$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft File: BE96322A5435C5AD047663170AEE9BA9270D4644.mft (raw, json) Hash identifier: Oj6IxOYojZs1kCQQ2Jzljnhbp3G37RSj5EVz4MFCT40= Subject key identifier: 25:05:2F:54:26:B9:C5:26:95:05:0A:5A:F2:94:CB:03:C4:41:C9:15 Authority key identifier: BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 Certificate issuer: /CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Certificate serial: 648ACA71BE16BE6B8F652593BD71C821CF2A3527 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:55:28 +0000 Manifest this update: Thu 24 Sep 2026 15:50:28 +0000 Manifest next update: Fri 25 Sep 2026 19:18:28 +0000 Files and hashes: 1: BE96322A5435C5AD047663170AEE9BA9270D4644.crl (hash: o4pptLyGjNmZXNFF4ciEeuP7EtHTILQIefnx/LDoAeI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:ca:71:be:16:be:6b:8f:65:25:93:bd:71:c8:21:cf:2a:35:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE96322A5435C5AD047663170AEE9BA9270D4644 Validity Not Before: Sep 24 15:50:28 2026 GMT Not After : Sep 25 19:18:28 2026 GMT Subject: CN=25052F5426B9C52695050A5AF294CB03C441C915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:b1:e8:7b:9c:d0:8a:3b:0f:e3:99:6e:ec: 89:9f:20:f4:39:89:6d:43:9f:3c:f0:84:43:6f:78: 98:8a:52:b7:e7:54:67:4d:51:f4:7c:de:d1:ac:c3: a8:59:9f:5e:6b:a6:58:69:c9:8d:cb:88:b9:3e:ec: c4:29:c8:48:7d:a3:c4:6a:9e:0a:e4:a2:c3:4f:8b: 28:49:10:6f:87:0d:db:af:ea:33:fb:07:f7:45:d5: e4:e4:cc:75:d6:46:9a:7f:30:78:06:65:9a:de:eb: e8:3b:34:12:df:d0:11:01:e0:1b:f3:c1:86:f8:e8: a2:29:e7:78:f6:22:40:6f:26:4b:0a:07:4e:b4:11: c9:8e:99:2a:e3:bd:ac:f8:40:c6:77:a8:0d:75:09: ab:ef:d5:9c:6b:3e:4e:d2:9e:ea:d2:b0:6f:2d:2e: de:78:ce:90:a1:e8:44:9a:de:c4:76:49:0f:b3:d6: 29:0c:01:6b:aa:c9:cf:d3:b5:cf:5c:a2:7c:d7:76: 5a:0a:7d:0a:3d:43:9e:af:05:24:d8:03:8c:5a:79: a0:98:fd:1e:0d:27:b7:79:cb:4c:b9:0c:1c:ca:e0: 5d:9b:97:c0:6b:25:59:af:a8:73:eb:08:b3:fa:fd: 80:f4:a3:4a:aa:9c:e3:fc:21:a3:d5:d1:18:d6:f5: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:05:2F:54:26:B9:C5:26:95:05:0A:5A:F2:94:CB:03:C4:41:C9:15 X509v3 Authority Key Identifier: keyid:BE:96:32:2A:54:35:C5:AD:04:76:63:17:0A:EE:9B:A9:27:0D:46:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE96322A5435C5AD047663170AEE9BA9270D4644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/BE96322A5435C5AD047663170AEE9BA9270D4644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b7:69:b3:8a:e5:e3:c0:b8:30:ec:8f:db:09:77:37:a1:27: 68:2b:6b:fa:85:2c:37:e6:df:6e:ba:b9:bd:2a:78:49:15:ba: 3b:5b:c5:c6:e7:4c:99:4a:2c:ad:33:34:8e:0a:56:ac:6a:00: d1:4c:cd:6f:f9:95:a9:30:01:cd:79:ed:ca:45:ea:e3:7a:5d: 09:01:4d:75:d3:7d:3b:20:3c:64:61:31:d1:07:8f:ea:b9:24: 5d:cf:13:1f:78:2b:48:dc:98:bd:8a:6c:fc:05:bb:33:40:f8: f3:36:e8:7c:43:04:74:de:e9:b1:51:41:95:44:b3:7e:fa:5d: ea:3a:fa:92:2a:db:f6:43:3a:e9:33:8c:22:7c:55:ec:60:61: 2e:4e:ca:2e:7f:6c:49:8e:e0:63:89:04:56:64:b1:e8:d3:c7: 5a:43:22:a5:48:a8:1c:4d:ee:2f:ef:e6:e2:30:6b:3d:71:bf: c5:ff:36:cb:fa:e3:a8:4b:9b:de:f6:b8:c5:dd:fc:7d:98:ce: 42:55:b5:0e:a3:52:c0:d9:95:eb:e4:04:75:54:68:69:82:78: 3f:6d:12:48:04:06:03:07:ed:38:e8:03:c0:67:e7:cc:70:ec: 5d:22:c0:e2:e7:43:3b:45:d4:66:27:d4:fb:7f:f8:2d:08:7e: 38:d1:ba:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIrKcb4WvmuPZSWTvXHIIc8qNScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTky NzBENDY0NDAeFw0yNjA5MjQxNTUwMjhaFw0yNjA5MjUxOTE4MjhaMDMxMTAvBgNV BAMTKDI1MDUyRjU0MjZCOUM1MjY5NTA1MEE1QUYyOTRDQjAzQzQ0MUM5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3rHoe5zQijsP45lu7ImfIPQ5 iW1DnzzwhENveJiKUrfnVGdNUfR83tGsw6hZn15rplhpyY3LiLk+7MQpyEh9o8Rq ngrkosNPiyhJEG+HDduv6jP7B/dF1eTkzHXWRpp/MHgGZZre6+g7NBLf0BEB4Bvz wYb46KIp53j2IkBvJksKB060EcmOmSrjvaz4QMZ3qA11Cavv1ZxrPk7SnurSsG8t Lt54zpCh6ESa3sR2SQ+z1ikMAWuqyc/Ttc9conzXdloKfQo9Q56vBSTYA4xaeaCY /R4NJ7d5y0y5DBzK4F2bl8BrJVmvqHPrCLP6/YD0o0qqnOP8IaPV0RjW9Z0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJQUvVCa5xSaVBQpa8pTLA8RByRUwHwYDVR0j BBgwFoAUvpYyKlQ1xa0EdmMXCu6bqScNRkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmJjODNiNTUtYzhjMS00NjFkLWIyOGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1 NDM1QzVBRDA0NzY2MzE3MEFFRTlCQTkyNzBENDY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRTk2MzIyQTU0MzVDNUFEMDQ3NjYzMTcwQUVFOUJBOTI3MEQ0 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvQkU5NjMyMkE1NDM1QzVBRDA0NzY2MzE3MEFFRTlC QTkyNzBENDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW3abOK5ePAuDDsj9sJdzehJ2gra/qFLDfm 3266ub0qeEkVujtbxcbnTJlKLK0zNI4KVqxqANFMzW/5lakwAc157cpF6uN6XQkB TXXTfTsgPGRhMdEHj+q5JF3PEx94K0jcmL2KbPwFuzNA+PM26HxDBHTe6bFRQZVE s376Xeo6+pIq2/ZDOukzjCJ8VexgYS5Oyi5/bEmO4GOJBFZksejTx1pDIqVIqBxN 7i/v5uIwaz1xv8X/Nsv646hLm972uMXd/H2YzkJVtQ6jUsDZlevkBHVUaGmCeD9t EkgEBgMH7TjoA8Bn58xw7F0iwOLnQztF1GYn1Pt/+C0IfjjRulQ= -----END CERTIFICATE-----Generated at Thu Sep 24 18:12:54 2026 by rpki-client