$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: 8UtYVNBQlagiNO+ZbAtDnqpL2zYK4BVn9gXO88NuoaA= Subject key identifier: 26:79:FC:3C:CE:F6:B2:F6:07:79:8A:74:6D:7C:A6:DF:66:7C:25:06 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 5F7E83AA6D2EDEC47464778BA9DE285C47603D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:55:00 +0000 Manifest this update: Mon 21 Sep 2026 22:50:00 +0000 Manifest next update: Wed 23 Sep 2026 02:47:00 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) 3: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: 0awmHnIRQ49LyisYkLzx4GgQNFL0F9HBao5rFnXk5oo=) 4: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7e:83:aa:6d:2e:de:c4:74:64:77:8b:a9:de:28:5c:47:60:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Sep 21 22:50:00 2026 GMT Not After : Sep 23 02:47:00 2026 GMT Subject: CN=2679FC3CCEF6B2F607798A746D7CA6DF667C2506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:44:d1:39:00:0c:24:83:4d:ca:ac:4d:c8: 7f:18:11:c9:4d:23:ca:86:b8:3e:3a:14:e2:4f:12: 7c:3a:0f:77:75:1d:6a:81:aa:32:7e:04:d6:ef:a5: 00:a7:1d:05:f2:7a:41:c1:aa:9c:aa:7a:63:59:6f: f6:01:34:f9:f0:2d:21:ee:02:5d:76:ac:97:82:15: 4f:53:3b:0f:79:88:bc:d9:f7:b4:69:6b:f2:d9:ea: b0:73:3a:88:34:f7:1a:e8:db:83:17:3d:ec:3c:cf: 8a:ce:42:3b:b5:c8:a8:e7:38:9e:87:1a:70:4b:5f: a7:26:9d:38:bd:c1:55:e2:a3:58:0d:0a:0d:53:89: cf:ab:f3:06:cd:eb:82:dd:e8:9b:49:9b:1e:b3:1f: 99:71:e0:ab:ae:9a:38:61:6c:45:8f:0c:12:20:0a: b6:5f:34:52:35:43:5b:69:4c:90:08:33:de:3d:12: 8b:dd:0d:e4:49:a4:c1:c4:d5:a3:1b:48:78:eb:6c: 06:2f:42:d9:c3:a0:16:17:ec:a9:10:87:2d:f6:86: d0:a0:cb:d6:d7:87:36:c1:fb:9f:70:bc:de:7d:91: 84:57:85:8b:d6:68:d6:82:b8:2f:64:f9:4b:0c:ea: ef:38:83:56:f8:33:ac:4c:9c:19:22:8d:d8:6b:ea: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:FC:3C:CE:F6:B2:F6:07:79:8A:74:6D:7C:A6:DF:66:7C:25:06 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:59:c3:7a:2f:d9:a6:81:91:19:5c:69:22:62:63:e1:4a:a7: 4e:24:91:57:1e:a2:2b:88:c3:57:bd:1c:76:57:10:03:65:db: d6:9f:b5:10:b8:8a:c2:45:ab:dc:45:ad:a5:6b:08:69:f5:78: a7:28:93:e5:98:63:de:51:73:a6:41:20:fc:92:a3:5e:2d:2f: 9a:b2:05:e3:e2:7c:c2:6a:8a:09:5c:07:06:35:f0:17:3f:ee: ff:a2:3e:3a:79:c1:43:a9:90:29:b6:a1:5e:3a:7e:f6:c3:b2: d3:a6:03:21:97:9d:c7:9e:88:00:85:7a:4b:49:58:7e:ad:4e: 00:c4:c2:c8:56:1b:b4:dc:2e:f1:4d:e3:da:b7:b6:b6:05:6c: 90:3c:72:9d:0b:42:be:dd:d6:75:88:3d:de:c6:b9:14:65:4e: 82:83:e4:93:ac:05:f5:b5:f9:a1:b9:36:e2:27:f4:c8:bc:d1: 0d:f0:27:3e:05:84:78:b3:1a:c9:e7:a2:c9:ec:02:56:33:cf: ff:39:7f:95:35:34:48:fa:6f:40:9d:41:d0:06:2f:d7:e6:48: 2d:e0:f6:39:06:01:24:22:04:3d:d9:d7:4e:68:22:7c:3c:70: 10:35:9f:51:61:3e:24:28:ad:8a:d4:53:f1:cf:ef:25:56:b8: 37:af:01:4a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITX36Dqm0u3sR0ZHeLqd4oXEdgPTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3 NjFEN0ExMB4XDTI2MDkyMTIyNTAwMFoXDTI2MDkyMzAyNDcwMFowMzExMC8GA1UE AxMoMjY3OUZDM0NDRUY2QjJGNjA3Nzk4QTc0NkQ3Q0E2REY2NjdDMjUwNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJvVRNE5AAwkg03KrE3IfxgRyU0j yoa4PjoU4k8SfDoPd3UdaoGqMn4E1u+lAKcdBfJ6QcGqnKp6Y1lv9gE0+fAtIe4C XXasl4IVT1M7D3mIvNn3tGlr8tnqsHM6iDT3Gujbgxc97DzPis5CO7XIqOc4noca cEtfpyadOL3BVeKjWA0KDVOJz6vzBs3rgt3om0mbHrMfmXHgq66aOGFsRY8MEiAK tl80UjVDW2lMkAgz3j0Si90N5EmkwcTVoxtIeOtsBi9C2cOgFhfsqRCHLfaG0KDL 1teHNsH7n3C83n2RhFeFi9Zo1oK4L2T5Swzq7ziDVvgzrEycGSKN2GvqeqsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQmefw8zvay9gd5inRtfKbfZnwlBjAfBgNVHSME GDAWgBS+yCqjuw0fraqRhmX13wRVt2HXoTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRUM4MkFBM0JC MEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFEN0ExLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8wL0JFQzgyQUEzQkIwRDFGQURBQTkxODY2NUY1REYwNDU1Qjc2MUQ3 QTEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9iMzYwNjZlOC04ZTE5LTRkZTctOTQ3 Yi05NGVlM2NkMDlmODUvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1 NUI3NjFEN0ExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAOVnDei/ZpoGRGVxpImJj4UqnTiSRVx6iK4jD V70cdlcQA2Xb1p+1ELiKwkWr3EWtpWsIafV4pyiT5Zhj3lFzpkEg/JKjXi0vmrIF 4+J8wmqKCVwHBjXwFz/u/6I+OnnBQ6mQKbahXjp+9sOy06YDIZedx56IAIV6S0lY fq1OAMTCyFYbtNwu8U3j2re2tgVskDxynQtCvt3WdYg93sa5FGVOgoPkk6wF9bX5 obk24if0yLzRDfAnPgWEeLMayeeiyewCVjPP/zl/lTU0SPpvQJ1B0AYv1+ZILeD2 OQYBJCIEPdnXTmgifDxwEDWfUWE+JCititRT8c/vJVa4N68BSg== -----END CERTIFICATE-----Generated at Tue Sep 22 15:54:19 2026 by rpki-client