$ rpki-client -vvvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: 80MYg5tnXahTrHib0eg2Wo2lr5Y+sWuVtEqeDI00Sm8= Subject key identifier: 72:A3:A3:90:42:45:1B:A8:DB:53:74:B0:B4:D7:D4:21:1D:C0:34:E6 Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 1D2B556D5B35F3A4D2A60C427B4BFB7B2947B888 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 11:27:29 +0000 Manifest this update: Wed 04 Nov 2026 11:22:29 +0000 Manifest next update: Thu 05 Nov 2026 15:02:29 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: 1/iSSVEEV0ii1PMFb/hZFUAMih7vuLhQw21IfBAZpi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2b:55:6d:5b:35:f3:a4:d2:a6:0c:42:7b:4b:fb:7b:29:47:b8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Nov 4 11:22:29 2026 GMT Not After : Nov 5 15:02:29 2026 GMT Subject: CN=72A3A39042451BA8DB5374B0B4D7D4211DC034E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:df:fe:f4:ef:ad:ab:2d:65:48:ec:9c:6d: 5a:30:ce:1a:08:96:7e:13:f9:a9:61:05:ae:2e:3e: 48:07:e8:ac:e2:dd:27:2d:5e:c8:7e:5c:25:a8:d8: f0:94:cc:f5:1c:c7:54:40:47:4c:d6:19:1f:49:2f: 80:1b:70:e1:ff:28:d3:7e:08:9d:9d:37:e2:ce:02: f7:2c:2a:b4:19:e0:8b:59:1f:09:40:f7:8d:7e:22: c3:03:de:42:0f:2d:d9:4d:2d:3c:ee:14:88:c5:94: 02:43:c5:ad:05:fd:e5:48:a9:dd:5d:5a:5d:9d:bb: 3c:01:52:a5:2b:cf:5a:3d:14:86:9d:8b:74:2d:0f: eb:27:a8:44:08:bc:71:09:0c:76:60:64:8b:5a:e8: a2:af:bb:62:15:64:39:50:c9:de:20:71:8f:38:ef: 7c:8a:ef:06:ad:3c:89:59:f2:c5:e8:f8:8b:4a:13: 28:d8:51:87:09:6d:7d:de:f4:10:e4:08:07:48:75: 9f:f7:00:42:91:a8:be:8c:a1:aa:06:a6:32:e3:95: e4:b9:45:dc:21:f7:1f:4f:30:39:c6:c6:3d:0d:3d: 50:6e:91:5e:12:66:29:0f:27:28:c2:1b:2a:4c:3c: 67:68:d1:00:9d:d6:a2:69:8b:f8:78:99:66:c1:f8: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A3:A3:90:42:45:1B:A8:DB:53:74:B0:B4:D7:D4:21:1D:C0:34:E6 X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:35:2c:d1:5e:3b:02:5b:d5:b3:7c:78:18:70:0d:da:7f:ac: b5:e9:07:39:03:7e:5b:e0:f5:c4:25:06:3b:50:ae:05:62:42: d3:65:65:5b:3f:5f:bb:f7:a0:61:c3:5e:1a:27:da:0d:90:fb: 39:9e:ab:06:56:1b:14:0d:6d:ca:a5:7d:d5:45:2d:20:1c:de: 40:52:51:bc:03:0d:52:7b:53:b7:e7:57:6b:ea:98:ea:24:52: db:f2:91:67:5d:ae:cc:25:d0:24:8e:43:3a:b2:62:94:b1:d0: 8e:a8:cd:3f:96:c7:73:30:cf:fa:a3:6b:15:0e:12:73:d7:7b: 5b:8b:c3:b7:a3:01:c4:e4:bd:59:59:b6:42:d3:f7:a2:63:3d: 25:9b:c2:ab:a0:6c:65:5c:84:de:da:ac:36:f8:93:44:d8:2a: bf:68:35:a2:14:bf:3f:45:9b:d6:1e:b5:e6:b6:f7:34:a7:b4: e2:fa:af:50:09:eb:79:80:db:98:07:e3:01:9a:a8:93:54:c5: 4d:5e:67:a3:a4:17:c7:6b:60:1a:a9:df:dd:12:96:d4:84:ca: 07:6d:66:aa:d3:b0:71:97:bb:97:d2:94:0b:97:99:08:46:ff: 0f:03:ba:f6:22:04:bb:47:c4:cf:44:36:84:40:83:e7:fd:3c: de:1e:e3:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHStVbVs186TSpgxCe0v7eylHuIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjExMDQxMTIyMjlaFw0yNjExMDUxNTAyMjlaMDMxMTAvBgNV BAMTKDcyQTNBMzkwNDI0NTFCQThEQjUzNzRCMEI0RDdENDIxMURDMDM0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBo9/+9O+tqy1lSOycbVowzhoI ln4T+alhBa4uPkgH6Kzi3SctXsh+XCWo2PCUzPUcx1RAR0zWGR9JL4AbcOH/KNN+ CJ2dN+LOAvcsKrQZ4ItZHwlA941+IsMD3kIPLdlNLTzuFIjFlAJDxa0F/eVIqd1d Wl2duzwBUqUrz1o9FIadi3QtD+snqEQIvHEJDHZgZIta6KKvu2IVZDlQyd4gcY84 73yK7watPIlZ8sXo+ItKEyjYUYcJbX3e9BDkCAdIdZ/3AEKRqL6MoaoGpjLjleS5 Rdwh9x9PMDnGxj0NPVBukV4SZikPJyjCGypMPGdo0QCd1qJpi/h4mWbB+AiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqOjkEJFG6jbU3SwtNfUIR3ANOYwHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI1LNFeOwJb1bN8eBhwDdp/rLXpBzkDflvg 9cQlBjtQrgViQtNlZVs/X7v3oGHDXhon2g2Q+zmeqwZWGxQNbcqlfdVFLSAc3kBS UbwDDVJ7U7fnV2vqmOokUtvykWddrswl0CSOQzqyYpSx0I6ozT+Wx3Mwz/qjaxUO EnPXe1uLw7ejAcTkvVlZtkLT96JjPSWbwqugbGVchN7arDb4k0TYKr9oNaIUvz9F m9Yetea29zSntOL6r1AJ63mA25gH4wGaqJNUxU1eZ6OkF8drYBqp390SltSEygdt ZqrTsHGXu5fSlAuXmQhG/w8DuvYiBLtHxM9ENoRAg+f9PN4e4ww= -----END CERTIFICATE-----Generated at Wed Nov 4 17:05:25 2026 by rpki-client