$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: 2PwAi6sJw/zxvt++gQfhzIQthCakkufJMNAxVhTMYXM= Subject key identifier: 1C:C6:35:20:1D:87:9C:4C:6E:AE:F8:86:44:4F:49:AD:45:FD:6A:92 Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 65EE9C4E769EDCEB220DFFC4849A4C1DFEA29F75 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 01:10:52 +0000 Manifest this update: Sat 13 Jun 2026 01:05:52 +0000 Manifest next update: Sun 14 Jun 2026 04:24:52 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: tXaw6QdbJ1ys8kvyIz6e3OGL5Lvfb/GcrJWWosVxOKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ee:9c:4e:76:9e:dc:eb:22:0d:ff:c4:84:9a:4c:1d:fe:a2:9f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Jun 13 01:05:52 2026 GMT Not After : Jun 14 04:24:52 2026 GMT Subject: CN=1CC635201D879C4C6EAEF886444F49AD45FD6A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:99:0e:30:42:db:71:0b:87:c7:f7:09:ee: 88:78:b9:15:2c:a2:d6:32:bd:33:ea:0c:af:26:04: 2e:5a:56:20:0f:0a:07:fc:f8:b3:c9:a7:a6:13:0f: d3:0e:ee:c5:a2:df:22:5b:dd:ab:f1:25:f1:57:6c: e4:28:80:d5:b6:f5:ec:6c:cf:3e:42:96:c6:9a:7e: 42:67:17:66:a3:10:08:02:d2:16:0e:b3:df:b1:e7: 9b:ff:d2:1e:f2:45:2d:b8:ea:e7:be:80:e3:85:bf: f9:0f:7f:ea:ef:7b:73:c7:82:3f:aa:8a:17:ed:3a: 3f:c0:c1:e1:0c:ee:3b:8c:6c:30:8d:df:73:f1:47: 16:a1:4e:e6:b9:06:96:6a:e9:a2:ae:4c:d7:3c:b6: 3e:91:ae:ad:44:30:f4:47:e0:6a:4e:f6:42:1b:2e: 39:9e:4e:44:48:96:76:fe:ec:bd:ba:f2:c4:5a:b0: ad:23:0d:52:df:ab:0c:c4:27:ab:02:bd:6e:10:2e: dd:1d:3b:f4:9a:ac:19:35:23:17:f2:26:91:32:77: 56:86:8b:7a:de:7c:74:cf:7e:4a:45:b2:cd:eb:a3: 5c:98:0d:0f:7a:35:4c:2a:27:84:53:e4:16:2d:92: f2:a8:14:c8:f0:46:5b:30:e3:eb:3e:f0:0d:12:4c: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C6:35:20:1D:87:9C:4C:6E:AE:F8:86:44:4F:49:AD:45:FD:6A:92 X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:60:86:09:4b:74:65:b0:c2:d0:12:dc:08:7b:07:31:14:50: 82:44:a8:61:6c:2e:3c:4d:2f:44:4d:bd:22:67:78:a0:d0:36: 6d:b6:35:cc:fd:f4:cc:11:51:0c:8c:ee:77:1b:ac:62:c2:24: 1b:bd:20:04:36:47:cc:40:2e:18:d9:ee:bb:7e:72:61:1b:cb: 07:ea:aa:c8:45:d2:c9:65:65:9a:ca:91:f6:6a:0f:4c:f7:39: f5:6e:97:3f:ef:19:55:0b:6f:15:31:17:2e:6e:14:f1:fe:93: ae:da:8e:93:01:22:3f:28:7f:5e:f0:b7:b6:90:b6:3f:44:8f: 26:6c:ca:67:76:c3:ca:88:ee:92:61:6d:a9:85:9d:6c:07:3f: 00:11:ec:e6:80:7f:cf:b0:ec:98:7a:8f:1c:49:dd:c4:38:a6: 99:86:9b:99:af:98:2d:ff:27:85:fd:83:3d:32:7c:66:fc:71: 66:8c:8a:f2:f7:dd:8d:0e:a9:d1:a4:c3:df:96:38:4e:2e:9e: 25:79:f3:99:49:93:6b:31:df:34:5d:d2:54:fe:79:45:66:18: 23:48:f8:4d:1b:34:9e:bd:ab:73:30:33:73:05:5d:ca:93:fc: c3:7d:fb:70:49:37:bb:fd:97:7a:ab:51:9d:b4:87:3c:e4:26: 05:e2:1c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZe6cTnae3OsiDf/EhJpMHf6in3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA2MTMwMTA1NTJaFw0yNjA2MTQwNDI0NTJaMDMxMTAvBgNV BAMTKDFDQzYzNTIwMUQ4NzlDNEM2RUFFRjg4NjQ0NEY0OUFENDVGRDZBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMpkOMELbcQuHx/cJ7oh4uRUs otYyvTPqDK8mBC5aViAPCgf8+LPJp6YTD9MO7sWi3yJb3avxJfFXbOQogNW29exs zz5ClsaafkJnF2ajEAgC0hYOs9+x55v/0h7yRS246ue+gOOFv/kPf+rve3PHgj+q ihftOj/AweEM7juMbDCN33PxRxahTua5BpZq6aKuTNc8tj6Rrq1EMPRH4GpO9kIb LjmeTkRIlnb+7L268sRasK0jDVLfqwzEJ6sCvW4QLt0dO/SarBk1IxfyJpEyd1aG i3refHTPfkpFss3ro1yYDQ96NUwqJ4RT5BYtkvKoFMjwRlsw4+s+8A0STKwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMY1IB2HnExurviGRE9JrUX9apIwHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJghglLdGWwwtAS3Ah7BzEUUIJEqGFsLjxN L0RNvSJneKDQNm22Ncz99MwRUQyM7ncbrGLCJBu9IAQ2R8xALhjZ7rt+cmEbywfq qshF0sllZZrKkfZqD0z3OfVulz/vGVULbxUxFy5uFPH+k67ajpMBIj8of17wt7aQ tj9EjyZsymd2w8qI7pJhbamFnWwHPwAR7OaAf8+w7Jh6jxxJ3cQ4ppmGm5mvmC3/ J4X9gz0yfGb8cWaMivL33Y0OqdGkw9+WOE4uniV585lJk2sx3zRd0lT+eUVmGCNI +E0bNJ69q3MwM3MFXcqT/MN9+3BJN7v9l3qrUZ20hzzkJgXiHLE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:46 2026 by rpki-client