$ rpki-client -vvvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: bq9d1g6UDegFxOMK9QJjJAR9rBdpVSUEFcylIvqe+qg= Subject key identifier: EA:41:88:B8:DE:3F:3D:AD:72:10:C1:7C:46:91:D8:90:5F:58:F2:5B Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 1BB66EBEE4C87BC399D9B5187499DC14F3CE3820 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:18:03 +0000 Manifest this update: Mon 21 Sep 2026 09:13:03 +0000 Manifest next update: Tue 22 Sep 2026 13:05:03 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: 452JdRqI/6TfMnxpofIFWVfOjmDPLRY/dHJw3O+Eq/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:6e:be:e4:c8:7b:c3:99:d9:b5:18:74:99:dc:14:f3:ce:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Sep 21 09:13:03 2026 GMT Not After : Sep 22 13:05:03 2026 GMT Subject: CN=EA4188B8DE3F3DAD7210C17C4691D8905F58F25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:d7:e3:89:64:c1:e3:01:bb:d4:36:39:a6: 18:27:86:6f:78:fc:f2:4e:01:71:e2:ae:3e:8b:81: a5:59:f2:70:bb:35:6d:cf:1e:f8:a2:c3:0b:89:5d: d7:e1:42:a9:ea:32:44:21:72:61:a6:a0:d4:1c:85: 9a:25:fe:b0:ec:96:3d:9a:f3:f0:11:5a:c1:0e:1c: 8e:5b:12:f7:80:46:52:f4:ab:8e:05:7a:26:ef:c3: bd:de:9f:b1:8c:fa:29:c1:b5:08:02:75:06:d0:b6: 77:0d:e8:8b:62:7e:9f:74:0b:16:69:3c:45:e8:ed: d1:31:ce:f7:90:19:c6:f3:e7:fc:06:1c:68:33:df: f5:0c:83:de:12:5f:dd:1d:20:33:ac:07:23:6e:71: 36:e3:1b:fc:c8:07:6d:c3:f5:db:e4:19:0f:b9:ee: f1:b4:41:a5:4e:2c:a1:1e:28:79:70:84:4f:42:da: a3:a1:19:4e:68:4e:a1:0d:21:2b:5f:0e:92:92:48: ef:be:15:d2:9b:17:c3:7b:ef:15:81:81:10:7c:ef: c4:9c:bb:07:6e:31:f8:7e:77:af:19:37:b1:ba:8d: 17:6e:5d:00:e5:ee:8f:4b:bf:c6:6e:88:f4:35:36: 18:64:a2:25:85:d0:79:df:30:bf:e5:7e:a7:9f:69: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:41:88:B8:DE:3F:3D:AD:72:10:C1:7C:46:91:D8:90:5F:58:F2:5B X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5b:e7:f7:77:da:f3:4a:58:69:d9:6a:15:15:3c:52:d9:cc: 39:9a:55:79:fe:42:a7:50:09:84:f1:6e:f9:3e:7e:8b:83:4e: 1e:45:58:fc:93:b7:e2:0c:a4:9e:94:2a:40:e4:56:b8:3f:7b: d0:15:ca:8a:73:77:b9:2c:0f:21:27:d5:0e:56:c9:26:ee:53: ba:97:6d:eb:02:ea:af:48:39:f3:7f:9b:12:9a:8f:7f:b2:8f: c3:33:bb:69:c5:9b:41:04:18:59:83:66:8b:30:9e:b4:e3:2b: 27:0a:0d:e2:33:97:19:a3:e5:7d:44:72:f8:95:26:40:10:d2: d1:c6:4a:9c:46:ec:6f:c1:29:c2:cf:ed:f6:75:22:2b:76:14: f5:75:4d:d0:44:0f:7c:ab:9c:1d:6b:08:45:a8:5b:76:5d:bf: 86:09:75:d4:5f:62:03:4c:9b:f3:96:2d:80:bf:74:31:da:36: b1:e4:9a:38:73:f2:83:c2:e4:fb:29:3c:88:b7:9e:cd:91:c6: c5:34:09:24:56:85:43:3d:a8:e5:71:3c:3c:2d:bd:40:38:fa: 75:70:7c:7b:0c:22:1b:0b:c9:f9:2f:3e:8b:75:c2:0b:2d:e2: 1c:4e:47:05:be:ad:0b:ec:4c:83:26:1f:da:01:7d:c2:29:f4: a0:f1:6f:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7ZuvuTIe8OZ2bUYdJncFPPOOCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA5MjEwOTEzMDNaFw0yNjA5MjIxMzA1MDNaMDMxMTAvBgNV BAMTKEVBNDE4OEI4REUzRjNEQUQ3MjEwQzE3QzQ2OTFEODkwNUY1OEYyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBntfjiWTB4wG71DY5phgnhm94 /PJOAXHirj6LgaVZ8nC7NW3PHviiwwuJXdfhQqnqMkQhcmGmoNQchZol/rDslj2a 8/ARWsEOHI5bEveARlL0q44Feibvw73en7GM+inBtQgCdQbQtncN6Itifp90CxZp PEXo7dExzveQGcbz5/wGHGgz3/UMg94SX90dIDOsByNucTbjG/zIB23D9dvkGQ+5 7vG0QaVOLKEeKHlwhE9C2qOhGU5oTqENIStfDpKSSO++FdKbF8N77xWBgRB878Sc uwduMfh+d68ZN7G6jRduXQDl7o9Lv8ZuiPQ1NhhkoiWF0HnfML/lfqefaRh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6kGIuN4/Pa1yEMF8RpHYkF9Y8lswHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpb5/d32vNKWGnZahUVPFLZzDmaVXn+QqdQ CYTxbvk+fouDTh5FWPyTt+IMpJ6UKkDkVrg/e9AVyopzd7ksDyEn1Q5WySbuU7qX besC6q9IOfN/mxKaj3+yj8Mzu2nFm0EEGFmDZoswnrTjKycKDeIzlxmj5X1EcviV JkAQ0tHGSpxG7G/BKcLP7fZ1Iit2FPV1TdBED3yrnB1rCEWoW3Zdv4YJddRfYgNM m/OWLYC/dDHaNrHkmjhz8oPC5PspPIi3ns2RxsU0CSRWhUM9qOVxPDwtvUA4+nVw fHsMIhsLyfkvPot1wgst4hxORwW+rQvsTIMmH9oBfcIp9KDxb7s= -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:51 2026 by rpki-client