: 1d:92:29:9f:30:48:88:2c:1d:f9:f0:41:dd:ae:13:ad:bf:74: 34:b4:ca:69:26:d2:8e:1e:1a:10:d2:af:3b:62:96:19:54:1f: 02:97:21:73:b3:eb:23:39:8d:4a:5a:88:d0:5a:1d:ef:34:b8: 4c:0d:ca:24:5c:c9:17:a8:08:8a:61:37:58:1d:6b:48:2b:f9: 23:e1:e9:b4:ad:8c:7a:2e:ee:94:60:55:3a:c8:1c:9a:94:bc: 04:2c:6e:7a:f3:1e:0e:53:ff:60:78:69:1f:dc:43:6e:85:4e: 9c:88:6d:66:36:e0:4d:bd:f8:9b:00:1d:57:5e:eb:62:86:e2: a8:0f:0c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOi5HsmYhMBkpq9X8Kbz5esrk/iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjA3MjMxNzAwNTRaFw0yNjA3MjQxNzM3NTRaMDMxMTAvBgNV BAMTKDkwREU0NDZCMTM5ODZCQjc3RjgxMEUyMDFCMjM5QjNBMzc1QjdENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUF9VKN+Yl/a5v3SqOvFro+4f9 rTY1qALCtVFdqNA2wDn8+14HJZA0SsD3H7ITX/UfEZS6Zo/7PYms9Ca8IJvV0ol8 5Vg79rqRX20VwP7tlqIyN+sENS4BWV1oPA9PbVb92mwWXVw+QUsLa1Ur6lqya2x4 H3L6Wu0gnso8GWK4WVq6Ij3/QZfOubB0GyuXDszbs/UmYkdu12fzla8BoJJFhC8F 1mufQvDa5TA6U7FXu6s0/R6Gc4ypM4y+6KUGBnsxIdHyNH0m95BP/sBrQgRednkj IPkMI2/l/gx8CGeoDSoxqw3CUROJsgJljsHJd91BHSooJ7hCYHlha4Fyg5ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkN5EaxOYa7d/gQ4gGyObOjdbfWgwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2pUix9vm83NGJqHUth4F5tikhY4ZuMhN8P MUKzhFZYAa3QWYHG7Te0gT5GtH7AFb6L4bZ0ZJAljm/K6hHG5HyYUpLo4CPM2Swf GJEoxmp1qjKT0Kj4bZytEPqbrBI6cU5K4JOEVgPJ/8LbTGiJTUCOZGCpaOs2ltNE LPrRaR2SKZ8wSIgsHfnwQd2uE62/dDS0ymkm0o4eGhDSrztilhlUHwKXIXOz6yM5 jUpaiNBaHe80uEwNyiRcyReoCIphN1gda0gr+SPh6bStjHou7pRgVTrIHJqUvAQs bnrzHg5T/2B4aR/cQ26FTpyIbWY24E29+JsAHVde62KG4qgPDIE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:59 2026 by rpki-client