$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: HnSnsICCFvdywLEJ+Vnm9Xbr+UmLHo+UjqfwG7kpqzo= Subject key identifier: 97:38:27:4A:AA:2C:D6:EC:ED:E9:55:22:8C:DE:3A:85:AA:A9:18:3C Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 0A6EB2B170EA613ED200950B83E6B114C038FFEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 02:40:53 +0000 Manifest this update: Mon 02 Nov 2026 02:35:53 +0000 Manifest next update: Tue 03 Nov 2026 03:30:53 +0000 Files and hashes: 1: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: jV3Blxe72TziYkhVyTOhLIAdwy/tJjYy3lzI7Krzg2w=) 2: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6e:b2:b1:70:ea:61:3e:d2:00:95:0b:83:e6:b1:14:c0:38:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Nov 2 02:35:53 2026 GMT Not After : Nov 3 03:30:53 2026 GMT Subject: CN=9738274AAA2CD6ECEDE955228CDE3A85AAA9183C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:6d:d2:6c:46:5d:d4:2a:ed:02:25:17:4b: b3:eb:9b:54:54:cb:55:f0:e2:05:d2:87:97:a7:20: 3e:29:5c:fa:ba:1d:5d:89:3a:5a:ed:b4:5c:8a:6b: c4:de:d1:5d:51:08:82:32:b9:90:dc:04:3b:fe:84: 08:14:d0:4f:34:d4:35:f2:12:3e:97:2f:ad:36:07: 5a:de:a3:3d:89:59:89:5d:bb:1b:af:11:e3:11:0b: 96:e6:a7:94:34:fa:41:34:50:fc:b0:8a:81:fd:13: 8c:ec:3b:86:02:29:7e:3f:ac:e2:73:3d:fb:34:31: 3c:84:70:7f:de:23:98:ea:c6:09:ed:56:34:7e:d4: 54:15:34:f4:69:79:e0:09:b5:3c:82:17:b8:dc:a5: d6:10:ba:3c:c9:57:62:65:50:ac:91:85:94:b8:56: 48:e1:dc:5f:d1:f1:67:96:2b:25:60:d3:a1:f3:37: a5:7d:cd:06:70:09:ee:c1:cf:00:12:d9:87:07:e7: 93:b6:2b:57:d5:fb:a2:00:97:9e:03:fb:47:4c:e7: 92:b2:30:ca:39:18:ef:7f:98:05:77:ef:c4:73:28: e3:d9:26:39:d4:3c:e0:50:81:b9:9a:14:8c:d3:f8: 5f:2b:2a:5a:42:f7:8e:4c:f4:19:71:6f:ce:57:9a: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:27:4A:AA:2C:D6:EC:ED:E9:55:22:8C:DE:3A:85:AA:A9:18:3C X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ee:d3:80:bb:6f:0d:7c:0c:8b:4e:37:04:a8:e9:cf:1a:55: e1:ef:1b:7b:11:64:e7:8b:56:3b:a5:b4:02:db:db:67:77:15: 7e:24:fb:2a:20:40:70:f3:93:32:c2:9f:05:6c:eb:65:dc:00: 7e:74:ec:ad:37:fe:ef:84:97:80:91:4d:2e:8f:fd:6d:69:7b: ad:95:8a:94:72:35:b9:9c:40:a6:6b:77:49:b6:6f:34:3c:e4: 76:c6:14:8e:a5:59:e5:a2:22:34:3c:db:57:df:6a:d8:54:40: 3d:a5:05:d4:04:33:89:d5:2c:8b:be:cf:9d:db:2b:82:12:ca: 2e:81:5b:ab:11:b6:ae:9b:b7:e8:42:16:0e:2c:d8:70:08:54: c6:2d:cb:06:90:9f:d4:5f:02:f1:21:ef:04:67:5c:a8:3c:f2: 9f:b5:92:5d:b7:e2:62:01:b4:ee:26:b5:54:a1:3e:20:c1:fd: 01:fe:dc:8a:7e:00:8b:d9:7e:e3:c6:0f:35:64:b9:69:d0:d8: da:af:11:14:3a:8b:5b:d2:ab:69:24:5c:89:25:cd:03:f4:2d: c1:50:52:71:37:20:d2:bf:e7:2f:d5:ee:a6:f2:3f:4e:a8:64: dc:aa:08:ae:ce:5e:1f:da:62:6b:00:fe:f3:c9:ba:57:12:d9: 9e:fa:70:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCm6ysXDqYT7SAJULg+axFMA4/+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjExMDIwMjM1NTNaFw0yNjExMDMwMzMwNTNaMDMxMTAvBgNV BAMTKDk3MzgyNzRBQUEyQ0Q2RUNFREU5NTUyMjhDREUzQTg1QUFBOTE4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbm3SbEZd1CrtAiUXS7Prm1RU y1Xw4gXSh5enID4pXPq6HV2JOlrttFyKa8Te0V1RCIIyuZDcBDv+hAgU0E801DXy Ej6XL602B1reoz2JWYlduxuvEeMRC5bmp5Q0+kE0UPywioH9E4zsO4YCKX4/rOJz Pfs0MTyEcH/eI5jqxgntVjR+1FQVNPRpeeAJtTyCF7jcpdYQujzJV2JlUKyRhZS4 Vkjh3F/R8WeWKyVg06HzN6V9zQZwCe7BzwAS2YcH55O2K1fV+6IAl54D+0dM55Ky MMo5GO9/mAV378RzKOPZJjnUPOBQgbmaFIzT+F8rKlpC945M9Blxb85XmliJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzgnSqos1uzt6VUijN46haqpGDwwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3u04C7bw18DItONwSo6c8aVeHvG3sRZOeL VjultALb22d3FX4k+yogQHDzkzLCnwVs62XcAH507K03/u+El4CRTS6P/W1pe62V ipRyNbmcQKZrd0m2bzQ85HbGFI6lWeWiIjQ821ffathUQD2lBdQEM4nVLIu+z53b K4ISyi6BW6sRtq6bt+hCFg4s2HAIVMYtywaQn9RfAvEh7wRnXKg88p+1kl234mIB tO4mtVShPiDB/QH+3Ip+AIvZfuPGDzVkuWnQ2NqvERQ6i1vSq2kkXIklzQP0LcFQ UnE3INK/5y/V7qbyP06oZNyqCK7OXh/aYmsA/vPJulcS2Z76cOc= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:50 2026 by rpki-client