$ rpki-client -vvvf rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft File: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft (raw, json) Hash identifier: y5cFAEQkGXNrlRQ0jW46diGbycuZ+kAeJ/5csJFlyno= Subject key identifier: B4:D8:EB:12:6A:F9:1D:7F:54:F6:B6:19:24:43:04:C3:CA:B5:B2:4B Authority key identifier: BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 Certificate issuer: /CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Certificate serial: 08A3E0007B18C541D1FD97AC8AF5737DED962F39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:18:03 +0000 Manifest this update: Wed 16 Sep 2026 19:13:03 +0000 Manifest next update: Thu 17 Sep 2026 22:13:03 +0000 Files and hashes: 1: BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl (hash: kbSFeJznud9p6+ukhtD/7KRCDOFZnX0ZJ66p/v1jtJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a3:e0:00:7b:18:c5:41:d1:fd:97:ac:8a:f5:73:7d:ed:96:2f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42 Validity Not Before: Sep 16 19:13:03 2026 GMT Not After : Sep 17 22:13:03 2026 GMT Subject: CN=B4D8EB126AF91D7F54F6B619244304C3CAB5B24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:7e:11:a6:22:e5:ed:0b:16:89:00:3b:da: 71:8b:00:3e:89:a9:33:bc:97:60:17:d0:c5:55:96: 62:d0:d0:71:13:ec:b2:1d:58:7b:7f:95:73:2d:3e: 67:fc:09:dc:65:e2:b9:7a:9c:19:39:b5:fa:04:a5: b8:90:ef:c6:6e:1f:6a:00:81:38:43:51:e5:97:d1: a3:7c:16:42:22:27:f5:b6:3b:84:f7:a6:2c:7c:c6: cd:07:d7:3f:fc:79:51:25:7c:05:ad:c6:16:20:cd: f5:aa:49:36:54:b9:ad:38:5b:ba:3f:ab:bb:be:3b: 98:b7:bc:4e:07:97:b6:24:8c:78:08:3b:0d:7b:17: b6:54:ac:1b:cd:ab:f1:ea:46:f8:e7:14:0f:2f:6a: b6:fe:a4:95:b6:5c:0b:a2:5f:7f:f0:a8:65:a4:30: cf:6d:ea:11:06:57:8d:1c:41:3a:20:bc:a3:65:b9: 90:d5:b7:7c:05:6c:c4:a4:ca:d7:aa:cf:5c:31:a7: 08:9a:69:3b:c8:ea:c8:a3:b9:6a:9c:02:30:8a:1e: 3e:00:a1:67:3b:f4:47:a1:48:d5:7e:6f:9e:c9:b7: 6a:30:6f:20:f6:d6:23:8f:e2:f8:c1:4c:a9:75:e1: 3a:3b:93:2e:9d:78:9b:55:e4:ec:02:25:48:53:8d: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D8:EB:12:6A:F9:1D:7F:54:F6:B6:19:24:43:04:C3:CA:B5:B2:4B X509v3 Authority Key Identifier: keyid:BE:CF:67:5C:1F:3B:BD:EE:9C:DE:F4:DD:F0:6F:EA:AF:8B:6B:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/BECF675C1F3BBDEE9CDEF4DDF06FEAAF8B6B4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e2:2b:ce:ae:7e:d3:c9:fb:bc:4f:05:f7:e5:9a:0f:5e:0a: 92:17:c1:2b:02:4c:06:31:8e:56:e1:06:b8:1b:0e:54:b7:ad: 3d:b6:f0:bd:af:65:3c:6a:d6:9c:84:ac:36:b2:e6:a0:99:8c: ed:fa:73:1d:2a:44:09:3e:8e:8b:c1:95:39:db:67:ec:1f:e9: 90:af:50:ca:40:17:01:ba:3a:b7:41:bf:6b:a2:21:eb:e1:d4: 8e:ce:e2:64:de:9d:0e:1c:0a:4d:1e:fa:cb:14:0d:94:df:66: bc:e6:83:bb:a8:79:ac:04:76:65:bc:b2:b0:63:e8:ba:c8:80: 19:6f:17:ea:d7:63:eb:d0:f0:f3:5f:dd:63:e2:e1:31:ea:c6: 03:eb:a1:f0:62:0e:6e:72:01:4e:f9:99:e0:bb:f5:c2:84:6e: c1:a2:6a:0a:59:97:0f:58:d4:99:59:97:17:94:9e:0e:de:09: 24:aa:ea:97:fd:fe:a8:80:d8:a7:8e:4d:39:3a:28:e4:67:6a: 46:fb:c7:a8:25:a0:e9:0a:7f:07:70:b0:ce:24:be:26:b4:54: 13:86:83:f0:cc:2d:6c:f7:31:06:98:c9:78:03:e3:71:1c:c1: 3a:d1:a0:bc:38:7c:08:fd:fe:76:2a:90:28:0b:4b:bb:fa:f4: 68:e0:3a:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKPgAHsYxUHR/ZesivVzfe2WLzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVBQUY4 QjZCNEU0MjAeFw0yNjA5MTYxOTEzMDNaFw0yNjA5MTcyMjEzMDNaMDMxMTAvBgNV BAMTKEI0RDhFQjEyNkFGOTFEN0Y1NEY2QjYxOTI0NDMwNEMzQ0FCNUIyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJX4RpiLl7QsWiQA72nGLAD6J qTO8l2AX0MVVlmLQ0HET7LIdWHt/lXMtPmf8Cdxl4rl6nBk5tfoEpbiQ78ZuH2oA gThDUeWX0aN8FkIiJ/W2O4T3pix8xs0H1z/8eVElfAWtxhYgzfWqSTZUua04W7o/ q7u+O5i3vE4Hl7YkjHgIOw17F7ZUrBvNq/HqRvjnFA8varb+pJW2XAuiX3/wqGWk MM9t6hEGV40cQTogvKNluZDVt3wFbMSkyteqz1wxpwiaaTvI6sijuWqcAjCKHj4A oWc79EehSNV+b57Jt2owbyD21iOP4vjBTKl14To7ky6deJtV5OwCJUhTjTd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNjrEmr5HX9U9rYZJEMEw8q1skswHwYDVR0j BBgwFoAUvs9nXB87ve6c3vTd8G/qr4trTkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjczZTJjMDktNzBlNC00MTE0LWI0ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMx RjNCQkRFRTlDREVGNERERjA2RkVBQUY4QjZCNEU0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUNGNjc1QzFGM0JCREVFOUNERUY0RERGMDZGRUFBRjhCNkI0 RTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvQkVDRjY3NUMxRjNCQkRFRTlDREVGNERERjA2RkVB QUY4QjZCNEU0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbiK86uftPJ+7xPBfflmg9eCpIXwSsCTAYx jlbhBrgbDlS3rT228L2vZTxq1pyErDay5qCZjO36cx0qRAk+jovBlTnbZ+wf6ZCv UMpAFwG6OrdBv2uiIevh1I7O4mTenQ4cCk0e+ssUDZTfZrzmg7uoeawEdmW8srBj 6LrIgBlvF+rXY+vQ8PNf3WPi4THqxgProfBiDm5yAU75meC79cKEbsGiagpZlw9Y 1JlZlxeUng7eCSSq6pf9/qiA2KeOTTk6KORnakb7x6gloOkKfwdwsM4kvia0VBOG g/DMLWz3MQaYyXgD43EcwTrRoLw4fAj9/nYqkCgLS7v69GjgOuE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:53 2026 by rpki-client