$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: d644Xp0ypDvKN+Eicz1DfbPrWkNuI5qBnJaIyAuc/ls= Subject key identifier: 89:13:68:A9:73:52:60:7D:FD:4E:42:7E:AA:0C:1D:07:6D:14:35:2D Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 52BFD944331DA8748BDD4A22BD6F07856AE85DD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:48:25 +0000 Manifest this update: Sun 02 Aug 2026 08:43:25 +0000 Manifest next update: Mon 03 Aug 2026 11:51:25 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: ZGZugQDvqThwGw4pMXGyJjNcKk2jkyKlYWeTP63694g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bf:d9:44:33:1d:a8:74:8b:dd:4a:22:bd:6f:07:85:6a:e8:5d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Aug 2 08:43:25 2026 GMT Not After : Aug 3 11:51:25 2026 GMT Subject: CN=891368A97352607DFD4E427EAA0C1D076D14352D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:f3:48:78:67:1b:d8:3e:b4:31:46:f2:09: be:ff:c0:f8:71:d0:65:1f:72:f4:90:48:42:15:92: ff:9b:5d:3f:0a:a6:26:8e:1c:dd:2b:2c:c5:35:82: 4f:33:be:20:fc:63:21:f7:3b:fd:86:69:c4:d5:1f: 17:9d:8d:c3:de:5c:70:05:b0:87:6c:ca:93:a5:28: 84:fe:00:7c:18:bf:e5:71:88:0c:b1:79:6d:d0:de: 1d:1c:80:42:25:77:ce:45:a2:1c:05:14:82:8c:48: 46:e5:f5:2e:12:e6:c1:9f:6a:f4:39:a1:13:d5:70: 99:75:ed:ec:82:3c:0e:3b:1d:0c:f9:3b:f2:fa:a1: 1f:8a:52:ad:e1:d8:ce:b2:a8:ed:07:99:33:2f:62: 20:7a:b2:02:b0:ec:41:0f:b6:02:2e:0f:c7:10:fe: 97:27:f0:7a:4e:44:6a:50:ed:c5:af:1b:4e:49:53: d8:35:35:e8:a3:98:7c:56:12:71:f7:21:92:1d:45: 28:1b:4a:78:12:7e:9e:e5:0d:d5:6c:3c:92:92:51: cb:34:50:18:23:9c:14:3a:23:8f:48:fc:90:11:a2: a3:9a:77:e0:36:8b:23:5a:b3:eb:3f:ff:63:e5:30: 6b:9a:6f:c4:aa:0c:c4:c0:4d:cd:54:db:c6:a8:c9: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:13:68:A9:73:52:60:7D:FD:4E:42:7E:AA:0C:1D:07:6D:14:35:2D X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:84:b9:ca:d0:98:c6:ed:68:d2:24:5f:ea:42:c9:b4:3d: 88:95:e3:71:56:7c:5d:05:25:ad:5f:f9:c8:eb:17:74:00:be: 77:2b:49:a4:a8:47:38:23:96:72:18:de:ac:f3:0d:59:ca:96: 6e:83:06:98:56:3f:56:2b:04:c6:41:d6:32:12:4a:62:4e:97: 32:58:c2:23:19:56:30:fd:cd:46:60:09:bd:ad:1b:18:5e:65: f5:81:f0:65:4f:51:54:e0:ea:d0:b3:47:8a:4d:33:26:83:bd: 84:80:f9:41:9d:34:0d:09:ca:46:21:ce:cd:de:42:d9:52:6f: 76:47:7f:c1:5a:eb:8b:06:ac:96:52:c2:3e:17:c3:df:df:cb: 13:ce:32:5c:69:2a:e2:dc:8e:f8:4b:a3:8d:d7:cb:af:60:87: ca:19:98:5c:79:98:ea:44:59:43:c3:ab:97:e5:27:6d:c8:af: 50:37:c8:d0:ea:a1:e4:f1:6b:8b:67:4f:98:8d:33:eb:ec:34: 80:fc:b3:9a:61:0e:21:54:be:76:62:7d:f2:f0:6f:54:c9:94: 79:98:48:24:06:f1:20:f7:98:23:c5:b3:42:66:08:07:3f:f7: c9:59:70:31:08:ee:f7:57:f4:c6:11:52:1a:1d:4f:58:0b:1a: 7f:09:1a:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUr/ZRDMdqHSL3UoivW8HhWroXdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA4MDIwODQzMjVaFw0yNjA4MDMxMTUxMjVaMDMxMTAvBgNV BAMTKDg5MTM2OEE5NzM1MjYwN0RGRDRFNDI3RUFBMEMxRDA3NkQxNDM1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAvNIeGcb2D60MUbyCb7/wPhx 0GUfcvSQSEIVkv+bXT8KpiaOHN0rLMU1gk8zviD8YyH3O/2GacTVHxedjcPeXHAF sIdsypOlKIT+AHwYv+VxiAyxeW3Q3h0cgEIld85FohwFFIKMSEbl9S4S5sGfavQ5 oRPVcJl17eyCPA47HQz5O/L6oR+KUq3h2M6yqO0HmTMvYiB6sgKw7EEPtgIuD8cQ /pcn8HpORGpQ7cWvG05JU9g1NeijmHxWEnH3IZIdRSgbSngSfp7lDdVsPJKSUcs0 UBgjnBQ6I49I/JARoqOad+A2iyNas+s//2PlMGuab8SqDMTATc1U28aoyU25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRNoqXNSYH39TkJ+qgwdB20UNS0wHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyVhLnK0JjG7WjSJF/qQsm0PYiV43FWfF0F Ja1f+cjrF3QAvncrSaSoRzgjlnIY3qzzDVnKlm6DBphWP1YrBMZB1jISSmJOlzJY wiMZVjD9zUZgCb2tGxheZfWB8GVPUVTg6tCzR4pNMyaDvYSA+UGdNA0JykYhzs3e QtlSb3ZHf8Fa64sGrJZSwj4Xw9/fyxPOMlxpKuLcjvhLo43Xy69gh8oZmFx5mOpE WUPDq5flJ23Ir1A3yNDqoeTxa4tnT5iNM+vsNID8s5phDiFUvnZiffLwb1TJlHmY SCQG8SD3mCPFs0JmCAc/98lZcDEI7vdX9MYRUhodT1gLGn8JGqU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:43 2026 by rpki-client