$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: ecsVqW3PpfxDBhxEFK+dGUpdSG1yPz4jpS4ppz2ff78= Subject key identifier: C1:C3:33:BD:E9:D2:2C:F9:F5:0D:90:D7:29:06:BB:14:AD:60:42:FD Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 3CD7B4C19C2C1944458F0D20B330D9BFB30B5521 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:32:47 +0000 Manifest this update: Thu 23 Jul 2026 14:27:47 +0000 Manifest next update: Fri 24 Jul 2026 14:57:47 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: LzCgRQwK9bMfwYo04aFZwxpTB/hYhigmOY0lKjqK6LA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d7:b4:c1:9c:2c:19:44:45:8f:0d:20:b3:30:d9:bf:b3:0b:55:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Jul 23 14:27:47 2026 GMT Not After : Jul 24 14:57:47 2026 GMT Subject: CN=C1C333BDE9D22CF9F50D90D72906BB14AD6042FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:2c:30:9b:c1:0a:5e:59:4b:78:4d:81:bc: 4b:de:a3:f5:40:fd:22:03:64:94:1d:d0:60:f7:48: c1:f5:d3:90:8d:61:49:69:c6:d7:c1:66:e6:e3:33: 3a:72:11:ee:33:2c:59:da:60:ee:7f:0f:bf:a2:ba: 63:1f:99:13:a9:eb:87:39:35:3c:fe:55:3d:82:20: 92:3c:54:d4:e3:37:e3:c6:9c:67:a6:3b:05:0e:92: 43:8d:31:28:5e:44:d1:3c:6e:c9:f5:5e:62:05:f5: f6:7e:4f:c2:6b:93:42:06:4b:e7:8b:d2:30:4f:4c: d0:10:0b:f4:db:e5:dd:fc:4d:ca:da:25:69:4c:7a: d7:80:7c:f4:52:9d:6f:f2:92:55:72:e3:7a:18:d9: 58:07:b0:89:00:cc:40:94:a3:29:6e:af:c4:8d:78: 83:be:2a:37:51:b8:4a:59:90:6b:1f:97:4e:97:7c: ce:63:69:d8:06:13:40:e2:6f:6a:06:4f:da:8e:44: 73:0c:33:3d:e3:ee:4a:e4:d9:46:39:28:99:ee:5b: 39:03:d4:ce:59:e6:03:db:ee:36:78:87:df:60:6c: bb:ce:1e:ff:ef:85:78:ad:96:13:50:fa:1d:4c:fd: e2:5f:cc:92:df:df:be:fe:79:5a:47:10:49:ed:cb: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C3:33:BD:E9:D2:2C:F9:F5:0D:90:D7:29:06:BB:14:AD:60:42:FD X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0a:9c:c9:61:fd:9d:bd:3b:c2:22:6d:e1:41:53:d0:ba:7d: ac:94:30:37:9c:88:09:29:9f:b0:d2:10:a1:4e:ae:7b:e2:a6: e1:ea:62:90:2e:fa:96:43:e2:10:c1:bd:60:d8:cc:ae:54:4a: a9:5e:1e:46:94:10:a6:c9:b7:f4:78:fd:c4:8d:4b:59:f1:27: 2c:65:ef:d9:5c:be:9b:2f:b9:8d:f2:63:df:89:61:f0:7d:46: aa:fc:e1:6b:fd:7f:2b:0c:b3:72:7a:96:55:55:48:3f:9b:11: 56:ed:16:04:65:a7:89:66:d6:a8:91:bb:f4:60:59:18:83:70: 99:3b:9f:3c:7e:4d:02:5d:78:80:36:f1:7b:d1:c1:3d:f2:bd: 2f:d5:f1:05:f4:7c:60:bb:59:da:09:81:37:b3:9f:ac:93:19: 92:c5:15:26:bb:7a:d4:bb:ff:48:2c:d0:1b:ef:88:55:d2:0b: f6:17:39:9f:87:a1:30:09:ab:9b:08:1c:92:cc:47:83:9c:0c: a4:b4:1d:96:06:e9:68:b6:3c:a0:91:53:9a:51:22:05:e5:43: 3e:78:34:ed:e7:8b:6c:a0:08:45:e5:d4:64:0c:0e:63:cc:f1: 4a:d0:2c:85:8d:70:de:7e:8c:bc:65:32:ee:fa:7f:97:05:68: 54:c9:df:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNe0wZwsGURFjw0gszDZv7MLVSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA3MjMxNDI3NDdaFw0yNjA3MjQxNDU3NDdaMDMxMTAvBgNV BAMTKEMxQzMzM0JERTlEMjJDRjlGNTBEOTBENzI5MDZCQjE0QUQ2MDQyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRiwwm8EKXllLeE2BvEveo/VA /SIDZJQd0GD3SMH105CNYUlpxtfBZubjMzpyEe4zLFnaYO5/D7+iumMfmROp64c5 NTz+VT2CIJI8VNTjN+PGnGemOwUOkkONMSheRNE8bsn1XmIF9fZ+T8Jrk0IGS+eL 0jBPTNAQC/Tb5d38TcraJWlMeteAfPRSnW/yklVy43oY2VgHsIkAzECUoylur8SN eIO+KjdRuEpZkGsfl06XfM5jadgGE0Dib2oGT9qORHMMMz3j7krk2UY5KJnuWzkD 1M5Z5gPb7jZ4h99gbLvOHv/vhXitlhNQ+h1M/eJfzJLf377+eVpHEEnty0FlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcMzvenSLPn1DZDXKQa7FK1gQv0wHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIKnMlh/Z29O8IibeFBU9C6fayUMDeciAkp n7DSEKFOrnvipuHqYpAu+pZD4hDBvWDYzK5USqleHkaUEKbJt/R4/cSNS1nxJyxl 79lcvpsvuY3yY9+JYfB9Rqr84Wv9fysMs3J6llVVSD+bEVbtFgRlp4lm1qiRu/Rg WRiDcJk7nzx+TQJdeIA28XvRwT3yvS/V8QX0fGC7WdoJgTezn6yTGZLFFSa7etS7 /0gs0BvviFXSC/YXOZ+HoTAJq5sIHJLMR4OcDKS0HZYG6Wi2PKCRU5pRIgXlQz54 NO3ni2ygCEXl1GQMDmPM8UrQLIWNcN5+jLxlMu76f5cFaFTJ3yo= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:52 2026 by rpki-client