$ rpki-client -vvvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: 6x3QQPBVxYTQNW4MVIZGyuCFl+V3bosJN1sigBqTTSs= Subject key identifier: 2F:DA:01:88:AF:5A:5A:B0:5B:94:F2:D0:88:D6:09:EE:A7:89:90:DB Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 48DA23D0DA36F45235CF858EAEBCA92E9C1021F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:45:09 +0000 Manifest this update: Thu 24 Sep 2026 11:40:09 +0000 Manifest next update: Fri 25 Sep 2026 12:06:09 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: FpbOD+qZ9mEV3da5aMQrkzj0X3rvGuy4/0GXEoEJrHY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:da:23:d0:da:36:f4:52:35:cf:85:8e:ae:bc:a9:2e:9c:10:21:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Sep 24 11:40:09 2026 GMT Not After : Sep 25 12:06:09 2026 GMT Subject: CN=2FDA0188AF5A5AB05B94F2D088D609EEA78990DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:f8:94:64:4c:0d:d7:77:ad:a7:78:9b:6a: e6:32:2f:16:a5:ec:b9:5e:7c:7e:ad:44:e5:3c:85: bf:ab:93:56:43:3f:4a:ec:c5:17:38:b9:96:d4:16: 98:b3:bf:ca:2f:64:12:62:34:d9:98:73:af:a5:f1: 19:b3:67:da:45:a0:78:dd:82:25:5e:b5:37:9e:44: 1e:48:15:4e:7c:db:63:fd:69:2a:7e:19:be:e3:e5: 29:64:fd:1f:bc:46:10:6e:03:ff:ff:1f:d2:88:0f: 17:4a:fd:59:67:28:49:a4:42:f9:9a:e8:49:d8:77: 61:dd:36:40:09:bc:77:9b:fc:76:54:93:c5:f9:66: 5f:c4:91:9e:c9:ce:f3:ba:2b:83:27:8d:74:a0:6e: b9:80:e2:e5:a7:47:ac:93:dc:ba:c7:09:ca:aa:cb: 04:7c:ce:eb:c4:15:03:05:45:f5:94:e0:31:14:d9: 5e:0a:b3:98:39:3c:1c:88:9c:e7:d0:ad:e5:d6:cf: 8b:2c:89:7c:ca:d6:9d:84:2b:3c:f5:ea:31:d5:10: a3:45:69:bc:11:60:94:ab:28:8d:5d:84:8f:f6:c0: 80:77:03:d3:a4:29:58:7c:f0:44:6f:ad:43:7a:39: b0:7e:a0:fe:c4:d1:bf:6c:72:7e:b9:f4:d2:a8:93: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:01:88:AF:5A:5A:B0:5B:94:F2:D0:88:D6:09:EE:A7:89:90:DB X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:85:56:28:54:c8:0f:8e:ce:6e:a1:5e:d2:81:f1:01:30:27: 48:18:ff:dc:a3:b7:f6:59:02:c1:fb:9c:54:54:1b:5e:52:a5: f6:44:ed:8f:b3:6e:00:4c:66:ed:79:46:be:a2:0b:48:c8:7d: 54:23:7c:29:61:f9:bb:e8:d5:b3:0c:49:3b:9a:d3:bc:e5:1a: 51:e6:00:e0:78:5b:d1:48:27:17:08:22:fe:98:d9:da:af:2e: f7:c3:21:a6:53:a6:07:1a:6b:3d:9b:12:25:5e:4d:04:92:e0: 9d:12:31:75:27:74:56:11:7c:b6:b9:fd:cb:d1:81:0d:e6:05: 46:23:30:60:6d:56:c1:bb:5f:df:4d:f8:77:0c:56:fb:57:e5: 74:21:36:68:86:66:f6:62:ce:88:65:02:f4:e9:08:e3:91:42: 22:0a:70:a6:8f:71:3d:70:4a:03:88:ee:c2:c0:5a:f3:4d:22: 89:a7:f3:63:ab:20:06:40:f1:76:ba:1c:2b:e1:58:ec:f0:0e: d1:ff:76:47:77:50:e3:4a:20:c9:48:ba:36:66:0c:63:e9:fe: 2e:13:06:59:ab:44:94:12:e8:6e:c2:04:49:23:d0:11:ab:37: 2b:2b:12:89:c9:98:c1:42:8f:60:d6:23:8d:68:2b:15:f3:41: a1:2c:d9:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNoj0No29FI1z4WOrrypLpwQIfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA5MjQxMTQwMDlaFw0yNjA5MjUxMjA2MDlaMDMxMTAvBgNV BAMTKDJGREEwMTg4QUY1QTVBQjA1Qjk0RjJEMDg4RDYwOUVFQTc4OTkwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOz/iUZEwN13etp3ibauYyLxal 7LlefH6tROU8hb+rk1ZDP0rsxRc4uZbUFpizv8ovZBJiNNmYc6+l8RmzZ9pFoHjd giVetTeeRB5IFU5822P9aSp+Gb7j5Slk/R+8RhBuA///H9KIDxdK/VlnKEmkQvma 6EnYd2HdNkAJvHeb/HZUk8X5Zl/EkZ7JzvO6K4MnjXSgbrmA4uWnR6yT3LrHCcqq ywR8zuvEFQMFRfWU4DEU2V4Ks5g5PByInOfQreXWz4ssiXzK1p2EKzz16jHVEKNF abwRYJSrKI1dhI/2wIB3A9OkKVh88ERvrUN6ObB+oP7E0b9scn659NKok9aPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL9oBiK9aWrBblPLQiNYJ7qeJkNswHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6FVihUyA+Ozm6hXtKB8QEwJ0gY/9yjt/ZZ AsH7nFRUG15SpfZE7Y+zbgBMZu15Rr6iC0jIfVQjfClh+bvo1bMMSTua07zlGlHm AOB4W9FIJxcIIv6Y2dqvLvfDIaZTpgcaaz2bEiVeTQSS4J0SMXUndFYRfLa5/cvR gQ3mBUYjMGBtVsG7X99N+HcMVvtX5XQhNmiGZvZizohlAvTpCOORQiIKcKaPcT1w SgOI7sLAWvNNIomn82OrIAZA8Xa6HCvhWOzwDtH/dkd3UONKIMlIujZmDGPp/i4T BlmrRJQS6G7CBEkj0BGrNysrEonJmMFCj2DWI41oKxXzQaEs2dQ= -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:34 2026 by rpki-client