$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: 7Yto/npuPSmYGJWC50+KC8Ao1cY5HqL97PQjDnHiA8c= Subject key identifier: DC:1F:2D:5C:78:80:BC:BA:E1:95:7F:B7:17:3E:74:47:FE:25:81:61 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 594479E24012512034D8AADBEBEBCF012B4D4721 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:08:37 +0000 Manifest this update: Wed 23 Sep 2026 14:03:37 +0000 Manifest next update: Thu 24 Sep 2026 14:46:37 +0000 Files and hashes: 1: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) 2: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: 9fNLN7woY6vP9Ien7qsWTDdgQ9jXCY8tSSrJnzN+P3Y=) 3: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:44:79:e2:40:12:51:20:34:d8:aa:db:eb:eb:cf:01:2b:4d:47:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Sep 23 14:03:37 2026 GMT Not After : Sep 24 14:46:37 2026 GMT Subject: CN=DC1F2D5C7880BCBAE1957FB7173E7447FE258161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:22:0b:a1:e6:b9:7c:16:e2:71:58:de:a1: ff:cb:82:3d:d6:0c:04:4b:7d:ec:61:c0:5d:2f:20: 3c:98:61:a3:0d:fc:5d:46:a6:ee:d1:63:c1:34:64: c2:e3:f3:b8:6e:18:79:db:30:9e:35:d6:ff:ff:02: 99:ef:53:99:c8:04:7b:25:80:6b:02:1f:d5:af:78: 96:cc:11:c8:a4:5c:b0:27:d2:31:42:1c:3d:bf:f4: fe:7a:5d:6e:41:e9:2e:0f:78:5c:ce:b8:5e:e5:8f: e3:0e:c0:fd:ea:30:91:bc:08:31:9b:68:46:5a:fd: 18:f8:75:07:51:69:a2:f4:e4:f7:13:4a:ec:bc:9b: 19:ec:62:de:9e:09:4b:49:7e:05:fb:45:c2:d1:0f: 93:f5:33:eb:b1:cd:99:d4:05:51:6c:2f:a2:64:8f: f8:da:da:e4:58:63:fd:00:21:7a:22:4c:ba:25:32: e7:73:b8:82:7b:47:64:e9:1f:29:e7:f8:f8:1c:e2: 7d:f7:cc:a7:df:6e:f7:a4:31:09:b0:a4:49:66:ef: d1:ec:de:56:e7:92:e3:19:46:dd:ee:c8:4d:3c:1e: a3:69:be:c2:52:5c:f6:e2:c5:39:ca:ea:be:cf:d8: f8:59:f1:4a:53:e3:ba:d1:63:1c:39:90:95:d0:4b: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1F:2D:5C:78:80:BC:BA:E1:95:7F:B7:17:3E:74:47:FE:25:81:61 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:34:8a:71:25:11:2a:0c:d4:05:25:21:f8:21:ff:08:b8:54: 06:ff:af:1a:df:b2:a4:90:0b:aa:2d:09:15:74:31:ab:bc:27: bf:6c:d6:03:36:aa:73:33:06:d8:91:d8:6d:f7:62:0d:d7:c8: 14:eb:8c:81:fd:88:b5:11:86:ed:3c:25:d7:9d:13:16:e7:40: cb:9e:17:d5:e8:8b:a6:4e:27:58:67:f0:87:83:56:ed:c9:df: 5a:8c:f1:75:d2:13:1d:7f:4f:07:17:e1:18:ac:3b:8b:c9:df: b7:97:8e:39:25:28:d7:25:3e:d7:8a:f2:64:70:d7:44:f2:66: c2:98:20:f4:eb:77:be:aa:7c:68:05:59:3f:96:36:c5:2f:82: 2d:46:bb:df:95:76:8e:b7:4f:3b:1d:18:18:eb:bc:14:60:42: 05:af:da:bd:2c:b8:5a:ff:45:63:16:99:f7:8a:1a:04:66:4d: 46:2e:ab:cd:20:17:1d:3b:a9:2c:81:99:8e:c9:e9:f1:4a:0f: e2:e4:25:91:47:09:64:ef:92:79:91:69:64:19:80:17:28:d8: ce:ca:06:7c:14:7f:92:62:e8:f6:04:f7:e5:1f:a2:de:fd:46: 0c:15:ea:b8:eb:07:8c:cf:3b:7e:c8:ad:25:67:76:d4:ce:02: 60:e5:57:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUR54kASUSA02Krb6+vPAStNRyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjA5MjMxNDAzMzdaFw0yNjA5MjQxNDQ2MzdaMDMxMTAvBgNV BAMTKERDMUYyRDVDNzg4MEJDQkFFMTk1N0ZCNzE3M0U3NDQ3RkUyNTgxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvCILoea5fBbicVjeof/Lgj3W DARLfexhwF0vIDyYYaMN/F1Gpu7RY8E0ZMLj87huGHnbMJ411v//ApnvU5nIBHsl gGsCH9WveJbMEcikXLAn0jFCHD2/9P56XW5B6S4PeFzOuF7lj+MOwP3qMJG8CDGb aEZa/Rj4dQdRaaL05PcTSuy8mxnsYt6eCUtJfgX7RcLRD5P1M+uxzZnUBVFsL6Jk j/ja2uRYY/0AIXoiTLolMudzuIJ7R2TpHynn+Pgc4n33zKffbvekMQmwpElm79Hs 3lbnkuMZRt3uyE08HqNpvsJSXPbixTnK6r7P2PhZ8UpT47rRYxw5kJXQS3SDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3B8tXHiAvLrhlX+3Fz50R/4lgWEwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF00inElESoM1AUlIfgh/wi4VAb/rxrfsqSQ C6otCRV0Mau8J79s1gM2qnMzBtiR2G33Yg3XyBTrjIH9iLURhu08JdedExbnQMue F9Xoi6ZOJ1hn8IeDVu3J31qM8XXSEx1/TwcX4RisO4vJ37eXjjklKNclPteK8mRw 10TyZsKYIPTrd76qfGgFWT+WNsUvgi1Gu9+Vdo63TzsdGBjrvBRgQgWv2r0suFr/ RWMWmfeKGgRmTUYuq80gFx07qSyBmY7J6fFKD+LkJZFHCWTvknmRaWQZgBco2M7K BnwUf5Ji6PYE9+Ufot79RgwV6rjrB4zPO37IrSVndtTOAmDlV1E= -----END CERTIFICATE-----Generated at Thu Sep 24 08:32:46 2026 by rpki-client