$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: AWNbDJdMofRLWVVzQmae1ga8gREAmFCyBnGlZXa2wQo= Subject key identifier: 37:17:0A:BF:5D:9D:B3:82:38:EC:BB:A2:0D:ED:31:3E:FD:24:0A:1C Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 1044BA3BE72A1ABFF4433CFE86FA67D34B70DCE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 21:17:56 +0000 Manifest this update: Tue 28 Jul 2026 21:12:56 +0000 Manifest next update: Wed 29 Jul 2026 23:55:56 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: hfGn1dYuSFxGw2Wc4aTl9EWPhhfZPHZ16vGOJY8XxD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:44:ba:3b:e7:2a:1a:bf:f4:43:3c:fe:86:fa:67:d3:4b:70:dc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Jul 28 21:12:56 2026 GMT Not After : Jul 29 23:55:56 2026 GMT Subject: CN=37170ABF5D9DB38238ECBBA20DED313EFD240A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:f0:cd:8a:5b:01:ab:63:4e:49:2d:b6:57: bb:ac:7a:69:32:1a:03:20:6d:6a:24:42:39:45:f5: a7:7e:8b:d2:cb:ad:c9:d5:00:54:2d:9f:d5:d5:ba: 6c:62:14:d4:47:5a:d8:a9:bb:1f:db:5a:12:55:93: 56:34:4b:87:e0:75:d8:82:2e:93:8d:ae:bb:ce:22: d7:88:31:fd:23:ca:20:eb:16:76:dd:75:2d:ba:fd: 9a:f9:95:6d:5a:a6:7e:f1:39:4d:52:5c:08:bc:1c: af:3f:c4:a2:99:49:e7:0a:c0:75:7f:40:43:87:76: 71:43:ba:dc:93:18:73:e7:17:b2:42:be:6b:84:b8: 3b:2c:e8:9f:f1:2d:bb:ae:1c:e3:74:3e:87:34:ad: ac:ca:a3:67:59:7d:52:fb:8c:6f:88:a3:bb:48:56: 2f:c5:51:f4:35:b6:c5:9e:0a:cd:34:b8:31:c3:ee: 9d:a1:ac:f4:02:ef:1a:96:d8:76:35:77:47:1c:91: f0:5d:46:f5:fb:c3:ee:b5:d1:c3:71:f9:5b:84:6f: 80:15:62:df:60:14:e4:b4:de:73:c3:66:76:22:3a: ef:c4:81:1f:ba:9d:41:3a:cc:24:d2:82:40:67:60: 9e:40:a7:b7:08:30:fc:e0:c1:fd:4f:f4:f5:21:48: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:17:0A:BF:5D:9D:B3:82:38:EC:BB:A2:0D:ED:31:3E:FD:24:0A:1C X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:dc:1a:0e:25:e2:22:a5:68:57:c8:7f:4a:ca:26:8c:b8:62: e3:82:2e:2f:f0:41:ba:7f:d2:65:c0:d8:30:f3:11:9a:cd:6e: 4d:0b:99:64:b5:d8:4a:c1:6e:85:7a:17:70:ed:e8:a8:a2:55: 94:98:3d:2c:06:ac:a3:c0:e3:32:70:95:6b:6a:8b:d8:a5:8c: 50:33:a4:de:58:37:05:84:d9:e6:13:55:43:5a:cb:33:37:d6: cb:e0:f5:49:de:44:20:85:e9:14:66:36:0a:64:85:62:d3:6c: d0:77:3c:02:5c:85:fc:8e:fc:68:00:23:a0:31:1a:0f:12:2d: 1f:09:07:07:b1:bc:06:7f:9a:79:68:89:bf:76:d4:fc:35:67: fa:ab:64:d7:85:54:6d:6c:73:63:7d:8a:95:5b:91:1b:47:4b: df:ed:37:b2:2b:be:df:01:b3:75:db:86:9c:03:c1:50:aa:73: b6:c4:e8:96:77:d2:fc:17:b3:70:ed:b8:7d:0a:2b:41:ed:f1: b4:0f:18:67:88:60:b1:ad:a3:18:b6:34:d6:c0:2d:32:a6:81: a3:b2:62:76:a5:b7:7e:75:6a:4b:3b:bc:1c:99:43:93:ba:3c: 4d:c9:f9:9d:a2:19:8d:11:7e:48:84:3f:47:1d:f4:51:e9:d5: d9:a3:9b:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEES6O+cqGr/0Qzz+hvpn00tw3OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA3MjgyMTEyNTZaFw0yNjA3MjkyMzU1NTZaMDMxMTAvBgNV BAMTKDM3MTcwQUJGNUQ5REIzODIzOEVDQkJBMjBERUQzMTNFRkQyNDBBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqfDNilsBq2NOSS22V7usemky GgMgbWokQjlF9ad+i9LLrcnVAFQtn9XVumxiFNRHWtipux/bWhJVk1Y0S4fgddiC LpONrrvOIteIMf0jyiDrFnbddS26/Zr5lW1apn7xOU1SXAi8HK8/xKKZSecKwHV/ QEOHdnFDutyTGHPnF7JCvmuEuDss6J/xLbuuHON0Poc0razKo2dZfVL7jG+Io7tI Vi/FUfQ1tsWeCs00uDHD7p2hrPQC7xqW2HY1d0cckfBdRvX7w+610cNx+VuEb4AV Yt9gFOS03nPDZnYiOu/EgR+6nUE6zCTSgkBnYJ5Ap7cIMPzgwf1P9PUhSJ/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxcKv12ds4I47LuiDe0xPv0kChwwHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjcGg4l4iKlaFfIf0rKJoy4YuOCLi/wQbp/ 0mXA2DDzEZrNbk0LmWS12ErBboV6F3Dt6KiiVZSYPSwGrKPA4zJwlWtqi9iljFAz pN5YNwWE2eYTVUNayzM31svg9UneRCCF6RRmNgpkhWLTbNB3PAJchfyO/GgAI6Ax Gg8SLR8JBwexvAZ/mnloib921Pw1Z/qrZNeFVG1sc2N9ipVbkRtHS9/tN7Irvt8B s3XbhpwDwVCqc7bE6JZ30vwXs3DtuH0KK0Ht8bQPGGeIYLGtoxi2NNbALTKmgaOy Ynalt351aks7vByZQ5O6PE3J+Z2iGY0RfkiEP0cd9FHp1dmjm3k= -----END CERTIFICATE-----Generated at Wed Jul 29 05:26:26 2026 by rpki-client