$ rpki-client -vvvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: YYCM/C6ZeRBXzD1gxAMCWP2whoGM+JQompA/BQR2Wb4= Subject key identifier: E3:C3:D5:72:D3:A0:E0:C8:32:B8:AF:9A:E2:9F:40:5C:67:2C:12:06 Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 33C44C241B71EC3EB8CE45914479B62CCDA15134 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 07:43:58 +0000 Manifest this update: Sat 14 Nov 2026 07:38:58 +0000 Manifest next update: Sun 15 Nov 2026 10:20:58 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: QlmK7o1S6RoVsr/YyeLXMlBfrLbmG8KcHK1H/2lpMLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 10:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c4:4c:24:1b:71:ec:3e:b8:ce:45:91:44:79:b6:2c:cd:a1:51:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Nov 14 07:38:58 2026 GMT Not After : Nov 15 10:20:58 2026 GMT Subject: CN=E3C3D572D3A0E0C832B8AF9AE29F405C672C1206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:1e:d3:1d:ed:8b:a4:6d:24:34:85:25:13: 16:e9:2f:7e:0c:4e:f8:ca:c2:4c:bc:70:20:58:6a: 02:17:a0:46:ba:0e:dd:43:b9:18:67:be:08:6d:54: 05:c6:d9:c0:37:b1:c0:03:1b:4d:fa:8e:2b:a5:d4: e4:b2:9f:86:a9:cc:80:41:0d:14:cc:7d:3d:6f:2d: 5a:7f:91:48:eb:b1:21:40:a2:66:f9:fa:7d:28:a7: 75:ed:98:5a:96:7b:d4:06:db:24:01:3f:dc:f5:0b: c8:fd:22:1e:bb:10:85:cd:11:fb:61:5a:dd:86:d1: 16:d4:c2:25:e3:26:83:bd:ce:26:a0:bf:e2:ed:bc: c2:a0:e2:28:dd:9e:18:31:fc:b9:5e:6f:ff:91:f3: cc:06:fb:c2:5a:d7:92:24:b8:88:32:0a:09:4a:3b: 8c:59:7a:d6:27:30:3a:4e:d1:8f:28:a5:55:4f:56: ba:63:15:f3:27:2f:02:fe:92:8a:f6:59:c9:b1:bc: 5d:7b:ad:1d:9c:60:6a:8a:68:be:bf:bf:3a:e7:83: f1:00:f4:7c:18:7b:ba:66:60:5b:54:59:58:75:bd: c8:fb:7b:3c:ed:d9:55:ce:7b:b0:2e:ff:d4:2e:eb: da:69:ee:69:4a:52:45:d3:28:39:b5:7d:a8:25:7b: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C3:D5:72:D3:A0:E0:C8:32:B8:AF:9A:E2:9F:40:5C:67:2C:12:06 X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:54:be:21:32:b7:dc:1c:b1:45:70:cf:d9:26:7a:8b:5d:d1: 5f:f1:90:58:fc:cf:1c:19:d2:99:6f:7f:7f:22:9e:32:4e:e0: 70:91:2e:10:45:38:00:63:18:61:c7:18:70:a6:52:30:30:42: af:e3:4b:1f:a8:0b:e1:38:95:14:f3:15:8c:61:44:34:d6:ec: f1:53:1f:73:e9:32:84:66:bf:58:bd:2b:c5:29:54:64:7b:d2: a5:d1:a8:84:af:09:cc:eb:c1:f3:70:c1:f3:3e:10:45:0e:c8: 66:41:4c:c5:33:ee:05:02:ff:fa:fd:df:11:72:9c:a1:b1:70: 3e:5f:e4:52:14:bd:fa:60:36:10:da:f3:17:f6:59:6f:66:0e: c2:50:83:bb:bc:ac:f1:0c:9e:d9:f1:35:16:60:8b:f1:78:42: 58:76:cc:ab:3b:b8:76:93:de:47:9e:f4:b4:11:3c:a8:39:9c: 33:71:76:ee:88:74:86:8a:1c:bd:ca:c8:bd:a2:b3:9e:b6:aa: 80:f4:72:64:35:90:a2:3d:27:2a:97:8f:5d:4e:99:2a:97:1b: 7d:e6:76:a4:bc:31:09:95:0e:3f:f5:fe:a0:6b:7c:ee:6b:60: a0:e9:80:89:5e:37:75:d0:5c:c9:35:0e:51:ce:5a:02:53:f7: 63:7f:bb:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8RMJBtx7D64zkWRRHm2LM2hUTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjExMTQwNzM4NThaFw0yNjExMTUxMDIwNThaMDMxMTAvBgNV BAMTKEUzQzNENTcyRDNBMEUwQzgzMkI4QUY5QUUyOUY0MDVDNjcyQzEyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufh7THe2LpG0kNIUlExbpL34M TvjKwky8cCBYagIXoEa6Dt1DuRhnvghtVAXG2cA3scADG036jiul1OSyn4apzIBB DRTMfT1vLVp/kUjrsSFAomb5+n0op3XtmFqWe9QG2yQBP9z1C8j9Ih67EIXNEfth Wt2G0RbUwiXjJoO9ziagv+LtvMKg4ijdnhgx/Lleb/+R88wG+8Ja15IkuIgyCglK O4xZetYnMDpO0Y8opVVPVrpjFfMnLwL+kor2WcmxvF17rR2cYGqKaL6/vzrng/EA 9HwYe7pmYFtUWVh1vcj7ezzt2VXOe7Au/9Qu69pp7mlKUkXTKDm1faglewqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48PVctOg4MgyuK+a4p9AXGcsEgYwHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARUviEyt9wcsUVwz9kmeotd0V/xkFj8zxwZ 0plvf38injJO4HCRLhBFOABjGGHHGHCmUjAwQq/jSx+oC+E4lRTzFYxhRDTW7PFT H3PpMoRmv1i9K8UpVGR70qXRqISvCczrwfNwwfM+EEUOyGZBTMUz7gUC//r93xFy nKGxcD5f5FIUvfpgNhDa8xf2WW9mDsJQg7u8rPEMntnxNRZgi/F4Qlh2zKs7uHaT 3kee9LQRPKg5nDNxdu6IdIaKHL3KyL2is562qoD0cmQ1kKI9JyqXj11OmSqXG33m dqS8MQmVDj/1/qBrfO5rYKDpgIleN3XQXMk1DlHOWgJT92N/u1k= -----END CERTIFICATE-----Generated at Sun Nov 15 00:15:24 2026 by rpki-client