$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: 8rqRNf2vVUPtq8O7H7fBP6gIbYJZ14QXEab8ETXJ0DE= Subject key identifier: EE:73:E5:B9:79:EC:67:B1:65:C9:F1:2F:E6:37:BA:26:AA:BD:5B:B5 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 0166BD997B793B1266F8BA6CAE944228F86F9FFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 07:18:19 +0000 Manifest this update: Sat 14 Nov 2026 07:13:19 +0000 Manifest next update: Sun 15 Nov 2026 09:13:19 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) 3: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 4: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: dALXSs72zh1VV+GrHI4CPql9hjjXAWqrmyXnzhFtozQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:66:bd:99:7b:79:3b:12:66:f8:ba:6c:ae:94:42:28:f8:6f:9f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Nov 14 07:13:19 2026 GMT Not After : Nov 15 09:13:19 2026 GMT Subject: CN=EE73E5B979EC67B165C9F12FE637BA26AABD5BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:ac:b2:2e:5d:61:39:6a:91:ac:f1:10:96: 21:48:4b:b4:b6:3d:4c:b7:69:bc:fd:17:f7:4c:b2: a6:29:8e:38:f6:fd:a0:aa:7a:5e:ac:45:c2:e1:6b: c7:c0:ef:90:1e:1c:b3:d5:e9:c5:cf:b9:77:e8:59: 0a:42:46:99:03:9a:b1:32:3e:be:c2:ea:53:af:5a: 4d:44:e7:b3:7d:a5:67:0e:a4:ce:3d:d4:bd:98:97: 24:07:57:3e:a6:bf:8d:bd:9f:19:1d:e1:47:e1:40: 52:f3:f9:48:3c:f2:af:3e:1a:73:11:73:0e:dd:df: 11:d1:5f:0e:4d:f6:22:a4:63:f4:a4:b3:4b:a0:b0: 62:94:07:eb:43:7e:8d:80:3b:11:37:c4:a2:4d:38: 25:55:e9:f8:23:67:fb:fa:a1:60:6d:fd:d5:41:b3: d9:d4:37:f1:5b:a6:d3:b4:a8:12:6c:38:df:05:f2: 4f:d4:3d:9a:31:9d:97:ed:bc:40:59:43:65:88:76: 13:00:4a:5c:b2:e0:c6:f7:8c:94:7f:8f:89:a6:a2: 4c:1e:89:20:64:2c:97:af:6d:42:bf:47:34:6d:ff: d2:3d:c7:78:01:3b:19:2d:e4:9d:45:b8:cc:6e:70: 03:ad:10:17:54:92:51:40:50:ce:6b:2e:08:75:a6: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:E5:B9:79:EC:67:B1:65:C9:F1:2F:E6:37:BA:26:AA:BD:5B:B5 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3a:64:60:ae:09:88:50:6d:af:8c:67:9a:73:da:76:24:1b: 76:b2:d6:5e:d1:ad:98:7a:f4:28:29:b9:66:0e:1d:43:d7:16: 6d:a9:1b:60:94:24:3d:39:a0:71:56:49:d4:00:cc:2f:b3:a2: 67:f1:ef:20:cb:33:5c:38:5f:a3:d6:e4:6e:8c:0f:27:fb:12: 5a:cc:87:19:4e:f6:8b:d8:7b:87:8a:a0:12:1c:e4:c5:6e:fe: 17:51:5a:07:ce:1f:b2:b9:fb:24:d8:13:5f:6a:ef:96:be:bd: 38:3e:d3:46:dc:43:35:ac:18:7a:ad:34:a2:7c:36:27:ef:5e: 1d:7c:d2:c3:a3:4a:cd:1b:8d:e6:f3:c9:b7:23:82:52:44:b2: 4f:98:93:79:21:b9:1c:c3:1d:8e:11:d5:45:92:14:50:32:33: cf:64:27:73:a6:b9:fe:52:a4:bc:5a:3d:c4:49:0f:1d:b2:ca: e8:41:cc:21:81:84:fb:4b:b2:ee:51:f0:c8:e8:48:b5:24:0f: 8b:64:a0:c0:56:fb:0f:9e:ba:f6:6a:b5:d0:87:b1:fd:31:30: 03:38:ba:2b:17:f6:4e:36:3f:3a:af:d0:55:1c:14:ff:06:4c: 4e:3e:ac:72:fa:78:1a:7f:cc:87:e6:01:4e:33:d7:54:6f:a3: 6d:5e:62:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWa9mXt5OxJm+LpsrpRCKPhvn/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjExMTQwNzEzMTlaFw0yNjExMTUwOTEzMTlaMDMxMTAvBgNV BAMTKEVFNzNFNUI5NzlFQzY3QjE2NUM5RjEyRkU2MzdCQTI2QUFCRDVCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmKyyLl1hOWqRrPEQliFIS7S2 PUy3abz9F/dMsqYpjjj2/aCqel6sRcLha8fA75AeHLPV6cXPuXfoWQpCRpkDmrEy Pr7C6lOvWk1E57N9pWcOpM491L2YlyQHVz6mv429nxkd4UfhQFLz+Ug88q8+GnMR cw7d3xHRXw5N9iKkY/Sks0ugsGKUB+tDfo2AOxE3xKJNOCVV6fgjZ/v6oWBt/dVB s9nUN/FbptO0qBJsON8F8k/UPZoxnZftvEBZQ2WIdhMASlyy4Mb3jJR/j4mmokwe iSBkLJevbUK/RzRt/9I9x3gBOxkt5J1FuMxucAOtEBdUklFAUM5rLgh1pt+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nPluXnsZ7FlyfEv5je6Jqq9W7UwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFE6ZGCuCYhQba+MZ5pz2nYkG3ay1l7RrZh6 9CgpuWYOHUPXFm2pG2CUJD05oHFWSdQAzC+zomfx7yDLM1w4X6PW5G6MDyf7ElrM hxlO9ovYe4eKoBIc5MVu/hdRWgfOH7K5+yTYE19q75a+vTg+00bcQzWsGHqtNKJ8 NifvXh180sOjSs0bjebzybcjglJEsk+Yk3khuRzDHY4R1UWSFFAyM89kJ3Omuf5S pLxaPcRJDx2yyuhBzCGBhPtLsu5R8MjoSLUkD4tkoMBW+w+euvZqtdCHsf0xMAM4 uisX9k42Pzqv0FUcFP8GTE4+rHL6eBp/zIfmAU4z11Rvo21eYpY= -----END CERTIFICATE-----Generated at Sun Nov 15 00:24:39 2026 by rpki-client