$ rpki-client -vvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: Lc6dcR7pRGC4OzHA55tSLx0Ow5EaC/caH5UYx1XwO1o= Subject key identifier: B5:41:7D:45:E2:31:A0:AA:DF:12:42:C2:A6:70:B6:6E:7B:6A:C5:1D Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 4F1B5031F7DEDF6591154DAF782C239992BF8D82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 09:03:15 +0000 Manifest this update: Thu 18 Jun 2026 08:58:15 +0000 Manifest next update: Fri 19 Jun 2026 11:14:15 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: nCy3t/R8YtxP1LvJA70Kd2bDxXbBHLa7FDNn3UvnnX0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:50:31:f7:de:df:65:91:15:4d:af:78:2c:23:99:92:bf:8d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Jun 18 08:58:15 2026 GMT Not After : Jun 19 11:14:15 2026 GMT Subject: CN=B5417D45E231A0AADF1242C2A670B66E7B6AC51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:cd:6e:f7:7b:52:0c:40:1c:29:85:5e:57: 60:09:79:42:54:4b:16:c2:07:fe:f6:7c:fe:5a:b9: 00:8d:87:58:72:21:99:68:6c:55:86:16:a7:ea:56: 16:f1:61:4c:96:d3:10:e4:a1:b7:ec:42:40:4f:a5: 30:ed:d9:b5:e0:06:84:cf:ab:f6:ad:cc:06:34:99: 94:36:e9:41:1e:aa:b0:b4:ae:d8:1e:18:ab:aa:12: 7e:d6:15:1e:4c:1c:37:9b:82:b9:5e:8e:7e:c2:8d: ca:a1:8d:69:4a:2d:e9:1a:f7:55:f8:6f:ad:dc:6b: aa:bc:21:43:08:50:9d:7c:95:1e:4e:0f:95:ab:f9: ed:c3:22:62:b5:50:9c:41:01:09:93:91:57:84:36: 3d:ff:c0:81:c8:ae:1d:4e:f4:fc:c9:09:03:03:97: 19:00:8a:8d:ea:6b:22:fc:06:3d:65:96:01:ee:14: af:79:ee:7b:29:bc:2f:23:b2:01:5b:24:6f:8b:ee: 43:23:ea:ef:e8:c7:db:c0:49:15:70:63:e7:d3:bd: 39:f6:41:79:ba:bf:71:eb:f6:56:9c:f0:10:b3:f2: 17:29:28:f5:71:ba:68:75:97:2d:a9:ee:0b:52:cc: af:47:34:73:2e:94:f3:a7:2a:56:65:d6:d1:6c:4c: 54:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:41:7D:45:E2:31:A0:AA:DF:12:42:C2:A6:70:B6:6E:7B:6A:C5:1D X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:bf:d7:34:04:ea:30:e3:b2:69:2f:e8:d9:18:29:2b:13:2b: bd:c9:3d:83:05:af:e1:c3:10:09:2e:5f:9f:3b:84:1a:ee:64: c7:32:8f:84:4e:ae:25:21:bb:04:19:f7:38:ba:0c:a8:8e:78: ec:6a:f5:7d:a3:cb:81:cb:db:3c:3c:da:fa:d6:89:91:b8:1c: 57:c0:69:b7:b9:55:eb:5f:6b:a6:55:73:e8:19:1c:20:c9:58: 64:d0:35:ce:8f:34:08:ef:44:e1:c1:3f:b7:21:e6:71:43:1a: 8a:76:f3:35:a4:cb:3b:fc:ef:91:c8:77:5c:2b:a5:fd:61:f9: f0:14:9b:f0:f7:dc:7f:73:41:45:03:c2:cc:1f:3b:cb:f4:5e: f4:47:b5:e8:a8:5d:c2:73:23:1c:f4:97:a0:03:24:82:a8:09: 1d:69:fa:9d:46:f1:de:eb:cf:13:d1:af:b2:7b:1f:f0:bf:2f: 98:f4:b4:9c:96:68:e8:09:b6:24:e0:73:fe:9d:d6:dc:92:9d: f3:1b:53:49:25:b2:c9:39:fa:40:52:d9:42:a3:ab:9a:90:49: 07:05:e2:e4:3b:29:66:e4:64:12:01:53:a2:da:4e:8d:a0:3d: 48:10:e2:ef:c9:40:fe:42:c1:df:b6:a3:50:79:50:9d:90:ba: 2d:3e:63:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxtQMffe32WRFU2veCwjmZK/jYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA2MTgwODU4MTVaFw0yNjA2MTkxMTE0MTVaMDMxMTAvBgNV BAMTKEI1NDE3RDQ1RTIzMUEwQUFERjEyNDJDMkE2NzBCNjZFN0I2QUM1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDM1u93tSDEAcKYVeV2AJeUJU SxbCB/72fP5auQCNh1hyIZlobFWGFqfqVhbxYUyW0xDkobfsQkBPpTDt2bXgBoTP q/atzAY0mZQ26UEeqrC0rtgeGKuqEn7WFR5MHDebgrlejn7CjcqhjWlKLeka91X4 b63ca6q8IUMIUJ18lR5OD5Wr+e3DImK1UJxBAQmTkVeENj3/wIHIrh1O9PzJCQMD lxkAio3qayL8Bj1llgHuFK957nspvC8jsgFbJG+L7kMj6u/ox9vASRVwY+fTvTn2 QXm6v3Hr9lac8BCz8hcpKPVxumh1ly2p7gtSzK9HNHMulPOnKlZl1tFsTFQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtUF9ReIxoKrfEkLCpnC2bntqxR0wHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHO/1zQE6jDjsmkv6NkYKSsTK73JPYMFr+HD EAkuX587hBruZMcyj4ROriUhuwQZ9zi6DKiOeOxq9X2jy4HL2zw82vrWiZG4HFfA abe5Vetfa6ZVc+gZHCDJWGTQNc6PNAjvROHBP7ch5nFDGop28zWkyzv875HId1wr pf1h+fAUm/D33H9zQUUDwswfO8v0XvRHteioXcJzIxz0l6ADJIKoCR1p+p1G8d7r zxPRr7J7H/C/L5j0tJyWaOgJtiTgc/6d1tySnfMbU0klssk5+kBS2UKjq5qQSQcF 4uQ7KWbkZBIBU6LaTo2gPUgQ4u/JQP5Cwd+2o1B5UJ2Qui0+Y7I= -----END CERTIFICATE-----Generated at Thu Jun 18 17:09:23 2026 by rpki-client