$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: l4MP0NYkTOcSWrRFJgwchurHXNZQ9EUQgMRd205mIkI= Subject key identifier: 54:B4:33:F7:9C:F9:05:17:25:94:A1:9D:81:92:22:81:9E:EE:27:C7 Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 6A5D8494F58B52EDE153F29AB2BFEDA587D92E5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:24:02 +0000 Manifest this update: Tue 12 May 2026 21:19:02 +0000 Manifest next update: Wed 13 May 2026 21:45:02 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: mS3p/EfjQG+6e9yl1WUnFEFNbzwvoiurZbhRCscTGEs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5d:84:94:f5:8b:52:ed:e1:53:f2:9a:b2:bf:ed:a5:87:d9:2e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: May 12 21:19:02 2026 GMT Not After : May 13 21:45:02 2026 GMT Subject: CN=54B433F79CF905172594A19D819222819EEE27C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:a6:4a:31:78:6c:b1:60:f7:82:31:0d:f5: 42:2c:c4:3e:75:22:63:6d:a2:8f:c8:25:cb:75:0a: 6d:b2:3f:6b:1b:c3:fc:5f:db:0b:c6:1d:b4:d1:10: c3:08:ea:76:bf:b5:0b:9d:ee:fb:8f:4f:30:ff:d7: 53:83:78:21:5d:76:7f:1e:f8:c8:a0:28:09:d2:45: 49:57:c3:e5:c9:b4:89:bc:7d:39:6f:29:ac:13:d5: 55:60:f1:3e:31:f4:9c:c2:cb:03:8b:76:bf:81:dc: e4:85:29:44:4a:8e:ca:87:1e:1e:28:66:1b:4e:85: db:8f:74:d9:5a:af:db:5e:b3:95:aa:2c:20:b5:9f: 85:4f:cb:15:67:2d:ea:7d:90:5a:79:3a:d8:3c:6d: 9d:c8:e5:bd:79:4d:a0:67:19:2c:39:3a:78:39:82: af:8f:91:16:f9:ff:5e:aa:d3:3c:d0:4f:b9:06:89: 5c:53:72:c2:67:59:e6:73:7f:5f:0c:ad:d7:30:88: 39:dc:2a:d5:29:f4:04:fb:32:46:eb:c6:34:d4:64: 08:f6:af:80:47:6d:cb:fe:e0:49:ea:a9:9e:33:0a: 2a:bc:52:6e:4a:48:c2:35:06:b3:c3:f9:a3:5d:33: ff:b4:04:b0:78:85:9c:58:94:4b:01:55:bb:75:39: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B4:33:F7:9C:F9:05:17:25:94:A1:9D:81:92:22:81:9E:EE:27:C7 X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ff:5c:1e:98:1e:3b:5c:ca:ee:ff:1e:d5:79:d0:2c:a3:c5: bb:e7:96:c5:10:9b:a4:82:1c:37:8e:24:91:9f:db:c4:b8:98: 23:e5:37:e4:8f:8a:5a:6d:ab:9a:26:49:d3:d7:1e:27:7e:ea: 61:f8:02:bd:c1:17:da:cd:9c:93:40:5c:ba:2d:5f:f1:be:19: 90:73:cc:44:8b:9f:10:32:ce:4b:f5:00:92:94:90:c8:f2:bf: e7:20:ba:d8:66:80:d2:4e:a7:a1:53:2b:21:6e:f2:81:ed:d3: 35:26:e3:3f:2b:4e:30:eb:59:58:1f:4e:d3:74:5b:0e:84:4b: e6:7b:ca:b7:b2:b5:3c:80:0d:26:2b:0a:a9:52:28:f6:eb:07: 90:1d:e3:7f:bd:b8:65:0d:64:e6:be:17:29:73:fa:a0:e4:34: 96:77:7a:00:fa:9e:e7:82:64:02:d4:d7:ae:a0:ea:e6:62:42: 3b:5f:7a:46:6e:06:9a:87:9d:d4:f4:39:f3:42:4a:1f:6a:98: 4a:1f:98:ec:6f:71:83:91:d2:9a:d3:a1:19:2f:63:b4:bb:65: 07:c6:b7:b1:c4:b1:b3:7c:12:29:87:12:62:35:80:35:8e:f5: 0d:01:1f:8c:82:98:95:11:0d:c9:90:33:97:b2:72:0a:ec:48: 14:8e:62:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal2ElPWLUu3hU/Kasr/tpYfZLl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA1MTIyMTE5MDJaFw0yNjA1MTMyMTQ1MDJaMDMxMTAvBgNV BAMTKDU0QjQzM0Y3OUNGOTA1MTcyNTk0QTE5RDgxOTIyMjgxOUVFRTI3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpaZKMXhssWD3gjEN9UIsxD51 ImNtoo/IJct1Cm2yP2sbw/xf2wvGHbTREMMI6na/tQud7vuPTzD/11ODeCFddn8e +MigKAnSRUlXw+XJtIm8fTlvKawT1VVg8T4x9JzCywOLdr+B3OSFKURKjsqHHh4o ZhtOhduPdNlar9tes5WqLCC1n4VPyxVnLep9kFp5Otg8bZ3I5b15TaBnGSw5Ong5 gq+PkRb5/16q0zzQT7kGiVxTcsJnWeZzf18MrdcwiDncKtUp9AT7MkbrxjTUZAj2 r4BHbcv+4EnqqZ4zCiq8Um5KSMI1BrPD+aNdM/+0BLB4hZxYlEsBVbt1OeIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLQz95z5BRcllKGdgZIigZ7uJ8cwHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz/XB6YHjtcyu7/HtV50CyjxbvnlsUQm6SC HDeOJJGf28S4mCPlN+SPilptq5omSdPXHid+6mH4Ar3BF9rNnJNAXLotX/G+GZBz zESLnxAyzkv1AJKUkMjyv+cguthmgNJOp6FTKyFu8oHt0zUm4z8rTjDrWVgfTtN0 Ww6ES+Z7yreytTyADSYrCqlSKPbrB5Ad43+9uGUNZOa+Fylz+qDkNJZ3egD6nueC ZALU166g6uZiQjtfekZuBpqHndT0OfNCSh9qmEofmOxvcYOR0prToRkvY7S7ZQfG t7HEsbN8EimHEmI1gDWO9Q0BH4yCmJURDcmQM5eycgrsSBSOYt8= -----END CERTIFICATE-----Generated at Wed May 13 00:21:30 2026 by rpki-client