$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: mztYWEGMQ4Gi1aqFo3ElYV7yBLeNikqWdMJPJzZTibM= Subject key identifier: 8D:DF:B8:B8:F5:A2:07:8C:A7:C2:F5:E7:51:2D:FB:66:87:3F:AA:00 Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 412A169FBC9A4E75CFC0A85B02A30E7849D11C15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:13:25 +0000 Manifest this update: Tue 12 May 2026 18:08:25 +0000 Manifest next update: Wed 13 May 2026 18:37:25 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: z3nUaSyhqM99h3HTuIYz7zu7fKuSHu5maqtLqEs4dQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2a:16:9f:bc:9a:4e:75:cf:c0:a8:5b:02:a3:0e:78:49:d1:1c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: May 12 18:08:25 2026 GMT Not After : May 13 18:37:25 2026 GMT Subject: CN=8DDFB8B8F5A2078CA7C2F5E7512DFB66873FAA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:33:57:32:3f:90:d3:27:c1:40:58:e1:fb:1a: 95:b0:af:b6:56:e5:47:cf:76:17:d7:99:9d:df:16: a8:57:c2:36:a1:e9:48:ce:c4:96:f3:40:b0:78:bc: f6:be:4a:e2:92:94:77:90:5f:05:b6:aa:90:35:d9: 23:66:55:b2:5d:ea:8c:60:49:23:e8:0c:87:04:d0: 64:55:d4:49:0c:f7:8a:9f:a5:82:03:0a:2d:54:03: 5a:a4:1d:9f:b6:0d:e3:30:34:1a:76:28:76:4d:5b: 32:01:ce:38:18:ad:57:1a:ec:39:fa:5a:72:c9:c4: 61:32:9b:eb:82:31:a4:ab:6e:ff:7c:94:8a:8a:5d: 58:c4:84:fe:45:ca:74:3c:a5:c6:fb:ea:39:a3:3a: ba:64:f0:cc:d5:98:ce:8c:cd:04:14:c8:6c:1b:59: 52:d7:84:ae:9f:a6:ac:2a:97:b0:f1:67:98:c7:fc: 3f:f3:6c:c3:e6:3d:6e:0b:0b:ea:d9:c7:9f:9e:6b: 7d:48:22:ad:21:7c:ec:55:2d:64:0a:aa:e7:ad:58: b1:cf:29:52:8c:c4:3f:29:05:5c:49:3f:22:55:90: 3f:5e:20:17:49:ac:86:8d:6b:e2:37:56:3b:1e:b8: 47:d0:c5:9a:3e:4b:6c:f8:a5:90:a8:db:8c:48:82: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DF:B8:B8:F5:A2:07:8C:A7:C2:F5:E7:51:2D:FB:66:87:3F:AA:00 X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5d:e0:3c:c7:67:cd:d0:c2:2b:4b:3a:c4:80:93:2c:69:72: c1:02:7f:3d:fa:59:7b:3f:54:1c:7d:a1:1b:0b:29:e4:09:b7: 7c:3e:32:fc:14:96:e6:c7:4e:f3:b5:db:b0:32:f9:b9:19:11: f2:56:b5:13:86:77:12:eb:4b:fd:ea:e8:b5:6f:7f:39:88:d9: e5:60:49:9d:8f:83:52:24:f9:ea:40:ef:86:70:28:b6:af:df: 8d:cb:1a:13:45:b9:2c:4d:9a:85:3d:19:ca:58:df:71:8d:75: 9a:02:2c:aa:ae:ed:84:ea:d5:14:c5:bf:5c:2e:89:13:23:ce: 80:90:13:bc:f8:4a:51:2e:70:92:1a:13:3c:92:5b:ff:b7:89: b4:e8:12:a6:b1:5a:87:5d:e7:f7:82:7b:f8:a8:0d:bc:47:c4: bc:e2:0e:be:40:40:e4:45:d9:42:bb:a1:70:2d:2d:c4:2d:6b: ac:0d:95:a1:68:3e:f6:74:ef:9a:a6:51:d5:ff:d1:c1:aa:7e: 19:32:d0:11:ed:83:4a:02:c7:7a:e0:69:e3:1e:c3:bc:4e:4a: 25:71:5d:de:6f:b9:ba:5b:7a:1f:48:5e:4f:b7:91:12:48:f4: 94:f1:80:e6:73:d9:81:e4:13:36:dc:e1:ca:e2:20:99:95:c3: 45:71:c8:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSoWn7yaTnXPwKhbAqMOeEnRHBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA1MTIxODA4MjVaFw0yNjA1MTMxODM3MjVaMDMxMTAvBgNV BAMTKDhEREZCOEI4RjVBMjA3OENBN0MyRjVFNzUxMkRGQjY2ODczRkFBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzM1cyP5DTJ8FAWOH7GpWwr7ZW 5UfPdhfXmZ3fFqhXwjah6UjOxJbzQLB4vPa+SuKSlHeQXwW2qpA12SNmVbJd6oxg SSPoDIcE0GRV1EkM94qfpYIDCi1UA1qkHZ+2DeMwNBp2KHZNWzIBzjgYrVca7Dn6 WnLJxGEym+uCMaSrbv98lIqKXVjEhP5FynQ8pcb76jmjOrpk8MzVmM6MzQQUyGwb WVLXhK6fpqwql7DxZ5jH/D/zbMPmPW4LC+rZx5+ea31IIq0hfOxVLWQKquetWLHP KVKMxD8pBVxJPyJVkD9eIBdJrIaNa+I3VjseuEfQxZo+S2z4pZCo24xIgssLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjd+4uPWiB4ynwvXnUS37Zoc/qgAwHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5d4DzHZ83QwitLOsSAkyxpcsECfz36WXs/ VBx9oRsLKeQJt3w+MvwUlubHTvO127Ay+bkZEfJWtROGdxLrS/3q6LVvfzmI2eVg SZ2Pg1Ik+epA74ZwKLav343LGhNFuSxNmoU9GcpY33GNdZoCLKqu7YTq1RTFv1wu iRMjzoCQE7z4SlEucJIaEzySW/+3ibToEqaxWodd5/eCe/ioDbxHxLziDr5AQORF 2UK7oXAtLcQta6wNlaFoPvZ075qmUdX/0cGqfhky0BHtg0oCx3rgaeMew7xOSiVx Xd5vubpbeh9IXk+3kRJI9JTxgOZz2YHkEzbc4criIJmVw0VxyHc= -----END CERTIFICATE-----Generated at Tue May 12 22:19:37 2026 by rpki-client